Resubmissions

17/03/2025, 21:23

250317-z8nm1ayvdx 10

17/03/2025, 21:20

250317-z6sh6ssj18 7

Analysis

  • max time kernel
    1049s
  • max time network
    1042s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    17/03/2025, 21:23

General

  • Target

    https://websim.ai/@EathenERROR/streamsim-with-more-features

Malware Config

Signatures

  • Dharma

    Dharma is a ransomware that uses security software installation to hide malicious activities.

  • Dharma family
  • Deletes shadow copies 3 TTPs

    Ransomware often targets backup files to inhibit system recovery.

  • Renames multiple (782) files with added filename extension

    This suggests ransomware activity of encrypting all the files on the system.

  • Checks computer location settings 2 TTPs 20 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Credentials from Password Stores: Windows Credential Manager 1 TTPs

    Suspicious access to Credentials History.

  • Drops startup file 5 IoCs
  • Executes dropped EXE 64 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 3 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Drops desktop.ini file(s) 64 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 7 IoCs
  • Checks system information in the registry 2 TTPs 2 IoCs

    System information is often read in order to detect sandboxing environments.

  • Drops file in System32 directory 2 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Interacts with shadow copies 3 TTPs 2 IoCs

    Shadow copies are often targeted by ransomware to inhibit system recovery.

  • Modifies Internet Explorer Phishing Filter 1 TTPs 2 IoCs
  • Modifies Internet Explorer settings 1 TTPs 18 IoCs
  • Modifies data under HKEY_USERS 3 IoCs
  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 56 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 64 IoCs
  • Suspicious use of SendNotifyMessage 48 IoCs
  • Suspicious use of SetWindowsHookEx 20 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • System policy modification 1 TTPs 1 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://websim.ai/@EathenERROR/streamsim-with-more-features
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4452
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ffe91c2f208,0x7ffe91c2f214,0x7ffe91c2f220
      2⤵
        PID:1032
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1800,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=2316 /prefetch:3
        2⤵
          PID:4300
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2288,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=2284 /prefetch:2
          2⤵
            PID:2396
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2632,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=2636 /prefetch:8
            2⤵
              PID:3708
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3540,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=3568 /prefetch:1
              2⤵
                PID:1224
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3556,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=3580 /prefetch:1
                2⤵
                  PID:1708
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4208,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
                  2⤵
                    PID:4084
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=4236,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=4288 /prefetch:2
                    2⤵
                      PID:3908
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3640,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5116 /prefetch:8
                      2⤵
                        PID:2200
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5292,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=3672 /prefetch:8
                        2⤵
                          PID:3576
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5300,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:8
                          2⤵
                            PID:3848
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5280,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
                            2⤵
                              PID:4472
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5532,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:8
                              2⤵
                                PID:4100
                              • C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5984,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
                                2⤵
                                  PID:2544
                                • C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5984,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:8
                                  2⤵
                                    PID:756
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6136,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6156 /prefetch:8
                                    2⤵
                                      PID:4656
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6184,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:8
                                      2⤵
                                        PID:744
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6500,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:8
                                        2⤵
                                          PID:3020
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6524,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6188 /prefetch:8
                                          2⤵
                                            PID:3024
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6608,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:8
                                            2⤵
                                              PID:808
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6796,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6660 /prefetch:8
                                              2⤵
                                                PID:2496
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6360,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6596 /prefetch:8
                                                2⤵
                                                  PID:2808
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6932,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6388 /prefetch:8
                                                  2⤵
                                                    PID:4672
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6864,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6828 /prefetch:8
                                                    2⤵
                                                      PID:3804
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --field-trial-handle=5976,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6104 /prefetch:1
                                                      2⤵
                                                        PID:2544
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --field-trial-handle=6228,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                                        2⤵
                                                          PID:4860
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --field-trial-handle=6536,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6180 /prefetch:1
                                                          2⤵
                                                            PID:1056
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --field-trial-handle=6764,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                                            2⤵
                                                              PID:4996
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --field-trial-handle=6416,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:1
                                                              2⤵
                                                                PID:2440
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --field-trial-handle=7060,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:1
                                                                2⤵
                                                                  PID:808
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --field-trial-handle=4496,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:1
                                                                  2⤵
                                                                    PID:4836
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --always-read-main-dll --field-trial-handle=7276,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:1
                                                                    2⤵
                                                                      PID:4364
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --field-trial-handle=7472,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7464 /prefetch:1
                                                                      2⤵
                                                                        PID:4316
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --field-trial-handle=7620,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:1
                                                                        2⤵
                                                                          PID:2292
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --field-trial-handle=7792,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7780 /prefetch:1
                                                                          2⤵
                                                                            PID:1288
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --field-trial-handle=7904,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7940 /prefetch:1
                                                                            2⤵
                                                                              PID:5076
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --field-trial-handle=8100,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8116 /prefetch:1
                                                                              2⤵
                                                                                PID:1112
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=564,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7320 /prefetch:8
                                                                                2⤵
                                                                                  PID:5552
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7280,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7304 /prefetch:8
                                                                                  2⤵
                                                                                    PID:5560
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7424,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7404 /prefetch:8
                                                                                    2⤵
                                                                                      PID:5568
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --field-trial-handle=7328,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:1
                                                                                      2⤵
                                                                                        PID:5752
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --always-read-main-dll --field-trial-handle=7456,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8512 /prefetch:1
                                                                                        2⤵
                                                                                          PID:5760
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --always-read-main-dll --field-trial-handle=8264,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8508 /prefetch:1
                                                                                          2⤵
                                                                                            PID:5768
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --always-read-main-dll --field-trial-handle=8792,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8788 /prefetch:1
                                                                                            2⤵
                                                                                              PID:5776
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --field-trial-handle=9020,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8076 /prefetch:1
                                                                                              2⤵
                                                                                                PID:6072
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --field-trial-handle=7648,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8964 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:6080
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --field-trial-handle=9000,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=8700 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:6088
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --field-trial-handle=9220,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7732 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:5568
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=9268,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7672 /prefetch:8
                                                                                                      2⤵
                                                                                                        PID:5124
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --field-trial-handle=9240,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9384 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:5388
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --field-trial-handle=5184,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:432
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=9340,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
                                                                                                            2⤵
                                                                                                              PID:5724
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --field-trial-handle=9432,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9556 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:4216
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7616,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5196 /prefetch:8
                                                                                                                2⤵
                                                                                                                  PID:4912
                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=760,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5936 /prefetch:8
                                                                                                                  2⤵
                                                                                                                    PID:3048
                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --field-trial-handle=9692,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9664 /prefetch:1
                                                                                                                    2⤵
                                                                                                                      PID:4464
                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --field-trial-handle=5376,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5496 /prefetch:1
                                                                                                                      2⤵
                                                                                                                        PID:5172
                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --field-trial-handle=5744,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9512 /prefetch:1
                                                                                                                        2⤵
                                                                                                                          PID:5140
                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --field-trial-handle=8608,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:1
                                                                                                                          2⤵
                                                                                                                            PID:3680
                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3660,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7612 /prefetch:8
                                                                                                                            2⤵
                                                                                                                              PID:1764
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=9640,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
                                                                                                                              2⤵
                                                                                                                              • Suspicious behavior: EnumeratesProcesses
                                                                                                                              PID:2212
                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --field-trial-handle=6548,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=4552 /prefetch:1
                                                                                                                              2⤵
                                                                                                                                PID:2472
                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --field-trial-handle=7352,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9176 /prefetch:1
                                                                                                                                2⤵
                                                                                                                                  PID:1176
                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5720,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:8
                                                                                                                                  2⤵
                                                                                                                                    PID:3036
                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --always-read-main-dll --field-trial-handle=9408,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9396 /prefetch:1
                                                                                                                                    2⤵
                                                                                                                                      PID:5904
                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --field-trial-handle=5228,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
                                                                                                                                      2⤵
                                                                                                                                        PID:4672
                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8928,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=6504 /prefetch:8
                                                                                                                                        2⤵
                                                                                                                                          PID:1456
                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=9388,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=9840 /prefetch:8
                                                                                                                                          2⤵
                                                                                                                                            PID:4944
                                                                                                                                          • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                            "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                            2⤵
                                                                                                                                            • Checks computer location settings
                                                                                                                                            • Drops startup file
                                                                                                                                            • Executes dropped EXE
                                                                                                                                            • Adds Run key to start application
                                                                                                                                            • Drops desktop.ini file(s)
                                                                                                                                            • Drops file in System32 directory
                                                                                                                                            • Drops file in Program Files directory
                                                                                                                                            • System Location Discovery: System Language Discovery
                                                                                                                                            • Suspicious behavior: EnumeratesProcesses
                                                                                                                                            PID:1708
                                                                                                                                            • C:\Windows\system32\cmd.exe
                                                                                                                                              "C:\Windows\system32\cmd.exe"
                                                                                                                                              3⤵
                                                                                                                                                PID:2496
                                                                                                                                                • C:\Windows\system32\mode.com
                                                                                                                                                  mode con cp select=1251
                                                                                                                                                  4⤵
                                                                                                                                                    PID:38092
                                                                                                                                                  • C:\Windows\system32\vssadmin.exe
                                                                                                                                                    vssadmin delete shadows /all /quiet
                                                                                                                                                    4⤵
                                                                                                                                                    • Interacts with shadow copies
                                                                                                                                                    PID:29964
                                                                                                                                                • C:\Windows\system32\cmd.exe
                                                                                                                                                  "C:\Windows\system32\cmd.exe"
                                                                                                                                                  3⤵
                                                                                                                                                    PID:548
                                                                                                                                                    • C:\Windows\system32\mode.com
                                                                                                                                                      mode con cp select=1251
                                                                                                                                                      4⤵
                                                                                                                                                        PID:7264
                                                                                                                                                      • C:\Windows\system32\vssadmin.exe
                                                                                                                                                        vssadmin delete shadows /all /quiet
                                                                                                                                                        4⤵
                                                                                                                                                        • Interacts with shadow copies
                                                                                                                                                        PID:7040
                                                                                                                                                    • C:\Windows\System32\mshta.exe
                                                                                                                                                      "C:\Windows\System32\mshta.exe" "C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"
                                                                                                                                                      3⤵
                                                                                                                                                        PID:6308
                                                                                                                                                      • C:\Windows\System32\mshta.exe
                                                                                                                                                        "C:\Windows\System32\mshta.exe" "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta"
                                                                                                                                                        3⤵
                                                                                                                                                          PID:6328
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:1664
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:5260
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:880
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:5652
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:19072
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:19100
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:19260
                                                                                                                                                      • C:\Users\Admin\Downloads\CoronaVirus.exe
                                                                                                                                                        "C:\Users\Admin\Downloads\CoronaVirus.exe"
                                                                                                                                                        2⤵
                                                                                                                                                        • Executes dropped EXE
                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                        PID:19276
                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5400,i,5547997280422187629,8289807806302563850,262144 --variations-seed-version --mojo-platform-channel-handle=5168 /prefetch:8
                                                                                                                                                        2⤵
                                                                                                                                                          PID:18520
                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
                                                                                                                                                          2⤵
                                                                                                                                                          • Checks computer location settings
                                                                                                                                                          • Executes dropped EXE
                                                                                                                                                          • Loads dropped DLL
                                                                                                                                                          • Checks whether UAC is enabled
                                                                                                                                                          • Checks system information in the registry
                                                                                                                                                          • Checks processor information in registry
                                                                                                                                                          • Enumerates system info in registry
                                                                                                                                                          • Modifies data under HKEY_USERS
                                                                                                                                                          • Modifies registry class
                                                                                                                                                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                                                                                                                                                          • Suspicious use of FindShellTrayWindow
                                                                                                                                                          • Suspicious use of SendNotifyMessage
                                                                                                                                                          • System policy modification
                                                                                                                                                          PID:7640
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ffe91c2f208,0x7ffe91c2f214,0x7ffe91c2f220
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20352
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1900,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:7948
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2100,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=2096 /prefetch:2
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:7972
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=1920,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:8032
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --field-trial-handle=3688,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:2
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:8628
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --field-trial-handle=4132,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4440 /prefetch:2
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20384
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --field-trial-handle=4144,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:2
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20368
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --field-trial-handle=3288,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4472 /prefetch:2
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20416
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --field-trial-handle=4248,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4444 /prefetch:2
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20440
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --field-trial-handle=5232,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:7156
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5672,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5680 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20076
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5776,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:20124
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5764,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:8492
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6072,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5556 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:8340
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5644,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:8228
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6276,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:8184
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5852,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:9500
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5676,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6452 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:9388
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5028,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:22128
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4872,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=3280 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:22136
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4560,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:22152
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4648,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4476 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:22720
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4256,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4228 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:22888
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4768,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4296 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:9596
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5756,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4180 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:23204
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4628,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4616 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            • Loads dropped DLL
                                                                                                                                                            PID:23476
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5540,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:23584
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4892,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5200 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:24132
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4400,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5216 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:24760
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --instant-process --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --field-trial-handle=6656,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6676 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:25084
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5440,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4776 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:25108
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6804,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:25116
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7040,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:27496
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --field-trial-handle=7108,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:29040
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --field-trial-handle=7032,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:29184
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --field-trial-handle=4668,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6440 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:29804
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --field-trial-handle=5916,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=3152 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:31104
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --field-trial-handle=3696,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4448 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:32024
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6448,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6472 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:32664
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --field-trial-handle=6332,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:36272
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --field-trial-handle=7096,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:35980
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --field-trial-handle=5924,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6220 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:35864
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --field-trial-handle=6784,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:14360
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4596,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6260 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:15216
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --field-trial-handle=5464,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4888 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:15808
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5568,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:15620
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --field-trial-handle=5500,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6272 /prefetch:1
                                                                                                                                                            3⤵
                                                                                                                                                            • Checks computer location settings
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:15612
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7468,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7496 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:15520
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4940,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7504 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:13028
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7604,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7644 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:13972
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=3272,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6476 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:14632
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7608,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7476 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:14408
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7504,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7620 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                            • Executes dropped EXE
                                                                                                                                                            PID:12504
                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5088,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=3732 /prefetch:8
                                                                                                                                                            3⤵
                                                                                                                                                              PID:11580
                                                                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7396,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
                                                                                                                                                              3⤵
                                                                                                                                                                PID:11188
                                                                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4716,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=6380 /prefetch:8
                                                                                                                                                                3⤵
                                                                                                                                                                  PID:5728
                                                                                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=1316,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:8
                                                                                                                                                                  3⤵
                                                                                                                                                                    PID:35572
                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4736,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:8
                                                                                                                                                                    3⤵
                                                                                                                                                                      PID:33772
                                                                                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4352,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:8
                                                                                                                                                                      3⤵
                                                                                                                                                                        PID:35048
                                                                                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6648,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=7028 /prefetch:8
                                                                                                                                                                        3⤵
                                                                                                                                                                          PID:27948
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5008,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:8
                                                                                                                                                                          3⤵
                                                                                                                                                                            PID:28596
                                                                                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6128,i,4060813766425720234,927682655035254047,262144 --variations-seed-version --mojo-platform-channel-handle=3736 /prefetch:8
                                                                                                                                                                            3⤵
                                                                                                                                                                              PID:29368
                                                                                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
                                                                                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
                                                                                                                                                                          1⤵
                                                                                                                                                                            PID:3024
                                                                                                                                                                          • C:\Windows\system32\AUDIODG.EXE
                                                                                                                                                                            C:\Windows\system32\AUDIODG.EXE 0x150 0x4ec
                                                                                                                                                                            1⤵
                                                                                                                                                                              PID:5072
                                                                                                                                                                            • C:\Windows\system32\vssvc.exe
                                                                                                                                                                              C:\Windows\system32\vssvc.exe
                                                                                                                                                                              1⤵
                                                                                                                                                                              • Suspicious use of AdjustPrivilegeToken
                                                                                                                                                                              PID:6612
                                                                                                                                                                            • C:\Windows\system32\werfault.exe
                                                                                                                                                                              werfault.exe /h /shared Global\2d91ca673c8c44169f228056afb8f385 /t 6332 /p 6328
                                                                                                                                                                              1⤵
                                                                                                                                                                                PID:21672
                                                                                                                                                                              • C:\Windows\system32\werfault.exe
                                                                                                                                                                                werfault.exe /h /shared Global\b8cf853eb8084499b002722016866272 /t 6316 /p 6308
                                                                                                                                                                                1⤵
                                                                                                                                                                                  PID:22456
                                                                                                                                                                                • C:\Windows\system32\NOTEPAD.EXE
                                                                                                                                                                                  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Public\Desktop\FILES ENCRYPTED.txt
                                                                                                                                                                                  1⤵
                                                                                                                                                                                    PID:22576
                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:23848
                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:23924
                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:23972
                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:24084
                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious behavior: GetForegroundWindowSpam
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:24300
                                                                                                                                                                                    • C:\Program Files\Internet Explorer\iexplore.exe
                                                                                                                                                                                      "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Public\Desktop\Google Chrome.lnk.id-DE7C7210.[[email protected]].ncov
                                                                                                                                                                                      2⤵
                                                                                                                                                                                      • Modifies Internet Explorer Phishing Filter
                                                                                                                                                                                      • Modifies Internet Explorer settings
                                                                                                                                                                                      • Modifies registry class
                                                                                                                                                                                      • Suspicious use of FindShellTrayWindow
                                                                                                                                                                                      • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                      PID:24412
                                                                                                                                                                                      • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
                                                                                                                                                                                        "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:24412 CREDAT:17410 /prefetch:2
                                                                                                                                                                                        3⤵
                                                                                                                                                                                        • System Location Discovery: System Language Discovery
                                                                                                                                                                                        • Modifies Internet Explorer settings
                                                                                                                                                                                        • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                        PID:24500
                                                                                                                                                                                  • C:\Windows\system32\OpenWith.exe
                                                                                                                                                                                    C:\Windows\system32\OpenWith.exe -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Modifies registry class
                                                                                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                                                                                    PID:24604
                                                                                                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-redirect=Windows.Launch
                                                                                                                                                                                    1⤵
                                                                                                                                                                                    • Executes dropped EXE
                                                                                                                                                                                    PID:24988
                                                                                                                                                                                  • C:\Windows\System32\rundll32.exe
                                                                                                                                                                                    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                                                                                                                                    1⤵
                                                                                                                                                                                      PID:13600
                                                                                                                                                                                    • C:\Users\Admin\Downloads\HorrorTrojan\src\flasher.exe
                                                                                                                                                                                      "C:\Users\Admin\Downloads\HorrorTrojan\src\flasher.exe"
                                                                                                                                                                                      1⤵
                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                      PID:15056
                                                                                                                                                                                    • C:\Users\Admin\Downloads\HorrorTrojan\src\flasher.exe
                                                                                                                                                                                      "C:\Users\Admin\Downloads\HorrorTrojan\src\flasher.exe"
                                                                                                                                                                                      1⤵
                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                      PID:14928
                                                                                                                                                                                    • C:\Users\Admin\Downloads\HorrorTrojan\src\CLWCP.exe
                                                                                                                                                                                      "C:\Users\Admin\Downloads\HorrorTrojan\src\CLWCP.exe"
                                                                                                                                                                                      1⤵
                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                      PID:13776
                                                                                                                                                                                    • C:\Users\Admin\Downloads\HorrorTrojan\src\melter.exe
                                                                                                                                                                                      "C:\Users\Admin\Downloads\HorrorTrojan\src\melter.exe"
                                                                                                                                                                                      1⤵
                                                                                                                                                                                      • System Location Discovery: System Language Discovery
                                                                                                                                                                                      PID:14252

                                                                                                                                                                                    Network

                                                                                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                                                                                    Replay Monitor

                                                                                                                                                                                    Loading Replay Monitor...

                                                                                                                                                                                    Downloads

                                                                                                                                                                                    • C:\Program Files\Common Files\microsoft shared\ClickToRun\C2R32.dll.id-DE7C7210.[[email protected]].ncov

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2.7MB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2cac57096d6f03eedf3ac00648d25dd1

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      7ec9572421f4080b0e7136afc76eccab1ab28113

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4d1a4226742ac5ab2e7f5cb9bf239cc33d9bc78804595fa621e1c954d501a9c4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8a0e278f2671a4fa1b7523cce83c260705f33806354d90158c287cb5fe8dcfef92f22df4ee8f13285a9a356b09bb11993f4338231305d1e8fde65b045c9bb6a6

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping4452_1045018247\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      160B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a24a1941bbb8d90784f5ef76712002f5

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      5c2b6323c7ed8913b5d0d65a4d21062c96df24eb

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping4452_1207325694\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      43B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      af3a9104ca46f35bb5f6123d89c25966

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping4452_1439176413\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      160B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      c3911ceb35539db42e5654bdd60ac956

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      71be0751e5fc583b119730dbceb2c723f2389f6c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping4452_688805441\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      134B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      58d3ca1189df439d0538a75912496bcf

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      99af5b6a006a6929cc08744d1b54e3623fec2f36

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      a946db31a6a985bdb64ea9f403294b479571ca3c22215742bdc26ea1cf123437

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      afd7f140e89472d4827156ec1c48da488b0d06daaa737351c7bec6bc12edfc4443460c4ac169287350934ca66fb2f883347ed8084c62caf9f883a736243194a2

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1013738826\LICENSE

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      ee002cb9e51bb8dfa89640a406a1090a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1013738826\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      80B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      9e72659142381870c3c7dfe447d0e58e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ba27ed169d5af065dabde081179476beb7e11de2

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      72bab493c5583527591dd6599b3c902bade214399309b0d610907e33275b8dc2

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      b887eb30c09fa3c87945b83d8dbddceee286011a1582c10b5b3cc7a4731b7fa7cb3689cb61bfead385c95902cab397d0aa26bc26086d17ce414a4f40f0e16a01

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1160841243\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      76B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      ba25fcf816a017558d3434583e9746b8

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      be05c87f7adf6b21273a4e94b3592618b6a4a624

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1207694410\manifest.fingerprint

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      66B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      3fb5233616491df0ec229ba9f42efdb8

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      18a8116e2df9805accd7901d2321c3fa92da1af4

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      946f3a9e019b0d80f5671de782f295132341f663f74aebad7628f22e528d6d52

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e9b17ac626bf6508db9a686825411e90d316a0f1dacbf63dbec5baaaf6b96af4dbc9a7332975b6d5c16c43757d79fddca6b888ea97bc07a8dffb1b3a06366b4d

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1420828351\manifest.fingerprint

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      66B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      02755c9606b446b2949ca5456533f8c3

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      06491602cd6835473451f592b49e385404598339

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f27f7a78304dc63ccb1d2ebc570b920253588ea39a8706ba8d9617391124aee7

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      632eebda283913421bbdedfbdc5f5164e038a834a3f07bc1ce56f953dc99d91e7ddc137ec94d73bcf61b0ec26edcfe498a29e4ffde15be8e26118e6ff91daf59

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1512090475\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      176B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      6607494855f7b5c0348eecd49ef7ce46

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2c844dd9ea648efec08776757bc376b5a6f9eb71

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      37c30639ea04878b9407aecbcea4848b033e4548d5023ce5105ea79cab2c68dd

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8cb60725d958291b9a78c293992768cb03ff53ab942637e62eb6f17d80e0864c56a9c8ccafbc28246e9ce1fdb248e8d071d76764bcaf0243397d0f0a62b4d09a

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1728298784\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      72B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a30b19bb414d78fff00fc7855d6ed5fd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2a6408f2829e964c578751bf29ec4f702412c11e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      66b6db60e9e6f3059d1a47db14f05d35587aa2019bc06e6cf352dfbb237d9dfe6dce7cb21c9127320a7fdca5b9d3eb21e799abe6a926ae51b5f62cf646c30490

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1742087053\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      118B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      acb8ebb43624ece8dd7964092455d2b7

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      7c61f04b419f927f98120afa18d8553513e2a0f6

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      55b2b1fd2a563b240179fde6335370f5e22068ada77b5dc5af50bbc379c72953

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8e6c135aa19d6d21b32c6e9c0727ccf3df7e8dfcaf49e3f0ce55af9b53748188949746d69d17cdafd9d77511b1550d970289912a33b3d9c4daed8837762d91c3

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1984882208\manifest.fingerprint

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      66B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      745ee1a4ed9c2f4ec18f01f9434de7b9

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      7e7f3fb5a71b062eebd02fda5d5b27ce002af6e7

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5df21a5a32a3044547cd0e4d1ba35aa46f2f7190d10a4cbbd0b5b6012004d151

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      16d3985b3136d93c605d80bcf808dc30661c49e47629482cef2473146347f35ddbb6cffcf53475ba298c0ecdb1e033b4d37c8fc1cc97304e9536ceba9dc6c49d

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_1984882208\smart_switch_list.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a55a23fcdd9af97d33302c8e6de41c18

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      00d9137cdffd273ef849e1122ecbb6f27b6e8423

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d490aec3403b2daa86aa095db121c2dfee0a35c3ed0770284c0bd0e0a103c776

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      647c19d83bf4db3c4b868738df3a8da0b06f666860f468a2de6863e440800bd5e4057ac03bcae4b5bfed28a8907038bca6a72785d42e7acb6f56580a6859b05d

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_200437849\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      132B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e2e0e30a5061d2e813d389d776cd8ffd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      90913c06260b62534b42c0e28bac3082cdacd19c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      7f8c92b4e9da2afa5a089e37797036d18e61e4f02a4885b7887c0b98d464259f

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      000727f5052c846e39c62ae90032db500708e5fec5af24b8cc1f3a9d4102bc7b9be025176f01722a7c72b5e8bf85b0084cab0ebeb00fde03928c4e22869c98cd

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_2053500728\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      141B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      811f0436837c701dc1cea3d6292b3922

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      4e51a3e9f5cbf8c9c96985dabe8ffc2de28dae87

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      21e7bf2f8333b2900bcbcb871ede14684073249597d105095dc7d3f101e7ccc326068732f11d4a167365f245a3f2205793f520c7666d7f948e70919b40b43d35

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_2133826554\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      52B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      8c32b9f390fcc4f061885661dbe797bd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      c681595df03f9f74ec600e70069c879daf2ca923

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      1431c36e66b4fc53ca74e9b10ea0213245631ad7543fef183a8dd2720a5b4ab4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e8bbde18d5de7fe2a8162951d3fe75460efbee71afffb4c0c22f2088dee146fb6bfcccae18d4955608e60a7df716eeb47c0687f45344b45130b368eeaf316418

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_304436484\manifest.fingerprint

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      66B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      0c9218609241dbaa26eba66d5aaf08ab

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      31f1437c07241e5f075268212c11a566ceb514ec

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      52493422ac4c18918dc91ef5c4d0e50c130ea3aa99915fa542b890a79ea94f2b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5d25a1fb8d9e902647673975f13d7ca11e1f00f3c19449973d6b466d333198768e777b8cae5becef5c66c9a0c0ef320a65116b5070c66e3b9844461bb0ffa47f

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_390807023\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      85B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      c3419069a1c30140b77045aba38f12cf

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      11920f0c1e55cadc7d2893d1eebb268b3459762a

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      db9a702209807ba039871e542e8356219f342a8d9c9ca34bcd9a86727f4a3a0f

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c5e95a4e9f5919cb14f4127539c4353a55c5f68062bf6f95e1843b6690cebed3c93170badb2412b7fb9f109a620385b0ae74783227d6813f26ff8c29074758a1

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_519448965\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      238B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      15b69964f6f79654cbf54953aad0513f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      013fb9737790b034195cdeddaa620049484c53a7

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7eeee58e06bba59b1ef874436035202416079617b7953593abf6d9af42a55088ab37f45fdee394166344f0186c0cb7092f55ed201c213737bb5d5318e9f47908

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_569457671\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      102B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a64e2a4236e705215a3fd5cb2697a71f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1c73e6aad8f44ade36df31a23eaaf8cd0cae826d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      014e9fc1219beefc428ec749633125c9bff7febc3be73a14a8f18a6691cd2846

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      75b30c0c8cef490aaf923afbdb5385d4770de82e698f71f8f126a6af5ef16f3a90d0c27687f405274177b1a5250436efddd228a6d2949651f43bd926e8a1cc99

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_88076970\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      135B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4055ba4ebd5546fb6306d6a3151a236a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      609a989f14f8ee9ed9bffbd6ddba3214fd0d0109

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_996909571\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      114B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e6cd92ad3b3ab9cb3d325f3c4b7559aa

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      0704d57b52cf55674524a5278ed4f7ba1e19ca0c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      63dfb8d99ce83b3ca282eb697dc76b17b4a48e4065fc7efafb77724739074a9d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      172d5dc107757bb591b9a8ed7f2b48f22b5184d6537572d375801113e294febfbe39077c408e3a04c44e6072427cbe443c6614d205a5a4aa290101722e18f5e8

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_999900855\hyph-as.hyb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      703B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      8961fdd3db036dd43002659a4e4a7365

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      7b2fa321d50d5417e6c8d48145e86d15b7ff8321

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_999900855\hyph-hi.hyb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      687B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      0807cf29fc4c5d7d87c1689eb2e0baaa

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d0914fb069469d47a36d339ca70164253fccf022

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_999900855\hyph-nb.hyb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      141KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      677edd1a17d50f0bd11783f58725d0e7

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      98fedc5862c78f3b03daed1ff9efbe5e31c205ee

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

                                                                                                                                                                                    • C:\Program Files\chrome_Unpacker_BeginUnzipping7640_999900855\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      82B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2617c38bed67a4190fc499142b6f2867

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a37f0251cd6be0a6983d9a04193b773f86d31da1

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.8\protocols.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      3KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      6bbb18bb210b0af189f5d76a65f7ad80

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      87b804075e78af64293611a637504273fadfe718

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      01594d510a1bbc016897ec89402553eca423dfdc8b82bafbc5653bf0c976f57c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      4788edcfa3911c3bb2be8fc447166c330e8ac389f74e8c44e13238ead2fa45c8538aee325bd0d1cc40d91ad47dea1aa94a92148a62983144fdecff2130ee120d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2024.12.2\crl-set

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      21KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      846feb52bd6829102a780ec0da74ab04

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      dd98409b49f0cd1f9d0028962d7276860579fb54

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      124b7eeba31f0e3d9b842a62f3441204beb13fade81da38b854aecba0e03a5b4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c8759e675506ccc6aa9807798252c7e7c48a0ab31674609738617dc105cee38bce69d4d41d6b95e16731466880b386d35483cbeea6275773f7041ba6e305fae9

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      280B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4facd0ff10154cde70c99baa7df81001

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      65267ea75bcb63edd2905e288d7b96b543708205

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      a13534df0cd0a79a3a1b91085a6d575b47d5a9aad7fc6d712fd2616c0e95a23b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ad8d2b965851c0ddc23e92ae151b3b0b2bcda850c446f4278bdb0754d6b42ead8fc034b394749578a27b33ad7e4ab0633f974dfd4773fbe4d93ae477f00b73f2

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      280B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      049e5a246ed025dee243db0ba8e2984c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      15ec2d2b28dcfc17c1cfb5d0c13482d0706f942d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      33071ca42c472861a2fabd0f82f8b03ef0daaa6796b24b83f3df02587e4c3d12

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      bc5f6fa6a8cae20ab40eae4552650d75f38ebb158c95288a79d9f332623bb507946513c39d19c00a5aee323df01f0f1a51c54594ef1c293289baf45f4ae2145b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      280B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      76d14140f032fe27918c784cb46179a1

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      4ea8a7897c14cb2951de647376f7532eb9c5388c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      77ca3b2d19715b4168c2e0015fd2933438121f0399fa4ccdbf02c9fd7520852d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      dffd10ebcc229b6b9f254fd263ad1a587cfee97ff3c9c07d6765defd918b6d0981c8a15d88c7fb36525b848afbbf61b868fa0c5ed691292fe74407b794e4fb00

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      280B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      35fd46f975ec764de097f565b5776194

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      cd4fd078811603dbd086faeaeef8347e96832a9e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b97cc408f12ed9c2cc8bd297e62d7219345112b13ea28030581d87fc0daacd39

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ba195d0aae4a22a3c32063877f22c9278cc34c839c2eb5d528b95a0f3ad61a20dcde7d267b1940754f44ce22450258de4eb09d98d2a0fb1ee5b72aec0404ec56

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\11efd9a4-bd06-4ebf-a900-9bacd368e672.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      29KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      08456fb660623ee97d0f607398b64f75

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a16d339589c486b15e6b71fac8bf2225d0934631

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c565636adca95e18bd6e6315cdc6fca00cfc3c21d8e9bde56f361cffab2a7aeb

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3d75905f0139070bbd415061fec24bed6a803ffee36bf7f19d0036dc9baf7114e8a5c01cc4ce23fe8d16d256e6d926538b84177080c5b72403189c776175bbc7

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      457B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      fe132e92925b59c226b13d919cfbab6a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      8148dd39d06c870494a25420e9c0f76b3aaabb7a

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      94e73a925db3d39cc41250dbbe208d8572650328fc69709d670390103090c804

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e52a0bab03698c98f2a3b7b288b8e7e99d76138562b9341779d7648e891bde876b6dd30c4c5bed0d685d1e1601acc0d9139eae0b4bf258a61578ea9879e5305e

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      19KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4687ddf0106bd395f262e04ed0e2ae20

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      22b448e24172f10c94ad8db784b08aad447f7b6c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      460c4a12ba4a08e93689c3913d6e26f1607eaf1751d3b3dd49f23c9c50203e4a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      fa267db82bc2141157668b5fcb56e8d2ae7cc7b0819aeb9c2ecbaa56609c9f04b3e92ecdafc516b13b5d49bf63c8840be5d74c6398390f1598a12966b6cde064

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a6

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      22KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      30a800d6b3934b513b4b403ede805374

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      fb6dc13dee2c5f428acac4874e77d49700d5954b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      eeb422c1c359c956bcfaeddfc12e980c6ba3fb73a5fc41a60f9b6832c39e8880

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      883c4ce5d8e79608f8ae9e494b2d7a3e8527cfa48ba25c31e03cf451a563a7e2b819bff8d2f3aac3f1e6620369cc7182afe99e7903ed40655287e097dc21a515

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000f4

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      20KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a04093e21d87b9e29abae6edaf9cbfe6

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d22807c32aac986dac7a32c1e2aa41c34e3c6f2e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      8e33e4021cf6a681fdc3c6697c5a205eb98e5c92147d572434cf5257cb495f1c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      93a56f2ed92dbe3f2c742a629246c22577eb55ac8f76ec6c51e1fdd507bc4ca72be86536a73bb811d0b951a2923722320a6a14c3bffc06f75e2c4da255967194

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000101

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      20KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      46fc8f3ede80e1456ad412d5bf0430f6

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      e349dc8e2724e2bb1a51035280c1c6420f16b452

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      bb959ac2520d1bd1b132f0f560c84c58e40bd894c8ed0159aebfd65b0ca1e309

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      1cb90d4a173a79c9b643942ba53a461a3f520118d4d856081148134a662c4a5b03201cf7434418a9058ba793e2362aba350ed9765aef4efd8ff497e99193f9b4

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000116

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      20KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a6468b9bc762fb89576c99cfc12cc470

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ffabc1e7d1053cade597e0027466021f4a468752

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d14433247d198521d0fdd8600a9ad92236f42a85e3179693824cda720d9da4a3

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ebf0adaf0f66d88758449287a697b408d091826f053a2c817f89f5307655624ffb3e0de7124c43547efc2c90d6b6a7e2ef462dbe065f9d776f9e08441e6c3e4d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000141

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      64KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000142

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      19KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      6dd8803e59949c985d6a9df2f26c833041a5178c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000143

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      67KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      cc63ec5f8962041727f3a20d6a278329

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      6cbeee84f8f648f6c2484e8934b189ba76eaeb81

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      89a4d1b2e007ac49fc9677d797266268cd031f99aa0766ca2450bff84ac227d1

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      107cf3499a6cf9cdcbfa3ef4c6b4f2cda2472be116f8efa51ff403c624e8001d254be52de7834b2a6ab9f4bcc1a3b19adc0bba8c496e505abbca371ef6c8f877

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000144

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      63KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      226541550a51911c375216f718493f65

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      f6e608468401f9384cabdef45ca19e2afacc84bd

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000171

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      21KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      c1a56770ef2e0e7308c4a2e3d1c40ef7

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      694210725731f76137312fb48b94fb01ee9a1bf7

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      537d8938e6ce664736fcdf89b4a769d0ac0c1d23e482a013641ccbbc091196eb

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      6de8990bed0eceea1c2d43fe2cf6e96c6c540379d5d6d1fa1e8ceff971a4e347f7025b64666b2ed6bf849f60fe2ea351936b28645e2267af921daa0ef509055f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000204

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      62KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      c813a1b87f1651d642cdcad5fca7a7d8

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      0e6628997674a7dfbeb321b59a6e829d0c2f4478

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000206

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      65KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      56d57bc655526551f217536f19195495

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      28b430886d1220855a805d78dc5d6414aeee6995

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00020b

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      26KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      63d337a5360a63fcdc909cdfe55c323a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      603ed2757df1e3bd4fe5a08566f6b360ca698c2c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e46319e5ef8a072832bc9c230b0bce32fe1cdaa40661d96e80e8252808e7e495

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      1c7b6a13e66da788008caee6da479a04fbde7113ca3fc10751502ada74b61a0142c3f07a24825a39e882f836aa24eb16ef483af435649594e6c9288362106b71

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      6KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      7b3e4514f8bc513ce73cc42dbef1a07e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      8164d0f6fe39d2661c29002a6211c5c17ad30c93

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      16c92e9a2ecb3244df63371ba3318d7dd3324e403e8299236e075bccabe1010b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      625a33c3a61afcfbc5c22d33fb893c3ee88035d213545ddf3dcd4e8daeaa992fbdaf9ab62b52e319a9c67829b5ff34fd32a0122aa24add7075616c500d106387

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      7KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      fa5cea558fb69ca931f29cf12d129fe1

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      978ff8d8d41eecb4179b18c042cdeeb3f8d23260

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      cffa0767e7aefa6a844c066941f07d6eb022a20d7658cc6c7ed59c4c7a84362f

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d6cad15d8f7f8454cbaaff58ee8b777d6e61d5e51808d0532a8112fd0b9678f986149181d556c8eb95496a5597d0b4131776a9e282a3d8fe23d61b9eea930b8a

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      7KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      8f80da7b221061fb81038ed5190b0a24

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      91cc37b56116e6dceb21a807b240599313646f5b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c0171ff158699560f69de6479fba481b22d5968bfbc3cae7c95d41fc12e0a434

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ad3a64835105566c21dab1b308f1ed47580e42649965fbb6f00d18e3dadb7dbb31bb9304e73cf72c65ba818bc125224bfbdc110e6135282eda734c0e0403794d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      10KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      470ed3c726f05ce9d213cf06fa8485bb

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      e427f2c676b4fa96d973ab43fcd6bce2d231bbd7

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f4acb50a85f3fc8758267a96f42ea07d4aa9e0a1b59b74220ee0d59cddbdf10c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      40738e1642b1750e5d367e9625df63705fbbc37d3a5012dca684978d60d79601b12e43f50738c4467fd8dff9c88b081ff5f77271490808adf660f26a0d24e260

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      384B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      907f32485b02fe7072efd7826b05cd2f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      6eaf47c52b2442d1a5311894df8490ac61a96e27

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5a90b1f75fe30e392c54d9e8442e52a259819339558ebe7ceed398ea2650e6f6

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      73790a1000c3400943cbbf706336c6967f99e0a0ba375f06397be6ada8d26472321ef441e3561210226698ee4f396475b3580cbf0001d644bdc55df7a41d0feb

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5883c1.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      3KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      86096d913be2e2a0c927ffbaf33c22bd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      b68c271d5b5b7fa091d5b7292aacb9409e29cdc4

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      54b00527286fc88d7edacb3dec3a8510503a3d12c6b8316db4ad21c0ceb6e861

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      963df26852cfd5d7fb9e16ffb78e890d7e8de7a1da8459577c7e4e702416e8095791d9be4bd3a877505e9b3da08a697067c1ffd69899cd9e6d133c4309da795a

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ada06.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      48B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      27cf0460e7889b4d766b687b06497c0a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      add8400162e776c4773478fa3c4160fb2856d0e0

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      51cfe06aeb2dfe00ea2c9e0283115721afc66fde6c9e5538eaad9c0c46545c4f

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      57189033a8a3d453c862f775d78a34ca0a2cc0d44bec66313269d03b17c3686792bdd354913ef2635f9e24cf5ca53fa07b9b0025315d03d9ad93720b6d3333a8

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\fc7a0f5f-1e8d-4a89-9b35-30fa17168978.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      99914b932bd37a50b983c5e7c90ae93b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      69KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      164a788f50529fc93a6077e50675c617

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      c53f6cd0531fd98d6abbd2a9e5fbb4319b221f48

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b305e470fb9f8b69a8cd53b5a8ffb88538c9f6a9c7c2c194a226e8f6c9b53c17

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ec7d173b55283f3e59a468a0037921dc4e1bf3fab1c693330b9d8e5826273c917b374c4b802f3234bbb5e5e210d55e52351426867e0eb8c9f6fba1a053cb05d4

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      9KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      3d20584f7f6c8eac79e17cca4207fb79

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      3c16dcc27ae52431c8cdd92fbaab0341524d3092

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\computed_hashes.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      429B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      5d1d9020ccefd76ca661902e0c229087

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      dcf2aa4a1c626ec7ffd9abd284d29b269d78fcb6

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b829b0df7e3f2391bfba70090eb4ce2ba6a978ccd665eebf1073849bdd4b8fb9

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5f6e72720e64a7ac19f191f0179992745d5136d41dcdc13c5c3c2e35a71eb227570bd47c7b376658ef670b75929abeebd8ef470d1e24b595a11d320ec1479e3c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\_metadata\verified_contents.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      738e757b92939b24cdbbd0efc2601315

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      77058cbafa625aafbea867052136c11ad3332143

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_1\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      962B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e805e9e69fd6ecdca65136957b1fb3be

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2356f60884130c86a45d4b232a26062c7830e622

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      049662ef470d2b9e030a06006894041ae6f787449e4ab1fbf4959adcb88c6bb87a957490212697815bb3627763c01b7b243cf4e3c4620173a95795884d998a75

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      107KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      40e2018187b61af5be8caf035fb72882

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      72a0b7bcb454b6b727bf90da35879b3e9a70621e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      25KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d66a9b17f7b73c4d2b29b3f4a160092e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      4eddb05a006706510e9e66d013b23583ad738f29

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      3919a19c3c3f94cad742fdfe6266f5b92b7366cf10292329ddb92228a7757da6

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      05e1468181e9e6b449d5f9c7c3dbb3d2918e94bf608ff3081eae0a89a3e5d07c3cb41925936e5ae22319e2b87d3f9bc5abcc45fc992bf2b4efdeccbf2cca7172

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      24KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      3ed84b6c05ad2f91d7ab1122dc5baa52

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      49ea9ebbc25094dc4b149f90da7250a9ab06dacb

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      69eed3888971377420ea9ed24e1a141813711587f3b8d82ec5e5c1ca1d4b168c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      4b00b78ca660ecad8f228a54527cfafa7ddc54e5e6d29521ebcc6e5742e4ff63b579350fc57847885e00f4436d05963a1f4574c246eb4f9d5f059e43a74b90aa

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      111B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      285252a2f6327d41eab203dc2f402c67

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      25KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      b38904b2a753f3098d8f4483b653995e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      dcc6f39cb5342fb372fa2df2c73f6e2be528884c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      bc3f0b8761089b1ebea69b4049ce77ee5df726b41d1d124c17360560bb266c31

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5a2cbfd5761238f9ed77a409ab7f59dc5a07c4f1af2d7a95c50883c6ee0dfa54afdc9abccfad4f643e8a72e1d204498251724953030cda62c38bbeaee383fe35

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      27KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      3c8601961a1c523a4fab7976c58dbc4c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      fed09f494ac15f9fb953fe515a3e819903a8b9ac

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      27e37d052a877b0ec7d13a75eb249aa2fb8def50875cec639f9da7f908ef4428

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      dc876df9804e9da7df46ad3563e377daf1ec0a3b539eecc7141472d13426319b9982bf482ec1f27e2e63c2a79cb0dfe7835d963952db5253b3ecead16fa11404

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d751713988987e9331980363e24189ce

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      97d170e1550eee4afc0af065b78cda302a97674c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      211B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      1696320c39afd4ca5027ed9be1c6404c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1d362f9cb7c6196f88bd635232640eba87612b0d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      45190638d8f51166606f4b466be2adf3dc5c226a2f3bdc57496ace62365fde2e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3feb71724d5db5175c212c5fb8049fee396d34ea03c29fb897a3e93a83a406d8f16794c09a0053c3af9a72b0c33a560dd539d766d21414b9145e94ee321cad30

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      211B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e87f7c71672faaaa48a69afa69f34f15

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      9c804aa11702a6c80f7c48fa94660afa99f6e6aa

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e2f4db6eb81d358b54362a532cfd361c46d67940a8aeae4a28a7398d4d741c7a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      104fd4c15c4a6ea3feb8cadeec3deeed84cbf869daa818e9663fc7c766474881a8e6131ef4d7c0f631da6d16bdac177980e26bcb56c4793109cbdabef3948b71

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe57fee2.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      40B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      20d4b8fa017a12a108c87f540836e250

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1ac617fac131262b6d3ce1f52f5907e31d5f6f00

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      5KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      bf9d892d2c98bb3546e25c0831de6846

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      39c39509ea3751715061a389211bedfd1a1e934e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      153f0cda31b12599df0af6a77fcfc01a7a99e67165a05eafc585601ec85e8df1

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      76d5079093a1ad3a8861c5a4ef311eae5a266f7d73b423b12c7130a7c3a0eb6467e5183a594e4696cfe7cacf421c81a2e0db31a53f325eff919d80c0e0bb688e

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      14KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e762e0678a8fda55ff3c8108e5ae1c5e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      bb0f66487cce628dc9ca734c953272fa6e262dd2

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      76418a779865239fd83328b27650c7cff20af927f71d7b741e9b011959e17bf5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      377983718e1b35ddbcdeeee3ff13136c967c5a316b8f74930d1ed85943056d9b9511cef21f939d63a835e58fc8681b889716e6f27d24e221da436b0faeab5c2c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      14KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      15a3148d64006030ae6a447f28580d76

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d41cd436c2226e0500564e8b168393be679cf085

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b9d88598b3694ec192c41cb3698296d8874aedbe02828f5060a65dbbe868371c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      9df37c75356d44dbb70d28a2d53511968058e4bc724f38d7210251d3ab1510b3922a874e0c85610697ed8fa717679545a2eafa638007a185e71b469080805563

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      24KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      f09a9eb83a95426a596ce181d215cf80

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      838b21124e0b60dc56c6108bfb28cce86ab41406

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f2fd95daaa182b977d96dd35f172a0b171c66f207642bfc5bd61dc86148dec0a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      0346d4b3ae6035b76d64e7a302a4f2b1873d1555c97f38ecc94d32a509cf9db66026daa8f65fd75351acffa99a1893ec56b6119f3f7112bd547683cac28ee04d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      26KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      f68fa9d40e23611b8deea369aa2613b4

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d6a06f94fde66b9ad0d38eeaee90ad7d1bf20b8d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f8da5f2aa890139b5a55a7f669de2d418e3efde04ef94bf12a62b0666788eae5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7a4c71f60a2399ef167593b399210f4a91d5a9e217c4b448dea44ecf98baf630885234363b0f47997ac830c2d75bbc5c2891df85cf5bf8201bebbd31a1fc607b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      27KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      ad295ce71942670513e0ec933d83eb1d

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      168193e598a5b26b76e46d5e1b45389db0e10c7f

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d1f32df6b6497339383291cc41480bda4da56f3cee597a02174a69ad0f13f06d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      6e86efa4e93d1531af35a8dfdd6aba3d5b478de536ebf413e68aa8efecb50f45300a6f3ccab2453a1b80dc5ae5a015cbabb0c7af35a0d56fe2b4eaec7d8a5424

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      27KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      a24475a6dcf5725a8b7385387d431744

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      8a195bd4f3eaa48b42af9f627549c111643fff72

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      ce3cfbcc7adc9fdf8c155aded5f9951a3b40abf8aa8d8a577a36e546146f8e90

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d3d2501146075875df7e88f5c1598463a2f523fa291be64e4c6cdd466c477eb5ad91cce034ef3f7276e7a26e3e995dc3b0e575c55ab50f1d9506c55a13eb6a95

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      27KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      1b16be4915e1b7700b8b0cab41ec3203

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2a8d7fb2739dbaf42cce0fb6dd35906d8f743cc4

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c7cbb42717f71643e08ac1feb9fa8b9e4cc9b488b34d07cb6bef2c525bd6fa1c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e0b5c5528327b518afc0b6d37befa291d2dd21790b6964cc72ffbf93eefc4ba08e63cafd09ce58ebd18840ab5e24a0ecb87eb61ddd0415ed7054720f7a0d8e59

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      23KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2e29bd029973f81a526e3df0c0f115a8

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      5d1093ec7a1a38ecc81c0c9d30f056509ad34e44

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      edba82ef2308ab29ea9f2025cbd75381f4c497fa265f80fd71c5250f26994c64

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      0a6f43e55bc45f5d93a28ce03551baced13ec9aef0f30ffeaa8b7d924462a5b83a036b2893e72a61be92b8ad3607cfeaee7a537f310d044cb5b8b49a21726c8a

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      27KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      6edbd352de6cba105a060284fa4a0e4a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      50bcd47b06cd471e3689f9c8ab61e41c4c698739

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d3c7f3253b9b83078ebb8bcfde332d339ea855881de198fc5eabb920c5284901

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      6958e4c3d22d3941136558f7ddd5c2877b18cedac53c8090a13165b33670d6a9c269528e8568499be21e884975651849d0fa7c0ad02bb70d4db3074d3f4ef4b3

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      27KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4f715fef6ddf717aeac44225e5fa2b15

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d71b8f72a67f678c2ebb6052d44f0da8c4f6e3ce

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      22f645dcf2b3d45a13c9268f5a2de57eda5cb15136f55d24cd8b4508d56101cc

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3eef8d3039fadf6488418aae108574db942d67a7195b1be0ba522fd83aae27b56a468919e4c9ec6b7927b77fb2be8c8f2227c23523d5593ca1f3f81b5a7451ba

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      36KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4fe7175160c2dfa7118e02469cb70c6c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2e97b0e728907294d137e0c987522732f1d23b7d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      3add23608e83140a9fff269df509f0c2a410e15dd66b806baad72c4e74f9d67a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e8dbf82b6ada4d51dd5a17605f646134ff1c2a41c8a4402e1ef76a1c69cc6f81fa84be33a4e38ac4ad3bce8f48ffdd94889d2f69183bdbedcb7e22fa2f805960

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      33KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      830cad6f8f689eff10f880dfe942b136

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      f606fe5ee4c956bfea2e78af34a3091526c839b4

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      11db0ee33ab51a93a0abbe3df7188890f0626b8da165bcb13667ff27b1e6080b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      9de4e94eff2a6ea8772a28eb083d9647f47295dc4950dd586218df9dda986c40f05cf4bfdc5dc4da95bae24400462c5218fb5df493e1d36b8298a94fcd457462

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a4b7de3-278f-4b99-8d51-d00115fe070a\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      72B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      b129ff946f5f623c13366cc803391749

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      85e93275db94ccd5cfbe2acfe114536c812f7e9b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b546d7e559e44fdb5872fa360ad310d51ef8eda51c52ec14c8e5073fdd8807ea

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3027d5243a1740ab12229a66e86a9a09addf6b550e69cd3ed4c75ffe8b1b2c73f016ef6a9bb82c95a2ed68cd50b33ad1448cc2a64a305bd0f0389c0a88f84cbd

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\2a4b7de3-278f-4b99-8d51-d00115fe070a\index-dir\the-real-index~RFe5d9e08.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      48B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      adfe71e029a48dfb3b017014e59acad8

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      90e248552ff18bae3273e86c8699dea89bbf8138

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      076322c73e156ee6a7411421dd6572e52f3f80fc035496b09e10bb640499193b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d7f17c079ce722158af3d30a123c2c3d332321b2b47e47eefbcd9a0a69e508ed53be38d953a4f85d599b3e9bd6ddaa1101f40d0a9a9f20a947619ddf8f5e24c4

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\605d0a36-bd07-41d5-bdcc-368d408f56ac\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      9fa3337028dc007ac8dd2c5dfe6813a0

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      99259f07cce45bd2ec6af532690124d54c782426

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      50888652a90ed4b83840852b24380e51c6868da2f098dc844ded2ab5589e0267

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      60c173f8d55bc01d87bb5ebf9cd28b3ae6e4195d32b5c6718b568e3578221daa46ba028efa10f6896dd662a1ad3285732d87bbbfd70bb54af8a49c516bb1036b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\605d0a36-bd07-41d5-bdcc-368d408f56ac\index-dir\the-real-index~RFe5dbc7d.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      48B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e82d675a076d1634ed95ab64b6a27cf0

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      97402a6f16db8647264d00d6d8b86d28e88113be

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4aacaa372db95f71dbc1dca832f2cae88f83e63e38489cfab6d996cd119518b4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      f0e409bd91df43e687daed8f07bcf9b2fdaf7f1159bcda85e0c6b14e4dd52a31f3845622df541ea8b1e17e0f88c5dbcd02fd7504e02fb3408cfe3d47054b4325

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      257B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      ee98285b1f81a91a7796dc549e0c8898

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a97a826870d3b22a3f00208d115ece28cad353c3

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2845e74da5fae2fa54e320d7432249f476854c5cdbab8c11aff1f734a7cf2658

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      bc4fa176893c57e72565d6ac4a4557effd76b81819b94a2bc3131c040ea40d6b46b759ce8f9b2684a9b027c1baea6ddb3f96ffd64c363a89d686b5f615461c0c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      253B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      ecdc5782455e4692186404b9cd5dc06f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      dfcbdde82e667bacf888554ed3efd2900d02087c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2a89c4f4956cd665d6d8b305a735953af169b4d3f58b47cb5c2949ceb7e52344

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      6e8da72facdd719dfe4e714c2cdddad892f5867d661bf2be498588469f246449ba859d6b3567151fbd9df1631723ed0aa7f7c371f39432c7e3cc90ef7f8f86f6

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      192B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      73dd97bd07a1af7a2a7b5cc9a50e816d

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d26ac720f36b0cda392b9d4703fdaeeb0113c9b4

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      55928d1804615f4ad5323ea090ad77b74ece18889ccf12c3b5bea28bc3a25bf6

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      2fd69f7fcf99234fe624f8556e852674be54ca6283689312dda7325fb5ebedbe61050923c29688865fe9fb782d8128a6d504ba2012c42570d5c908f285f7f439

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt~RFe5d4d96.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      119B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4944fe3e2a1e7f2a16d21d4933f9f42c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      3df1840f201db93817a2751fd008d170f5a75790

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      0ca6d5269488ad02b24530f621fd7cead5ab8e5d9ffc6e5698b18b7ca5e35902

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      43b59a0f5891b3c396e7c51a5757dcffff3832eb0b008741e09fefe8eaf6f2ed64ffaff9849acfebe9ba47282559224d11e7fc9d1e840b502abdfda28d5b78df

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      72B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      63fdfe5fa38a825054b4eca784dab943

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      86861ac243c58b43136c47dc328a3766b8f11f74

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      ebe7d05e82a478df3eb3fed9bc988ad134e2e5dc0a2330cb175afc83c5421fda

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      b02f197d4c49a9d6f99159d06f67bdd5be4d52f7c87ab96b95db0e4d5d0bad7917cbd394cd4291992d905635e65e0e2482a5ee4a829496ab1aa116ead1d3d0b6

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d9e46.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      48B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e863f2bcff3671cacfe0cb76bd3cef1e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      eaf26f149ba808efb0ca3486367b1dd25b409ea8

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      95dc6040d477a95496045b6dfe7b70791e66b2bf6d851a765ee77b3a78c84322

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      aa7ac6450c246f5980098f7936ffe69de4395592eb0bcad4954a14cd482cc47d669c1a08d228e7999cfe6251ee4f93baa1d1b638cb8ecc3b1bf0fbe7f50987f1

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      24B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      54cb446f628b2ea4a5bce5769910512e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\MANIFEST-000001

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      41B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      5af87dfd673ba2115e2fcf5cfdb727ab

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d5b5bbf396dc291274584ef71f444f420b6056f1

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      72B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      c160ee4087d7cd5e0d6207236c9d44d2

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ea10a392789f981ce68bf1949a88aee63b973cc0

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      100a627acb8cc249f92183f2809d2bcb0e255f6f09470f395b40a1fcc2f05adf

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      4ec27643f081190fca5b584d5e1bac56e319154c31172d8cb1419b603edc96f137a6afd3ced911af94fdf6a101868328de630221095ad6ce0ffbeaf398dc10a8

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\Code Cache\js\index-dir\the-real-index~RFe5ada06.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      48B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      18cfcf0185604b169a3c76ac98ac55d7

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      892a69969ccfee7c27df3a4d683858f0ea0fd557

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      52410dc34eb16ed0b80c268d731394fdd4bba2c3f6d263c00f2eafcdd943c2e3

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      108311c398561f08b6744a00a0f89129fc370275208a5a93be45d3ea4d6448f6748f2852d293eece23e3b0fa7c4feb925b8dfedf12f537c6b091164aea76272d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_0

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      8KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      cf89d16bb9107c631daabf0c0ee58efb

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_2

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      8KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      0962291d6d367570bee5454721c17e11

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      59d10a893ef321a706a9255176761366115bedcb

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Storage\ext\ihmafllikibpmigkcoadcmckbfhibefp\def\GPUCache\data_3

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      8KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      41876349cb12d6db992f1309f22df3f0

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\000001.dbtmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      16B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      46295cac801e5d4857d09837238a6394

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d93f361b-e5a4-4c2e-a5cb-3d1e75184081.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      25KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      07e91ad0a211402583c1a0b0e721c088

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ed9ef302334f5732c355b2eb979f6be8d5d7325e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      64f8080061455acf24976db86b5cb8bf394308f4e42b337c3a6e38df2e8c715e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3fb996610355669306c7ef89f325c47e1a72659bdb546959d131ad1128f5cfb7489f39bd17da455e7615a43c65d89d792891a0bc0d7d60b233d5090168a212fa

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.3.9\data.txt

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      112KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      fd8717bad7cd0f60163e7c2b05210aaa

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1dd620b2a4b49d16a63d3b73495bbb0388cbdbc9

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d5facea6ed705ea08962d52a30ebf38f6d42aea50a7af21b103d0388b7dae34a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7b3d3867977b04efce86c5cce45ae0125d25344fa85347a83977faaa9ecd205774a976be63d6af48b953b4ca355405aa090d6db482073f77d71607c948acb5ad

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\696100cc-c223-4413-b007-3674d4abe839.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      19KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d367314b34204cd99d4993c33020ecaf

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      eb136fd3e827361884bda4930685c6a5a7ec7604

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f182b48ca3470af0d05cccf7aa63c20c7ecf00ca887249f577436656f1417e7a

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      a947e7ebc1d1fa80168afbe279e55949e8eb4879f93342afc462d16c974cf7376820bf05b2121ac1447dc9276e002743df0e01ad2bea55f7a6eee7c5afd812f9

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      21KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      317cca0ae563e054151f395f22f9bb1d

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      f509564bd4609e2fd2712724a9398ac5354a8a34

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      7cfd2f05e672c06a297da613b0da39e890df1af60881f61f97fcb9fc1ee45825

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      bbd6a57c2d2d20aa7086fd889039665770bcafb7f3c44471cd233bbdd41cd4581aeefc2fc1becc3f0c913f178a5f48c5eea1188cc8c95aa89609209bcb3c7506

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      880B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      e4e3c811f03e11a419375159f36820c4

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      7fee7bdc867762f2336a5b24f66b27b36b3543d3

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      1e2686d237fe26e81486a39f6add993bed84871a4e7e8c1bda2218e7ec3638e5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      df5d8e8124c5037630022419c11f38cde506179004950c9c2eeea90a89b51fceabdde557ba3f8c6b5ae8c95873792f9a1bacb44740421e18fbdc25513d918a48

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog~RFe5867fc.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      469B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      c2181c06efb13fb169ca979dba13f44f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      4cefeb84261cb068550debf79530080a0c826a74

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e6193c995b84880b19f8a0b46cc796640c6ebfb842d0729158324caa4b85355c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      2ea2078ea01912df7c7b9d609b52bcd4292a7407ecd3d8052bf550ba354187214eac902deac83bc7623a3389ecf051b2aa30ab8fb71b4365889c23fbac8dc022

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      3KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      94406cdd51b55c0f006cfea05745effb

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      264KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      25b92bc56333b8d683a25a28688c7792

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      627c63b9e08a1fdbfbc794a3aced0f2a88ca1f89

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      13452ca31bb15973082529b22038008100ec77384330daf417adc3b1883d2b84

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3bfcf89f47e5fd3daa82e45a095b92d097d0ce07b311aa81243661c40341c8c6559f93f3e35f9c482e81c593b7d333a6135f0db28500cd4dcc1cc0168a40604c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      46KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      3f805fadf3264d19757ea84907b176d5

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2f6672b2aaa95fcabe86ce3e39ba5775c09e00c3

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      40f2433633ded89ec60f5063cec584831df65d2fe7ad6f96f59816737b6c24cb

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      1f385447dc1d9b80f467cd11af6d5e393f7ff4fe57695e7818efb47ebf83e6f9fef36915ea4eda3bd09c99f296d29ad6bfdbcbf6b3134bd2582f5b919e8a5297

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      30KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      f0d1cfd3bd915f41dcb6acc8948b248e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      8b1a80f4adf5ad20ce951a98e1e0cd497332839d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5cd849e695071047ee77bc54a285327116f875d7ee61fd2ee5796362dd1c1183

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      70ff5dcfbad764fdb2d4808dab5fd8765633e3aa25f9445b1e6c2369821ca6fd920316a8401302f542f2562751c3b356614ef0da9967aebdb6b5e3995b45fe42

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      6KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      6c2ddf7f6a69a07ca0001e93839ad003

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      54a26f774baa3f276a6eafa68779dece8c4e829e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5906e553d74892aed8c0cb0b6db7dea34967c6a7ea8f0447082190656b475d21

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      d926e094e7b28ecf0a534ac0c6e29b989e9a88a561bb8babbb1a799550cdff7d2f45d86260b98125a3d036524924fef1a17f3a420ee5caaeeb9b934efdaac554

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      39KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      5ef37ccc07c1f494fe75851854cc64bd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      0c3f5d3a9fd5616e279552409d3800d52bd31188

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      cffb1457b644af45c8c507aea468fe9994c6b2e12406c0c74425d37272b51427

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      6b1d3fea7d6ed1ab2658dc4153ba174572f8297ce6ac507a4b0017b535291c2ab6c507028bdd800b26b186241efc69aa150b498cba97b10d77b48ba6487e7683

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      40KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      1ac4791404515ee5675ee4b435e62ab1

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      e6da0259a0989d67fb6c013ba0bd2a2c313887ac

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      07183eccb55825719013777944a9bd2d4b217381ac23c1411b47f5a209574908

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c10ee70b292063a66db7006b2b9c0ca74104e9f4eb7c66a2046b0d7d33c31103891f0fb9bf595ad7c9c4176e1a45a4ecf02a18b2368c3204f60527602273635f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      51KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4ee1fc60649ae6c6af86c896951fe17b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      05cee9eb8f986681c634a651a6e91da9493467e5

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e69507da5d96913c1c248d84aa801c17519fc8d6bc81cae616fdec52349e1618

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e6bc1136121e050c3b18982854d06ed09160d0de66f097f422071d84f6446143de13ea1cab245be066117a2981c75dc1186f11fc9ca2be05dc3a3bce566a5ec2

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      7KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      9e09e28162b42c0c43371cc4cd041ae1

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      16104bcf99597005616018dfc2f28d0fbdd1c996

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      760c4cd24fdae2cd0d8696469c744d0476926d880eb77c6b1a4ccdb031f6e874

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e375a40a7b1623a5281a8663d8a3f6da6a4996101c166b11de8722d37aa5a5d34c94547d8a47d58fbf277437673b196e629d3a24395b3f4816105819dcb1b05f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      52KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      86cb49c09975daf209e91ba8ae386c41

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      e3e099765f4f42dd22fe47a19e3967601a2f2f8e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      865c5bb202fed36d5ce9c10cd7e90dc6aa70565afd096f764f2bf45aac7c3982

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5782b8436cfa9daf0274b6e0171a8bee5a12a6463874e69f44aacba4a8b35c467994cc79a2bc6b34beab50c5b68c429d69722e22555bf2dcec032f268437a8db

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      46KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      781615ae93f988774b1807aa77d3ae55

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2f97b5fc7018ff144a4efadc2f1faea13b2f2f26

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4df61eaf16f1dc1c3cf7034594cdc100cd921b7aba7f73277a7447b18c720756

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      9a9884bfd53b9185ff816cd5e009d4d799f7767cb8f569191e9c3a25ba05a81af2ab5a150a3d85d40a43da9342a54aec1e88ff3f910abfb8d5a99aa3615d6a6b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\22.0.0.0\crs.pb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      289KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2b59269e7efdd95ba14eeb780dfb98c2

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      b3f84cbc37a79eeecb8f1f39b615577d78600096

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      ff2ced650772249abb57f6f19c5d0322d6df22c85c7cf2be193b6134e1b95172

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e4b454db2248021e0d198805ea54f1c0cfd84b9716a9348b1d0e0acb7c6fb5dd0839e532a5eb6d4410ab759d6688dd6cce8375ad55a150d738d280993142e9d7

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\22.0.0.0\ct_config.pb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      8KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      811b65320a82ebd6686fabf4bb1cb81a

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      c660d448114043babec5d1c9c2584df6fab7f69b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      52687dd0c06f86a2298a4442ab8afa9b608271ec01a67217d7b58dab7e507bdf

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      33350cce447508269b7714d9e551560553e020d6acf37a6a6021dc497d4008ce9e532dd615ad68872d75da22ac2039ef0b4fa70c23ec4b58043c468d5d75fd81

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\22.0.0.0\kp_pinslist.pb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      11KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      0779206f78d8b0d540445a10cb51670c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      67f0f916be73bf5cffd3f4c4aa8d122c7d73ad54

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      bf0945921058b9e67db61e6a559531af2f9b78d5fbedb0b411384225bdd366ec

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      4140b2debe9c0b04e1e59be1387dca0e8e2f3cbc1f67830cbc723864acc2276cde9529295dcb4138fa0e2e116416658753fe46901dfa572bdfe6c7fb67bd8478

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d6e1537d35a2e2322f5adbe62ea3d26f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      26028c73b425dd59aa459c5372f099d491c2f904

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e9b0bc4cdf55579383c6b99d9f57dc3d6626b83ad7d64a9dda0232b707f97642

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e2ce70fd95b25d23d11f66a78cd6aa4eea67c08a4481eef452aec05a9d0ccece05b27b4ba5c029252297ba5f50b4656c08e4623d00fe31a627f6464a0ab9db53

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2f3ab7aa4ca1136148d089095eb50c73

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      c41f386433664d7b6f876f59c85fa0161bcaee34

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      58cb8a12932d6f27bfa2a4f6266f146c7facbbdbded988c101565d5016906c9f

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e9a2d71ece6f76a3450db85604e893978e4eecf72cd90a61ec7ce8005f3e4c86507fe7303b45c89f27d77d59003e4d8b5dcc3e86811ec176e9b14f12fc979f2f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      9a5681d21d81e37e13ddcbe57eefe480

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      c946924cde26762de399900e142dd8c302ccefb2

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c009054de3da5403a4606e2a094374fd62217ffc22884e6f3c5ae30d7d5743a3

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      54e1941edfe1559eb1e97ad99589dfe10680f56d0fafc9b19ab758f3d269339f6861195c1028ef89f02ab7ff6ea3ad885cc2602a8b929d9b975c81b375cad6f0

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      67609e79f0250bd8d55d2ce35879dc73

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      00cb57194070a6b5c86a5cbc33a59e809911ab14

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      91ff20ea48484cfb365b87efd8e48ccc11147d7dac05e1a400c043dbf2f9c9c6

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      946797c8645fc9bc6d1da204eceb9fdc9bf88969f2ab3bd75584e6c9209562d30597979a28e080f3419621f118c6abcf929cbad18c92ae9e54336d98c0dfda1b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d5c113708cb0156a4f346e7e1bb450de

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      6483ad0fc620b533deae0ba81b5160b531d03c9e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      911b7d338fc65aadb570dced9c21f17e6a357896f8d949fbaf90d5dedb22f2c3

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ee7d32d602d0c6d082e7066933e659a37fc9562351070d188123bcfe212139f3da3f5c5c5b8d027d042a41143785407f52786425084b3962b1aabfff60935c8d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2a5c3e3ad9da3bb7e776df5209263f2f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      28fd6c4fc06c106b0def840bf272ac1d47c891f2

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      9dd5619cea4d61297127a1a507fb87c13041af76de7e5fcf1af3eed0730ec974

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      a79a0dc87ff32c3c382de59fd1976e5ccb0ffc98cabb02caa30f6a0e7d6deec0b520b876e7c7ebbf120e7737240ab8b980704a741365fca8172d9e457fb2c17b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2101a4e4bf559ab507397a82ccc1bfd2

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      eddff66ddc1a6e190834feb4d3d45b75f2976648

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      3a1e57e7f597e64a60bfc796ca3307d0b333ad529a7a1f01fc7da8da9403acb4

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c869fa20322de629193397227c3cf55a435205745083f54eb1b3eec3b8e39ab02e7938ee09e1736d8da53712395c10f9e17cfafd657ecca5688cd80380077140

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe584486.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      593756e6fed06cc307f2eac190696ca4

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      898f849b529a72e8fb26c29fdb70c37f8520f38b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b87006ecc23290ccdb0d363a6ca6706218082bb0dacf30dde3806eb58ed7e1dc

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e1c4a620a594c998f97e7ec1a2e26634cfbe465d8b8c6ec888c0e3a6f7cbea5a62cfc5996bd85250297bd012e263e28b6061d91525fe4c64567c75a5d96b712f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5de31f.TMP

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      392B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      56fc689a2e49a007c32de6f99bf58cdd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ac76409921ecd7513bddd071f06b013ed67a3da1

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      116e562d033376bde09e9954bffd916dc634f1c38975a7e0eced3c9edc294bf8

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      15e42c335fe3839e394c6ce60a8c6f7a21e8d03e89041b8be8f53ea4471f9cc11e0a090db2baaa79ece0d312f483d8a970644689aadc7f0e1ab4779edca888e5

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      163KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      bd6846ffa7f4cf897b5323e4a5dcd551

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a6596cdc8de199492791faa39ce6096cf39295cd

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      aa19b278f7211ffaf16b14b59d509ce6b80708e2bb5af87d98848747de4cba13b6626135dd3ec7aabd51b4c2cfb46ed96800a520d2dae8af8105054b6cd40e0b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      3KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      17c10dbe88d84b9309e6d151923ce116

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      9ad2553c061ddcc07e6f66ce4f9e30290c056bdf

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ad8ed3797941c9cad21ae2af03b77ce06a23931d9c059fe880935e2b07c08f85fc628e39873fb352c07714b4e44328799b264f4adb3513975add4e6b67e4a63c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Advertising

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      24KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      131857baba78228374284295fcab3d66

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      180e53e0f9f08745f28207d1f7b394455cf41543

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b1666e1b3d0b31e147dc047e0e1c528939a53b419c6be4c8278ee30a0a2dbd49

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c84c3794af8a3a80bb8415f18d003db502e8cb1d04b555f1a7eef8977c9f24e188ae28fc4d3223b52eab4046342b2f8fd0d7461130f3636609214a7b57f49cb4

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Analytics

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      4KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      da298eacf42b8fd3bf54b5030976159b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a976f4f5e2d81f80dc0e8a10595190f35e9d324b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      3abd2e1010e8824f200878942e0850d6e2620a2f0f15b87d32e2451fdda962ec

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5bf24c2df7cc12c91d1fb47802dbac283244c1010baa68bfae9eb5eb8ee25758156bb1e21f6cc3f55e7d71e5c330888ffd41469b2630eb86237c9970d7ede75e

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\CompatExceptions

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      689B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      108de320dc5348d3b6af1f06a4374407

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      90aa226d3c9d50cf4435ecdd2b8b0086d8edeb8b

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      5b462316a51c918d0bae95959bf827cb9c72bbd84ffb0e43b750aa91fbf3ba53

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      70f30c45e20b7cddd0cba6476af9338975cec8e40b8b19603af5fa859a34c6eb2138957daaa263633fe65213e2186402d05d9d29ad53e8f311335555116314c2

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Content

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      6KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      97ea4c3bfaadcb4b176e18f536d8b925

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      61f2eae05bf91d437da7a46a85cbaa13d5a7c7af

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      72ec1479e9cc7f90cf969178451717966c844889b715dff05d745915904b9554

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      5a82729fd2dce487d5f6ac0c34c077228bee5db55bf871d300fcbbd2333b1ee988d5f20ef4d8915d601bd9774e6fa782c8580edca24a100363c0cdce06e5503f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Cryptomining

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      16779f9f388a6dbefdcaa33c25db08f6

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d0bfd4788f04251f4f2ac42be198fb717e0046ae

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      75ad2a4d85c1314632e3ac0679169ba92ef0a0f612f73a80fdd0bc186095b639

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      abd55eff87b4445694b3119176007f71cf71c277f20ea6c4dcadfb027fdce78f7afbcf7a397bd61bd2fa4bc452e03087a9e0e8b9cc5092ec2a631c1ebb00ee25

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Entities

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      68KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      571c13809cc4efaff6e0b650858b9744

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      83e82a841f1565ad3c395cbc83cb5b0a1e83e132

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      ab204851f39da725b5a73b040519c2e6aaf52cb7a537c75802cb25248d02ec1b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      93ff4625866abf7cd96324528df2f56ecb358235ff7e63438ac37460aeb406a5fb97084e104610bb1d7c2e8693cabedc6239b95449e9abb90252a353038cb2a2

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Fingerprinting

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      b46196ad79c9ef6ddacc36b790350ca9

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      3df9069231c232fe8571a4772eb832fbbe376c23

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      a918dd0015bcd511782ea6f00eed35f77456944981de7fd268471f1d62c7eaa3

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      61d6da8ee2ca07edc5d230bdcbc5302a2c6e3a9823e95ccfd3896d2e09a0027fece76f2c1ea54e8a8c4fa0e3cf885b35f3ff2e6208bf1d2a2757f2cbcdf01039

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\LICENSE

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      34KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      d32239bcb673463ab874e80d47fae504

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      8624bcdae55baeef00cd11d5dfcfa60f68710a02

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7633623b66b5e686bb94dd96a7cdb5a7e5ee00e87004fab416a5610d59c62badaf512a2e26e34e2455b7ed6b76690d2cd47464836d7d85d78b51d50f7e933d5c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Other

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      34B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      cd0395742b85e2b669eaec1d5f15b65b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      43c81d1c62fc7ff94f9364639c9a46a0747d122e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2b4a47b82cbe70e34407c7df126a24007aff8b45d5716db384d27cc1f3b30707

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      4df2ce734e2f7bc5f02bb7845ea801b57dcf649565dd94b1b71f578b453ba0a17c61ccee73e7cff8f23cdd6aa37e55be5cb15f4767ff88a9a06de3623604fbf0

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\Social

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      355B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4c817c4cb035841975c6738aa05742d9

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1d89da38b339cd9a1aadfc824ed8667018817d4e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4358939a5a0b4d51335bf8f4adb43de2114b54f3596f9e9aacbdb3e52bef67e6

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      fa8e1e8aa00bf83f16643bf6a22c63649402efe70f13cd289f51a6c1172f504fedd7b63fc595fb867ecb9d235b8a0ea032b03d861ebb145f0f6a7d5629df8486

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Mu\TransparentAdvertisers

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      105B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      57d5a3548911886de2f3bd3172e808ed

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      ca932af3b25f245ce931fbc6cf10299e5fbe35a7

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d2cd0bef5f45daf490c53e705d6f67dfe12390c72a00efa6f5117432bd8edb8c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      933194509d305b2a60b38c149ba1d74e142ef15647242b287844d263006d33ffa38b6ea263c89cb821a9277d41f0cfda95a0eda830f3a5ef8df5ba80d3bbc818

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Advertising

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      326ddffc1f869b14073a979c0a34d34d

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      df08e9d94ad0fad7cc7d2d815ee7d8b82ec26e63

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      d4201efd37aec4552e7aa560a943b4a8d10d08af19895e6a70991577609146fb

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3822e64ca9cf23e50484afcc2222594b4b2c7cd8c4e411f557abea851ae7cbd57f10424c0c9d8b0b6a5435d6f28f3b124c5bc457a239f0a2f0caf433b01da83f

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Analytics

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      432B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      01f1f3c305218510ccd9aaa42aee9850

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      fbf3e681409d9fb4d36cba1f865b5995de79118c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      62d7286cd7f74bdfda830ee5a48bce735ee3661bda8ceac9903b5627cbd0b620

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      e5b665e981f702a4a211d0569bb0bc42e3c29b76b3f75aaf8dc173f16f18f7c443f5cf0ccf1550df3aa2b151e607969c2c90ab1a6e7a910dfeb83854cea4e690

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Content

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      48B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      7b0b4a9aafc18cf64f4d4daf365d2d8d

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      e9ed1ecbec6cccfefe00f9718c93db3d66851494

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      0b55eb3f97535752d3c1ef6cebe614b9b67dddfcfd3c709b84c6ecad6d105d43

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      a579069b026ed2aaef0bd18c3573c77bfb5e0e989c37c64243b12ee4e59635aaa9d9c9746f82dcc16ca85f091ec4372c63e294c25e48dfffbed299567149c4e2

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Cryptomining

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      32B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4ec1eda0e8a06238ff5bf88569964d59

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a2e78944fcac34d89385487ccbbfa4d8f078d612

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      696e930706b5d391eb8778f73b0627ffc2be7f6c9a3e7659170d9d37fc4a97b5

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      c9b1ed7b61f26d94d7f5eded2d42d40f3e4300eee2319fe28e04b25cdb6dd92daf67828bff453bf5fc8d7b6ceb58cab319fc0daac9b0050e27a89efe74d2734e

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Entities

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      42KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      f446eb7054a356d9e803420c8ec41256

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      98a1606a2ba882106177307ae11ec76cfb1a07ee

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4dc67d4b882621a93ffdb21a198a48a0bc491148c91208cf440af5f0de3ef640

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3cc3a521b297e4f48ed4ba29866a5ade380c9f0c06d85bea4140e24b05c6762d645df3d03d0a7058383b559baa3ae34ad3ed2b06017e91a061632862911a823b

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Fingerprinting

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      172B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      3852430540e0356d1ba68f31be011533

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d3f622450bcf0ced36d9d9c0aad630ebccfcb7ff

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      f1f413704c32a28a31a646f60cad36cc2da793e143f70eee72ae56f736df8054

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7a4faa493c141ea88d6cd933dfc0b50ef6d25983323db2b931c7512e039859d60c4935e56b771264ca72b45c035b1962ad8680d616eaaf04fbc5a6e0b674e435

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\LICENSE

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      66B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      5b7baf861a48c045d997992424b5877b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2b2bd9a13afe49748abf39faf9eb29ed658f066e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      44071e0fcffb9a9a32e8fa7010bb18dbc41afd0b176f81bf700b15b638a88a51

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      4820b41aa5ff4d934a583e1f0b93b1512631102bb2dfdb74792a2f0dcf9907da7680c02a5ddd2492a1e6d58cdada3453d9e38bb8deab6ce831ff36a7f8de016c

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Other

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      91B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      09cedaa60eab8c7d7644d81cf792fe76

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      e68e199c88ea96fcb94b720f300f7098b65d1858

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c8505ea2fe1b8f81a1225e4214ad07d8d310705be26b3000d7df8234e0d1f975

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      564f8e5c85208adabb4b10763084b800022bb6d6d74874102e2f49cc8f17899ce18570af1f462aa592a911e49086a2d1c2d750b601eedd2f61d1731689a0a403

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Social

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      3KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      318801ce3611c0d25c65b809dd9b5b3c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      b9d07f2aa9da1d83180dc24459093e20fe9cf1d8

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2458da5d79b393459520e1319937cfc39caadbc2294f175659fae5df804e1d03

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      7daff0253da90f35bf00141b53d39c7cadacf451a7ecf1667c4ca6e8aed59a0c4a6b44ddc2afffa690e12c2134eddb9f46f72e4317ce99c307d9e524a5fd1103

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\Sigma\Staging

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      16KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      39bdf35ac4557a2d2a4efdeeb038723e

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      9703ca8af3432b851cb5054036de32f8ba7b083f

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      04441a10b0b1deee7996e298949ac3b029bd7c24257faf910fe14f9996ba12ae

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      732337f7b955e6acaf1e3aaa3395bc44c80197d204bd3cbb3e201b6177af6153cc9d7b22ad0e90b36796f92b0022806c32ac763eaec733b234503890900bf284

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Trust Protection Lists\1.0.0.26\manifest.fingerprint

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      66B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      fc8af1e27127535b4eea55c8c2285865

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      dc9fb2a8fe358f84f4f2749460ef15507e7ecb07

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      c76f988dee6149c0c21f7f657688a7fcaa20b0dc83881efe14d58d9be3f5236b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      ec847bd27383c37cd67d9204e5dc55256ca0303c0d7696558de650b569ef8f9eb747603180ae6561f884bbe6eb519a23c18fa4a646c43d58799f01744c2b9de3

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2024.12.14.1\keys.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      6KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      b4434830c4bd318dba6bd8cc29c9f023

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      a0f238822610c70cdf22fe08c8c4bc185cbec61e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      272e290d97184d1ac0f4e4799893cb503fba8ed6c8c503767e70458cbda32070

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      f2549945965757488ecd07e46249e426525c8fe771f9939f009819183ab909d1e79cbb3aeca4f937e799556b83e891bbb0858b60f31ec7e8d2d8fbb4cb00b335

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2025.3.17.1\typosquatting_list.pb

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      631KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      094ca661fb20ae7e5c26df780e0f7ecd

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      0cc79e2fdf43962d9597b7eec7b34c8983c3562c

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      76f100a3d96cddfbad67460eb0db1a8877a53c8a1881888b208011cd3a9d5726

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      088ca8996eb3bd02f5561b026a9e36755c915d19eb9ae768ee3949491059b1c7e34117b72828d843131df50456c6a162eb2cffe74fd38c273708cd4ac6fda53e

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      572KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      f5f5b37fd514776f455864502c852773

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      8d5ed434173fd77feb33cb6cb0fad5e2388d97c6

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      b0931f1cae171190e6ec8880f4d560cc7b3d5bffe1db11525bd133eaf51e2e0b3c920ea194d6c7577f95e7b4b4380f7845c82eb2898ad1f5c35d4550f93a14b6

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      499d9e568b96e759959dc69635470211

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b6704ccf-77bd-4206-9c8b-6dc1fa19ae20.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      47KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      6ba8bcb4ba04a686d3b00b0d7323d237

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      36df07852d37891fa33a8f2773d9940e72e913ab

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      e388d27a6a2be049bc127fb69024e6e4771e104b050bf9ecc7c731309f748b84

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      59c2cab3bc9bc3cd90b7f70f1bdb052a3273a185b0b283270edd93d562f34a41215b06d7ce847c1c7cf478831b37517052f815c562e92bb7053bb67e84623f63

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      2KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      23eb2a88fb04e9ec8aa572219e92779f

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      b88513533eba6e42beff321a61652b6f1dbe0fa3

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      bf66e54bcb9f14bb05573947e9cdcda0858363bd0770361586cd19d784a02b75

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      a09c34a9ee40f369269091dfdb5509b7e8a20257eb86ce81aeb77ce32b4aee950f338c736c8e6ff0a0d60bee645da4d00a3fe408253a363b3e7ba22feec508f5

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\561341c6-afd9-43c1-92c5-ec01329b2660.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      5058f1af8388633f609cadb75a75dc9d

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      3a52ce780950d4d969792a2559cd519d7ee8c727

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\578747dc-f53e-430a-bd0e-a21446e07361.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      10KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      78e47dda17341bed7be45dccfd89ac87

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      1afde30e46997452d11e4a2adbbf35cce7a1404f

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\scoped_dir4452_1087500825\c26471ec-51fd-48ab-8a9b-b91a8eeeebbb.tmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      152KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      dd9bf8448d3ddcfd067967f01e8bf6d7

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d7829475b2bd6a3baa8fabfaf39af57c6439b35e

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\scoped_dir7640_82721345\CRX_INSTALL\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      626B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      b9d00380c0947d7ba5fd1efcbb8a7347

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      fa8ef5bce53e46999cdd957da6113b37d04e116d

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      279bf453dd0572dcf4a326cb7df9fa9d296a2921ef96abdb1956a813268d78cb

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      577b235564c77be3050f2aa0e1b6986bcd3d38b09a792a01f943d7d85efccc43bdc9659aaa3b81311bddc1bcce47faf4f3d3eca77d955ee2fe93fa6b095f0c13

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\scoped_dir7640_922807785\CRX_INSTALL\_locales\en\messages.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      711B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      558659936250e03cc14b60ebf648aa09

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\scoped_dir7640_922807785\CRX_INSTALL\_locales\en_US\messages.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      64eaeb92cb15bf128429c2354ef22977

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      45ec549acaa1fda7c664d3906835ced6295ee752

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\scoped_dir7640_922807785\CRX_INSTALL\dasherSettingSchema.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      854B

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4ec1df2da46182103d2ffc3b92d20ca5

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      fb9d1ba3710cf31a87165317c6edc110e98994ce

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

                                                                                                                                                                                    • C:\Users\Admin\AppData\Local\Temp\scoped_dir7640_922807785\CRX_INSTALL\manifest.json

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1KB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      2a738ca67be8dd698c70974c9d4bb21b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      45a4086c876d276954ffce187af2ebe3dc667b5f

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      b08d566a5705247ddc9abf5e970fc93034970b02cf4cb3d5ccc90e1a1f8c816e

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      f72b9190f9f2b1acc52f7fbb920d48797a96e62dfc0659c418edbbc0299dccf1931f6c508b86c940b976016745b9877f88f2ee081d3e3d5dcdcc2cc7e7884492

                                                                                                                                                                                    • C:\Users\Admin\Downloads\CoronaVirus.exe.crdownload

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.0MB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      055d1462f66a350d9886542d4d79bc2b

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      f1086d2f667d807dbb1aa362a7a809ea119f2565

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      dddf7894b2e6aafa1903384759d68455c3a4a8348a7e2da3bd272555eba9bec0

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      2c5e570226252bdb2104c90d5b75f11493af8ed1be8cb0fd14e3f324311a82138753064731b80ce8e8b120b3fe7009b21a50e9f4583d534080e28ab84b83fee1

                                                                                                                                                                                    • C:\Users\Admin\Downloads\HorrorTrojan.zip

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      8.0MB

                                                                                                                                                                                      MD5

                                                                                                                                                                                      4af6cae26f1f4cf11bb346040eff215c

                                                                                                                                                                                      SHA1

                                                                                                                                                                                      d9aaa16e91d95629d41096b1eedd8db6e05ab1c0

                                                                                                                                                                                      SHA256

                                                                                                                                                                                      9b67f431644a84d1768b7988dad3d27214ebad46f5714fa0b0b0b98428b8b9a9

                                                                                                                                                                                      SHA512

                                                                                                                                                                                      8ed2e2e9431e2a68be43f1ff9c34a52cf550879c5b578d6f07d9000a267a6cefaf71538edf6e541c435dd072b8165d1bc1f6dc2baa1428a8cfd1c0036faf0b0b

                                                                                                                                                                                    • memory/880-22114-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/880-21274-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/880-2420-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/1664-6839-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/1664-8536-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/1708-2421-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/1708-2391-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/1708-2425-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/5260-8533-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/5260-6838-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/5652-25426-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/5652-26365-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/5652-4310-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/13776-33488-0x0000000000400000-0x0000000000484000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      528KB

                                                                                                                                                                                    • memory/14928-33498-0x0000000000400000-0x00000000004A4000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      656KB

                                                                                                                                                                                    • memory/15056-33487-0x0000000000400000-0x00000000004A4000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      656KB

                                                                                                                                                                                    • memory/19072-5987-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19072-28613-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19072-29220-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19100-30154-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19100-28614-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19100-5988-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19260-28612-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19260-29182-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19276-28617-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19276-30223-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB

                                                                                                                                                                                    • memory/19276-6507-0x0000000000400000-0x000000000056F000-memory.dmp

                                                                                                                                                                                      Filesize

                                                                                                                                                                                      1.4MB