hxxps://cutt[.]ly/rwqFCY0Z

Resubmissions

21-06-2023 02:12

230621-cm9a9age5v 10

21-06-2023 02:06

230621-cjle1sfc28 10

21-06-2023 02:03

230621-cg6ceage4s 10

Analysis

max time kernel
1792s
max time network
1795s
platform
windows10-2004_x64
resource
win10v2004-20230220-es
resource tags

arch:x64arch:x86image:win10v2004-20230220-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
21-06-2023 02:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://cutt.ly/rwqFCY0Z

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 2 IoCs

Processes:

setup.exe

description	ioc	process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\d3695aef-83a5-4dc9-b832-4ad9672d2d3b.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230621021330.pma	setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

Processes:

powershell.exemsedge.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2548970870-3691742953-3895070203-1000_Classes\Local Settings	powershell.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes:

powershell.exemsedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
4584	powershell.exe
4584	powershell.exe
4676	msedge.exe
4676	msedge.exe
3456	msedge.exe
3456	msedge.exe
4032	identity_helper.exe
4032	identity_helper.exe
6048	msedge.exe
6048	msedge.exe
6048	msedge.exe
6048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 57 IoCs

Processes:

msedge.exe

pid	process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

powershell.exeAUDIODG.EXE

description pid process

Token: SeDebugPrivilege 4584 powershell.exe
Token: 33 6084 AUDIODG.EXE
Token: SeIncBasePriorityPrivilege 6084 AUDIODG.EXE

description	pid	process
Token: SeDebugPrivilege	4584	powershell.exe
Token: 33	6084	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	6084	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 10 IoCs

Processes:

msedge.exe

pid	process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of SendNotifyMessage 8 IoCs

Processes:

msedge.exe

pid process

3456 msedge.exe
3456 msedge.exe
3456 msedge.exe
3456 msedge.exe
3456 msedge.exe
3456 msedge.exe
3456 msedge.exe
3456 msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 3456 wrote to memory of 1452	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1452	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 1904	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 4676	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 4676	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe
PID 3456 wrote to memory of 3304	3456	msedge.exe	msedge.exe

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell start shell:Appsfolder\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge https://cutt.ly/rwqFCY0Z
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4584

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-redirect=Windows.Launch https://cutt.ly/rwqFCY0Z
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3456

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff88cae46f8,0x7ff88cae4708,0x7ff88cae4718
2⤵
PID:1452

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
2⤵
PID:1904

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4676

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
2⤵
PID:3304

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1
2⤵
PID:5060

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3504 /prefetch:1
2⤵
PID:1784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
2⤵
PID:4596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4612 /prefetch:1
2⤵
PID:4992

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5952 /prefetch:8
2⤵
PID:3292

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
2⤵
- Drops file in Program Files directory
PID:4172

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff794a85460,0x7ff794a85470,0x7ff794a85480
3⤵
PID:1100

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --service-sandbox-type=none --mojo-platform-channel-handle=5952 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4032

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
2⤵
PID:3160

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
2⤵
PID:1392

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
2⤵
PID:1592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
2⤵
PID:5100

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --service-sandbox-type=collections --mojo-platform-channel-handle=4088 /prefetch:8
2⤵
PID:5608

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3792 /prefetch:1
2⤵
PID:5720

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
2⤵
PID:5800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
2⤵
PID:5900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
2⤵
PID:5980

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1
2⤵
PID:5276

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4056 /prefetch:1
2⤵
PID:2596

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
2⤵
PID:4860

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
2⤵
PID:2708

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6888 /prefetch:1
2⤵
PID:4808

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6988 /prefetch:1
2⤵
PID:2616

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6924 /prefetch:1
2⤵
PID:5232

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6732 /prefetch:1
2⤵
PID:5880

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
2⤵
PID:4412

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6996 /prefetch:1
2⤵
PID:1592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1
2⤵
PID:2004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
2⤵
PID:5764

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1736 /prefetch:1
2⤵
PID:5448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
2⤵
PID:2108

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
2⤵
PID:6080

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2624 /prefetch:1
2⤵
PID:1384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6824 /prefetch:1
2⤵
PID:5072

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7120 /prefetch:1
2⤵
PID:5944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1884 /prefetch:1
2⤵
PID:3088

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6524 /prefetch:1
2⤵
PID:5900

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6252 /prefetch:1
2⤵
PID:2360

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1736 /prefetch:1
2⤵
PID:5816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1
2⤵
PID:5384

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:1
2⤵
PID:6012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6768 /prefetch:1
2⤵
PID:5660

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --lang=es --service-sandbox-type=audio --mojo-platform-channel-handle=3156 /prefetch:8
2⤵
PID:4852

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6024 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:6048

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
2⤵
PID:5944

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
2⤵
PID:5428

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
2⤵
PID:464

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1
2⤵
PID:1784

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
2⤵
PID:4592

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
2⤵
PID:4256

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
2⤵
PID:4012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6836 /prefetch:1
2⤵
PID:4196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3560 /prefetch:1
2⤵
PID:2932

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2548 /prefetch:1
2⤵
PID:3472

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1172 /prefetch:1
2⤵
PID:1728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
2⤵
PID:3236

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1
2⤵
PID:5260

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6180 /prefetch:1
2⤵
PID:1440

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7224 /prefetch:1
2⤵
PID:4264

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
2⤵
PID:3168

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1
2⤵
PID:4976

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3052 /prefetch:1
2⤵
PID:732

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6856 /prefetch:1
2⤵
PID:3116

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,6100519849315572476,11481062776436481699,131072 --disable-gpu-compositing --lang=es --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1408 /prefetch:1
2⤵
PID:1592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4508

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3f8 0x254
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:6084

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae2c65ccf1085f2a624551421576a3ee

SHA1
f1dea6ccfbd7803cc4489b9260758b8ad053e08e

SHA256
49bfbbfbdb367d1c91863108c87b4f2f2cfffbbbb5e9c1256344bc7f52038c54

SHA512
3abbfbb4804c6b1d1a579e56a04057f5d9c52cfd48ecbae42d919398f70da2eacd5a35cb3c3d0a559ad3515fadb1734b0d47be48dce0fdd9fd11578948a6c7ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\36752a2c-f08c-40be-8500-fd994ea325ad.tmp

Filesize
8KB

MD5
8bf28ac89de0ae10ed184431754e0a87

SHA1
e326faa21b975722c2e6b1fccbb1461c34cf9f08

SHA256
2d35786a442ed92fe2aaf4712435f7b089520c75d4ef31dd1d0fc798bb6ade07

SHA512
301090d3ef3deba797dc70c31e4130dc34bd81f0f5243f5c9bf4fa1b86c04faa40b1cd4ff7e6ea4ffcad65905ebdd2898e491a0d7bd29cc0ccdf5b60ac5cbd6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\827aab34-8c5b-4f26-822a-8cbbdc2eac35.tmp

Filesize
1KB

MD5
4faffb878ebd0de64bf77f45d764096e

SHA1
18a07b506579610543c76f89889cdd18cfbdab91

SHA256
e6e7bad5c0f274ba7a5877a56543500dd679db374c80dab205c6ec122a154195

SHA512
cdd59b7dc0ad6bc55e5916eda016694f68baa3266f21ce6c6cc5b0e8dadeae2a708cf26f4aa76552bb7402a6eb2437564f8cb976c3c7be8c2b3e81d208cccb6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
42KB

MD5
db71bad488ce02a10e771f4b2cf02dd9

SHA1
30b4a65a24b9751624e7208f887eb7e98636102a

SHA256
76dde6f17f228be2b3f3059a821b498f45da079c09e660fd393dcab33c971afd

SHA512
346eae3cb21bc819bfed3a4a6f6ecd57fb7eb12fa23e8c8085bea6d1833caa2844bbe004e6b4c02d4076fed2fcdd87ac1471af9c8f1515521477142f510da9d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
327KB

MD5
56306ced42668f8aafd73e5adf792f3a

SHA1
d3af6cf94d1bb99c7467e57b29d6671fb3a0a134

SHA256
0e27a9e675c5df1e6f23b5d13d6191934ffaaa688a903a179a32e43119da86c3

SHA512
76dfa81318a060c25e22c7f9d563e2829d7db46e38b55a480506cc411dfe4350f53e2e73fe92ef5e95ede8128072b25eb23b65fb18a873415eb2cd31c2e26ebb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
71KB

MD5
8219a60814508b29be79681d604a5dfe

SHA1
0fbe29c501d88972f67f263540589b69a3694805

SHA256
e8367c15df62659f204cc6ef6cfb9437dc9e3e8fa96f50a896ef5061e7d14e0c

SHA512
6c4196bac834056cd359ed9530b09ba809f8c260bbb975067b441f2acf72644811c72407c8f961064810f03dc5370be1a3b63c48ad5acca6f20a8b9d2301c0d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
80KB

MD5
fecec0d6755a7bc657abb54062466767

SHA1
90a82772ac9e30ad0476b910d3970b75a9d80855

SHA256
e576877a9a20987eb2e3fc391ff2f1ea3bf4ac4c641672beae07b1d66849dc64

SHA512
70146f12f1e07e2d51c5dffbf4067b96f0e22453a78c774a98d81d629ecf1e246336e99d47d2284857f6ca35292889ca5ae80c471a819b12c2c4bc4098724904

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
82KB

MD5
1a12369660c65912ce8fd60ba9188dab

SHA1
87a1bb0bb5b5a90892abc5f9aff8a93788339621

SHA256
5618eba1acdde0db8c32c342696f5b1c92d3326c1a02d81b9235dbbe8e0194a0

SHA512
7dad872e74685a98b1d889488fa7ff0b7fe4a2d9eadb68b5f5c7b7cff5d1b9f5f2444ba5a869279351fbfc6ed27f5ece04c610f9f606830edaf98b20ce554df8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
37KB

MD5
5b0c0d429185ff30e04c93f67116d98f

SHA1
8eb3286fe16a5bee5a0164b131bc534fd131f250

SHA256
f1a0b957050b529afc0e94c436976326124ed8968183859c413986487623294d

SHA512
6295bcd662325172b15c476d26f23c8794c4f1454e0e8cfd43bca79b45aa03e1ae721ebdada1c52fe7699027fa97699156280ff259ce3cc476e322ccc0337902

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
65KB

MD5
3b71e74f871096c8c9049e1564cc7201

SHA1
822d00b03e0fd5b5c8da94d3212b8cd2984daf66

SHA256
e7f044d3cf926aa3aa47c3077d2224f32b901e2e6cc749b2cca78d4eeb6b67a3

SHA512
fbe25b2623270aedcfcaca26d144c9e8feffb5aa2cf079fa8d14c41a509b8f12b69fb533f5a5b9f5d9e61ab27418dd705df8ec45afa07931c6b2b5904fb5216c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
21KB

MD5
7d75a9eb3b38b5dd04b8a7ce4f1b87cc

SHA1
68f598c84936c9720c5ffd6685294f5c94000dff

SHA256
6c24799e77b963b00401713a1dbd9cba3a00249b9363e2c194d01b13b8cdb3d7

SHA512
cf0488c34a1af36b1bb854dea2decfc8394f47831b1670cab3eed8291b61188484cc8ab0a726a524ecdd20b71d291bcccbc2ce999fd91662aca63d2d22ed0d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
93KB

MD5
fecb8abf3425e959fef88f38ba1231d1

SHA1
e829c147000196c09129422139eb5bd4641231b6

SHA256
84e99b0fd91a08f8f2504a10163f3b28abae98df0372368957945084610d5017

SHA512
e0e692f93d2697a212936e7aefcdd469caa0c4c3a2fa7f62a715493a5ae9265f01e5508f5c5853a6ed8f90e654f58c8b78244e2643fa6a347000afe1ab9ce1cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06b0de4aacc06acd_0

Filesize
382KB

MD5
1b06d80be80f7eacb430836219408540

SHA1
5faf9aae9a2dfced8dc04c75b3dc2427bdf68da7

SHA256
9a19e984a20684c407ca5afea7e757b8bc02a59c7532d96207d6f01e5e67a77a

SHA512
95f766037eeb7d6b0af6fcec561094b4dfdf65871e409d43cd0d92a1d68e2db5833e3a87fe0233f68c83d082b068122346eeb6abd159fa01569ceb773b26e071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0792784c70822897_0

Filesize
2KB

MD5
be4d02da1194b6edff9361f0ccf43156

SHA1
8769a54d2b3958f6bcf9bdd10ce70dcab14646fb

SHA256
f79ff2293610d0035749e6efac3d8df836260f5934d3e768bbb89b5ed76eef7f

SHA512
dd6d273a1d1cdf2e0f31795278aa9fe5f7d910ec84f18651b6232a4653a797d444e7f51809791711974ee4a1a1d0a9ade381ce71c0843c473426ca9e809d6958

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1658876f20852d57_0

Filesize
9KB

MD5
272b20726cf28ae9eb160b5bf1d3234a

SHA1
b1c1b748ddc608025ae9c7783eadfc0fd8f4ff66

SHA256
b7ea11aa9bede3df0b12b7a062b55b79195e7296fbdc56721ff6016f34740032

SHA512
774796b5cc0e9506c6d266c8b1facb3599bd88745b6b01483e8eb823c6ddfd7ed3448bfcc594cb5189d973cab96759fcf06bf7357be55300a1ce051701472952

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\28af9ef4434f822d_0

Filesize
25KB

MD5
879b14570756584963ee416a4bc20a56

SHA1
bd6de2a56c49d7cfb42be3d1ac6d919f25d548e4

SHA256
d26bb6141ca565eeef7dc8fdbb58db6d3380e51994b8327f1c81d0f44efc4c08

SHA512
5dc400f2051b47097198ab0a4948f01f820192b4c2d540f63b174331ec8908ba90f91c6fe90231c68fb73d478f5767324de4c201a0c08e18390d5145097e8e3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2945559d9a8ff33b_0

Filesize
136KB

MD5
61c99940394ebd5032157de4a469b4b6

SHA1
0dd7932f24b79ea3686342596b75d92fc649e097

SHA256
a9fc8dd0b3afeb7dbba549e3d9a61be0ea5218dd181f16a04cc47224402e9aab

SHA512
63eecdca51d8886509feaf788be9ca4e73a525c592fa48356f145808c531ff4c5d629a6cd541a1e345f1242892ad0924f9df89e9f3fbdff9c5af738e4b395aa7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\40d9aeb36378ce25_0

Filesize
244KB

MD5
a4a77ce959f40d9a6f0f14d4ced65983

SHA1
154c123790024f90ab06f19d472994c82afff099

SHA256
baf2e8994ea607316eb7a488d8c3213dd5ac7ef164b5497f56c070ff6cd024c7

SHA512
3dcb6cb238575dc002e52da4f2df9bf35ab4b6eb538b9d6ebf009efe2448b85ded41fc28758b3a64fb06a5116b1d7002416eed9f70aae467efeedd410dca2f77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c8b618742e4e4fd_0

Filesize
4KB

MD5
c4c7ea20e5b894ab3964115b0afff289

SHA1
4969c3305be308a8a317421067c41321cf4d18ea

SHA256
1643b7dfd3731ed2b0209897e48a0e32980e7b800ca29aba5f61a4ad7b24ad32

SHA512
5884913c5a7674e4beb7b541971b9b58d30ab0db2cb7de979a50a8c43bec5f10a7b4a7f6562419ccf37e2698da74afc760cda7a5b5a8e8ac58d13ce5541f0895

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6f1c96e5f764533f_0

Filesize
1KB

MD5
f8a2d0cc2cd791b0ede79ebd2145d26e

SHA1
f2a65774a60454e8abd98b4a620fe4d923aa26f0

SHA256
69c63680d348c4f8a03001a963d2b8239e63b1841703fcf39c51f5a0e0514384

SHA512
e191dae0107db98a31f6da188c9a55f04892b3a7d163b9e2a2e5cbccdb91c359ce3e58a1d7c48919f8248c608cc4702946d41fc425cc0bfbbb7ede8e8cc3de4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\70dd522df7a0a6c5_0

Filesize
1.5MB

MD5
017a99a393e205706d8ca8fa5b85244f

SHA1
1ffa86efd4f8a01e261b4cd62ab83501feefa5fb

SHA256
d0132f2452a043b9b0322d38078ad61b609177cb6da95a700aef36d8c82d1576

SHA512
7e82cac63ef1cdccdb70a416e6cba138aad97bc3d9f8538b8aaa131049cab0451380c00a75539da54d4c88633481078ee11528fb38bc3ed0d8e44b6615465af8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\79c9a9f677f88871_0

Filesize
409B

MD5
d900ba4eea8403fde4985ab634ff63ec

SHA1
2e7d1e2f9043719f29a44814e60b8c60c479f855

SHA256
fca516a5d7b7cb84c1890c96ac29ee422d7c57d49ebc4f76612a8ad5c50256ea

SHA512
412202a08fd5bf3b208035a2357fbba8e9824d3294087954caae83b0d4898042ef3788738aa0e03ff935eb0fbbabc7d84fa5ca0a077427b8e24b2b87dbc6f181

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\875d69f125275e45_0

Filesize
386B

MD5
d0f598ba911de9b5b350a0649b6137dd

SHA1
b45fc0ac44dfa0835e9e5d4c14d9c67769d38682

SHA256
1a0106a92f64da2db70e7a205baeb87c04f2f7a989cc711dfbed049b963dfc7d

SHA512
9d1b848fe496e147cae43ccf75c1cf34c21bbd13b1a5bf7ffcfcb59aa2e4138258a10e5265e8f03feed86d6e51be70170c5c3e6e8ba0038fa9fa09ab2512db89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8b92f8fc544c9c0a_0

Filesize
249KB

MD5
5ac96a609f86abda613d3c76c19cd812

SHA1
69a21d76d7eb81e49736727ef8e01ed3e68bee82

SHA256
49773b7002afb07c96af99b0cd2b6b8c6e2ddeee39c1b1f43245c4047a90b032

SHA512
0f47175b4cd7da1b0e5de9676063cc398f94dd086f7a79145a1c6be364742dd3371df5c3d0158e61d9824a83160f5276163efbb7a2b0f57b1b73e7566aefe622

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9792a09a5608d2d6_0

Filesize
4KB

MD5
0aec97cc6f4f914c33fea8e15ae2e34e

SHA1
ab0ecc89bc96def70b3d7e88baa2c828552a7e4b

SHA256
e0ce2eda4c9f04951b3321c9e000ea03bd599f0af121034d658b1e9178cfc5e8

SHA512
a24d3c597a03b7731f08afcb002e0e92f49491a31aa9a3ecec68eb506376fdc3159b50f3c122423e60caa649c41fdf155e9b7f310351fd78062ab3852e9271b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c2e0ab792d10e346_0

Filesize
373KB

MD5
e257ba94157d9a219931eccdf6347b3e

SHA1
e0f6c07829f0d8480cfe93bc5eb0e81c2b1fdc60

SHA256
50e7c6c9f161f52a360b6f31af3bdd62ac8d275fb870e0f48420dda292092baa

SHA512
b256067458042c0ec2f1b259daf66008ebe092c75950a8a7b0027e29edadf4b97076fe676b2e6defaf9b605f84c28ffdcda4594fbfe0e99c2601a94e8c59315a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c46ff0d9b2db111e_0

Filesize
2KB

MD5
58b37bc1a4faf10a2d35dfeb55179b33

SHA1
ab90e9616223db480f3f47e512887ed6a77c331a

SHA256
238b29783255683de527db529ccfbec03626065b8bbf23d443b32ceb25655b27

SHA512
1efa16041cde83aab3629b0cf9656d977976b73008d068bb0ada638e25c020d0a19c69a98996288e458304609561d46666d94a275051bc7f0f090f24b708f4c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e87c4b9dfd2fa485_0

Filesize
424B

MD5
2f9d83d4b9559fd9190a1bee53664083

SHA1
2cba44494b209fb2cc518fea2fc6bb09eb2c1b04

SHA256
8c0cb5cd7bd61eebe3f05cad4c55702244cd8d9d7a1b2cc3bc71c14797ebd1aa

SHA512
c089d6c21db36f5930bc1b54b996a1beb012f537fa53035c62e99e4280ad4db9da96baff734948e40765229b3c286f25d6f2e083e17e474503ed4de7c9665db3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
1a7a8ec2ab0e4aed58fc98e9e4b5f413

SHA1
7f64f4c886bc4a6491aec7a138b44f9ecca75f96

SHA256
b55ca1295e75638fe716a06e7e6c6e7b0c4bca839b81096ab01a58bdde968c24

SHA512
982f92e8cb0794c7ca5b41f98a628d8e88c8555233d0c08352702df58fec937630189415989e573b7c80072780b5c7359b928d15a8ffe2701bfbdf8257f810e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
ef84b188200866c328667564c3f08f6d

SHA1
9218d7e4d9d76110f7471714f8e53ba55e8cd4d4

SHA256
f0963333f2494fe8d60f82bd3b0d01d1bde2db951087c64bf54fff1ee1a4c934

SHA512
b851e9033b07a5b4e17102ca5016c5f3c1437d53f2776c128e32ef95584e64209b5dd372f45bdecf0f115eb3c710a5878727a06748d389980440d741a4af89f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
672B

MD5
2e075d48ff3e28aba44083cf0284d21b

SHA1
01b9b65cb298b42d0cb309ac385589f5a6c97509

SHA256
7e9f4b11f4b15e10aeb01dfe5f8a3c14c779e0ae6fb7fa2cefba65ceb24262fd

SHA512
6ecbe63d71acce6771f64e4772813d8b17ed175b3efff1dad69056fe8ccef4acc6b30aa5e2bbbc2ba8c939cfd8c91133bbb87ce1f4042f5ad75eebcf535dc04f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
db2308f324264ca9290b4e7a676b59d5

SHA1
a2495a8346d73a3e39141908b3b4b5a272214fd6

SHA256
bfc873fcf08d6876316bf7bbaee352ad749707552cab5e922d62760c9ccf6c27

SHA512
cd3d63ccb76b8b0db62788f2eb6da833bb236892f32ee2bd7c0d7fc9be81bbe797cc62410a90d32bd60a31eea4c4f6105c23825fbc3391fb63f92841912d9966

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\JumpListIconsRecentClosed\54bb3021-a508-4743-83f0-6bfdaf05e2f7.tmp

Filesize
25KB

MD5
e0485c0d743883df435265f51f5934ef

SHA1
2be1dca331fcbce9e08f7c58abc23a49988590bf

SHA256
cc284f9755742791d39cfcaf4435a39c727fd8469bbaa647809f3b710cda3cd3

SHA512
b518d0774e6ce8cab200d741be0cda0cb3905fece843bd769e0b64c437a903e204b5dc0fc6544b425d86861969a58f7f2aa589eea8584ab60b056183c1b551ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
ca4b99a695dc73d527b15f668ffeda54

SHA1
cb48f738f097d760bb0c3d5bce43ccffd3a3f35f

SHA256
822f34815589c3664cfc9612ca7dfc578a1010a75c172995e86fdf3478f2511c

SHA512
ff2c422adb0e60a5b7519ccfa03588b124b65144748a7dfe900526084816b890f3966b9f028a7f5d9dc481b2d940f288d30acba82433c541059bdc5d6bfd9615

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b8eb8251f2dd527f9bb457dacae8dc66

SHA1
7f933515ae8c2f56de1f75ace52c432800c9eedb

SHA256
f16757b0abafa653bb493930cf98179a83b3d9013a5ed930ef28d3f236c8d213

SHA512
4bb809dfaae6b169cf42c24293a4dc20419ddb02456ae9c7a5f3c700530627397259592eb8054fafff751d87a1712caca6b79610cecdd346394449d83222716b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
99333536e56a01a8829e2db7bbbb28be

SHA1
0785cb9913830ddbc3f029ac5182453dd0a38019

SHA256
37b368d13e69af1feddf13245b88d4a819c1b450de76aea376fbae6b5c08ed9b

SHA512
93ed545875a22654f63c56398221df58edaaa649893f328d5dc5cea7261fe8767b89bd76a5c4cd2f958549a8dd08e14ac2c01261e7929a80b4f00b15a06efaf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
684d37261443a6c76d1a88c55d0e07bb

SHA1
7f3cdb83e0070202efa277d46fcd691d17101426

SHA256
2cedf24c28f2eb8a630952a78b90e173ec2751411d29321a9672e6e3ae4f3fcb

SHA512
d2ef594ab95ab8fea42aef0966a2626e12e41f6dc9c5b4d2cbf0bba95bfd48e34eadcec086e775ca9f7183e75c31b3cd2d8931232c497803e212814a786408dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
d0070940f0faf050978b34f37226b7f2

SHA1
36013d64fac2caa6c10d72ac04a8926d738651ae

SHA256
075676a740cbcc2e7d3590f4177cca34bfcbfcba17d9e35e1d7e630de04dff68

SHA512
bce6ddd102058bc696ab3efa4236fa624b5f5d7ae635771b9771856a0768fbe25922ce752a348f116d1c7d833eb4d23d7218bd3d336e187c368713f626551c72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
6363a75b4483ad0528729a0df17f2ae8

SHA1
4eb68aaec2a0c32c872084d212e65f1e5e57d482

SHA256
a8a0bc54cec30e64c02006d5c9c9b2c54ca62a5c28cd7027e373f1470248688b

SHA512
2541f7694c190bd83583eb837b1fda03dfdf4158e0877324cb733c5b8f89eea71ce57d653c617c5b80a8bc4bc554215315a501e8f3735b6b7ad1c69126b210d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
712a51612aeab9010f0a72f63e0d146f

SHA1
73fe719a22a4223d6715913910ed060ba3b75f36

SHA256
df61f82af3521c55e554584c340ce7ddff42f6db6572a95ee2bcb9939bb7b205

SHA512
97ab30ad88c74e91ffce3540db5548269ae3b1a282760a834673aa0050d8badc3bd2645dcce5d66e3b309fdae3b18669c4be2aad1e724f76858acb8545be3c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d8fe089128bd10a6cdbe545f36294efb

SHA1
8de647fa84f6c0b801f02331d38388c07141b3ba

SHA256
0e6e221ed72950cd813ae5ab1bc0d9192f83b872fa48739c62ac134a2935e165

SHA512
ebabdcb501bbad029e907a6f90d5f4c0afc9794624d85fc3f4b812ebf4f46313e21938a9103bd396f783208f4f6372d101b47216cc0ecd8cdde626ebd1fc59c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
bf122cbfd4555825284d117ca9b1c5fc

SHA1
c6c51d31610bfd4cb7ace1ba21e31b78eed61f98

SHA256
020d25af50df98233a7043cd2a7b62e27e801f80f04eb60c6aa67f68dabe7da1

SHA512
eb5eeda7e98950e453f9f8bb8104ce97b4d7efa7a29d932702951b698080c70e2ad70504ee2a2c9d93c1fa9724a2d2d25c96ebb3fa72be3a6435b6842801d105

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a07cee4faf4c501a869af368c416935e

SHA1
d233c97e96ff050b9e8c6dbb8eb671c6afc5cec0

SHA256
20244eba48e633dc6ac07f1801f999570e7f314347d430cccd2573fab7a61de7

SHA512
3eac6e9a73bbc18aac45d432ed759161a4a04dc7ee377c0a48ccef8bc427785ee99fe16815fbae069b6622a92e1634a99f7154297313b52e6d671331b9f0654a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ca7ef9ee384f14e0d967ac291af94062

SHA1
022575a39c3cb8b08c262fb505ebc11ab5c05c56

SHA256
c9f4fb8bfb3af63cdd35624821ae414a9ec0921bb2735273e2d9150838932263

SHA512
3160f295809c2a39e70a388b29db76fb35b9c6fda9b60bf11d71e91fd14243ea72ca5d79e574f168586f4e2de7f0b14313c9b9b22c306fc5e8f6008f1e1d3256

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f5124590e059fdaf1e3aa8325066c14e

SHA1
5204fab2cf854e109722f913cb71e73d0eda7ff2

SHA256
d8b18c495ee994c19382a26929afe7cca4a26e2ba79658808355cf3c892e9210

SHA512
a669ce5494c6ad31eefbf8cb1fa02cb83f96a730781b0caa48f71b753ceb522416600137bf132686515bc24302a2551ebe52be56db7d8829446f1c33131f8346

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
50114260e6062718c350c6681d3bc2a5

SHA1
6f474958a198f73a68a76b4bb67b16c1d43ed641

SHA256
e334062d93aff122296087e59f9d527fd70e83f66e236230de1fa42fbc1c8135

SHA512
4eebd3bfcb7fefd11010652d8dde9ff4c83e8b16778da4991f4b19c26edfe62dc8969e869c291e9339c4378c3ae742c3f1d69d6f7c0d092a2b95d439837cbeba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c353a6499329fb3225bdee5fd877772c

SHA1
8b3a21941404e2e235cf03d8e19e86228344c5dd

SHA256
c0167b8fb30d21387d459cd019a037e2dd809097cf15d5dacc2a255548e88910

SHA512
ab2acee6d1b4e993f3c31dd1041e991010e695ae75de27087a2f83f0083da2ce2e2a7553880a7623e6bbeb50330b8ad74204e34c01d7f19eda1e0ca586125b17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
82f0cc95ec9272c3c4c7fbf4f89f29ba

SHA1
6996334d75058763a33e73019ef54c47d5d6892d

SHA256
19195a9b24456c1eb8cf799e760c1dc06ed0012046f2721b513eceabde86517e

SHA512
38e0853481ee66e429b648c8b2d917e2a15bc86a11250268e2746a307e0f6728798682a32b230cb1b9c5981acc7977ae7abe523bccae6f150fc9e24e9ae120b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
cebf279154f883bd465c83ad04142f0b

SHA1
fc3b8f11e6c46a53722314c142b83ee6495e0665

SHA256
df9a71e866caf9462ac354e5113d3a9799bd7f0302c2363785cc1600f8be3d1b

SHA512
15cc3b5ccbf17d7ccb595c8de6a2182488b7a80bfcaa04b50e363929321f61ff3733276fb12f92cb8eaa3d242a06160c96797028c59b412f6929982cc0e5d1ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d2c96b998242ee3ea70e8efd6741963a

SHA1
088510a961cbbc6d115a7f3ae1c74754b134493d

SHA256
36eb278f5bb8b9d745591396217cd61f157781b64bd6ce0c638df61f746f1df1

SHA512
8318665d8187b3066fd36266191232bb36aa3c0c727cb2d50124bfa8cd6a0ee6a6426f8e2bbd0fe9e0cce0f5657f272913f6291e843470b682c2415954e523d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
738bc9d760ec290bb56233fe2b8afe39

SHA1
7a3c00b1e999ecf00e70d171b6e4c22fea8ad7bb

SHA256
8d3b87c6501af6c5c4e1fb79482d479b46047c63b0489edb932aa396482f6a6f

SHA512
f03e6ce4f1c28b65b3121d93768e4215e31bcc07715af52e17b084c95d2bdd0a361cdbbf09f402ed4fc6f82d73a21c9b20dfebade92c774f4dd74ec92f17b8d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
cfd585ce0db9a1484f8223dc2cfce2f8

SHA1
4e5e287160c05ecdff8acdfa0899faa5bad4de82

SHA256
0bcae3ddcadfadb917e4f910daefde07af8d2708b7795f3a1146102dcf6cf445

SHA512
b45dd6c3231a79155508d807d4b6f839d49e6120841c4f31147a83039515d3358822fa1fa4ae6f770b4369b96f221326c0b80dc2f0cd99d605440b12c93fb648

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
b3fbb8a02260d5e41407a7e1af3ee2f6

SHA1
9180c8b9593405936b0fe52272571b63829525d4

SHA256
8c1434a31409aa606a51bdae37e0853597cb408a2cf199f05e02705df3fc15de

SHA512
8a6ec40722054025a8969a80e795b026fc806a0710eb2f9e016feb68cc09a19333404a8a62910e9b0335729fd64e8e1b6250513ffc334dc8d669d96de62eb5d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
8b1bac3950c1e81051e8866ea0a0bdf6

SHA1
3c87d6bae195356e350b2893b6d97caef46b3016

SHA256
c4f86635da9ec4c27e39269ef8691cb9db926874df51e8d63b0093a966bc9bac

SHA512
2197d56459b0eb1c39987ec133f12bf71ea5fc5a3263b19e19ba912c2aff35468609d58f4e5bbe9f2ed18814600068d90a40a21cc2dfcf7c6ce80d77d8bd71f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
89d8419e348fbba36fcf7277b7d17bdb

SHA1
73065d39482ff8e54b25afef3945116b131c470d

SHA256
39df300d3664b9f389fa67fad609e631b9310a894a1b33b2f61ce0d61d809681

SHA512
b9d8720bdb7f74f898b5d3c8a71c7888568ecc253d0d2edfe20eeb406e8c70be75101db65135338afd829f9d5b0231317497bc17c176d5bdb5ec7626d2498d19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5816ee.TMP

Filesize
48B

MD5
88bddec6f5a3ad4a51199ce97ad6577c

SHA1
cf519118ca10c922d8852851e69d49ce38ad013f

SHA256
99c6327e2c03017b60f9d730fc136eec5666398fa11d979d21c28bfa2e3fb93e

SHA512
8052cded490e296561a85aa137716d93ada894cf31ad00f83bec0bdcd8ed06a22af0b62dbc5485e95cf9caf5c4b382c7891960aa18dceebbd96b8cdf23951183

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
564a2527247543dd37dd9cd351548a2d

SHA1
f334aee6b08a9189406b31037ebb359d19473a11

SHA256
b4497e8dc68ba98b2fee86b33eb41742c40b9c46a053c433856fbc6b34f3a32e

SHA512
7e2cf603936c873d0295eae5fdec08a04d6fbddf2c55e80778e5b34b814250b3b34304f614810480984acf1cba6e2662cc8e81f2e158f5a2728429b77d9a3c51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
377d1e2d12edd902ad880ad3cc78356d

SHA1
601789991f823300dff9bc092c0152cc1a76263e

SHA256
62091961c75edd05e67f29371a23a968e25fd1cd22adb6cd1ac4e882ffe26b6f

SHA512
69718e45a74d9bbe412894fe3345a3579998ddbf80c75b32b8fbb021095248421b5db79206dd09af7e7e1c8ea6ba085ac5f8c38f0ed3bc259706ca35e83f01a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
de95855dd1ab4fb16587bfa124fa7b42

SHA1
40d26ed34d31e1e37a2a7645047005c69cbf05d1

SHA256
1e6b97d83d37ff1ec1d931f24e6df0a06a085345db615fb9855790672e153930

SHA512
3f49d66acfb537d1e6ac5cc604d2bc32a7b92fe63ae044f95d3c71b17a5c524c79244225063fac189b676985f750f1fab643d15b7eaa120c76fc1f7e8b6f4fc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
4bb6b92ff494041024a92693142b6f01

SHA1
3fe3cf5c7ca9e438385e8716eb49f630b9777e2e

SHA256
c0487a81a6ec1777c19508d699f083b0c6ac4dc03fcd59de76dacd8b64620efc

SHA512
47bac20782a2da1b328e5845cb9e8efa31b0553a0f5928b70514fe60522c6bf9d308077f6be67e7c186c0a39f1042a57c15c96eb8a35eee42a786515d0f7a554

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
384e6a3910620cad424b7a0c5de10df1

SHA1
fcef30390ef2f59105be195874425d5e632fa01d

SHA256
76c80bf454a453d515987f08543cd93ff1058872078eb3fe3bb985d06da56082

SHA512
35a6f6f07dbdd13a48cd1c597260c8ed3521b0df58e58cfe0a2497eadc7e689d147b3c23b2c5b4018daf69c8dc174eb8b807b08ed88720bb41742fb9c0abed3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
871B

MD5
f25b3e02924582c8a6eb0d3b1cdbb958

SHA1
aa25962e40f369efcc65cd274f59cfc32a4e1221

SHA256
b41edb5dc10c8a2e079f552684db4565a15bd9094a7642971af6c8734481064e

SHA512
74bc1e9266d4b6b615fd5906be1b44ae5810cd465adb6827d76fb59a638a28bf07d90536ed96ec74df894676518b37f34e25b2170a4a9841f2edddaab676d2db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
cc384228731a972665b6ea427024a8b3

SHA1
7192462d68df35fb8cc7553222c99f36850c33e6

SHA256
22b4ce49a876a0787e7c9e67fe9e2184204eab500e066aeccce162af47ba2fc5

SHA512
be4bad2b7ab9205efc2ba570140caabe07d1a439d5c8fb5c642ddf94257c40e7b865425763fa8008975ada6ffd96cf2d15219a06a0f2cf3f882f98e542a0da0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
871B

MD5
8fc5dd0f37020c4529045c131fb5f037

SHA1
782eb3c21541186a93578a64b770bb4064aece73

SHA256
d5bdec629624e2976e6aaf0cf194a4ac1ae56ec249f9e7b776b330b568f4202b

SHA512
a1bc7223d41ec57016fa58e93b1323e10624e2a0f1c3d83e17254d56e0cf9bd25041d5ac0520b0ade7f06e455063a455fea2e591a43a8cc0361feb23084b16bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
871B

MD5
8a9937260b7c2abacbc8dd9ff8223b2d

SHA1
602ba51af2539f52a29f0c15be7bb74340c36fb8

SHA256
8d683d7bab5978c6f8a12d915f461606184ea0ec53340ced5db803ce038fe6df

SHA512
d2c8591d8e5d063674a568e066eb0a2c8dff4eef7ea3fcd91bc2004bc7da489a70b7d2f4ab327af81ce9887aad89f83785347348ad8a8fb64fe8eec6c98cfb9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c835f70d4c606201b332b541de8a3bab

SHA1
139bb0c500838573d60c8106580d6041c0554e6e

SHA256
4086c030f0c308ae788b84c62f0e84604ab68c1c56495a772b898addd66af329

SHA512
d7554a01ef9581151651649774eb0faf8b428225b1921127c91994a3a7402d060d524d6d1df04813ea1cbadbef1bd2cb1c340907e3e97f584a050fd2710ec846

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a29c13ca88e041d14036691793563cf4

SHA1
ac5b5c55cb71f035bd311817c16717e2787ed60c

SHA256
3e470f4ef60f0db4c5291ddb7168d04a7007c4f0d4c48cea8fcc241c700d7acb

SHA512
e4d0093679218d5e4e424279e6089e3f8ca757dd7f89a73164fe0de247a38b1bf3e7629b7312ff58aaa402fca1ed1f94127d1f4db2fcb3d02c3d4da854e72e9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d3bafe0a37741d15ebf8ae26a8ca61f1

SHA1
d7b3da1f410a48f9bb04c3e2f8e9abb7cff8ab3b

SHA256
2a50c60cb4094046a00622a827b3ea19763c0fa666484c34e07bff3ca9148260

SHA512
a65af5ede82b379798de83f6a1ba3239d2afb6fdc6e0d0d4f7fab18dfb3919f24822c24a0a893dc04ada9df8c425c8c4a3d1cccd365adece5b013a7303a5a671

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe56f84f.TMP

Filesize
537B

MD5
1b2d07bc8a1cf8bb3af1db67cfd1e436

SHA1
fdf393f120f67adfc2ee448c89c508cd78c97ddf

SHA256
e3d3ff7c6588bde834a79b2617aec7f31f15e0c6072c0a00e1eb8c3d7d325891

SHA512
33891b038f3a54e5c9839192ca09ed3999cced3c00288d2c8ba9a5edc32a4d24eab91176507e9ffe8f6379b9df0358336e5e4b73480a9ab9aaee7c94795fc2e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
dd9c843ce0c733dc957b2b2f30851595

SHA1
101dbca7659aa5449edc5b8269005534e3219ac9

SHA256
a012b0ba7717bfc29bd077e334e122a55e2a6cc3516d3f45ca9f14f6520178a3

SHA512
a891e2a3e67ffe7cc113f686f5a39ac855962c0f52569101f7d35cb4ae9d13e93c3240970dd6aa7d13750cc50d5374dcfd34a14ef6fe6cd41d21ea05897ca317

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
6d8ee102d9232544481bb9480bcf6e62

SHA1
1e4be9c8bcb2440a2ef6699d6141740570dcdb3e

SHA256
069525c47eb47cf9f684d805fdc84318050e33f98a0adf55e0e2002ea927131f

SHA512
754f8115e6d58d8d6eabd4dcdd8e98e05b35262dc41ff433dd0dd62d513f3f247b2105bb0ce6dbecc3b586ea7da632517a44630c2f5e73eeb4cf31b7d33a7d91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
a9b5b3686669c41e86509c5144490276

SHA1
a7201515b771453f081ec335b2bfcdd95b328924

SHA256
9d82f823556e5547cb276dc20e4a7051eee7afd85841677cd525fd5348dcd3ae

SHA512
20394311f54e5b24584933a539f2c6c47b9ec9e77dfe047949211f7556b925bf0577474c7193bd7ce2272aaeb114861a18f3937e7629953834e70cfb838b12b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
fc039a78f376bdb08e98f24e03996351

SHA1
5f70cb749072db17f842f974245260c8d3c63fd2

SHA256
3e79ba4f9decef056cb08781053a8bd401964acd10a36ff274e385acb8f1b16a

SHA512
5cec74a19f45be465de58f4d339ef1b11b05693b94c66255fbd252a65dc3f5faeb8706bdd777f40c8130a1e868d5c1e8be52d69e239dafbf5f45b4f1f7308a81

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_5a2p1b0u.wq3.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
c0d607376da9de28491f2a621ca18e74

SHA1
becdc8310b717e50638a4451d2f0aa5b862868f5

SHA256
d88370b0278febc7952481b44bdd82f0ab2b6504459c1693828d7287e39bb6e4

SHA512
29ffeb52dba6b946ca2fd23c190417ba43b189260b867119cc90bc959f95aa648f7cea1650a849851b73697a32047a898aa700e28715c2b7399b1c844c847a9d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
3KB

MD5
833f98fbf51bf201916f54ed7f5f610a

SHA1
32426bc3232b2a0334a299ff9a18b564c8ff7c94

SHA256
32b5098476d4d8374bbb214056db326bee751b55ff97a2d1324614b9b9f4e4b7

SHA512
4cc64bbf58cd97237049dcd1a0d6b10f8b7adf08db9975592f5d3317efdd3cc813951dc986a3a7723d0d64db6aa4e8c62476079e56a6b9cc0cb0f76cc4025109

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
0a445e1ec33b8462199b7babe22139b0

SHA1
dd6650b3a6a5defac6690aff5ac277a457714f54

SHA256
52eddf3f77d16744a24dc920140ec423759c7601a2cb400879b8c21097882749

SHA512
85c2e93cc1e2a2161b37874dd954d2d5e18f5d744c2eaea702bab0a7d418ad90039cf4af5de0824e6095a8cc61be669d70ca327fa2b6f9dcae8133da25246705

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
116c1d00fe6723f4d868717afd2eca30

SHA1
3e06ab6aac1199548875142edad5e3b8b2a95df2

SHA256
df16bd58898cd733d2a97cb17e61a04afc218efb47631c27c93998a704edbced

SHA512
23acd47a53ea731034ad457572ea5e3965b7b0fb412bcfea63eb0cadd9f6434bfee155e6e349c7c011dd31cfd5d3878c82c4d8160ed51b381d940f811f389ac5

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
58bed2fbea87e038a1d35ee4c09ed087

SHA1
a653e2d9fa0968d938c10550b8f49b8c61c58c1b

SHA256
921d47224624ec57d0a3a3974a3ae8999c030413c80dcb8a4ae22bdcf1243d22

SHA512
7e8e5eb9087989f1ce4b89e8e517f811da138d0225dd4bbee1699648da44231df635a66e87fac909766a622cd11c7d48932e0c249fa6a9d3b2704f8fc3fe627d

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
baeecae1560d5449a15dc306745fa69d

SHA1
b32313098f43e7fda88187b983a02f8e8609bee6

SHA256
ca943dc1fa09e52e05bc1e1bbfdf41a8514eb33d6c9e4bccdc10bfa6db5b9736

SHA512
ecdbb547ce875d37cfff2d6aaad3011e22d3ff170852e6ceb1b7913711be996e80227a7a18c45601d7328b1a13a1bc632d8d4bca57b13931cd8d3e5728414a41

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
3b81775097de659b9dcb3296451b2742

SHA1
b2894d4a7c37addc8cce78cc5fd5b84ee7656e35

SHA256
42f0ecee378d19c3c625bcfecb3fc374689eed9b289b90197a895e8e3c2047a3

SHA512
013a9c4b2ecb16779c51542a974e9504adc010b3a0e642936f00b5bd1b748e9281bf1d4aa8cd0e2d41d8b5a6848e134bc26bddd76ff57df5c508eca58989feef

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
3cad49d931d348a23775774b1138a63e

SHA1
c4d4ce1a17b3d27b49fb8365c4b44239465f83dd

SHA256
6733b93e7a87631eec20c372ec3cd1778ab263e3ecde8af67447bde02c099c9e

SHA512
d3d52cefd9b5f4d577637b2a99b55b4c349ce92d3b026c391e0082e4928bfce32ff56ab688912704e6f88fe8314708c09baba545fabb402bcfc0a8afec69b595

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
dcf72f2f7caf7ec31b94102706df7890

SHA1
4a6c907dc4a104387f2a22bab5b8ec571a5c2feb

SHA256
61f7a145e7d026b2fa4a66a5a222f510364939b2217a6951e46e3698cf642682

SHA512
51502d1cd6a3b40bbd677fef598c3b20fd3234d8097d22ba60414d9c4d63bf23108cf778bbd9771a21dd94c92166dcdb3e94bcad05df66c24c316c7648d245b6

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
125d676d60ecbd316e986ab60521d2a5

SHA1
b41b100711caf2b6904aaa94b6730b042ac3b7d5

SHA256
26f68fbb08f63bea1cdc20ddf4ebdef04f460a5cdd08ddeff8020336c8b166c5

SHA512
84880bf9e096ee7de86c52a55c1d9b743fbd8fe097bce3e9a855b0fd13b2fc5a2fd4f081d6cf260cbd97a8bbd67d52e6a742e911781eb220d394503cbec2a83f

Download Submit
\??\pipe\LOCAL\crashpad_3456_PHKSOFZNLUUWVCPE

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
memory/4584-146-0x0000021FA88E0000-0x0000021FA88F0000-memory.dmp

Filesize
64KB

Download
memory/4584-145-0x0000021FAAA70000-0x0000021FAAB72000-memory.dmp

Filesize
1.0MB

Download
memory/4584-147-0x0000021FA88E0000-0x0000021FA88F0000-memory.dmp

Filesize
64KB

Download
memory/4584-133-0x0000021F902E0000-0x0000021F90362000-memory.dmp

Filesize
520KB

Download
memory/4584-144-0x0000021F90250000-0x0000021F90260000-memory.dmp

Filesize
64KB

Download
memory/4584-135-0x0000021F902B0000-0x0000021F902D2000-memory.dmp

Filesize
136KB

Download
memory/4584-148-0x0000021FA88E0000-0x0000021FA88F0000-memory.dmp

Filesize
64KB

Download