6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
06-03-2023 10:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe
Size

814KB
MD5

aa793088b336374faa442087393c4b64
SHA1

f5f44fbab4ec2526aa17bf8ab2ac39823ea90178
SHA256

6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085
SHA512

bbc75bd72b1342738f0be1f4688d158e444ba729763562ac543ff1f0fcc2adfa4c2dc40e6ee9bcee08434f0d7ecc6b54a35e8f11c0d090efa7e3c56907237d4f
SSDEEP

24576:AWXsOTK2dbExm46NG7qx/3sxjrR+6QyDAEUBKcpFF0X:VsO7bExsEaFO

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
3332	msedge.exe
3332	msedge.exe
5772	msedge.exe
5772	msedge.exe
5772	msedge.exe
5772	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 38 IoCs

pid	Process
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2844	6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe
2844	6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2844 wrote to memory of 3332	2844	6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe	88
PID 2844 wrote to memory of 3332	2844	6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe	88
PID 3332 wrote to memory of 1384	3332	msedge.exe	89
PID 3332 wrote to memory of 1384	3332	msedge.exe	89
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 3308	3332	msedge.exe	90
PID 3332 wrote to memory of 2672	3332	msedge.exe	91
PID 3332 wrote to memory of 2672	3332	msedge.exe	91
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92
PID 3332 wrote to memory of 316	3332	msedge.exe	92

C:\Users\Admin\AppData\Local\Temp\6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe
"C:\Users\Admin\AppData\Local\Temp\6a57cc617589d7891d420ff1e373495b0d1feb4f36d6cd287fcef9d1735bc085.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=5
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:3332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:1384
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
    3⤵
    PID:3308
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
    3⤵
    PID:316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3676 /prefetch:1
    3⤵
    PID:564
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3684 /prefetch:1
    3⤵
    PID:3732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4844 /prefetch:1
    3⤵
    PID:2288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
    3⤵
    PID:4388
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
    3⤵
    PID:64
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
    3⤵
    PID:3296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
    3⤵
    PID:3696
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6432 /prefetch:1
    3⤵
    PID:2420
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
    3⤵
    PID:5692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7548 /prefetch:1
    3⤵
    PID:5812
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
    3⤵
    PID:5248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8304 /prefetch:1
    3⤵
    PID:5140
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8016 /prefetch:1
    3⤵
    PID:5820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
    3⤵
    PID:6056
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8388 /prefetch:1
    3⤵
    PID:1036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8296 /prefetch:1
    3⤵
    PID:5516
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7576 /prefetch:1
    3⤵
    PID:5496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9388 /prefetch:1
    3⤵
    PID:4116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9104 /prefetch:1
    3⤵
    PID:2752
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9812 /prefetch:1
    3⤵
    PID:5740
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10212 /prefetch:1
    3⤵
    PID:5800
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2280 /prefetch:1
    3⤵
    PID:2040
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9376 /prefetch:1
    3⤵
    PID:6100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10236 /prefetch:1
    3⤵
    PID:4424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10760 /prefetch:1
    3⤵
    PID:4124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11148 /prefetch:1
    3⤵
    PID:988
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11292 /prefetch:1
    3⤵
    PID:5972
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11424 /prefetch:1
    3⤵
    PID:5656
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9288 /prefetch:1
    3⤵
    PID:4024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11708 /prefetch:1
    3⤵
    PID:1292
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1280 /prefetch:1
    3⤵
    PID:4568
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=13124 /prefetch:2
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:5772
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13188 /prefetch:1
    3⤵
    PID:2352
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=13308 /prefetch:1
    3⤵
    PID:5956
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12636 /prefetch:1
    3⤵
    PID:1092
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8952 /prefetch:1
    3⤵
    PID:60
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11908 /prefetch:1
    3⤵
    PID:5908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12852 /prefetch:1
    3⤵
    PID:4452
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2168,12339343057566723175,1924043472605541825,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1836 /prefetch:1
    3⤵
    PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=2
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=16
  2⤵
  PID:4960
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=9
  2⤵
  PID:5672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x104,0x108,0x10c,0xe0,0x110,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=6
  2⤵
  PID:5044
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=7
  2⤵
  PID:6116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=18
  2⤵
  PID:5376
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=15
  2⤵
  PID:5468
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:5540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=14
  2⤵
  PID:2360
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=6
  2⤵
  PID:4948
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=1
  2⤵
  PID:3036
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:2804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=12
  2⤵
  PID:2120
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=5
  2⤵
  PID:496
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=3
  2⤵
  PID:4964
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.oneptp.com/ax/?uid=507801&ad=12
  2⤵
  PID:5424
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
    3⤵
    PID:2984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4016

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f08246f8,0x7ff8f0824708,0x7ff8f0824718
1⤵
PID:4628

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
78c7656527762ed2977adf983a6f4766

SHA1
21a66d2eefcb059371f4972694057e4b1f827ce6

SHA256
e1000099751602ae1adcec6f1c74e1d65f472936817b45239dfed4b043984296

SHA512
0a8e58ae95163b3cdf8e81b5085887761e73cb7c836a1a6a972e837fb3df69b2ac70cfd6311d06d40656344ec35eb48e512f007561480f0345486ac2b329be0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
099b4ba2787e99b696fc61528100f83f

SHA1
06e1f8b7391e1d548e49a1022f6ce6e7aa61f292

SHA256
cdb1db488e260ed750edfe1c145850b57ee8ab819d75237a167e673116a33ee8

SHA512
4309375e10785564ceb03e0127ced414e366a5b833f16a60d796471d871b479e4c044db5268902d9dfd14715ca577cb26042bab8f7b0f31fe8abf33947feb9d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
938a7a4501e319b08185177c91bcf196

SHA1
16f7aeee21daa684d5a9846941818c7cc98e8d94

SHA256
4e7a9688b4f8b20680b992dacebb220364c067e7649d55ad704f740619e69d12

SHA512
9a11fab9d89797b45af48c53fc240e804836964f485008b9fc36c2a53f8688648b0b6d323c2eae379d2587a95970186e13fc0b54296ffc71641f5af6ae1197c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
20KB

MD5
513bea0e8a24c23d68c35f6cf2faa91f

SHA1
aa01564855b2fe2645668fe7a8f9e7d5c73c9b48

SHA256
59cb5779b22ba613167c29abededfbc664f4b5779131b478386b9f2f928ded9b

SHA512
32dfa5490cd9b8eb72379161628bf52424c4f5db53ffbaab8d3cf8428eb2e7b683b3dd77e9e6e3dea28f43fd2c2bf479e7045bbd41ec5281c998cefd66581ed8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
32KB

MD5
e3e8744c4b5bc9fc1186a1f363e8820e

SHA1
93f930530cf27dfe93948a29aa8383e6c72d33aa

SHA256
4dfe9a7d04995413b681d8ae1c809185ece809087a98174f83e1d211c1e00f60

SHA512
97b9285cd0830c36affdb3d4d48c0ebc78e751353e0391df92f74e6b1bbb1aeafcc8bf8b144037eca644965345a6074b81cd823792ef3824ee8509a15df1d69d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
32KB

MD5
f92a7430ac0bec3f7d5492aa13dc2730

SHA1
09362893d7d7cc94343475a9e1164659bf9caf89

SHA256
f815b38c84af92aef19835e77fa1a26f0d1abdbe2fc54c53ab1123f37efa4d29

SHA512
f688a00c2255828b217a4e39e607d0653bd8b3bd037c4cf6d031ab380b5f2785a01977807ca750e891d1367c24ab10215fae396230011829a3636aafa0d587f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
20KB

MD5
1c043aad2c673af6f2ba1d58d37e82e5

SHA1
ac924d658f41b536ed6d9c8a78d4d48e884c99c9

SHA256
41d891a8c618578339afbb674afbcc9c8f3bbdcaa8d7a5e66a3589f18f69bf5a

SHA512
98b1dd08117141cb38c15aef23319b174e606c4c1b0ae0cc1a8e080ecf1bc6e855b1303c68085ed4ccbd16259ab685aa904eb353e599158e48d2c49f6febe27f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
19KB

MD5
a0d5c307a8a46b870c4df2671788f678

SHA1
0be73fc365979fa2890d745178fbcd9c4c00323a

SHA256
0012b45208f4166b7597419f23660968f2b3710fc87dfe14fb6ccb7c04b16877

SHA512
47631d92f053d0a3ff2b593ffaf3a1533e721b78aa1137536d31390323c2b0c52d533e59e1a6b69133178983fff6bac6aadc2d95380a9e97327f4cf17357273f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
23KB

MD5
757f6296a0d70655bb0cce723a2cb3bd

SHA1
026a36ccf8109b9f88c8dc49cef35b558f77c9d0

SHA256
fdcaad79b3e25865fd007ae7679cba8495d916ebaab9158c590a95b217a223d1

SHA512
159bd8270cb4b11dacba21cf6c2e4ee7390b7c82a6b3b38a3ce55e274394a6b8ce8a53cde3b84dda56ae67bf6cfa397a4e90b58d8dbd25bc5993fb8dcc910a14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

Filesize
23KB

MD5
6d2ab3316f17ce696d7bd07c3f29eb45

SHA1
6d7a85f1fd801039de823f229e9e2636e9597142

SHA256
3db11fe5a2eebc8f714416064e225a7c0c22a7942d45cd9704370edc2cb7aad3

SHA512
ff42e9909c8bc49cdbf29a708197d56d165a8c93a08195a34b8e63a31f0c45606b81f02230cfb8429eef3ed86548550bf001623ed56cdcfbf9779294474576ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

Filesize
23KB

MD5
550e1636fe9c7d886e00d1357d530b1b

SHA1
d1178c734080a2b2aeed1d01c867be7e06cb25ab

SHA256
64597f5dfffb8bbf91d1edaa7bb517495b25436a0b38f22461218f02d32b5f1e

SHA512
a2014db3db1eb64d7208afad272d3a9d36ff381d69d0df6c4b1acde3d08fe097fc9039dc866ec1f3bdfa7b6fff3b5f5ca72c79322a61dd4caae2518313d1915f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

Filesize
19KB

MD5
8ca5657a1f68bfc485fc621c39a7cf02

SHA1
6b402768a8c580271cc47325244e9bc7eeb871dc

SHA256
fbb9c1b8b6aca7390de0749e58854ca82aaeec9a50738e9c6f30f3f267954dd0

SHA512
9b1920233b011195e274a7896ff9ed1102ab01ab846544758df96b0a7833a195922246893a81e3314a68cd358237ed41fd1abe127f4176490ffd78731112d993

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000030

Filesize
23KB

MD5
c5f716764c7e16b1e4f959629dfd25f5

SHA1
fee6804850ab79b05eaaa8de75bf2d89e664b3fa

SHA256
521b02ccda64359a915032c6c376d82d71ff530d5b7ccb8668e506c995142d35

SHA512
21632b4f1d1ddfb0afaac154b7d2b2b3e9691b3b9f5a8c50ea82ebab35c0248037a120e3681ccceaa65e1a472394d5cb72c1e4aa72bc3e94060139ebecc03692

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

Filesize
23KB

MD5
217427cc04c0bb2e9fc29bf0624a859e

SHA1
ca316c46ff7eca21472ce97505e6d997b580d23b

SHA256
a7f34ce61e62287a3ec8bea204af5f17e1d35b0574b5562503eea4b750305012

SHA512
c4bfaaffeba42b8654de64b8f5b82ea9d4684cb056a3733261873e758a60419562db7ec45a0863c29af75a8eb57d635a3549137a780e0b889308fd6104513687

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\17e21ee6f6735365_0

Filesize
101KB

MD5
7f1b14eeaf8adee07e5406b57910b5c5

SHA1
816efb9f46831afa387633947f9ebb749c36ee01

SHA256
c1deaf5c07e9009893f4fb211edfb83c942315c91ef1e61890055f77291701a5

SHA512
db43d05e0c2fc80c0b7dede1b87d3f8389f4b609eed2e7e3e12531b43f9871af0cdc4a5925219c2d22948d42c568783728610d133ce8470f379c6d312019f66c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ccdc5f46393d2e0_0

Filesize
46KB

MD5
76c766afa859b8f23d7908cf4f6f2d3a

SHA1
1fb1f7d7aef44dfd358a751427992a8f512d31c5

SHA256
95455d8b9966025b245501b24612ab17731fd6ee0824762dfe2d32446ec6c686

SHA512
dc015decadbe7681065b9c775d5eab524bb18648192e71e0979f332f9c262d1eb9cf10920363aecef20688f71454b140bbb6d55a4f406cdbd8b693f1d9e64859

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ccdc5f46393d2e0_0

Filesize
46KB

MD5
81c658f6be0aa99a4f65687cfc7e3b3e

SHA1
5859fcc0d691c1a7ac746c82062dfed6c9b8454f

SHA256
ff21912285471667286c1976a93f1beb86fab99f05a2440fb925a0f6af62e7cb

SHA512
2256cc4d87ea924a0383c6dbef76012250c9d7a3a045793736679e5254fe22657d700bbbf4822f4cc48ef69b46bb1c26d70ff5e5486330ecc1b8a2740c7f1eab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ccdc5f46393d2e0_0

Filesize
46KB

MD5
3b959d4cdc1e40ce5935999a4663d382

SHA1
81852a243798c5520e8572396b5c1cb732a3ed4c

SHA256
b8541ec66fe4a7b7b7a2aa8fbdad36ccb411c37bd78c9886f41225e3bbdd7f93

SHA512
0e0dab85fa81db04ed367054df2f5170d50005b8757188b693f6c688c1e97875fc4cf6e92b5dd853253f3a10da344b34178c7f89735ccb76fb78b83f8d3d635a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ccdc5f46393d2e0_0

Filesize
46KB

MD5
0e3f5aef03ba3eea30ae92e376c169e4

SHA1
42d684a917fc7fdf31dbcbb865dc95984237154c

SHA256
73b107ad38812f25ca87873221405cd41fe32a0c9f381b9878d77284d259874d

SHA512
8da495f961ef69a52cedaf8b0b015e26be40205ba5a6ebcd9987ab33bc7516cc09705c74bb0931fa981a068ff8e5c8eb3d8bcc509cf717b99f5b693fd59d649f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ccdc5f46393d2e0_0

Filesize
46KB

MD5
d02782564278c269c055b52d618a84c8

SHA1
b48f11efac32e42e5539ae1fdcb3c9e7fd7c5626

SHA256
beb8f4bf510aa94e183907c490ee6f8a4c941b03bf9082432f7583d14d8cf594

SHA512
ae7e97aeae66ff61921841ca3c49c9cfbd2489913579c5cd84fadad0fdc943600e4f516c2926632d0c8a770d1eac7ee76a2c4cc771e7a277c15a5f65c85f03e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3ccdc5f46393d2e0_0

Filesize
46KB

MD5
6fb468ebebda1bfc89a1264d7d05ebf2

SHA1
1dde836c59dfe6b2bca3a950d188c65f2e31b496

SHA256
7a5d62fef183c47c8fa6fb8c609d259bda7490ca677934b1a28d8f2f85dba426

SHA512
adddc809b8dbc773bac50c9c0dc89febc71eec14163461304f596060d12ec46813c2644b5474aa64f4ee2a9aeee1c1047aca6379a1e3edc878e78f6fc3a2b8c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4b79a7c5d9f650ec_0

Filesize
2KB

MD5
f5f8294e2374647588d6e3a98f53e006

SHA1
5836af3881262abc8cad2fc3418929b8d547dc60

SHA256
96a52cd126f08d7e0bd7fa898a3540c294e322a6054d0886a4f0d66e2c510677

SHA512
8a6dc65c50a44cbd005488dc11093d809309e713c989ae8ada23e13ed37f3f1d635079d437ec766bfbd47a12482c303e74805a37b8c0ccffb718c62667e6c143

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4fa8fa5e5353f771_0

Filesize
6KB

MD5
2b41efb6d2e06f4ad8eb88a4b625217f

SHA1
46e9459b7e19f8d1207a52404f3f0e8cf1cb251d

SHA256
c79d38d22c1b7946ae4516c2ac7632ed79e4099fd663cf6a13d4c036bf4ffff0

SHA512
c48a68a48521f7d015018b38b23e256fc81542b4044a21d892c11046155f5ce5b26d0f7699cedf931a2eb2a79f267ebc6372724ef0638450f0e115bc37dd37eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5745ec9b26c8b04c_0

Filesize
25KB

MD5
ad70bdb85cca2404f912819a9f1ff561

SHA1
fdb318adaaa2c452db5e2bdaa1b4412b1436aacd

SHA256
19377fb45c80b68f8ae26bc0cacec642bf3e98f301c503cfa3b9ad2ebd34d8f6

SHA512
0b30ea11c8b7a5c895a4710b18a01417428bdfe905083f7f251f98b20101432144f3cd0ebf081bd8c53b089b0edfdfccd08b3ed7d00225012279fc72ab37d0ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6c8efc368b675362_0

Filesize
32KB

MD5
e714ca612c65753223bc488a5c224ad0

SHA1
c96f4b68ea9db360ec183f36de0f0a0886b8503c

SHA256
9def0ae4d85ef4b69e25dd546bd8f099d7b803582747e6dd589307c64c19682a

SHA512
9c395f54dc1f8ca88d9ff3d25b0f13eb256a62d5b30fa056bf39322daed6bca049b39042ccc807f062f687430669d47552883af598b4f38e7138856406c73f77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\86391acb463c2636_0

Filesize
3KB

MD5
a592f2216a498fa635dbcf40f7b35e3b

SHA1
10dc40808485b6181848190475595990b71b3907

SHA256
36ab23c79a752fcdeef7118c7940db0af834a393910ed0239f550823c44fb627

SHA512
6229883e2fd61ca1bc7edc3ba4e6914e0e786640b66c639b1bc3fe58715fbf7cf4740461b9b13b64ab3e2ee76c29c949be5ad523da24b1703bc979b24a9e780c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\92a9ae53f688a208_0

Filesize
248B

MD5
3e3618fcc7635620a81010309e1d2640

SHA1
8cc7677b5729d8293d01ab2db23589e29e9afb95

SHA256
7e23eef6cf943faf84f7994ca2ba68561bc8786b4a903e589dad88e99503987e

SHA512
0c221899b64fcec7e1ef68c72c74b47d16954266f45ec6cdc41d5ebcb8fd0c497a8187c334c03cf810a802bab5068aa645c2442971369a331dd5c61e4b1d6f1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9e8859c6bfc40a94_0

Filesize
2KB

MD5
c7b8471d06e875665bb696b41a24abd0

SHA1
a546ad061c471e73c73b0394ff202bd005e34a38

SHA256
4364a3997171c2232351ec8767dbcefa83876685477976006db1ec115fa0a6ad

SHA512
ad5ef0c53caa077361e7f26172d817bc6bb9789710025ee531180c9bd462df22dbb87206c1f3fe4355a855a119ba5a3073c70a1bfa898d7a24fe1c30d523195b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b542836f476c44c0_0

Filesize
248B

MD5
32352012a946259e745093fe8c12671b

SHA1
8168383b23ab91aed8665544a9eefeefc7fbe8ec

SHA256
8a3bc281c8e54f14861d966869baf8b6ca462b5d4c524334faf6f95b49e961a1

SHA512
7b331934d29023bf4201ef29e0b5da3488a373cfa5980d671bb42d26816d3284fc19e929559c6d0d3f4b9545213ab4083f31adca12188e94c0576d9e6867d854

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b710b75c4b4806ed_0

Filesize
786B

MD5
09fe648f2f71155d26118afc07db871c

SHA1
84e2a1333759b856409ae03e4fca24943a86237e

SHA256
8eaf9815a0fdff2be03edf39142de20d36910247a62b0d99902ebc8f30c132b6

SHA512
6b16bdc1c0dbfe538d5129defe77b75b5d6056678b36bcb6e5587ae82d7568b0d4cd35729bc78d60b4ca17d420afcec06b379d4bfdc2139c9ab9bde409e79ca2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c64ab2bd444ff32d_0

Filesize
52KB

MD5
42235fde61209358724937a0eb16df02

SHA1
b79a17f2b5c12359a59dcf72f6e4887c14d5505b

SHA256
76c74fb691a14bb8b8f9d6732b44dd2b762a7b3c28d82eb3032a8800063c2e93

SHA512
fa8344a29426e2a9df83449fe6c1e4be445b0047b66e4f6a913f176a668c9f317587f7745fd2ff3e4907a875d502bdba4eebb4605be79db1deac48211fd3a83d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dec6c535b7061e31_0

Filesize
105KB

MD5
9bf67eb3d744c6442cf83ee673936f40

SHA1
d8d82dd3d79f5a89bc87cfb9c05c0a16028e7378

SHA256
6fb60c11be644a71d4e2a1d339df28b6eccc723d4ad7666aafef76a1dd0e839d

SHA512
41fa26d2afecfe11208e455fe97d6be3fbc7e17b8fe85e4ba11f7b8a0b6c0739a9283aacc8e71c391b686ba5db55eeabb30f22f40388ddff86dd5ecd5ce76fba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
a13d63460e2ff41dfccfe0c2c16ab315

SHA1
82520de21815c4963bd8c113a46aea715d8d0a55

SHA256
945777869bfec87e1024997921a5e5f421d7c8e3d601e01d59d83f0b6c811802

SHA512
033272cad600d30edf79cc859c58b57ffe0e45d20107c03d2a9221f71fa6878bd262731431887ce33c8799c3b6ebccf651dc56a202d5a077b9688000214cff41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
bc01736cb583612d86836cc3a5da44f7

SHA1
0eb16bd814d6535d48427a5e5257c995f0a43c96

SHA256
c1e7492e33fd5d197c1531af6324e545312f57902aa09d2966cadb054f74965b

SHA512
e36a9b0a0dbf8fe2e676fd56f50b68049bf0fac2283c472f7e68f70b7efacdca0f95535ae0c696dc7bceeae4ed985a2866b443f0a683a6329d55f38664f625d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
c5d3edd51063285798a9abaf8bee866a

SHA1
ded0daf91e1c70d08d2a844a1fa8e3ed06745d7c

SHA256
681408d602eaae74ffb73131048e58ba229f11b20632f6fd97b8fe651525efea

SHA512
c76b3a640cf8d84f00b03dbdc0702740360096787960ba30ea48dd9903de0141694b39bd31fe8ea5881fa61bedaf7eb3700d93910945e9abb6a4a6dc00ce2741

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7ec0add8be0a15b51cc846e35752ce3f

SHA1
c8f48940c7288e12ad0f3327714dc0710be56e35

SHA256
88cb12619a55c09f39dce2f1643d9f0559a00bfdde703588018056f36034833b

SHA512
691a4e0ca09df21d2d23f5b4f95f99f3c2116cd7156afd7301f7a1b72480cf7c4c9c56b3f763af77dbdd897fd7b6397171b798f404df57322be27481edaa99ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0136966bfda5f2c65bb266cdf4bca94b

SHA1
68fe3292b01e2e0d8d351581e7615f44e0c1a465

SHA256
f6f6efd9edf88bbc297ed07dcecbc8e6c56d576a1f157dae8b19ca9b927261d4

SHA512
e463a909c1b80ffbb878b16725fbf687bda4347b55c7c1dbc0f3e8a3bf2646c24e08f5fdf872e72d1bd6a547a42036a7cf516d6993d9d81a951da5723e4b8778

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cd9e12c0f24b80472d8d750dff827858

SHA1
36fcb031b8bd96e59ff86417f6b1a67050ffbaf3

SHA256
2c535f7495630ca87b2ab69dbfbbefe1adf3abe9241a238be01c20129965093e

SHA512
bccf45ff7c33b401d0711b90dd37e8c1148054ae9909c4ce00df7c646edc45005a9850d352b309861a4a0f8f906aa3171d2caf9b6e99d64331cbf20a9af918b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
95e191ac251ca27ae4f14d40b2930e85

SHA1
ff43528fab108de924dd8a54c39f87f801b54d32

SHA256
eea127f9557f5c492841095a1b425277db36bd05a9aef917398925bdb73c96ec

SHA512
670708a368ee86995efe41b10e4f09b700efa3bd1c4e0cce6180aebc1b3008c309326adae6698343e4a453424efd9fc525dd9b1e05bca8ea719906b079ec6e4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
562b666523518836712e43bfae96eee1

SHA1
72f3fc20d157fef5bd4ecc762f1ab656d01fa235

SHA256
9f80e0ccf9176dc7e1c75cd78c31b47508c6466ea1cc6b49e6a71ed3abc35ebe

SHA512
51e7cb08b98b43c630ace8f2dc7b9bbfb39411d8cc2ae74c0938d2867bad3799728669a1d981ee3dd83b92ec431f8c2665684eebaa3db0ea04c24d17990d9d59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3a696261f8f6521756932281a4387a64

SHA1
d4e7f563b997adf10deef3b263425a103a1f03cb

SHA256
eabdff68626b54e27f58809e0805037d471f478f4199b53571a79823debcac08

SHA512
bb1691fa05aa73ecb66cac9ac43f3daa1dce8d0c901c22508edc902f01fdd066e7dee87e3c27d36b54ebe0599e629f1bc0c6827cc5230f03b1233d63449fe308

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3b2f67cce76519fa5f288174ac648d87

SHA1
4e5b2260f664ad4065f9d381b7bda385e6a8df05

SHA256
5e15d959462f1ee08767b68cc3f866cb6ced72b30793815f72612ad733df954f

SHA512
84a08f8ee476ad013637d6fe7bc61240d9cdbd905e56033f85575c820da3dff53fbc4921e8010b9e3af72dfee09fa0cdc904b897d7c8798d51f181637060495f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8afa9440f798a19b493d4f9420413f63

SHA1
c84f4fdfca3daab1568d0dad9d4893609a206bc4

SHA256
e60c03ba01b85a93cd8d987ea7ad60885162e91b20c03f43bc92b64f42f8a244

SHA512
1142be4d5673068279ff7e7e33ac80a3477b366ba4bfe8b646786e8922081f31fd3966b14d0088eb50b0a218163edc2a927190682d1aa82ad1391dced08cb889

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4fa4d148946d4256d3314e7f9d34a05b

SHA1
9cc6268235b757b3166aab89cd27cfe65950c4f2

SHA256
924ec003a413d43dafe1bc5356968a1c207a7ef768fa4c6c7eff5ec252430c9a

SHA512
05a33c8510fd9e9a939f8f6375b6e47487b032f65d16159ea10a27ca804517c949c9b0e5f258e179038597dbeac967dfee4a81de3645032bafcaa8f32f1d38a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
551f40bbb1fc61cae8add24a286de080

SHA1
f5bc25fd1f841ffb7a389b1921600f647e4810dc

SHA256
43e4d91068f5aafc898023d1bde569ce05b5d4cd67a8c42d674203c2f06c9c68

SHA512
1b57afa2822325ce93e72cf697e35fc6d8d9ad916e63cf032384650b950ba097f35aee8b8c65d084b764f422a9dc017bd32b5e6e1cd78feb40a2e39a51e30554

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
87821be1a41149104177659cd175b6fb

SHA1
bbaf93d8787028df57c1eecde42296d29a0bc6de

SHA256
0005a8038c170ab7716e710c22097c193c196abfe00cc7e21b12d2fc74d54663

SHA512
39ecb7ae343e5c5a86dd40753c949fe725939cf4008bfaafa0ac0d7767f354a6a716a038d46e6b92516c522a3114f5ed8167e40e05144d134e31381dbf08bbe0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
67f121408c5f398d89ad4b52480819b0

SHA1
3a630e7a253cac1f21c960b99e8d41dc75130b43

SHA256
411ac5abc0e5c8d515c957b12d18cc0894fdb16aaa876ce23e4ba00e7629b1dc

SHA512
aef905351e618841cb83d62472fb882fb008cc270e40199cfef167c37c9ad36a2f19a95b6120f575bddb2d990a8076050f4563a93ae0ee4a99e43b827f8a0006

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b7ef240c37626783707f4e45a209220b

SHA1
17afe8e92f313106983e7608e8e981f2fd6bc67a

SHA256
25ff2eab2a276657e625f8b3e1cf17e6ef2562dc2b2df46bd8e05d860c5b82e7

SHA512
ea5fe2e6d5f4f0049f32e48f219000a4456fa90d4dc779558c575cdeb8749d2b48e639eab3658bc06aecc314b26e8ac306ef85be8ab0a5bf6016c9e4416b98ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
02ee7addc9e8a2d07af55556ebf0ff5c

SHA1
020161bb64ecb7c6e6886ccc055908984dc651d8

SHA256
552d3ed359b7a52278ce621674d16428d8a7969f6cd5663df18e240cce66aadc

SHA512
567989543c3848a0c3276d96b96ca761f750e4b71fb74f36d809f590ffe16a72fd5ece251737a8b1ffe65f0051e211bd7ad19d2b8b0b7ca1b7ffc86dd2a52883

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
708B

MD5
f47e71711610737e7e8d718bb8df98f4

SHA1
dbfa3205bc7d843c38b40682741019fc23f1aebe

SHA256
600d82c8bb82cbb2e761eed763c474458f21a8b99a94b668a2b3a3eda9921fe6

SHA512
593e1a10890eaf062b07e68119dc35bf85dc457b2f5402c670b9404e5481f00696cb92cd920588bbd4157e4e628719340f416ec629f35dd99d6e81a4edd364be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
eed90c96772f1d086a60e5a8b27fb74d

SHA1
31f6c625ba441140ffad21cedaad0efc52877fab

SHA256
b0886afe84a21594c9a7955f118e596d635d6b0c6039cfa2c7f50eb02743a7cf

SHA512
0736b5d66952cad90f7e4f6d4e599c6adccbd479180c6813e71f2f9e6a467e46cf1b9c8100722aea630a8ac6483288940056ff47c51a55aa33c06931ab131f5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
093d6b7050bc2453d19ac1e64d6de070

SHA1
9278a91eb6cca3e5d011e3ef87c183aaadaf4948

SHA256
17bda6fd41353db0ce9ac9d112b5bfca6755cd4c91246d322120dcecf25daec8

SHA512
9daf83fdc325ed399b0f1331f070b39918ddc973a53b5ecb5da91f74206d834b1e2f737841286beae7f14a662b2844678ce7fbb14bad7d3246de1c44b51f2a7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
1cc3d92d552b853417ab8e387fc3adf2

SHA1
9192d505ac121302e6568dcadbf90fe1c5caf3df

SHA256
7860127c4e9f3b502a35760b47ced28522d35b1d3cc987b0b5e87b6d8645ab7d

SHA512
799b0f4b838f50d6c59763064f17f35a2d693bf6ec484e396ec7488cb21dac064a44bbbf24399bef50667d9de483a9bf1c893adbaf90bd132187089527626cf0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
83718a8129d3234aa74bb45ee2acfca1

SHA1
5a8ee3608516814f05e7c95cd54d5b05d3ee0070

SHA256
81a558ed425401a9ed3762c2914a055717ac67b11f2f39ad61a46bd27533e2a0

SHA512
fb0eea038cf45dcbdfe4d1f3289ab3b77aa54f30caf4e2a59e1fb8eb0b34468ec16d85e45cf68eb7abab2239748a2a871deac7bbfbfedc1d112db14286358d1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
1ebb3f9c0fcc7e86e39d2c89b9540300

SHA1
492986129dfaec55e1dabfa2227c041b2b01f282

SHA256
16f0367ff8ffaf12ed3bdbf64d2ba28eb1bdc4d6ce98ae684626bc59eb0e1f4e

SHA512
4a9a64b75c2d67beb07ab1f4b8e0170e2fe9c4bd53b65d2c48281424c4b8e1d987880d9cf0cf41ec181041af7ac192134e616bc8451dfb4f406f4418ef176cae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
8386e11a719ec823f7011a37c54ff14e

SHA1
73cc4cd4448bf3095b1e9799736d9a54bac949e5

SHA256
a2dcf42046f79887e748e21ac17b783bb83ee919fbbf83b303e27603c1c76c84

SHA512
ca323d711fa80fa58c8fd5fafbe5cd5e203fdb3d74af95c9826c9fac7cbe4f42aa85cf7e50b814576bbb1379d7bbb9a201e0f6399763a765463b20630ca74cfa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
d02c4c529d298e6283207de5ace9b851

SHA1
9f4c030337351a85b6e6f4801e5567a277f5288e

SHA256
ab88b1ed19b44708154539adab81d5fd272008433c534c449cb119288b2f3157

SHA512
f1c2a791627035f1b7806685830cb5a5f3f0755bc1dd08590aa9acc5db30d7662202603ff83d02596048e9e96718af0ed0f7ed5978716221ffec026d715bbcc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
826d9516d103172e0712a2ffb2359a25

SHA1
326d54028a0585cb9ad600354c023f046d0f75f4

SHA256
f32c0ae370514d7abcd6567f581b4d7baffcb819ebeb0c49411911e6407c3266

SHA512
788db35e317fc541b14273e47b15091063f3e42b66584fbdf25f2062b7581547c13f1daf4fee91492641eba2cd48baeb381da889786a83eb1cc90d6c1ae809f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
0708018d52a6d1133b5e1fb13894a368

SHA1
f0315283c871f8201d80a6432200198738972db9

SHA256
7607b558c0104a591e00b9c3f8ad34e04899bdfdfabb8d396420f3976b842b1e

SHA512
e5b2efd38c55f283fe9bcdf6bdb13981a08d59d504f227332314a4d1373d5cba8d7b4080ce289ab18a5100b01d968e0b7a529cfb9dc3e3c472aa2a575d02760a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
869B

MD5
3350e7b366d59ed0ea0fc6231d6b9e95

SHA1
e2cbc1194883fec554cc0452989dd3b322cd07a6

SHA256
90f6978d27b1bd0a2d7af042a51498bffbaf5b7a4e8074bd51da4051a389cb82

SHA512
10ae7ef9a43b9b26cddf728e3a968ffb8b65bbff674ad4c5bb6281790b48a4cd9b43755935a604f5cb4e8f11248e604e154e951e36dcd6efa36ee7e55b074954

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
875B

MD5
8881cba8669218db5462403b4b730c7f

SHA1
f7a46fbb14cccc06ab8f862677b062487e9ebd18

SHA256
39e07f95b9bbf9ffc65f31c362199e5d93dcfe6dc602819308f2fb01e2ad981b

SHA512
44b25d63bfa303ec300782816461075474b3b9f93e2e688be127f404953ea58a8db86c1f35ee917961c56ced43cbe28f9b6ca03a02771c13e8dd96361be30440

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe56cfd8.TMP

Filesize
540B

MD5
4beaf1071ef49599f3d277a500ed40d2

SHA1
12492625d15d5a63caf023e1573a7160c3e3981c

SHA256
0c72e20b0cccb094562185459a399e23b8948d5ae345629ee25d3b7c53121db1

SHA512
34b1fa762403298a2cf06f4401c418f3758e3a0e44ef48fe5d31178d953886ff3ecc4e891310ed4784e7b48db5a029d963ebe55f3eb36f9e93af282220f1b3ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
516830d6d9b2985fabbfd56c11c1f44f

SHA1
035a881ef6a38a294f51eb3972a5732c016975f2

SHA256
9bfa6d319cc4c56199cc8c00488da35eb728ca064a3f5ad57a26ee706082090f

SHA512
30492171f5a042dd1b7a37062785673f9e08b6f1aba5b73e22e105ccebf0f0f50b1f39d06184dce5142e7ffef298913fdb9be41b790dd89d29502224242d94e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a584d1ba48c7f3bab151bfb8985ec0c8

SHA1
f03dc2ac41ee3df18d2724abddd4d6dd3c255ddb

SHA256
9e0f63f5c6b78a72639770adead78de5facc9a6c1b9558c9221dd68033ea0d15

SHA512
ccd1d5d88a7676fb5f1675e52078be42f4655cf0daa56c26935a82a677f4c00a52edf5a90e13de1365ae9e3c86e7bb3a7ef2bb54f37960585658ce4073a71c9f

Download Submit
memory/3308-145-0x00007FF90D990000-0x00007FF90D991000-memory.dmp

Filesize
4KB

Download