d760bfcac46b88b2d262f360c591af94e5655343f9b3c9b089554b56bc2363f3

Analysis

max time kernel
1034s
max time network
1056s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
06-03-2024 17:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

AngelAttack - WW3 Bakhmut.mp3
Size

9.2MB
MD5

7c6cbed4909644d9cd96f2a09607316a
SHA1

a7d284fe3bdc8d6777401aed779b5e63df64e3ea
SHA256

d760bfcac46b88b2d262f360c591af94e5655343f9b3c9b089554b56bc2363f3
SHA512

290a5d7fa27d7c3bdd1d8358a6f6f357d6fc732f30bf2ee4b75a3b590278d96f1b43b74bcc66411eb3d9e9d235c57c57c27aad47d1f8de18d4b4ba670f64a679
SSDEEP

196608:ol5ap42Zc2si7V5jw8VEQiVwjKt+7eQfyI5pNrX64TdlAgMUIL8:fy8VEQFrywfrX1TLAZRL8

Score

6^/10

Malware Config

Signatures

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\A:	unregmp2.exe
File opened (read-only)	\??\B:	unregmp2.exe
File opened (read-only)	\??\I:	unregmp2.exe
File opened (read-only)	\??\K:	unregmp2.exe
File opened (read-only)	\??\L:	unregmp2.exe
File opened (read-only)	\??\M:	unregmp2.exe
File opened (read-only)	\??\S:	unregmp2.exe
File opened (read-only)	\??\W:	unregmp2.exe
File opened (read-only)	\??\Z:	unregmp2.exe
File opened (read-only)	\??\H:	unregmp2.exe
File opened (read-only)	\??\J:	unregmp2.exe
File opened (read-only)	\??\N:	unregmp2.exe
File opened (read-only)	\??\O:	unregmp2.exe
File opened (read-only)	\??\U:	unregmp2.exe
File opened (read-only)	\??\X:	unregmp2.exe
File opened (read-only)	\??\Y:	unregmp2.exe
File opened (read-only)	\??\P:	unregmp2.exe
File opened (read-only)	\??\R:	unregmp2.exe
File opened (read-only)	\??\T:	unregmp2.exe
File opened (read-only)	\??\V:	unregmp2.exe
File opened (read-only)	\??\E:	unregmp2.exe
File opened (read-only)	\??\G:	unregmp2.exe
File opened (read-only)	\??\Q:	unregmp2.exe

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
6	discord.com
19	discord.com
58	discord.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1101742937-4171729779-750941522-1000\{FEBED902-A54D-4FAD-AD0C-49CDA74CA25C}	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1360	msedge.exe
1360	msedge.exe
3456	identity_helper.exe
3456	identity_helper.exe
5076	msedge.exe
5076	msedge.exe
3580	msedge.exe
3580	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe
4360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2828	unregmp2.exe
Token: SeCreatePagefilePrivilege	2828	unregmp2.exe
Token: 33	4032	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4032	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 29 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe
1824	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4340 wrote to memory of 2252	4340	wmplayer.exe	80
PID 4340 wrote to memory of 2252	4340	wmplayer.exe	80
PID 4340 wrote to memory of 2252	4340	wmplayer.exe	80
PID 4340 wrote to memory of 3736	4340	wmplayer.exe	81
PID 4340 wrote to memory of 3736	4340	wmplayer.exe	81
PID 4340 wrote to memory of 3736	4340	wmplayer.exe	81
PID 3736 wrote to memory of 2828	3736	unregmp2.exe	82
PID 3736 wrote to memory of 2828	3736	unregmp2.exe	82
PID 1824 wrote to memory of 1228	1824	msedge.exe	87
PID 1824 wrote to memory of 1228	1824	msedge.exe	87
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 2404	1824	msedge.exe	88
PID 1824 wrote to memory of 1360	1824	msedge.exe	89
PID 1824 wrote to memory of 1360	1824	msedge.exe	89
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90
PID 1824 wrote to memory of 880	1824	msedge.exe	90

C:\Program Files (x86)\Windows Media Player\wmplayer.exe
"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\AngelAttack - WW3 Bakhmut.mp3"
1⤵
- Suspicious use of WriteProcessMemory
PID:4340
- C:\Program Files (x86)\Windows Media Player\setup_wm.exe
  "C:\Program Files (x86)\Windows Media Player\setup_wm.exe" /RunOnce:"C:\Program Files (x86)\Windows Media Player\wmplayer.exe" /prefetch:6 /Open "C:\Users\Admin\AppData\Local\Temp\AngelAttack - WW3 Bakhmut.mp3"
  2⤵
  PID:2252
- C:\Windows\SysWOW64\unregmp2.exe
  "C:\Windows\System32\unregmp2.exe" /AsyncFirstLogon
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3736
- - C:\Windows\system32\unregmp2.exe
    "C:\Windows\SysNative\unregmp2.exe" /AsyncFirstLogon /REENTRANT
    3⤵
    - Enumerates connected drives
    - Suspicious use of AdjustPrivilegeToken
    PID:2828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff8f25f3cb8,0x7ff8f25f3cc8,0x7ff8f25f3cd8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2516 /prefetch:8
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5504 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3360 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1020 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1696 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1700 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,809218428883837538,3948993426346105747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:1040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4384

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2996

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x00000000000004B4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
601fbcb77ed9464402ad83ed36803fd1

SHA1
9a34f45553356ec48b03c4d2b2aa089b44c6532d

SHA256
09d069799186ae736e216ab7e4ecdd980c6b202121b47636f2d0dd0dd4cc9e15

SHA512
c1cb610c25effb19b1c69ddca07f470e785fd329ad4adda90fbccaec180f1cf0be796e5628a30d0af256f5c3dc81d2331603cf8269f038c33b20dbf788406220

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a91469041c09ba8e6c92487f02ca8040

SHA1
7207eded6577ec8dc3962cd5c3b093d194317ea1

SHA256
0fef2b2f8cd3ef7aca4d2480c0a65ed4c2456f7033267aa41df7124061c7d28f

SHA512
b620a381ff679ef45ae7ff8899c59b9e5f1c1a4bdcab1af54af2ea410025ed6bdab9272cc342ac3cb18913bc6f7f8156c95e0e0615219d1981a68922ce34230f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\11b2e3b1-997b-4590-9454-e33d1435a268.tmp

Filesize
3KB

MD5
95e33046b07a5adb726b327633a66dad

SHA1
190c6f2b07e4f7f91fd63182edcae3b0fa3b1fb1

SHA256
7c976301bcdf40fadcc0e9b49d238989e4384596391403204b9f2578b70cf293

SHA512
5dcb16e02bb6d10ea581b23b5301261c2fd0cc73a433b224019f24c336c32189e091f10931695847f2e398a08b61662e8f18760c4ca7bca939b31560c9079220

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1aebf090-f3a1-4763-8b3f-7a835d4fbb94.tmp

Filesize
1KB

MD5
b0db04826dcd11d2b6b08ce9f5cace6a

SHA1
861d0ec08e37806fd25975751325921a44c63f54

SHA256
0aefc63aa8bf180024d5576803c870a073a16ed7f72db10fc8f9450afc9d27cc

SHA512
0a63e6c36ceeb6b249bd75e24033f9060992cb6c6b16c9e607393a65c70646bd3d0b95a62010fa4cb4d9f0803ce9fd844743d554c491307259ecccfa59cdf584

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

Filesize
2.6MB

MD5
3b22b3c15d0c24e2de216ca39cc7dd3e

SHA1
9c3e4c9a00b2b49f799e3cee723132a6f7c9de61

SHA256
448e2ea529c588a6129b3247715d149a581004a270b62308da4838ce762427b2

SHA512
2b879f08211f322c20bb78d7b45688031e57d653c4c5a5daafd701faf85e6e5bcd9ccfcf67cf2fb3190d852f6a66df77bbcac1de4a70932f384c3e286da7007d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000053

Filesize
33KB

MD5
f6d06357dc0f07210711b757cc8495c2

SHA1
feee1b7a6fddcdb1792580e85949f931ff913f59

SHA256
7bb4528776b205c67f5ce401bca3781f5ffaddcfe8dc6f19d3eb907fc7fbe4cb

SHA512
c196993f066a929d0c6f548480bb9461eb2d3e23f6c045cd0b04812a3760e28bcab634c84d1e65590499489751da5cb68432e12b3fac2540ee19858e4d2791b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

Filesize
18KB

MD5
71c73cea30bd5d1058db7bc8445efa32

SHA1
fe9c3f695d9d867d3bca5e92672f26ce49983fbf

SHA256
0d86540fa1abaf5f8c811bc0c57115cb7d0fa8024bc948470f902e1eaed4068e

SHA512
0bfa0d0c4d47b4668d8e326386b480529284d9828d05fcfe47bff48e2e849ad45969c366764476464c74385e1d3bbcf242c5d268d3702f3fdc2a881a8330ad8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006f

Filesize
106KB

MD5
89df4cfb0594b366fc68bd6af3afbad9

SHA1
19d499dd563f155594a44a13899d2426ae008593

SHA256
5a78e8c73ca521c6392535cbe2bef32c0c9846ccb163f57ffd63ed80ba5cdbc6

SHA512
fd74320fc3050acad56e694677055da1ccece9a1332beab85731992b03c3ffac454e70ca58a06eaac0d0457509872562426fbd3ce5b6750ebfc97cf9e0c97d38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000070

Filesize
219KB

MD5
69e1d975b3307fa78ffa053afd3f5c01

SHA1
2a813a6f3c71dfd19b63533ed9036e583f7f1154

SHA256
cecf93f496a5c41215cb47292920695044293399d19db168c6646c38ac5941df

SHA512
867699c75c3feca02eb913957f04472bcf92f9d7f1f3c2f7b41e7ef9c392868c1c2d74a8d8f0cffaa852ad91f33aca23dbfb5928a404e6de0df51968b6b4de46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007e

Filesize
53KB

MD5
40d402fb2756fcf851dfdfc5a592ab3e

SHA1
1d66ee116278f23f5f4fc1d51d2ec5ae645d44b7

SHA256
2cb4f74f2e7b2bc38b5cc2b7dbdeff7e9f3751459781c3b92a409fd2f906786a

SHA512
e091bca1030ee9397e42d52c9dd10c21b972b5c952a22c2ab3478673e8eee3fb765e3ae6ed780c1ce413e27a0a9149e36449c86281f20355dfdc2f41f627895f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000080

Filesize
704KB

MD5
163c1283b05d0a4d363e60fd69302dd3

SHA1
4f51ab538cf962f28e498fa20d3729bf9293e178

SHA256
3b6ec4d3a2cbaa7491252be6748ea0ff722f16b7aadd7fbd6a0ed1287c72939c

SHA512
d72eec6d3e57a35ca6453accca765c1baeedc89460534f900e67464ededc2de769f7bf1ecda261d68521154050662f9453022b402d57c1424ef887c9e64efcc0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008f

Filesize
509KB

MD5
7bd132a76f8659728a3343ce75ef9bfd

SHA1
b74518a4c62e3c62fa350a687e0a9d45f4649858

SHA256
4d3bb162b077c9383bec60f253858e5cc2a58fa9b917917538d6b65654332bb2

SHA512
1dc4da51d6bfc716ef4466ac56f16b8411d2a6d3a6cef849f02626f4a9fac93ce6c9b11d4161a8d2e333030d2250b680866340f5030e2ca97c1b75f5c17dcc56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
5e63fcbfe072ff153fefaff46a4227c9

SHA1
18a7e2374d2d67b2d28e05c75170a093fdcfa245

SHA256
33d97c9a0f92beed87cf05ed5ff516271c90482ff400f76c2aa6fd088c51d5aa

SHA512
fd0cdeac6365d8adcb020f90eb40bbd0465a13a51080d8a3260bdc424d976bc4f8a04a4f7a42030e4df399347716099fd915192d956d5c138e3f3e178731d53e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
cfe10f54dfeaec34147194bfe350494b

SHA1
8a19832eefa728e2b4bfd8c0051623019ee52d42

SHA256
6be1d09d231f73ca5c619744ab1b7e6bda6d44de8abefdce8b727533e72b4f74

SHA512
77a018fabf8ca81979c78b8f1fd79b1b2f4d3a1e7fd2ae360f7a35b451206019bd78446a426720d18e411a56f3c3e75794a34c4f371f89ecc9fb45a4c1711d51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
a741a110157ab957e5b5553f1bc16f4c

SHA1
fac1694603aa46ea19a2f6f5021a1341f91783be

SHA256
82a75778323304859cede02988e471ee33a482c569c19604bc950876a629cc5a

SHA512
a878df2b33bbfeee7c7b1ecd9fa09d911f9683876135ae96cf14229ca902cb86331418655c14dbb814c331a6b55adcd6222bcc714caad98f23e855569033c34d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
cedc70f6b4ea4559be7a1b3b63bd2293

SHA1
8d00df04e6e105b853c819d43a77341c0be9f76b

SHA256
e1444d9ad8f306f796c5cf554fa68223b7cdfca4aedfaa4084438fb3c7b6aac1

SHA512
58f3fa8065d1d7414c0045774212b2bc776063ac448515847e6735a0c8dae7ef6e77300ddba81407f59395979be247176ad296b915b76461b0cffdbf470e6ce5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
33e98af5477af2064fc579484091b90a

SHA1
658935d3a56d17ee8698a4bf7d28412022d22d7c

SHA256
7e4afdd52565077c79432c544d1d35c2be112b2ef24180f17da77af10995d6f1

SHA512
c5947c898db0bcafb7629750cb231217929a1daf39cb260d9660d751827e0f4ec7883a1bcf9304deeb92d9c6d5e85bdd44bdd2d88fcd2b34587845235b82f01e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
9ea2716712400d21826efa2676a7683d

SHA1
d88ef01f667e4ab52ed612fa0c2768e215c894fc

SHA256
19b8b89bcdf9b2003f8bcb2e556953ca3d7c7d21bc94902aae64aec4ffb95602

SHA512
2a5a6ff27e308627999157fbe9c45cce278491446fdd75ff9583d1194b6ea7d119710b4676e73cefc17c07ccf7a1eac46f7c2d51b3aecc127d1851e0c607dcc0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
ed48b76ce4cfeedcd5b9ec5ba3d411f5

SHA1
9b7f6742eea4dc4fdc9653a8342bda8a6d1a6d97

SHA256
9fb98d6744c29bb41d30b7b742e9e7b35f184dbbe3225b9f4519286d4a0d4e99

SHA512
65aa34122819b129e6a4e634451da4d45b7dfa5d67fdfb97e883304e18cfbf2c106ab3cae46108a163533c4c47bf22618a233821cf08f00440d9025125abebbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
4a91c0e1120f5414b2f40bf50e1449f1

SHA1
20c494f9e2ee9e969232226b3d57089df3bfe71d

SHA256
6f23d9458b848f33c7cc3644e816898305d569619620ef3113933a3b327f050c

SHA512
e76560812e9192a47a78b5479ea517bd74d3a4f3a2541e4a1ac32250bfc751c3dc846595b9ef7c12a5373e4e50c4100df11cd4d7e8a017721fad16ee9672aec9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
bb721fd8a309557107ec942911b406a8

SHA1
975c1e00342b69db0590cbe65b7e543bafa8fc66

SHA256
b3419c83b5198ba84a7b12c20765d230b919152a20320a32214966a56afc9538

SHA512
f9eb6f5c619afeb629c511c6b52fdde0401b73c9247de3e6d2a30c118e7060327bdec12a2a519316970fcc7a30d760cf7e63ea0a738faeffc648daa4104a8a42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
aaa4320a32fbc83f2fc0503c5e626001

SHA1
9edfd406ac978ab0122144ddeff86ad00e706e03

SHA256
4b9dfecfcb6c5ee2b85fe6f2729dde510d0077e8a5bbdc07753c6ba60050dd39

SHA512
cba3bfe4512f10137b5d70251cea929b5888dd807310a6fd844b78454e388f8f768259696dd60d5e1f2188b32e92d07c342abf9521bcff8c1e78b446096dbbd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\temp-index

Filesize
96B

MD5
4d01beb7db3b541273752f992b2ff0dc

SHA1
76837e039e389192a8b959ee9a82ef60fca81804

SHA256
8cd3626774525ab15ebd0adbb6281654f73ecc40de414faf3ab9b3fb629d86b6

SHA512
08c6053282f3b7532b372968dbbb074541536259ad38e21d56cf0de1da1ee2cc42be719fd5b1cb671d64b936f2f8515833f8b5c3d41bd79f2ea850703e30476e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
0eacadbe4a9e98b624a0cd377b365f3e

SHA1
608daf59385efccdd16d5ba28992a03402fde99d

SHA256
ec5a431d31df7fc147fc1f9261adf7c7ffd766260c7a5bcf9bb374b067484f9c

SHA512
695037f0e9da9adb3b94792b20f651017c88e8114299ec748469d1484d03bd9b475859059d39d07b6106de39fcb677e4566e69895ebc980d9f2e79ce1e4116a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
854834bca08c70dd51ea139e27e90f35

SHA1
61883b375a8c596023c3ad2de0ea39ae91b5fa24

SHA256
060c01d7dee513f602facdddede77c0c7629d39d7fc784da76c47b9707aa396d

SHA512
b2ca0a61890d223f9003bc7e21d2411cbc39cadfd24d281328b795a8632949f6680b5676dec877093d5e8af88974e4d62655967d274a8497c4e8250f2b139a3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
520bceb33377c50ed041e7a49310ad46

SHA1
c0bf3cd3233377b51758a11ea60dc55259ee2384

SHA256
772c9d3c120d0b5136af738a361e13fd833f56143c9589666d48e8809fe31595

SHA512
c22885b6ba199fd0ed0ee52d10d787cddcb10b19485f75b3b98070db623e7a4806d47fc37ebc5c2bb087943d2e8deba638a2a784b1bbd49214baf7e18f064714

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f3ae407c0eb7998f912f4b9c39c36682

SHA1
0b5bdaed1d1d98c6de530e64f3842c362110e628

SHA256
014c47a6caf5a1a9a8b6e33ef3ca40bc3cf430531ae1f06cb5422e4070d964df

SHA512
21ceaa6a21ea87cd620a7abb8da56505aa3d6f53e43a49665845672fb38528a021299af9ccd565d0e7b486ff88def5d3e5f92595181cabf2154951b5d45105a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b264ce6cd2500a6a15c996e96250c105

SHA1
d2458b32083edb0db8be037bfb60392f9a236ead

SHA256
55ce5d7aca643f689f01a3f6d2a88c66441005b6377ec7c738e66d1b52a1a165

SHA512
dd67226130527273f341051e7c7e6583651ef60ebcfb52e46a49686f42c289e1789557b640ed0183fb38b0fb7ce9f4d279ca28d627e462dc73fef82d52774172

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
293fec147960886370e6ccafb24476ee

SHA1
952071ea4b93c0b15dbbe95f2f54546f3c50ab29

SHA256
cdae617433f5d27bbd15e5524ece280e1ad64ee192ae960c0ffab51955626065

SHA512
08cf442eee1bf717e1c11ba2b33d5e383c1889d6683ab40db0c4c4daae90f59ffd0f8f92edc5492528f4cf2c16b6ef38ef9d253e9093b1c1b0a07c2b16dadbce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
1163d52823a9bf6fa50deb5e01af48f3

SHA1
394d9420e2bc9b977c0d65383f3c7018b27c573e

SHA256
558b1fde20d92de7803c875dab23dcfca37d36445ca1fa6b5d494d95f26a3403

SHA512
7e5841d308777cf80b1090e837e2a40d4d04b526a1884dd3cf6afc256ed0bb450af20884e476ded1e736c77834741db7ec9a58f6579c77d375773c3e34ef22da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
30849e11ccfb62b1ff802fc87f9772a0

SHA1
d368301d8a7ad0e378960188e10195681a229b39

SHA256
771894ee741fe6fecee9bdf8e7cc65f3fb046e3c7d7a0935fbc8cc7fbc42746c

SHA512
c7ebac09b6395c7d4ee520fe35bc192df30e762401c4fa3fed65cc36cb7443147733a8d6da40732d1c1725009985d8976bf71bce0a0a3b2e7784069f7f65b85b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
25e808aa6268a81e6f6f6442810ffeb0

SHA1
504ae2e52cde77b0afe56b240d94c7be6bbfc232

SHA256
92e31b725ae9d9c66cdfbcd63bd84fc25a0934ce9d9f6b336864513afeb6eb3e

SHA512
6763704992d268e27af2571b283c9fcbf08910356a9c097f88a8eaa02cd389fe23e88826a2649ea77916e40849f156d7d7a165b52ce15de559f73554a82b1c17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2510e41640ea357cdd27cdc4a93463e4

SHA1
beb99c5d47873c528a94ade57507250838384e8a

SHA256
373f42c2956e08017e9c9a897be67c8f3a5773b5bb66af985211e2bda66ca938

SHA512
342c5b29cc57f861fafe7c92dba13cb45a4a0b32805e636dc440ee037037d09f5a633f89b2d882e5d44922cee2c51a78f6943e26530c5a930c93d46b991ac783

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
082356ac500f9d3e6ad9c2e5619bd37a

SHA1
9837e4639039f9e813f5a708087aa0ff8d1ccddf

SHA256
e658d0c36a72466de993561fdc4a5154389266b0ee7cd90a6b9453c70f241dd6

SHA512
adbd6af7e8d9755d71abf101807993c475597ff95c21261243df1c900e5176e4ed549d7bcfe03e4ab0970f292fa0ef0bf64dabbacb43efb980c59c2392693e24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
ec881e8e985075ef0fdb69f46a484f43

SHA1
4ec47f2534dd5cc4e60ac09fe66b99687d72f3fb

SHA256
bbcc76621b70f79bb9cc7e61fceef5fd2fce7329425de00aa76cb846adcc31d4

SHA512
cdb7c04209f950193995eb0aba0b5fd97a514193da6230ef5813c0f8322bc5d450effd7550563630476e576d7fcf682ce44e402c5d39342113240aadf6370cec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
0cbc326e4c1a6c14567fa73d5bd97070

SHA1
84646726ed90f32303f06ed9e816de851d5d3fee

SHA256
0b5acb242c4c106304e78cf42e79e4db645c44fd7ce167263ce9444af2f2f08d

SHA512
e1bc738bbacb8e4daaccb9a86049f5de06baaaba6336ec5c329ac6e75d20dfdc87dfcd5c50b2ca2f8ba5264672e0c578a8d995e2da9d5cc6a90e2007f7424d5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
0228c0ac6b456b3e8e1d714c7cdebc6f

SHA1
c9f6262ae836f188725b7ee7cfff8c4aa0f5dd3f

SHA256
de46fbf713b791331137a9caf7797f8a0616c39cf182f3a4cf16058a1d819c29

SHA512
93116097d9fcd98569b2145fe6387123e18706717a1f0a0ce13afe2f0ded127b741e2e5508c1602a3ea68695015cf3491c2c57c02e8de05fc28f14dda4744954

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f2db4759867bf3b358fb33ab67a672b7

SHA1
92dc4853ba3c926f673a18e99af59d8debf68b3d

SHA256
c5b794775e159d19a34a5281e737b09d5c84472dc85e95e9d86c08f000d50250

SHA512
d042b195ac383f1ddb78d5c99bd9ccbe8c1b84b68028087735d919cb5f0d996d9af014c8ac215eed6d1673c222890e521606e3918aa4c3e1b46a87e4fba85541

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1f336766b8ccf2bef3125acd20039539

SHA1
58f4e4aa0546a0b8bdd906b061bf996277610e66

SHA256
7fc39c37f68ecb7612237d0bc3d3e8b5873a997704f9b7ac728ab32e3966802a

SHA512
05c87def1854e813ad9e45469e69fcc24fad69bc924341b5e30b0e55bc09ffbe57520e3ced91d42a60754c597083185949ef430b7e5d56b368778a7c421036e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9db11411f687a219d6d761f187142836

SHA1
6f1e501c1e78cfb01717ce0d129d77ab115daf60

SHA256
69050ac26e2b41a23861a2bc7dbaa5029199948e4d32bffe213c74e28b5e2fc3

SHA512
e5ee823f2f82a34d01b830a04b40f2985391e406e74aa3a0a048b1913fd835b8c54a902c72334ec4d71b07ff9583e3a6de1d8d748c4d728b996cbf1a3a5969ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cb041ec0558534822486ec6a1624165b

SHA1
b8795058538dd068ca4b7fe5ec23e68f0836cf06

SHA256
6219b49c0f1758c7e571457020e9a4687d496de4d2bd7f422fb7dbf09dda2b99

SHA512
a1d96773cfe3660aeb328c058af8d14dafc5dd119a73794ef3cc2c855c83ac09de8d7d5c2392007cbbb1255dcf081e4c2bdd94b54d05c01e0128ebda3c2a0731

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0a5364d77f3f8e6132d0614858b9df80

SHA1
705cc40d19d4506ad675a3ef4dcee88f88ed37ca

SHA256
7a4c57881a2daa7442f8ceb54ad0c88aac53f7c69935f774b1e709b85327fb1d

SHA512
918447477af3a74c2881e3038fadf150b428e27bd07daa43f610f53e98fbdf26e28233b722529d4469c97064b3faa2f5b5effabb4d0f4245cc4b523d0dd1d417

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c42eaba2085e46e2d66b45f8f92aa5bb

SHA1
6beefd0b3b12fb63b38cebe07b4006eeee2a4dbf

SHA256
9fa4f34c0493c7cb9b6a4a4306735c1a439b3c854bab4e81f7b4ab6f1dc771d8

SHA512
9feeaad727c0075e0a759e2d11fb81f0807f1c0bbe5338db934ad8a28a47c770065fd3b3debd8fbc190a124ff1d47bf9fed2cedc9ce0cafaaeee4fd09779fcf6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ea2d168023dcb60c471613d2fa83010a

SHA1
0290d1c9b621eb388b83d186e16d08f259bf0675

SHA256
a63c554445223fc0b14845200f0edeeb13fa26dbbb0f86918ebc2e68ce84fd22

SHA512
ea8c5332b505b68225acfab43eef20fcd856dd2ef7ed7949d740727cd20e2a4de52f78be9666c1f4881939901400febd584ae6810d2be7f485f13cd98cfa8d07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
158cc884bc23fd4149f063625086b889

SHA1
a3cd929d889ff39e781548f0e4a446a87c9b4920

SHA256
3b45af4cdee1728d9d9032c8fffa74a63626d54246d3ee9a2a4334710213ff99

SHA512
0ef0a87f31ec9b6854303bc80811bef5511c037cc3f9d3af1ed47f3ec8f78908545db238ec8fc87f57199594385ce8ae46c4bc9ee16603680364807a2460d5bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
425397011ce1f1ee232fce6dafcdfb78

SHA1
081237fe1747a780aa8911ac7709bc812c8ba2ef

SHA256
3dc0ccdccd8728f2c022629136bf6883f767cea34758871c8489ceef852d633a

SHA512
aa21e6e6d12edfa0e94ef3ded6c7c169b587fb8318b0c4b20142f557f121b3985e51ffb4b405d096b0b6353c8af07795ab4edb2878c520b472b189d60b9d7ea5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2291b60f35595cd44416744ec22af586

SHA1
3eb165155f53b5bec340fe1c7ae45b7798b1d811

SHA256
e3a2e608c5379f08d52956f0947293eac8e7a1930638dd6a81abc08f0f6010b8

SHA512
74731254c8fb089c440a0246e9221b64eaea66488f8953b94a8c6dd528b14b50b51ed11a8c8ff41e831c02a9b73346859dd1bc9646415a6c5cbf1289a891243a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
00c7cd6ffe6dd51986cfcb2f23112ee3

SHA1
fb09370411ab7c3e16f0a369f9d9777c49b0b11d

SHA256
a6da379e733f50a86ba330e286c5e07087a85152085151b683dac0752f9917f8

SHA512
7dfb581ff01fff2ce08556b4c249de7aa29cf782566ad56c3b58b87d017ebfb805c324e06ca419fe1b7487827d4d82ec3d9902930e07bdbd2c1561210fad4237

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
8e5b39a180648f73192e83f0c7f66ba9

SHA1
eb020ff08174638f40a95dc573b746ed966ba11e

SHA256
faa05329cf396c3698dc646ffab802719a2cd7583e00366da62e8d6112f00e8e

SHA512
c2a665a53a9944cc1f37e00db5e6ed6d20cee36bf3360ded11c63781139c9f30d531b8eb5913978e45e6cdd91b04ec9e638c021fe756616e084594633d6c2141

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
5249094f69d6136b75d319a6c76962cb

SHA1
4749eb8d35479eceefe6294fdb5e528affadd013

SHA256
d439b9e9c1b022b9fd93796f918d0083077f48a0887ef73a3591abf7ba2d73f1

SHA512
f20206745f2d022d4529c5df4c423275a4f192dff5b500e14df45cea4f2cf106ad3c4cf917500349fb7a749e929023e72eff8b0ed476c1a21851160c5876cb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
9920756a0a1018fa01f6501d9fc385e2

SHA1
e620561c6dd08133258691b9f33843a13c739616

SHA256
20137bb9644949b8c7943c8e70480865da23d2954672db42b109c769b199543f

SHA512
e71fd1fc3c6d6c7473e8444bac1f3c2de80ab999611c9f43c6ec61547ec0c113f3f38e60b2653633dd36f5cb63e31bffc03b7dfde26fa47ebc1cfd73b646285b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
22053ccff1b7476d798393d22c2be6ca

SHA1
4808e587ac4168228992d1c54893f5305ea48f26

SHA256
5ebd5716fed6d7deaa7ee6155d4bac0cc298090cc01a166e327aeedc695862a3

SHA512
991e7d76895beb3c6b91e2db99531235a1e434f130690bc12b8e26ffc8924853012ab818a5a058f15f49eaf6ab2c99e18a48a193c3b4f73e0b7ba2268896b1d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
c3ee7690be7c2a0ec0f9b8f4c92b796d

SHA1
12326f9df9a878c21f90b720cc58099b52d59325

SHA256
233164431005c4a1e6c46b7b327b81fa8853105e4647db3559623eaf4e38c0f3

SHA512
5f03e1d63ea727edaba44a04ecf67188e9768ac73b1c0ef5bf7da734fb85c615d5c90974190b9f52a4c12b1ad548fff6da2c82a8b7428ecc4a1a5c6c8e4efaf2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
aaa8a067b59a998a0768256524c4f852

SHA1
99a64bfa3cbeb506db215e849d2bc64cb4838aba

SHA256
f45f4b3d9c13844f40e1f589bfa658c25a0caa033a9726aa609ba9d82e7f2c4a

SHA512
219755168812c209d5890c59ed5d4e2328a2d720dbb4f18905f5152ccce7f46642e8ca9619967cce387140891a71c16b117a2573515b2bd953528f5c4808f282

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
a3242cb319981f867476ce29adfbdbb4

SHA1
9d505e5a8dbc81befc669ded457276f2bbe0fd03

SHA256
7fe908a50f1b05745a001d6773868d5f7167ccb9f795b899724b99f0dbf09360

SHA512
f524aeb7c9685d9ec9084fff3a923f23f7e8f886c3dfaf858de462fca25fef4f3e9abc72599497ea9e8d0d16f3ae2fa292594c9d54606725955e6a78e2320e9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6e30220764b9a51662c1d68d1e680cba

SHA1
6febc2d69b9f104ab44b94fcc69def16d3c020ab

SHA256
63a80a369f2b2767e88f5ff8530fef4d9a63cd02f371ba3e79474c0c9e3372cb

SHA512
99e9455df891928d1fabdab74405766e18ebd2d8a0c80ff597c10b592999922458ee3d629ee8b6f70c30f12f504b1f4c39785113db2723bc2789e7feace86c99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2ad31dfb9f5e554722ae3789fd0d091f

SHA1
cc84788388ec384f134d62e5c0ed71c0d1421796

SHA256
555ec3b3392120bc2b2e96f8402aaf52900c2db94a276d0cf7b702301c9b4aa8

SHA512
0dfbef3d8f722711b9c396548630b6a311b6eebf23a6ddd91c0586a4e50e8bb3d59f108a7605a48f78e9cb0be2b167b6b23f831178e0dfeede532d5551f98075

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6a00e98746a2da51e77fe4256cf58152

SHA1
de7b437feaee74e35cdbf8f87377721fe62348fb

SHA256
bcf5dd4403440a60d539fdb65bbc9901399606d3bc10485af18f768f359d6b45

SHA512
89472687d103f9d44b735cbfc2087fa790ee8bc05c3c75111a066aae21cda88e3890eed67768bc54bdef882b80fba55968a795eee177dd20e15e5c2cc6edf069

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
762929fb81a21e18276abbfae71558b5

SHA1
8a16749a4f8a5137dd381ae8f489706005960d06

SHA256
7253bc37fb31e2925761e32436553fccef07f5a02cc882cd199252a3ea1824b0

SHA512
e154330c1c9edfb45f6ef5bed3bf3bf85d7fefa40f5f8dcc34b685cb0e66f771a4caec356add311a716efec6b10ec870b8632e27d5220279c0e943fa4c90ca34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6b6714bc1b322168984ee912c234e4f4

SHA1
488c436038e6185d7ec9070e0edf74516fd37f62

SHA256
919df43b40afa37ba11bfb58afd0931c3dfab1030bb306b6a464f4009df40a64

SHA512
b8f98406569a40ba0acd90adb4078fc1ce99913bd885698f8f46549646ec8b42d69dd98e9dd740a3ac5c30861f91e5f3ad69d6abdf7e1f7a19ed9dbe5628f885

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
01a5366366a30a0f0f02d0421e0329be

SHA1
9b88c846319ebd157849b739632d1ae0874afc0a

SHA256
1c71d0ab34330282d6bd6d577b6e3ad1db59cef91a9140354685730a12ccfda5

SHA512
cce19f6964409baf4eb2c29f6487a8f1b98bca31c2e85e26734e0a426254c025af61c34d3d5f16d2d42556824fabf6b465c48f982cf2d657039457f83459d959

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
dd469b8197ae3ee9ccb0a2c8c970750d

SHA1
1e38474bc0a0ac4ad38b0ccc29d850893a1a3dc5

SHA256
0bad4f0aea9d39bc2f6711a9e740a84a42678418398642a39610197fd3d49a14

SHA512
dd740b6699cda4682bbf42511e6c1b7055a9eb05b91f3d0687f54b3345de00564971cd2df444718e62f367023e809c720d8d2f0e6875930369abb5c5b78dc588

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
ffcba37fec26deeb160a4856afd8d30a

SHA1
6df3ff4ad91f0b8f585af84020a34effe5e06ddc

SHA256
aa30716a7c2bc110bc4c54c5af9597c1f5b80414ca37c6147efae991677cc64c

SHA512
6544e9b09e36c1d508a30ee1d05e71dc30c285d68dccb547b7554294c4ff1804a158f82666caa32d51705f9c2ec9e1f67bdc451f1636341e5d8cb6c654fed35d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
f763cece601e9fd2f0a1b7ba6d9fd312

SHA1
d6151c45340ed8800e93087f08ff363d78f2ffbc

SHA256
f446562ee6fbc306315dda6a8e209eae459f9992b3e7ebd1bd14fa5ab65b6ad2

SHA512
7648d41cadac722ed31f8bd5167d6441dbc6f38322cadfa19ca2cb59c26b1b08925c2e555b15950d5c5641fdd12c7b03370e46dfbea525105fe02793a9b7b655

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
64580d1da73db99152f1235efb59f8e6

SHA1
29b04a2177ab464868f32f2c179bd2457f077ee0

SHA256
e9d8ecdedba249d98cb5ef5b9c5d47ab733d4aa3a8155eda57b5a4a13ad32ecc

SHA512
176fbf1144292b72ccddd7bef92eb1ba4e4b2195dbf79c1e12beefc58bf6d33ef0dc8700046eca7ca94ee8403d978cebdded68109ef90d84740188485b45d4f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
0263cb0697fb523047d6bdb9e3415712

SHA1
513e864b5bb3a9d6118eeb0cb691d6d9799db914

SHA256
84694233f3d3f8e74f56f6bd5bb285e6670352875fd2c913dc0af87fa96dfe35

SHA512
f8d50c51b21717431fe19c384b1530de8193e50b15f63cabd1d11068c7b1c281855eed7c07632f7787032d487210091337958e8ed669fa56e642fd0612c6c981

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
33c8316d2e61bd609a5847dddacead7c

SHA1
f2b0480779018aa2eb6f562311ba14ced4b03b42

SHA256
bbb34866d6f0268ebef0fd00f375403a732f15e64ecac214125289767fe56f63

SHA512
9b55ba496edea800e540576516860a90afc0fd1aa054ef476779125c691ea4810db25de9a87134a3a90c195cbe31935f0d3bb73c1ebd85ce1fb92445234e7a75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
ecfdadf2afd368775c16f080078cd381

SHA1
bd7d7e9fcf0d11a041f6f8aba840b5ed057ce5ab

SHA256
4fb08b48b2afdd104ff15ae9b82f9e4f0e0bf0ba77f7fa0183b19e5692afe0ac

SHA512
bb55324c74713514a3c4ddd27cbec44cf6be5d873c5d82c1ca7d3bce55e7d5c0cf1e09100045efc36ea437a2706b6bf24846a213cdcf15b71390fff6058d1144

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
41e8bdabf2148fdbd35b493c98ed6db1

SHA1
2b18ec8f3fe191135c83f28e4455fbc50bc79687

SHA256
028ed4f964745f002d43bb9937b552904892fdf33f3ce716a12b322b5f15ffb3

SHA512
54e1ecc8902625f69c1a539728cf567cffe82cf719bf9f301e017e9846313077582e739c4769f41056d30042889ad590bcaee52bb8f8a2eb2adf9340f0df07b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
59119fdb7aa371cb108f2f7f4adf4003

SHA1
08a95efaa976f1cd72f1186a684da6fb645dcf77

SHA256
f58a3b22ac7a7383a1a7ead131d3f3e4c7d1c702cd71785ea9d06a965296adf5

SHA512
7e8132424e3a99f47a5c04f0deaece4330eaf5f560bec8650299e1a9697f489f606bd7d339e72c5f49f2600d597f94ef3fdd8c6b25c20665878a9b45a45a3b8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
6e842d63e2bcb1ea6b87a80358d89e36

SHA1
9c9d805b4040cccae22a167b22480405e113ae1d

SHA256
eef9dbec4a4225248d50cf2bccfc66a0974ba4a8c2b125d432e17fad902c8025

SHA512
4ef2ea66250018c6eae432f91bafcc931cd1a769df9a8e324594cfe9dfca58e4cf9d6f7e0a7327d45e270eedaffa571aa6ccdda9fdd36af64aadc334aa68906a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d87d30062e3d6dc30e0884954b793c4e

SHA1
433caccd810f5fb3a7caef2d1825916b6e662307

SHA256
56b194ff83b48af3de87a0f98996ea57369772edeacc82426f40d01722945eb4

SHA512
e10046204dbf2ebf7007c72663f72df5fb846eb457f1df844ff15377b8e330aa91e3644ff4fb6df4af51bdbc51b0b1f0ced32e80c2774c77c5aec38939a6f23a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d0373ebc98771e8dbacd9fa98ac24dec

SHA1
dcf77a54cf02155cf2ead10b2f9187b91ff369e3

SHA256
3108e2a6162e6347740b8d93cb93043241ca45132bd61669e919d1dd00478b11

SHA512
d87ab5064c8798ca60ca5b43cf5015223c09b3c498c4bc4f72ea66e684a05957d6d6d532e699db4c3a1dd6d7f5c5ee1a7d5bab6166cbb67f98aa06547ce3718b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
feac46a7b8096c52530a013ea3bc8c60

SHA1
424cd22fbb479b03179ec9bba6f61a14f89992f2

SHA256
5ae86ebe444142e9e2394895c700c18eb819029c55a8b6c562c285b28d97e9ca

SHA512
f9fb87b321969b44ccad41888e76c1439e7b00c71b1c6b830aac22af4966b9fd92d507e80bab1e01a68ca456f0a3de71da183756367b3b1bf14c8ba18491d512

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
72c5ac47ab7b35531075c65486da6dd0

SHA1
6fb46527b68a1109e7607d003dc4f35a5bd27541

SHA256
edf42fde8bff6418cede76ed08917dfffb2b481ca0e3d2841dbae81c25414ed8

SHA512
429d04455b5bf3fe23da75c46daf147f01cbddd7c80e99a900bfafb8ac86591f77f896335c4eeb94943b561ec1f6dd06de304d825d4195139a4212e1c321e1c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2a062c30ad7918673e921e2512e35ab4

SHA1
508a7f24b8694d9350f4569083fe6aad07d4b2e1

SHA256
02b2d116ebd909b4e195764fbc3a4cd1bef2649a92024c00f73f51d92f050cc6

SHA512
bfae93762d6fcc7d96e46664c278013a596978cc96b5b3b230096176f710abe33ce98082a42585b4cdae19fb32008479927d684d5503bc6395f6fa6a53e33bac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
b4d2968bdeeb8f71a6d9630f1ffbccb2

SHA1
349528a027984f6585e7cdf803e9d5263d2c28a0

SHA256
52c53f87d7a678dd6fb3c56970d27f7db60e7f65d6de22044e156445f03da9c6

SHA512
275c87565b70ed10261aad88a39d65f1d7d47c9eae9a2135730de7410dded960a8c8fab8cf9a162912647ffedd172375a8a5fa5103770eeb2f002ed5ee17b343

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
6f9f5273aeffc2765ccaa75808867e2b

SHA1
bde4c1ebd69ce8b0ea129d97189d2903963a83d4

SHA256
0f7c7db5da23c4ce566ce0593a022d2947791b0681fe29668f234ae23aa45f91

SHA512
fcbae051eb684f88ce53b67088fc61100e15eebb8149fc95db310597f23aa3ba53ded203504e7aaeb0928f5fa3c4d74f1ce1a70491cdd3a2b06acd7fe4c9a318

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
5d1566348402c38682d6401245e11fde

SHA1
4b60b973f1e541977fcce739dbaddca1eee6f240

SHA256
288a26febfdaca0d142d558ac43d6001e6f00fa25ce3195bae801b554f07f6ed

SHA512
c9f3dfa53c089caa90a7518160e9d7ee6a714a8cce9a62b919233dacf252cab30fd7b46a07c4a61ba0713e8890b9f9f4656459ee85c7a4049b3e6f4182a161b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
62daed90a6227adc3c48a8d4ee256635

SHA1
227a4c0854b75f2dff668fdc28ebb2b60fa7096f

SHA256
102c2a50d17839b08aeb74ebe83ced1471748fc3837c68dbff2011a9716176b1

SHA512
7b3204d8a72e0d03dc752417676e949f91e62e76a0cccc3e2a65b3c911ed93fe37d42b70bfdd0bd1dfc670c4d0b52a85917117773f2fde1d3f670bc3e9430105

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
532965c9f95f3a0d0e6cfae42751602f

SHA1
1e690626a2e46f9ffbe69033cee6d2ef01128fc6

SHA256
1b92ad8fee2ed6e449e1df366b145e88078b48af9998a25a93d7fe50b0c53c6b

SHA512
f9e9d033585ebb843a201e2c847fcebae476c5bf07a6952c4914f3b28920e813e15dfa2852687ca942bcb2d8e0a588dc2d1f15af9a8cbdf3ba4e90a7b2250fd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
b1005ea65722cb677e63c39844878f6e

SHA1
3d7575f8046f1a7ac3102d0c5537a60f237f44cf

SHA256
de91370ce1d1f62ca49c5ea830b6b70026656c6bd22586f906daa93c90b43f10

SHA512
14a0dc551e8d684b983e2d6490e1f4f4d1e950a0d102ba051e447aea50e0674aa0d51ab299844817d858dfe5a189b02a7a16f249e130640c7310a0e96b439288

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
87f597c8bd873c31aaaaf0b52c0ac3f8

SHA1
7cb2d7b92f58447c0308b141b8aab53b8a85f39f

SHA256
aaa4d2edf2c7e3b087d6129ceba5cb549e82229a60068a7472afa81c0fa94b59

SHA512
f472554a010d6e267632a6ac64b46c85d9e77b2c839b12947d52dd5ef89f796d18a8cb12e15f88e1ec691025f9b0d8f9412dddda3e84235dbaba8038fa83f788

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
9549514a280c135cf7c656194d0dd3ae

SHA1
90a51509ef8acecca5e078538121fd0d0e92b00b

SHA256
21f9621af6cbbaa5a7a7511ecc698607f11e89f0a92790a07440bdd22f9c85a0

SHA512
673db93bb9f00fe564216eb3cca1246252a07e0fd71b2a991df134f8078b97270b31b9cb71b53fe6589e166969affbabdb58b05c569c17bfad0af5ba18eabfa1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
382d23daef62b7426672832279115f32

SHA1
579e215886023d4335cff9aaaf8104052ba919fe

SHA256
7fcf68b7e42519e9bdefe2957891522f01d5d32b50dfbb5e3d0f7b781082d708

SHA512
473df669deaf265db272cb140da7c73d9959b1ffcb968213595082ea9cc4a5bfcd1bf06419137d3fd72a0df97dedd6d06e73a6978d8761a8782f4595f211edb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
34024d5a1b6580e14b0b05ab970cef1f

SHA1
c035702ed8a2d6c9345a5114e21f28b90ad93c2c

SHA256
e9a7a65ac3d4d7d5eb60a13f7419089c820a466c17159988556a345735975a06

SHA512
6862db08c2649caa5f0e08813d6a69b9a0deddd0b9e4f5725597dcc59478e013be205edbc36204117877b45ef0dee89db7d376da6aba08000b8e45ecad4e857c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
e6b9f56593ce978597161b85db34cb6c

SHA1
85755896a449e74a72df50c730a013a5deea9de5

SHA256
99cfaeba3e2711d0d6fe1ee25dac7baeb74005887fcea0604c83a71bc55dd4b7

SHA512
740c8a6948f5eead962b9e1226407d45101575c7c1b1eca441edc2819ebe93d2239af354b74a645979bc0a56f30922f471a0a151a62dce95d46dbf03975db004

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
250bc7d7a8aa79e6ee9026da10fd6322

SHA1
eb2b1d4b61aab88aae453a7ee90433b6e776baad

SHA256
120f94cc79ca0c96480587a026ccdf06aa8411512e028960940fe9bd135f3753

SHA512
ce04bb76a21b139e54a650cdaad453f7efc4fb7d06011d98aa111ede9baeec8c9c04a81b51f5e4a4fdd54dcb07ca123925651b1600079bb069f744aecd7193a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
c2c61829448b79ff89a34588309ea310

SHA1
2907853b4b94590234e4bb2ae5e1c01baa3e5777

SHA256
ba920af7a8fd50af7ced4a7deeec874a482b4bc98f71ff3e42906c222377a706

SHA512
dbbc845be0b3480052f8a891e626e3244cf46065e5a46f7a7eb6663829262097536d8fb7acc9f421fa8b006517824b348f30a8888147985ad4e8922201325230

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
7f8fd6181b5dde87e51c94a58063c707

SHA1
e29bfcd29d114e6b10871cc8124a86050bf34cef

SHA256
130f830467fe44b65badd616e80f7a94498de9a496538d6bddb9c60d57faf928

SHA512
1aac4c9df0313756879ea008a35d27ddd94bc1075a2d5e874d7a6772d1693aa72a176311ebc17ba9a6143d0755c6be0bec85cd0119e53459d9bff115cdc2f906

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582fe5.TMP

Filesize
370B

MD5
19f70adc1d4d7e2a8684aa43f5650723

SHA1
6e6e8e1f0569507130792d9a619c487b97cb500b

SHA256
1b0200922553a3474e0241702e3a2ed41989596d5ef180ee6da5cb9c53c5e46b

SHA512
f326b8e865179433614f4acab98b90f13ad84ea4df8a52f7c7b090c90a2240a42c5aa7cc90457d2b64dea0cc45f7c5b3fb5e54d36938c4af0346862afcb848fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e569c4f2-0736-4067-9358-6d7dbbfac50d.tmp

Filesize
3KB

MD5
e2e1e174b00ff5141b5a16bff1ed79b5

SHA1
c97e4d7aeced24685086949b8211dae559cef0e8

SHA256
8c9daf2cd47d0b11fb617f47000ac8aa26b5cc3e2d2b6f2a284370c9e25ea5fd

SHA512
ae401c9dbec124126c3f9ce61b446d38ca81508dd4b6ad2c918f2729b159ef82484b4e8aeb7c3106b9e67a85f8f5901bfe97031ebc5731e9ab1b301c6165715e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\f05a3304-080d-40c5-9e5f-fcb6256242be.tmp

Filesize
3KB

MD5
dca41ada70d6099ddefed8ef3252da20

SHA1
d1c3ae47267eed8d741cef6c717e6d800c12444c

SHA256
4866dea8dc17ab4cfb5556766e67f623babd746c53dbe681f3bf6195e490d753

SHA512
84801127ab482dc4b6dde5328b12bd7d7c66921e33642c35daa8b8cedb8b1c8d4a57531f840020ca603a2c6f1ff23a3ac8df0065b2eb4b5a7b1f0b639f7055f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
be1311454cce0b7b4a1f235e8d0c022d

SHA1
e692d6cfe82ee0ea898167771522f13dcbdb44f5

SHA256
1be658520583a013378782a2b461b4229dbef0db4322b000c6cb263c3cdcd1aa

SHA512
88f009563c625665a55771287cac2b3449caac738a1fdb125716a2d03ef5691b04f8e2a37dcd8098b35ef89f8c9cde51e458796630035f978cf9249d14795753

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb

Filesize
256KB

MD5
255a369f34dde3ae295134b078a51d4e

SHA1
bc538fc5b21398af2e4b62e6bb50d9956517fb5b

SHA256
cca1c0f3904bc5c89ce672e90ad14a9b238633e2ad38d2be9869cc3e6f4e138d

SHA512
a39e0d98f2e8b75edd09845202dcd9ceec03cdded438ab636fd860ed65dd790bcd5f37892ec82367be77843dd23889c261a1775ed3f5bbfa8824b3ccb5aadd91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML

Filesize
9KB

MD5
7050d5ae8acfbe560fa11073fef8185d

SHA1
5bc38e77ff06785fe0aec5a345c4ccd15752560e

SHA256
cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b

SHA512
a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b

Download Submit
C:\Users\Admin\AppData\Local\Temp\wmsetup.log

Filesize
1KB

MD5
17c6700a3e6b96b78eff061f43e42620

SHA1
9763e07f3367d278de001281d56505190792f2ac

SHA256
76ae2c5ef0a16e6fb4f57e1b4d60975671fd90f1fb0a1515f662668be5535f96

SHA512
36878ab5509a52cc0e508564ef21d01a8eeff4ceae444daeb0d920f38edded646555117e56e2ef2d298ed3e28b9ea6e2e51e94de3a2dc95348b11a47240b86b0

Download Submit