Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    960s
  • max time network
    966s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240214-en
  • resource tags

    arch:x64arch:x86image:win11-20240214-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    18/02/2024, 15:06

General

  • Target

    http://google.com

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 2 IoCs
  • NTFS ADS 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 16 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 49 IoCs
  • Suspicious use of FindShellTrayWindow 51 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4544
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa4d4a3cb8,0x7ffa4d4a3cc8,0x7ffa4d4a3cd8
      2⤵
        PID:1908
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2388 /prefetch:3
        2⤵
        • Suspicious behavior: EnumeratesProcesses
        PID:3468
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1936 /prefetch:2
        2⤵
          PID:3244
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
          2⤵
            PID:1980
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
            2⤵
              PID:4940
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
              2⤵
                PID:692
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
                2⤵
                  PID:1672
                • C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5340 /prefetch:8
                  2⤵
                  • Suspicious behavior: EnumeratesProcesses
                  PID:5048
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
                  2⤵
                    PID:3740
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
                    2⤵
                      PID:3396
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
                      2⤵
                        PID:1348
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
                        2⤵
                          PID:2868
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5640 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:1028
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
                          2⤵
                            PID:3276
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
                            2⤵
                              PID:664
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
                              2⤵
                                PID:4988
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2500 /prefetch:1
                                2⤵
                                  PID:4684
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1648 /prefetch:1
                                  2⤵
                                    PID:1384
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3892 /prefetch:8
                                    2⤵
                                    • Modifies registry class
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:3332
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5444 /prefetch:8
                                    2⤵
                                      PID:4852
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
                                      2⤵
                                        PID:3136
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2932 /prefetch:1
                                        2⤵
                                          PID:1944
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
                                          2⤵
                                            PID:3600
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1
                                            2⤵
                                              PID:4004
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6296 /prefetch:8
                                              2⤵
                                                PID:692
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
                                                2⤵
                                                  PID:8
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
                                                  2⤵
                                                    PID:2340
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5580 /prefetch:2
                                                    2⤵
                                                    • Suspicious behavior: EnumeratesProcesses
                                                    PID:4728
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3728 /prefetch:1
                                                    2⤵
                                                      PID:2640
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
                                                      2⤵
                                                        PID:3748
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
                                                        2⤵
                                                          PID:1696
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1
                                                          2⤵
                                                            PID:4400
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6832 /prefetch:1
                                                            2⤵
                                                              PID:1748
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6892 /prefetch:1
                                                              2⤵
                                                                PID:3940
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
                                                                2⤵
                                                                  PID:3236
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
                                                                  2⤵
                                                                    PID:2944
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
                                                                    2⤵
                                                                      PID:468
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
                                                                      2⤵
                                                                        PID:3404
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6984 /prefetch:1
                                                                        2⤵
                                                                          PID:648
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
                                                                          2⤵
                                                                            PID:1652
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
                                                                            2⤵
                                                                              PID:248
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
                                                                              2⤵
                                                                                PID:1592
                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
                                                                                2⤵
                                                                                  PID:1992
                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6392 /prefetch:1
                                                                                  2⤵
                                                                                    PID:468
                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6676 /prefetch:1
                                                                                    2⤵
                                                                                      PID:732
                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1908 /prefetch:1
                                                                                      2⤵
                                                                                        PID:4464
                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4924 /prefetch:1
                                                                                        2⤵
                                                                                          PID:1748
                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1
                                                                                          2⤵
                                                                                            PID:404
                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
                                                                                            2⤵
                                                                                              PID:4004
                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3064 /prefetch:1
                                                                                              2⤵
                                                                                                PID:1460
                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7132 /prefetch:1
                                                                                                2⤵
                                                                                                  PID:1368
                                                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1708 /prefetch:1
                                                                                                  2⤵
                                                                                                    PID:3332
                                                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1
                                                                                                    2⤵
                                                                                                      PID:2824
                                                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1236 /prefetch:1
                                                                                                      2⤵
                                                                                                        PID:860
                                                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
                                                                                                        2⤵
                                                                                                          PID:1368
                                                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
                                                                                                          2⤵
                                                                                                            PID:3940
                                                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1
                                                                                                            2⤵
                                                                                                              PID:4872
                                                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:1
                                                                                                              2⤵
                                                                                                                PID:1144
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6576 /prefetch:8
                                                                                                                2⤵
                                                                                                                • NTFS ADS
                                                                                                                • Suspicious behavior: EnumeratesProcesses
                                                                                                                PID:1484
                                                                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1880,417863105486508534,16578924995776588571,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2940 /prefetch:1
                                                                                                                2⤵
                                                                                                                  PID:4848
                                                                                                              • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                1⤵
                                                                                                                  PID:5040
                                                                                                                • C:\Windows\System32\CompPkgSrv.exe
                                                                                                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                                                  1⤵
                                                                                                                    PID:3276
                                                                                                                  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe
                                                                                                                    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca
                                                                                                                    1⤵
                                                                                                                    • Modifies registry class
                                                                                                                    • Suspicious use of SetWindowsHookEx
                                                                                                                    PID:3312
                                                                                                                  • C:\Windows\system32\AUDIODG.EXE
                                                                                                                    C:\Windows\system32\AUDIODG.EXE 0x00000000000004D0 0x00000000000004E0
                                                                                                                    1⤵
                                                                                                                      PID:3676

                                                                                                                    Network

                                                                                                                    MITRE ATT&CK Enterprise v15

                                                                                                                    Replay Monitor

                                                                                                                    Loading Replay Monitor...

                                                                                                                    Downloads

                                                                                                                    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      55540a230bdab55187a841cfe1aa1545

                                                                                                                      SHA1

                                                                                                                      363e4734f757bdeb89868efe94907774a327695e

                                                                                                                      SHA256

                                                                                                                      d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

                                                                                                                      SHA512

                                                                                                                      c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

                                                                                                                    • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

                                                                                                                      Filesize

                                                                                                                      230B

                                                                                                                      MD5

                                                                                                                      74633dbae0706a378e12342e28567050

                                                                                                                      SHA1

                                                                                                                      8c92a3b02de620e961d8f7a9b072fe2bbbff77d0

                                                                                                                      SHA256

                                                                                                                      4a79d1b76b7f5d7fe768c2f4947553ab5101f450a759ed7e3bed9d2f9c93760d

                                                                                                                      SHA512

                                                                                                                      4a8a44de0f927de3b37e93ec60f88a15f961a9e48efcb99e7d48cdff93233f3a16f18f9e93de792002901ca5deefd0c6f8d213bd9018a1c1d47a5aa63859ff1d

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                                                      Filesize

                                                                                                                      152B

                                                                                                                      MD5

                                                                                                                      7d4bdd41d7150644a9fecac756bd5298

                                                                                                                      SHA1

                                                                                                                      cc6bd77ecef146f18a526ab6a1167649b2bf526d

                                                                                                                      SHA256

                                                                                                                      ae1f95fd0cac26454941f0578d73b695849ce52ab2ef95eccbb63853cf9103ce

                                                                                                                      SHA512

                                                                                                                      ba873b94e850c6fa0de096961380265ec833778854612e938ace2c4c1772423793d0d22a585533180328478cc23aef6971be56eee2256405636f80076ed2c796

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\80cc154b-f957-4208-ade6-85ea58fc880c.tmp

                                                                                                                      Filesize

                                                                                                                      111B

                                                                                                                      MD5

                                                                                                                      285252a2f6327d41eab203dc2f402c67

                                                                                                                      SHA1

                                                                                                                      acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                                                                                                      SHA256

                                                                                                                      5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                                                                                                      SHA512

                                                                                                                      11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                                                                                                      Filesize

                                                                                                                      194KB

                                                                                                                      MD5

                                                                                                                      ac84f1282f8542dee07f8a1af421f2a7

                                                                                                                      SHA1

                                                                                                                      261885284826281a99ff982428a765be30de9029

                                                                                                                      SHA256

                                                                                                                      193b8f571f3fd65b98dc39601431ff6e91ade5f90ee7790bfc1fba8f7580a4b0

                                                                                                                      SHA512

                                                                                                                      9f4f58ab43ddadad903cea3454d79b99a750f05e4d850de5f25371d5bec16fc312015a875b8f418154f1124c400ae1c82e2efd862870cd35c3f0961426c8cd82

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                                                                                                      Filesize

                                                                                                                      64KB

                                                                                                                      MD5

                                                                                                                      d6b36c7d4b06f140f860ddc91a4c659c

                                                                                                                      SHA1

                                                                                                                      ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                                                      SHA256

                                                                                                                      34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                                                      SHA512

                                                                                                                      2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                                                                                                      Filesize

                                                                                                                      69KB

                                                                                                                      MD5

                                                                                                                      a127a49f49671771565e01d883a5e4fa

                                                                                                                      SHA1

                                                                                                                      09ec098e238b34c09406628c6bee1b81472fc003

                                                                                                                      SHA256

                                                                                                                      3f208f049ffaf4a7ed808bf0ff759ce7986c177f476b380d0076fd1f5482fca6

                                                                                                                      SHA512

                                                                                                                      61b54222e54e7ab8743a2d6ca3c36768a7b2cf22d5689a3309dee9974b1f804533720ea9de2d3beab44853d565a94f1bc0e60b9382997abcf03945219f98d734

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                                                                                                      Filesize

                                                                                                                      29KB

                                                                                                                      MD5

                                                                                                                      ecc66f2230357c37527a8b438d137940

                                                                                                                      SHA1

                                                                                                                      9f50933ca4610ef8a5e2ecf403e7bd1019b48afd

                                                                                                                      SHA256

                                                                                                                      7dffbd6247a1e87a4e47462e270c37a50e21c551972ff2f808837f4db5762182

                                                                                                                      SHA512

                                                                                                                      c688d7f38d71af3435bfc74c6b3d0e5e5d0bf81593b05630bb2d1b2b51752dab5a7b2f9464bc9341c1310bd5f556649c948af58f7230a16bb975f92c30897682

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                                                                                                      Filesize

                                                                                                                      19KB

                                                                                                                      MD5

                                                                                                                      2e86a72f4e82614cd4842950d2e0a716

                                                                                                                      SHA1

                                                                                                                      d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                                                      SHA256

                                                                                                                      c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                                                      SHA512

                                                                                                                      7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                                                                                                      Filesize

                                                                                                                      65KB

                                                                                                                      MD5

                                                                                                                      56d57bc655526551f217536f19195495

                                                                                                                      SHA1

                                                                                                                      28b430886d1220855a805d78dc5d6414aeee6995

                                                                                                                      SHA256

                                                                                                                      f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

                                                                                                                      SHA512

                                                                                                                      7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                                                                                                      Filesize

                                                                                                                      88KB

                                                                                                                      MD5

                                                                                                                      b38fbbd0b5c8e8b4452b33d6f85df7dc

                                                                                                                      SHA1

                                                                                                                      386ba241790252df01a6a028b3238de2f995a559

                                                                                                                      SHA256

                                                                                                                      b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

                                                                                                                      SHA512

                                                                                                                      546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

                                                                                                                      Filesize

                                                                                                                      384KB

                                                                                                                      MD5

                                                                                                                      2d7d635564d4ebd787f07b6bd9271526

                                                                                                                      SHA1

                                                                                                                      f635d2a1ffd1457c99e811bc151dc806bec8c3f6

                                                                                                                      SHA256

                                                                                                                      132f80131c61a8a6d805e766973431f052229cb46aadfc1f577fae0f5720b0c5

                                                                                                                      SHA512

                                                                                                                      f6abe62958b80e86021b9964cf30cfe09bb36c0c6398c317ffecd319dc33fec79783ddb12b0a2276b70368f48a518bd36e20a82e9a5650734da6fb7af9dda70c

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                                                                                                      Filesize

                                                                                                                      32KB

                                                                                                                      MD5

                                                                                                                      bbc7e5859c0d0757b3b1b15e1b11929d

                                                                                                                      SHA1

                                                                                                                      59df2c56b3c79ac1de9b400ddf3c5a693fa76c2d

                                                                                                                      SHA256

                                                                                                                      851c67fbabfda5b3151a6f73f283f7f0634cd1163719135a8de25c0518234fc2

                                                                                                                      SHA512

                                                                                                                      f1fecb77f4cdfe7165cc1f2da042048fd94033ca4e648e50ebc4171c806c3c174666bb321c6dda53f2f175dc310ad2459e8f01778acaee6e7c7606497c0a1dea

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                                                                                                      Filesize

                                                                                                                      75KB

                                                                                                                      MD5

                                                                                                                      cf989be758e8dab43e0a5bc0798c71e0

                                                                                                                      SHA1

                                                                                                                      97537516ffd3621ffdd0219ede2a0771a9d1e01d

                                                                                                                      SHA256

                                                                                                                      beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615

                                                                                                                      SHA512

                                                                                                                      f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      144B

                                                                                                                      MD5

                                                                                                                      27309198e9c72690d8cfd7b1a4da9852

                                                                                                                      SHA1

                                                                                                                      3dbeb1cbfb179f3eac8d50c7e40bc305e470a650

                                                                                                                      SHA256

                                                                                                                      65574f29c4058d117b37b1a20be254943942e2275da33cbf6c66661b2391198a

                                                                                                                      SHA512

                                                                                                                      cec2c0cb8e4b66cc3c9694d276bed398e5269e1bbea017ec3f8a99bdee504d6ff27eb8150f095ea2f7d00dacb93cab55f113d95b70a05f1068959fa6140fa3dc

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      3KB

                                                                                                                      MD5

                                                                                                                      4637e7fd9edf1041f40e029691da5204

                                                                                                                      SHA1

                                                                                                                      b88fc14e1b6d866beb299f51ed207d1517abe3f3

                                                                                                                      SHA256

                                                                                                                      aed20af431fff5027a5ae4e56d3985539bb8a86216956824f05fdaa692aab773

                                                                                                                      SHA512

                                                                                                                      0a3a8ddfed8ce06a84fa32f6bc9eb86437642d6c36f7d6bb07b1e8b716a0f80b799b4d3b8500898002b790b10742ffa09f45001b2feeff4ac63e45ee2defed39

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      3KB

                                                                                                                      MD5

                                                                                                                      db5d4cdd1ec380d79054c26eb9deb217

                                                                                                                      SHA1

                                                                                                                      1a3ca7a1abcf5e6c95f8629c47e97d7459012913

                                                                                                                      SHA256

                                                                                                                      d04d2e9af89dd5a6375e8fadeb444641942292a2db0db85bab77e0bb87483b1b

                                                                                                                      SHA512

                                                                                                                      ebba0e61f6db970316b1b0eab55703feaa27c1422799c56a85b048913acbbd1c16bc4b1ce816c5317bf08a65fbcb4f1011d6624fd3a1a4b969cfe878df7bf040

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      3KB

                                                                                                                      MD5

                                                                                                                      fc67c96d57aead57c71f6ca9d953e015

                                                                                                                      SHA1

                                                                                                                      7b06a662a8faf0755c45c43b16c977937c1bfee3

                                                                                                                      SHA256

                                                                                                                      34e7de169b0b677e1d673ff7e9a07285c51efa309429ed24df605657342df59a

                                                                                                                      SHA512

                                                                                                                      4fb141b6dc600df5a6a946927c85d771f90458ea3c68bebadd56cc2493c15760bc939f44bd91c1dcd1daa8d7b37c79d25e667c0f91c9b2e8b3689050e0667cb5

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      3KB

                                                                                                                      MD5

                                                                                                                      88539226a519d7ac97a6bc5210ad8ff1

                                                                                                                      SHA1

                                                                                                                      1abc89771904910b6ac5898984a73157ccaed3c5

                                                                                                                      SHA256

                                                                                                                      c14ee109e2343d4543b11e6687a4ff739514d9fe7f875450230d1cad08388b20

                                                                                                                      SHA512

                                                                                                                      015c212545ab7764243e342af640bd07e3388c08f313901b371c60451900deb75f46c58e215952a9acbf8d18f9851c2102149fa4c6239d551678615ffbabd24a

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      9d5b0a9654fd772430a54d9956cd2b76

                                                                                                                      SHA1

                                                                                                                      0c67530ee7c32269f032ebdfb88a7526f66313bb

                                                                                                                      SHA256

                                                                                                                      8e1cc3b2857872228271cf8a3be8f87e5e1a60273df704fcedd34c0336bfaa05

                                                                                                                      SHA512

                                                                                                                      12038099e62c51bda599ef0217264ec0f7383a4145fe919653bb85ce40094ad590dc655eb40d7061d09aca4559654d297610674e0b8b7190736baf2173b81674

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      3KB

                                                                                                                      MD5

                                                                                                                      1c5fe1f3abe69d7ce59c5155c72e5438

                                                                                                                      SHA1

                                                                                                                      fa8696a2315f8ea75f93e0086dce08014fbedbd5

                                                                                                                      SHA256

                                                                                                                      399f7a945a951ca3e6a0b3d9c6a3d5b8bb5184dedba6775e4424ed70a19841ce

                                                                                                                      SHA512

                                                                                                                      a649d1b93c0d57d6a0f1d1ff03a41296adc4fe16113a1373f8dbf01fcbb72aeb7f99eb1be9315b54b5bc838bc38d3c419fc1e4d10423d55885207ff6c23fd785

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                                                      Filesize

                                                                                                                      4KB

                                                                                                                      MD5

                                                                                                                      812566b81d987fb83b486b21cd0a342f

                                                                                                                      SHA1

                                                                                                                      dfd16da78483886a8443ec743dcdc0c2bee3bd43

                                                                                                                      SHA256

                                                                                                                      d0060037c49014642c1bc7abaf22416edfaebd28347005c246cda37253cfacf4

                                                                                                                      SHA512

                                                                                                                      9fade180138b58326d84596f52c20318c01921e62affcce7d139b4df954c30546888959722681b616ff0ef3678daad582bc9ed339de192904c4bbeb05eb02410

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_yourfreshjournal.com_0.indexeddb.leveldb\LOG.old

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      6aeefca16c41e630312d093cd1c3b484

                                                                                                                      SHA1

                                                                                                                      bed0519f137b786a047cd238cdb940de99f0f300

                                                                                                                      SHA256

                                                                                                                      6537bc55fbfa55d2b1e433f9286cf882fc1a457b54da86cb9954f30bac29aa38

                                                                                                                      SHA512

                                                                                                                      c82f4a79f6e1666e735e13ab470e57ab044945dc911db2dc2941e1ca22a5982f47d73fba6d83432e7bf43b996f059944dff641847ef09b8153b17782416aa9d0

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_yourfreshjournal.com_0.indexeddb.leveldb\LOG.old~RFe5b3d34.TMP

                                                                                                                      Filesize

                                                                                                                      625B

                                                                                                                      MD5

                                                                                                                      3a9325002bf9798910fcc0c8a9188a43

                                                                                                                      SHA1

                                                                                                                      aba72f25cf526e49ff70f15084e1391779c93f62

                                                                                                                      SHA256

                                                                                                                      041b70e2c40380874f90f4ba452cac4dafe5d32065f1c6a1e7e9650583d95c50

                                                                                                                      SHA512

                                                                                                                      0a6fc951027f264aa070d1e5fb135fe6f9a0673addaf8d01b6a6fad148358f5a7a6a7bf7cc7f4125ed5fcbc08aa00b8471a37e74fbe51852c7b45336aa857510

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                      Filesize

                                                                                                                      4KB

                                                                                                                      MD5

                                                                                                                      eaeb6517716cdd0af5f046d03f7d4133

                                                                                                                      SHA1

                                                                                                                      411576b8716209bceefa664639bacc5e4706d002

                                                                                                                      SHA256

                                                                                                                      8114a02d6a2c902c2c84e1eb6c06bfb487089356d5c945d2be80b27b94bb22c7

                                                                                                                      SHA512

                                                                                                                      14e7a85faf7b74ee0e79e8b2cc53264a16cf23cb8f6f93ce02fd7f779101a9a67b4f2978f1cd2e2b76db04776ce089bbe216e1a5b4057017a4770767a25a9acc

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                      Filesize

                                                                                                                      5KB

                                                                                                                      MD5

                                                                                                                      c93abfa9f109aadcec641ffc5751001b

                                                                                                                      SHA1

                                                                                                                      e44bce774bc3a99346219783b0a58cd625114c74

                                                                                                                      SHA256

                                                                                                                      d5e56619f82db2f1d203997c7c59c65ba99ce237b7c21facdef407b6499c6c8c

                                                                                                                      SHA512

                                                                                                                      99acf8064629b8bcaf9a67240db471b59c1678c19379c7eebbc286112a7a4f2a5f2a3229033df7e73eddfbb1aef6575fca7b5c782bfb9433f06e71fc070cf5d4

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      8063d3c4e5f05bfe91fecfc2c6fe31ba

                                                                                                                      SHA1

                                                                                                                      078726b5dcfd0b24a36a8d54aa9840a913a0a62c

                                                                                                                      SHA256

                                                                                                                      036fc728eabb39de1264e42dbf63110a16c9b1cdff136c23c76d500791e5b158

                                                                                                                      SHA512

                                                                                                                      3808594629e46b8436a88b821e017e089294baf720986d1cbeb7745b53b64f12dcf264e29ffe026af45f3b5fa2ebb2f932ea3279ea1f5510e68c645272c11ae3

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                      Filesize

                                                                                                                      6KB

                                                                                                                      MD5

                                                                                                                      6ea11468ece14093fa08cb92d6c3ad3a

                                                                                                                      SHA1

                                                                                                                      c5fb3fa36d520b75519a360d7609bc9f9b33bce4

                                                                                                                      SHA256

                                                                                                                      c0563099f25d23eefbf1ad4fa2581f0574408e1d7b45c3dde301cc9f9a99489e

                                                                                                                      SHA512

                                                                                                                      3b3e924b740eb0c8213fd79224029256b2347cb9ea5e79e2cfd9dd9baa7e2aea7854884d311fc021398bbdfc4b0975320f7757fd5680ddf9e078e83fa9492b48

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                                                      Filesize

                                                                                                                      5KB

                                                                                                                      MD5

                                                                                                                      83f74fff890e44910caadf2dd1fcf6a4

                                                                                                                      SHA1

                                                                                                                      e1d26072a867c7e8a31ef4d5f61b88315759f81f

                                                                                                                      SHA256

                                                                                                                      4ef9fa01bfd8a516f8000ad520fde82f2979ff769e30dde0f5c8a8c2c983f23b

                                                                                                                      SHA512

                                                                                                                      e05cebd4f65827c3fa922498ea25c36048fd0d3647ec1f69fbad839e510395ba9ff03c9eff24107c1ca5433da40d00ba5e6146e16f3980c85fc2472ceb3fad9a

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      5KB

                                                                                                                      MD5

                                                                                                                      9d4dc443ba7f33e4065d4989368a5403

                                                                                                                      SHA1

                                                                                                                      3690feffe70da89a0366317d80a7f16eb3e8caba

                                                                                                                      SHA256

                                                                                                                      48c43bcd8c97b23ab65b5c5c02644419e0ab9a6850fcb22270d80254e036d0d4

                                                                                                                      SHA512

                                                                                                                      50d8c7ebac93be98a06a84b4f568b5e3c8ba25d72084129dac324a847924b0ebf2cd4f6b1bdf1613bb80df021264ad468fbbf572cb0b9b8ce245774b1f5dbb35

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      7KB

                                                                                                                      MD5

                                                                                                                      689404166e5d1b4af2f13a9ecf212a9d

                                                                                                                      SHA1

                                                                                                                      62a5a4ad4a187f9a1c1c328e1d8e79d7d362125b

                                                                                                                      SHA256

                                                                                                                      822b58cad0a5fad8e6ea5ec1da8b3ace3a3275502fbb0726f3d28ea61bc2fa43

                                                                                                                      SHA512

                                                                                                                      cb0638d2097724923335ae472e98682bd39456f11e9d2976935b2ab96b5c433de25eeb31ab5f5cc8ad33784e11246d74b5759a2d03438e1af3f998a6d5442a4a

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      5KB

                                                                                                                      MD5

                                                                                                                      8cd38c7fedd2eedbcbc35dab7d87a693

                                                                                                                      SHA1

                                                                                                                      e311e028b214ce840d06ffed5f1f8c9964b66143

                                                                                                                      SHA256

                                                                                                                      c013c5f747101a030fe43e7271d63a6158a58b4d09200a865600488c58d7dbb2

                                                                                                                      SHA512

                                                                                                                      9372f4f21f73cb2606f69d4b7ed9640809df97826a13ee4cb1396c54cd8c0b8b5d31bcb60e9f60ee28f82733ca4cba400238babdc67861ff689c4a0ab92bfa88

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      6KB

                                                                                                                      MD5

                                                                                                                      68d1035bb4cf6c533637981172a50cd9

                                                                                                                      SHA1

                                                                                                                      4f81a75f85fcd99a09cd22ebd218749e41242965

                                                                                                                      SHA256

                                                                                                                      4fe20dad8094a2d18a08639f13994c0191de50433534d89960e4531cc62848d0

                                                                                                                      SHA512

                                                                                                                      a0100f7744d64626c736ec189798be19b72f59f7cb707103d5c3db0731204e882b7f4796851a6b24693f96343146a04a99e76fb36e4a3fd13fbd909d653d3e68

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      9KB

                                                                                                                      MD5

                                                                                                                      1c325dbe935451d0e07e624f61551274

                                                                                                                      SHA1

                                                                                                                      eb51873faebfd023ac69c98aec08295e3fb17a21

                                                                                                                      SHA256

                                                                                                                      f2d281b6ba1ae951e8f701e85f7482fb58ebb1d1fbffadfe3ef0a103c065d155

                                                                                                                      SHA512

                                                                                                                      1bf31ee2352ef3f5d244b1a86e90348c7cacae55b43c73a68e3e6f58a427f00cc3f8253fb1bd3dbd56a79c92a611a14a2cada3ff6da7a87cf88baff91ee90392

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      75f5e85444acb601726043fa1becd7b7

                                                                                                                      SHA1

                                                                                                                      0304657b7eebef14f3aa69e53fff7d1743e5517f

                                                                                                                      SHA256

                                                                                                                      4ff4d44623afe6a5ea9130899aaec9ec028fa0ea7662a377e1d170f42c797b40

                                                                                                                      SHA512

                                                                                                                      d2fe2e73c7a93ac8dbbfa42184a1eab8a21aa056817e43e290c81b92f4e4f8514446b0f156104607768b5d8ad86584c9a5d8da7b8b297e2aeaec3b4662dac65a

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      5KB

                                                                                                                      MD5

                                                                                                                      cffc4435d7d36784de4291b4b712743e

                                                                                                                      SHA1

                                                                                                                      3ea8d95b173c13a06ff72abe660447781253c951

                                                                                                                      SHA256

                                                                                                                      c6467fae5eddf18c8dd3397cb26e5fdc99a5fd275b4c0b7dc2c25b591c44e54d

                                                                                                                      SHA512

                                                                                                                      59658cf5aabfa1780509059b2c0d6c8bf698541028e07a7ecef7f6ba7685cb8c6a5306a3d794c26f70ff7581be4913270540f414ba4141e307946c4a4a80d9c4

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      7KB

                                                                                                                      MD5

                                                                                                                      f2231a68673b11171c8c02c80f252ebb

                                                                                                                      SHA1

                                                                                                                      578412dde529e2a6ff0e9dcd79be9debbe5690b0

                                                                                                                      SHA256

                                                                                                                      a52b516b61e5d09c84826edacc50697ef0b6aafcad33ceb974e2fe1e25c6a184

                                                                                                                      SHA512

                                                                                                                      66e74f6131e31a9323ef9b757c3c5ffbfe35cc0ef97ab93bad86ddd8b1331739e203d9b9901c8d52d96daab0afc2347845e73d09d749bef8f4cb6c4f0dfb5bd6

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      9KB

                                                                                                                      MD5

                                                                                                                      2ec4523033bbd5c73d86adeb841628d6

                                                                                                                      SHA1

                                                                                                                      2f73a14e74293f71e2551ed480922ca7e15165df

                                                                                                                      SHA256

                                                                                                                      bc627cc3a590b6329a76d9a485ff692446e718d5371323100dcfe934845441a8

                                                                                                                      SHA512

                                                                                                                      979fe1e499d55a7b697e837423f04812f29a3f6f37739d8249a2f5eef35c7497a31f944150c1a8e777151159ef9a54cfe8e78e5f57118296d2b9763ee261a38a

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      9KB

                                                                                                                      MD5

                                                                                                                      6c2d4f2f2650a17d40709fe01dd257f6

                                                                                                                      SHA1

                                                                                                                      1fab9de3920e9969cbd844aa0bd4dd52182f5749

                                                                                                                      SHA256

                                                                                                                      0f0eaafbee96c2fe331eac5eb1bb0f87abc95c727c1a832b46a645b1f1e00fca

                                                                                                                      SHA512

                                                                                                                      a9019188df295293150027d960b71a8985eb777a6bdb3d2a64ff3a977dfd23854813382186187d400dac387ba1b6716e03084387b0ea8f352e542b3790b2d88f

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      9KB

                                                                                                                      MD5

                                                                                                                      9e4994fc0849db0ae2230c6422473036

                                                                                                                      SHA1

                                                                                                                      6c720a2c0d0b34223ee1d9187c27262a2a03f893

                                                                                                                      SHA256

                                                                                                                      76e838a047fd2791bd5039af6e337e9fd80d04c3573d5f814d5d56a680b6aade

                                                                                                                      SHA512

                                                                                                                      88ff1de164da29e3dd64d9462a7bf768eeff52e758651d55a6e08af95f67699fd4b661ca49e12a1b668b04f386b471e9854f4d44a689445588342bd6f50c70e9

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      8KB

                                                                                                                      MD5

                                                                                                                      014fc7621017efdb3d8736b69c2e967e

                                                                                                                      SHA1

                                                                                                                      d7db62a732163f3753b86c8e079394b8571762ea

                                                                                                                      SHA256

                                                                                                                      427d1131e97f28eda013ee236d35cb30f08175ddea71c4255b273e742b914c57

                                                                                                                      SHA512

                                                                                                                      33590ef91260b23b80dbf0fb92a5cef6451bb314f729703d38f83a0b66068ea07fecbdf38e974b2c2f2f9dcb0b04db222685c5b969f4433ab7174897c570f9b3

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      9KB

                                                                                                                      MD5

                                                                                                                      81309adc3dbd92e95137f3d0d5df3e32

                                                                                                                      SHA1

                                                                                                                      657d18342d8d251a62233923bcf28aed56cfd420

                                                                                                                      SHA256

                                                                                                                      864e1b5b3c4945de3137b104c14da8024de672caabf14cbb84844930f1485c13

                                                                                                                      SHA512

                                                                                                                      a6d9e91a8adc14c8149c3da761dfb9c48ac30e1ae03750f8c5a392a6bfb8b279c527ea8c1e4e09cc07ba0ef79847bf6b77414b682c0b1aa29ff4541ad072fbc2

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      0452e534c47e28304d5a657af50bcbd7

                                                                                                                      SHA1

                                                                                                                      d341574267aadcd8813a276403211da7cfd52c38

                                                                                                                      SHA256

                                                                                                                      33926b1a92df8f40acbba6297b2f6a982af803f27006ae055bc7d7ca6cfbff1e

                                                                                                                      SHA512

                                                                                                                      6651a816bc0a5ed272263c5746c7a015cd34a16e5433280dc5a99c7d0e257db6daf14782b03556e86c393c0996b7be7d57ba2d47a36486d80d4f1c38cdf48fb6

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                                                      Filesize

                                                                                                                      9KB

                                                                                                                      MD5

                                                                                                                      b55b7eef170a73d2e821a3dc4be36827

                                                                                                                      SHA1

                                                                                                                      cf559f276dcd3f979f4677d01fc1c6028bb8641b

                                                                                                                      SHA256

                                                                                                                      31a0185e9729e8347926b47673124834fd45f51936195ad5b9330502aa0fb048

                                                                                                                      SHA512

                                                                                                                      a90e078d67ebdf18f40cdf6d1aa81a66abc44b4a8219793d2e193e312bf53d55f2d9910bb5bd1d77d25ec4ec1edad4e308420873a585ca032e5aef9fc998b37b

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

                                                                                                                      Filesize

                                                                                                                      25KB

                                                                                                                      MD5

                                                                                                                      00042df6368289238bc60caef1baa46d

                                                                                                                      SHA1

                                                                                                                      981c49ac7b10bd2a9d159daf00844110629837a9

                                                                                                                      SHA256

                                                                                                                      3ca68414527ece019ac110954726207b8a46bebe6180c2615158f7aebf6e6b1b

                                                                                                                      SHA512

                                                                                                                      8f549ecc6a1ac0cc153fe39759b8fe093af520dd94e37b8c32e7fc7e87263cc5b2bf404bff31a5960ad9fcf82dabb5a534fa07cc441ce646de2a8b532c28ff51

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

                                                                                                                      Filesize

                                                                                                                      16B

                                                                                                                      MD5

                                                                                                                      46295cac801e5d4857d09837238a6394

                                                                                                                      SHA1

                                                                                                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                                                                                                      SHA256

                                                                                                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                                                                                                      SHA512

                                                                                                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      5249a6178e07c22cee0f4a1f28996f4e

                                                                                                                      SHA1

                                                                                                                      d079ec486e39c21a77f43d55a92205ea10621722

                                                                                                                      SHA256

                                                                                                                      862d28a9236c0f2d26ac7bfdbd99235fa09780ee334a5af93141c372593ecd69

                                                                                                                      SHA512

                                                                                                                      e8e7b0d68606c224ff7d9f9e180bd12ece3305a1bede6837d816f0814b72718523797725be57d6623665e31fb40e7a4aa381315fe1bdd7ddfec1eb8536f33475

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      ef52dcf8aa848d764040af4e7bfa9613

                                                                                                                      SHA1

                                                                                                                      723040ddb2eeb37606fd6960825d77fcd1772165

                                                                                                                      SHA256

                                                                                                                      d7c9150f0f4d3761effe1ac1bac6c2681f34b7f040266dc9854847f4cf31c6c0

                                                                                                                      SHA512

                                                                                                                      974c9f7972861ca4b3125832acf12ccccd82b0ca23b614de7ea17d79bee1224683d14a72a8bd44d1ef227bdbbebb0de26340da6caf9cfb48c9df8bbb04f77f0d

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      2KB

                                                                                                                      MD5

                                                                                                                      65061f953c93fcb49fa5e70abd17cdfc

                                                                                                                      SHA1

                                                                                                                      72cb481b52d92b3b4d28c44a7a146a3cf3f3ae56

                                                                                                                      SHA256

                                                                                                                      4b34690692b11636d6c3a7e8c240e0402f33e6b3bb71a693134a27db2c42ad30

                                                                                                                      SHA512

                                                                                                                      c7fafe3fbedc17051a64fa3d5faba03c52bf05305602586a6c5d4a5fc416a3189606ced3236b1320e108ce47027ccd1e4eda119a8e8dbc2840cccc6bb84b579e

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      7e6afb20dd2d1bfec6a9e1c4abb29c79

                                                                                                                      SHA1

                                                                                                                      d4a55428e9a5c29082ab756e2390cea1ed3392ed

                                                                                                                      SHA256

                                                                                                                      952094e5f966f91ac43b47f976247410dc7f6d4957117b89bb4efeb0ca6cc11f

                                                                                                                      SHA512

                                                                                                                      a315dde00c86a217e07ac2c467feb883db1b4f97688300da62490ef89fdbbdf6a8f8686f265d5910797185723bbde2f6bc0254c77b3a2b8639faabac715bd9d8

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      2KB

                                                                                                                      MD5

                                                                                                                      218130a02b26e616dc8ed1490db949c4

                                                                                                                      SHA1

                                                                                                                      4d120da43aa99598da567e75c304e6cd1ef64c3e

                                                                                                                      SHA256

                                                                                                                      3d8cacf855636f4b2c299e50f33a04d8df514891f9e121a7dee07d5f8aa16b85

                                                                                                                      SHA512

                                                                                                                      6c918beb68eb6fcfe872c134ea5612bccc8b7e902ebc802c15a33fa2ca7f16a4d27c3d216e8b220b90f883cbc9f93d041878c9c33323fde0174ca3b7853ab61b

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      1KB

                                                                                                                      MD5

                                                                                                                      2a18448d4b827137a6b47494b15af57d

                                                                                                                      SHA1

                                                                                                                      7703efc7fe3208b85a35ce0e4b4ad6639a848446

                                                                                                                      SHA256

                                                                                                                      213921bf0137ce00b67563d99462e3dd4e55227cc216c3b073b490f293da6a15

                                                                                                                      SHA512

                                                                                                                      050cf9aa2da042941ce43ffb8b2340b7bb216f5fd2bcd143fe9cfa9178e2c9e8cfaf69f5d2ccfa433fe20afecb980d238a43b84c6abdedf69b8ed59e6e12c64c

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      2KB

                                                                                                                      MD5

                                                                                                                      15443909011154c6777423cd8d60b8a3

                                                                                                                      SHA1

                                                                                                                      431c13136f7a1618612b852d8c17e2e3108f6b1c

                                                                                                                      SHA256

                                                                                                                      dcdd1931ccc98f910d77e4c428a4b49bcdfa26360f3ac72673d792236c84fc68

                                                                                                                      SHA512

                                                                                                                      f0455523394e1fd7ec8c77a08ab92d1fec9ed5ecb8001389c529e399adebb3ffdf6a09ef812be11e0f99e587f64f383bd4b339bcefc2d5294ef291de4c15d9d0

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      2KB

                                                                                                                      MD5

                                                                                                                      d56c238021662bc25501de490a17c6c5

                                                                                                                      SHA1

                                                                                                                      abaab680c7930f59df7e4c49a1f67a15d500b101

                                                                                                                      SHA256

                                                                                                                      071b68966e2e656fb6a4eb885f4a055923f398c52fc314c3a9ac79ad8bf0b9f3

                                                                                                                      SHA512

                                                                                                                      f85cec6247e83effd046054858cb34985bdd24700939017fb719551e84401cf22e51a0729f697d9ffe6f29940232494580ecf65db8091a40cfd4cc45bb971be1

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      2KB

                                                                                                                      MD5

                                                                                                                      824dc2372b281d3d2f0c5ee0c27498cd

                                                                                                                      SHA1

                                                                                                                      976b3b1fcebfd6120fa26735ed5195aeb6aa7ba1

                                                                                                                      SHA256

                                                                                                                      2ffc53a2c162675f9a16b4a77a64823bfee8ae4161bda2287de535e5ab75eb12

                                                                                                                      SHA512

                                                                                                                      708c3d05a3de886de55d4dc66db6288bbf06d3247ce26730a23b0849e4e1278628bb61405a6a6c2179352741e84d523f8b8c876240c80138dd02803c6a982edf

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                                                      Filesize

                                                                                                                      2KB

                                                                                                                      MD5

                                                                                                                      68e5e88593248b3a25235f861f42e476

                                                                                                                      SHA1

                                                                                                                      1c0476edf1836b998f77349b9f3723fa585e8216

                                                                                                                      SHA256

                                                                                                                      093ffc8b5bddf6cac6ca0553b512f4bfa52403143bb5b6ce1aee12b76a997f60

                                                                                                                      SHA512

                                                                                                                      1ae5cbb86e9243e17136bab5acca8c0bc50443cd6f3eacf0655ab702306a4b3c2e9e8f82b409d6fb510befe88f83f10e0f044d8f88c3b7e0dd900ad8b6cef53b

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe590d35.TMP

                                                                                                                      Filesize

                                                                                                                      538B

                                                                                                                      MD5

                                                                                                                      0168cac49dfe5475ba9ab28dd45b7fda

                                                                                                                      SHA1

                                                                                                                      08cd6484e2486ec1907dcd9c8e16ea6e3a1f93c2

                                                                                                                      SHA256

                                                                                                                      fe8142ca8aea4d07a8fee2ea34a3e35f2aa0d028421e395052f02419141d5776

                                                                                                                      SHA512

                                                                                                                      b8a3d663197b1ae8130f62b6894fc4a6100c1fc6ef953c01ffc8295690c9ccc531140f3190ca074734c8e1fedd9707cc992c06d5dfce799a45a09bc05cb10f1d

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                                                      Filesize

                                                                                                                      16B

                                                                                                                      MD5

                                                                                                                      6752a1d65b201c13b62ea44016eb221f

                                                                                                                      SHA1

                                                                                                                      58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                                                      SHA256

                                                                                                                      0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                                                      SHA512

                                                                                                                      9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      3acd77beef5012e8e73c5a8f565bfdf0

                                                                                                                      SHA1

                                                                                                                      f0ce44e628c459fcc7127c7eef2c1e9bbdef1a47

                                                                                                                      SHA256

                                                                                                                      86be500f03fff39706f348c0ed0b9fdb258555ab8481eae460d0889d76f3d53a

                                                                                                                      SHA512

                                                                                                                      c3f944ce1086710ed5dec0989fa71078e6cdf65535deab9d6e59e30dba2ae51a52c695b46f8b228c1621b80f40eaef4fdf6b6bc7269236132107032a84afebc6

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      57353b91eb439b0a23385ecb56b6e8b4

                                                                                                                      SHA1

                                                                                                                      8df4262662b782698fd1236d4b833f854d8ceb00

                                                                                                                      SHA256

                                                                                                                      e84291483f01f3255df36094ea16ebae18e31c40a14fac2df7cb9014b427b886

                                                                                                                      SHA512

                                                                                                                      1403d8c9c75056030e9d7ff09f9c27a25f88ecfb41d93b4249132dddfbff85b21491e1dbfe764d221e22a0d155fd0d2c916f2b8166988d1758054925cb518be6

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      19dfc63fe1187d3d0ffb77d4a66409ee

                                                                                                                      SHA1

                                                                                                                      1bc2cbedb36ba10e10ffe63f95179f9c9abc395a

                                                                                                                      SHA256

                                                                                                                      a6d74afbc3c984ce9df93a99e55de093c5cddb1a06102bbf163dc28b28bbbff8

                                                                                                                      SHA512

                                                                                                                      3351fc0f8dae296b0cdb73c06e9325bba680e68034c3edf8064ca4d9f185cf76768aa79150885a9b72d798fe9853fc333e63781c40a665a12eaaac8cca765ae2

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      c082cbea25dfc0377b91ec9dcc6b6429

                                                                                                                      SHA1

                                                                                                                      6daae87ddf71a9dc100c300245863dc528828162

                                                                                                                      SHA256

                                                                                                                      d27284514916ac83222b26e9fc3db4b3fb625a64ab6d74dcd41014d5118fb91b

                                                                                                                      SHA512

                                                                                                                      05538b4144508e615d583a84f1cc5a7a6c30082d80c715fbc42c8fe3cfa9034bf8696a5a1348293cb9975db96ac1a0971a7b0146520a5a8ef8b6416af4ae8a65

                                                                                                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      d7a4055e5c3af606754c315e045b397b

                                                                                                                      SHA1

                                                                                                                      b6a136fdd1b2e6af50ce81d450972554869985aa

                                                                                                                      SHA256

                                                                                                                      61d800ca3fb8cf7e48a2d33043e877665cb7c65c93cba8133c9b10b921cec5e6

                                                                                                                      SHA512

                                                                                                                      039ee98e95ac5f71e4442caef5da1bb637227aceb64cc4c63bc59066cdc1f4ba12c26e265d5511f5a87680f596afdcccf34d3ad1e77e19ca46763c0388e14a71

                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      4eb025b759543bc6f0cec1275698484c

                                                                                                                      SHA1

                                                                                                                      f727615cec616e2b6da251924b26d76add4850f3

                                                                                                                      SHA256

                                                                                                                      1088b12b75609c42f44c01174868d08a74fb1cb1ba8cfff1e36ff2812866d84e

                                                                                                                      SHA512

                                                                                                                      a767b6495128c9b49d38dfa4e99cdbc74528946a0402917900433f50ffc8e24f5da026bba59485d7b8d8ac7e9d3f7015410502dbec57f5192c669d5410116767

                                                                                                                    • C:\Users\Admin\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TempState\SearchHoverUnifiedTileModelCache.dat

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      e73e5b8e8c62a908329bcaa5071a15a3

                                                                                                                      SHA1

                                                                                                                      892eb3fde6fd72ccf6e714a850b1591fde5cecb1

                                                                                                                      SHA256

                                                                                                                      9363b4eb2896067a0bb749632699678cbd7654dd6c9ddaddef5c2b8b358be6c4

                                                                                                                      SHA512

                                                                                                                      d35eb6e9e0834da0dc37a9d31801e11a3870350302e6f608bc827174353f34d99803b05271bf2aa3655053d96f1d9b2bf7348884a4f2217b44c81f8c6fb33701

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      fb5865b55f191523541f40b6343424ac

                                                                                                                      SHA1

                                                                                                                      d2ae0ec772b12e2c7a0934379ecf2f7b599a94f3

                                                                                                                      SHA256

                                                                                                                      f79e7371a42e7b9a7a5ba5e70f3377eb93b783c952d1a93197d309e63b71a226

                                                                                                                      SHA512

                                                                                                                      ecad15a6c698b83e1a2db571c9842ee8cd5c6a9d5d3160725cf6d8be23c6e2ca4aaf0a4d2b902e3135b6c562207278e6be4884a6fd9f4f6ee0893138e6187bfd

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      88895c815f8f9abbab726b6525fc02d1

                                                                                                                      SHA1

                                                                                                                      945eac3adc425ebcf407883e8f2d8ded6e004d46

                                                                                                                      SHA256

                                                                                                                      b70dee5a70dab5c99e639d5b169e7bf38f3b1a47ab6ebee400fbe3304aa90a3c

                                                                                                                      SHA512

                                                                                                                      1aa0c9f0ff191086ff597a3f513e66c3a667434592cc6a6c2ff80cf23e8d8b385cd0d904970ee1fc5030441894890157493149d810b34d0822648e1e14297ab2

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      10KB

                                                                                                                      MD5

                                                                                                                      cbc6add7ba4b1028f14e556b24323ca2

                                                                                                                      SHA1

                                                                                                                      fef34648f037acf14022112edbc76c544f913e36

                                                                                                                      SHA256

                                                                                                                      94208d814c1d3efb99834e693d2e63acadb7b36f5dcbd0777d0adfff0533d20e

                                                                                                                      SHA512

                                                                                                                      355228716583c1b807220c2c2b0b7c67a83a99f2f517eb4e409d74c1c2369e99f7a3ce6e675417762c4bcde0c9a80eca79bec91efa3e21723c7a9538dad293e9

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      a472f1a12fe9f224657c54790ee5810a

                                                                                                                      SHA1

                                                                                                                      dda5775578cbc706dcae91ad66b4aa82859d449d

                                                                                                                      SHA256

                                                                                                                      e266c904a6c64774cad36f21165b66eaf76c1fcafab2302eb559b3ac5a542a16

                                                                                                                      SHA512

                                                                                                                      56296e5e298ab73b7240f6293d831d9314b0d2e7e3e39ba7aa1765d7633b7296a724254fd0e6b50b9ac417e03a51af90107b0a3ede5b82ff037bc4172fc40b5f

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      28f24ddf67c57c7e83e1da8262dbc216

                                                                                                                      SHA1

                                                                                                                      a65f01683d3c054420eabd2a06412bc702fe841b

                                                                                                                      SHA256

                                                                                                                      6afd0655edd29dd43b23ec381c3d3ec81b32635a4b8a39c7ecdf6c61dce168d8

                                                                                                                      SHA512

                                                                                                                      f17393fa20476366cc0079d0612cac5c070265bbc48478ffea5ad32d2feccb51d125309df2609a31f34fad6c378ef98cfa6b12c5c69aafe5d74157e00fc0cb41

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      cc8d54c14e1bd599a63ebf35e66eee99

                                                                                                                      SHA1

                                                                                                                      100831b65708fac05edba8af71bc569447ee268d

                                                                                                                      SHA256

                                                                                                                      025ad135b985c393e3f98e7600ca65a556dc80c9564d62de90abbf029fe38b65

                                                                                                                      SHA512

                                                                                                                      b07a50fabee68122dc58200ee0618949947d07fee7221477af04064549ad7a91ab28cac52745f468333054ac85403044fc2ef7be0ec9a676d7f572273b76d49c

                                                                                                                    • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                                                      Filesize

                                                                                                                      11KB

                                                                                                                      MD5

                                                                                                                      d532c897e36fd4876fe422fddfff4f6a

                                                                                                                      SHA1

                                                                                                                      03f28fd3293987dafd495160bdef73be6936f241

                                                                                                                      SHA256

                                                                                                                      43fc28e71c35e2c82fab3cb127fab9e5b644f24b130344e6a325c25891b5af64

                                                                                                                      SHA512

                                                                                                                      189ce2b340215e409c04692adcdb7be4455c0681e2111b5b2558e4087ceb2ad489746452ba44da87210577fb1ad87c2081ea3efacdca0e85b292b748314f4adc

                                                                                                                    • C:\Users\Admin\Downloads\AimFury.zip:Zone.Identifier

                                                                                                                      Filesize

                                                                                                                      26B

                                                                                                                      MD5

                                                                                                                      fbccf14d504b7b2dbcb5a5bda75bd93b

                                                                                                                      SHA1

                                                                                                                      d59fc84cdd5217c6cf74785703655f78da6b582b

                                                                                                                      SHA256

                                                                                                                      eacd09517ce90d34ba562171d15ac40d302f0e691b439f91be1b6406e25f5913

                                                                                                                      SHA512

                                                                                                                      aa1d2b1ea3c9de3ccadb319d4e3e3276a2f27dd1a5244fe72de2b6f94083dddc762480482c5c2e53f803cd9e3973ddefc68966f974e124307b5043e654443b98