hxxps://gamejolt[.]com/games/windows11horror/868874?utm_source=share&utm_medium=web

Analysis

max time kernel
929s
max time network
934s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2024, 14:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://gamejolt.com/games/windows11horror/868874?utm_source=share&utm_medium=web

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Moniker = "cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 479457.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
2004	msedge.exe
2004	msedge.exe
1420	msedge.exe
1420	msedge.exe
3020	identity_helper.exe
3020	identity_helper.exe
3064	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe
4512	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 29 IoCs

pid	Process
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4628	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4628	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 37 IoCs

pid	Process
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe
1420	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1420 wrote to memory of 3528	1420	msedge.exe	87
PID 1420 wrote to memory of 3528	1420	msedge.exe	87
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 3192	1420	msedge.exe	88
PID 1420 wrote to memory of 2004	1420	msedge.exe	89
PID 1420 wrote to memory of 2004	1420	msedge.exe	89
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90
PID 1420 wrote to memory of 3728	1420	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://gamejolt.com/games/windows11horror/868874?utm_source=share&utm_medium=web
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff06ce46f8,0x7fff06ce4708,0x7fff06ce4718
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2008 /prefetch:2
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3520 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5700 /prefetch:8
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2548 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6268 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6452 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6876 /prefetch:8
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=7320 /prefetch:8
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6856 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7584 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7744 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7740 /prefetch:1
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6824 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7100 /prefetch:1
  2⤵
  PID:5980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1772 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1768,7802450713224145835,6743242610609935241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2396

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3340

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x470 0x478
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4628

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f35bb0615bb9816f562b83304e456294

SHA1
1049e2bd3e1bbb4cea572467d7c4a96648659cb4

SHA256
05e80abd624454e5b860a08f40ddf33d672c3fed319aac180b7de5754bc07b71

SHA512
db9100f3e324e74a9c58c7d9f50c25eaa4c6c4553c93bab9b80c6f7bef777db04111ebcd679f94015203b240fe9f4f371cae0d4290ec891a4173c746ff4b11c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1eb86108cb8f5a956fdf48efbd5d06fe

SHA1
7b2b299f753798e4891df2d9cbf30f94b39ef924

SHA256
1b53367e0041d54af89e7dd59733231f5da1393c551ed2b943c89166c0baca40

SHA512
e2a661437688a4a01a6eb3b2bd7979ecf96b806f5a487d39354a7f0d44cb693a3b1c2cf6b1247b04e4106cc816105e982569572042bdddb3cd5bec23b4fce29d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000029

Filesize
17KB

MD5
c7abbc9e65446bde7792aa1c1b573528

SHA1
c4de48491225b7670dce31fbea742aebf6b7a53f

SHA256
3296a975e45bbaa05d91aacf13090655559a31687d0c1cf7edb6706dfc1df072

SHA512
6b7f7b01e2bb792d55f94099ecbbf81f7e36bebebc02418f0bf85b90cddf2665acd1ace96ca488e4f51da4552ff823eeb7852be1fa095244dbf9d3a4ea6646d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

Filesize
50KB

MD5
74f713db1ef9a3cbd92cb4b6a6aebd6a

SHA1
d8f91bb41774f518a49da8511e55a93a16dfb768

SHA256
c1f4b6fb912df84ea97ce713efa55ac2801427194805c71fdb5cac60d3010b1d

SHA512
ebf88643500414c1b5deefb197bb35278229ca257bed288cb85b131c8b3a387e70a09e3f2eef835a86af6d2abedd703ee12fa7450549391e48a52158f442a484

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

Filesize
1024KB

MD5
8bff8e64dcbe1fb063f5b0d18fe523e0

SHA1
0f2309e9eef63ccaf6ecba44e0ed6228163232df

SHA256
cf1b76321f4068d54c44714e11d41c5eb77e71894d80b0d1180b35eb53d06ab6

SHA512
9feb81f1607ebc1d6d605c5f71a38b2b5db70a5572b00547e9106e45b3cd01fe604ef5c488be4121e6edfb2da5471b5d04c954bd7cc814893c974de1276d9558

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002d

Filesize
25KB

MD5
0eb075d521107b0dcc69d4f925f2809b

SHA1
1b18e96defcb4c00687f616d34fd37bc104d9265

SHA256
230aafb30324b99b297e771befda97dce8459f37b6099898762ab33a457a3cfa

SHA512
dd0371c03bb1d24d33574f93e5bbf7615916eaff23b6931b4b8fc182526265274728a004bd04e52321be03aca2132a7410bd0dc36a2799716da04e00118fc9fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

Filesize
1024KB

MD5
9c5d3e9466ca0a220e60f2b74e637216

SHA1
541a039be37ce1830db061621b0c9c5952cef6f4

SHA256
188253c07b3f6ee9b7aff61c7dc23afe29ad29e902491038dca525e4def15ed4

SHA512
d979a709fd1549336405314af7cbb492adfd68f0ddd44b8ceaffb61f3dc5caede6f1655b6b37b8ad20781d3cca315483636a2e21b3bbe177e002787f9e12324d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f

Filesize
474KB

MD5
816397c67e01a7f7d42a975b0ef46b86

SHA1
1cd0d987a688956956a29f01be732f666f3a8783

SHA256
eaa2bda87f997d3e8ae6cc9932aabad22056c8e4a76690df39e1ff15975a2d96

SHA512
ee985c4d396995e76f6af2f2e3aae051d00b7c2bce536e2cdf4b92c59ceeda812ffdb3834f34eaff36235c9d278c785f1e55ca18906cfed89e2738692d530fc0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

Filesize
49KB

MD5
9c730cca07288a7b39c534baae581b5e

SHA1
ef03c8e0f73f5cbbc83356f35af3e7941f0529f9

SHA256
def3b6e5619aed7779a9fe0f5c1f736e02b7763d6d1adb6e409eb4f51bb5560a

SHA512
8c7adf3cc096f699c4613c0c7c929e1af7f974e1a66c616acce2a6d910e62b97495aa7c69c16d054b00fb2129e74ee00f293bf6ee67e56bd4994d5641094b451

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

Filesize
1024KB

MD5
41611ec3cb19105dd6af23f0e39b5d01

SHA1
df30de72dd74e0b77ede0535ea405c1290599a14

SHA256
3ded572d549088569cb4ca901845b7eebb4cf668872cd29278465655f622d2a5

SHA512
a51e56de74e67bc3f975de0597f37dd15d76cb285c5e39f5586be2748efe786231140fa5dd57961b4be214b499e09d463c41e4d09f6ccffa699073585562ab1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

Filesize
1024KB

MD5
b9e63c987e14c5a27ef8a8b19d3e8cce

SHA1
12e47e81692550fec2a0d8287f641124ddc622db

SHA256
e8290b3ca2c9601eed09669126df1a2a7675554b3ab4207938448bc7dc721249

SHA512
04457b1b29a1a30f3d19f1d81d72d9e47ec388629c742714d39fa8a2d2fd572eaf01d9a1543e821a4c3ea8227ba9125219f59c3f35d0b3029cb5eeafb607580f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

Filesize
31KB

MD5
9511f24aaf4e52f47f155b6014bf1e90

SHA1
0315dff6ac1ddd218451eef52bcb6b71a9eb2baf

SHA256
00b4862263f567ba346ab271e74b357e2f2722de8c30799b9d742f677dd0c413

SHA512
15ef549f6fba8af18df66432c71c5f285db7ca41d0df901ebd4a01d1199e341a4379b5041356bb96076d91a7f531625e705e9f90d928bcc469e97af42aa1842e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c055bf0028d671b1_0

Filesize
279B

MD5
13f085cc6bfff27c0ebfa7d736359ac4

SHA1
fadabefcf1f51ab37e868381e7a6400825c31028

SHA256
4f29e370b153294cbd9db14f0c39c00f6e798b1e4b9607e755c5499b1c1384af

SHA512
db74d58875c928728a9a66648157ac2877e11a613bcb870bfc4fa5e5e13a4deb2bec72314f00c76799fa5c0687381ed6f8909bd417436f23e6075605b4e40792

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\cade9dda0a4fe3b0_0

Filesize
5KB

MD5
337cb9f513bfc8d8e475d5ebbf35b19b

SHA1
5ea423244e33ef480d79462d3eb02fbc1274a38c

SHA256
70e686a4dca294b75398968d7d6b3edd8fc48f5f36cb0b5a706932706c946c8d

SHA512
ae4a3b7d8693f7a8a99abe3e909d71870a6043cc9a1fcadf52fd246c57d92438e70f0b1c6d566dd64bdddc13f9d7e8f008ae923fbc56be302b80c3678c73093f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d9c05d74e6889941_0

Filesize
312KB

MD5
dffec2872382c0658655a9b8c07af7c2

SHA1
14dab693c0b14649f677e61c7e9a6d309cf6d762

SHA256
9705a317180a13c6c5c0a1b76811433fa8debe39ff1c9b9d604e952018db2d1f

SHA512
e113d0eec9a1a8c0c97eead1fc76f71a9b9453b21eb19f3d6e92018579807d534d2cbb019811b062f648c3666874e14a38830f0d1f07648388e4a126b996ef60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
45373de207d317d4ca45360eb348838d

SHA1
3fd130b3ab42ed779b0de45e564a6e4185656396

SHA256
65179fe31967f790d5eee9dd61298225870a4a232804df40e4dd6aa85f5f33ca

SHA512
09985ded695be4acb4ff6a2653005ed125da6aeda35f7254ca07513527119a0a36c86a62ce888e3581850a26b3ee78155e005a97cdd1edbcc3c32927666021f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
7ef1230f5046ce50a4c977c8b051fa7a

SHA1
f9a13bad4a847aff65e705890ab67c1c8bee2cbd

SHA256
f41e6d9c6b87442ae4b6f264c03665f71bf900a732ad0ea84a9b5adcac08c24b

SHA512
5d615527c390cddc3eb7c0a0c0ed57d041f14e6f110844c3fc575a93463e9cce3d100429b2c506dfdd87097214ea51db29b9a92755bca690dd4385eb593282ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
f15b2dc25d3f4f02a472cbbd8efd030f

SHA1
1a88ed61e27c3005d7386d3ceb1704206c57ba58

SHA256
163528ec92602da3451b8885d0932282823395473c7276b10ea07e8cb4884735

SHA512
c2b8136523dd0c1c19b3194ca61adf446b30db8902d7ba57a00741053e673dba286a402d99501046006221a96117ec7954d95a74b3b9a101cc271505672a8f95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
520eece9180182ef46a9ac8bdd38bcf5

SHA1
aff0f635ec078b7d256ae19daac9ad7850594742

SHA256
5120e6a5a85578c4aa84c4c365f931004710b5e2d90e557c8eff78573b1b5a2c

SHA512
b2cebdc3472f602d960c4873c639ec57f374dcd80a498901e02b5bd6466aedbaf681374a56caee5a5b3dbbf9e7993db0e2daf14d4a9f2e7cdbb7e480fff7b7f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
d1cc0475f2f2675aa8d4776730a739c4

SHA1
14562ddfc4a0ede9263f0c0ce125aefd9d41f4e1

SHA256
dc0999644c085abb13f8ae50888bed5d97154203ec1de41376f156fc6eea9fc1

SHA512
2b06bc869b49c973c043b90f32bf7cf054e33ed50964d0ecddf6b2f7e6d84461fa0d4962ecba87fa30139aee46ebc78f516cd21ed56d68fe940f1ef5919e4071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
8d290deca40b0ded16d661b6b7692abc

SHA1
9b79aa7add9eaaf0e711bce1fa00eaaa8528612b

SHA256
2ddfb94a01224f2f087ec01ca004ede26edb76ab9f0640c5c8326430b39b54cf

SHA512
2cf5967c074d1b5913e17909e5637325a2d42a1a9edc280a60148e90f91f7bca4740c73f67c89a7df52222bddf5e25eab9c17a326255560b1dd113127a7ce828

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
d6e5461cd33d0a184f163c2196a49420

SHA1
03837f4ae2c33edd51421bc1ca122b72ef0c4dd1

SHA256
d069027d5b9c26b36364ca797a4b027373ce3acf91cd5e7b78339330b8c4f671

SHA512
d09fd0f73569b18fd8fa7ffedfa812120a608ee878b42a33d6515c85b2b79b2a7d95c7a1be90e492942b657d9a50454b2b5e915f5a837a410b0b8095e83407d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
cea6e433890afc75ec7c646e7da0713b

SHA1
22445bbada7ad1c1d3d80843d180fdf2c53edae5

SHA256
ac8aea8eccd9dd34209ba59df2919195663b27d87910e87aad0f1bea16e74ae2

SHA512
5d4067218e448af781966ed7b2a1f0be4832a41bc9ff90342570de88b4f3d3781f755c0a298a21ea3729fd83454f6a3bedbf0eb8c9f27ca17ec4761da167c45b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
9b768ba65cbe5cda935fea7916cee8eb

SHA1
bd31fced0723cd7ac3d0e5b45f4b10e1087ebd84

SHA256
7618a2e479feab71cc00490e79860438f76c49384b0ac11b95bd415aed2e027b

SHA512
e926e0a9091eebd843542f6bf14495b5c96d36037141c5d6e0c7aef211e67caf35681d628ad5c233b97d75436be7c6b977790e63464433ac34eec6a4e23af3e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
edca1c6ba92a2985dce299b639c80d1f

SHA1
96d0cbbd41e5441c1d64be97641b948b854e7f10

SHA256
c0cde806777c10599da3dd354475a856e406d1156421244b92e9654d95a88c8e

SHA512
cfd28cec79512cc69af0f4f1948eb7d3adc046a9e724eca7ebf9bb2257528c017c3ce512a87359bab49f10d423ba043916b4315f2e839a89930f75f3c1d347e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
87b7bfc8ce71a0e81eb41ae43ca1d002

SHA1
3173f326e31811a1f1ecf13a9f1ce09489a8c3d5

SHA256
f70c613ba2995b4ae198e8cb57823746be199e06430cb4501b0f3a01b2854c76

SHA512
53ba54b681ed26b7f262a16b9777c1624ccd89e153343021d93e793879c0fd0a69d8c4bb890a743c2ee0923fa69c324e593ad27279b98c112df4921136eaf880

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
f5098c330071b48ae32cf85496573514

SHA1
fc97e77b2f9e15499886f1fd95b2c04ea24f6316

SHA256
443ad67999cb0c580ad84cd07f464612606b7a9faa54336f1412d5eb71a57386

SHA512
f2a3eb022a120cee8b96de68e83ab5bf2f99add97272733c65b4a101f1fb7ee4d76fc2be762499f8c87e4ccaeb2e51ce1cbd96f805ce627bafc6f971210ca533

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
875cf9cf73dbe504de7025390151d7b6

SHA1
77eca7b56dc0cd170ef63fc749a5b2485f161202

SHA256
c34cb1a500f5ccb80b933470693aa193e0be07596927118a18187677bd6d1a85

SHA512
581676dac19343936523d7961bb9935d42a3875e10717a31a3f598e8dbc934f9a89861a4b8b616b9f0f1462913133765863d8e892c0bfb61ec47fa8f1478ee4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
fbff6304b94234cd8ce0ee86ff60279b

SHA1
3093abb99f87377750e8d280b725d7c1df02fac8

SHA256
acb5eb8d39a7b396ccf28cfe74424ced7eb828a823bcbde35c5df0801fb7b9e0

SHA512
27b91e755a5bc52a743d53ab3ae4bc4e8fed92a2aa861f2316d604db8e452e68be6039f3d805ffc817a20f7635411018bce65c37b2b7b9f0daf2f1e61a5c44a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
b9441abcd4b65dbb8c99b5cd3d2262a8

SHA1
8fb6f518ed4b8181254d3ac1743c59fe5d613e19

SHA256
f5c2bd3fdfc3e3effed61731e28754dafccbc4233ac5409280f63da4e96d1d4a

SHA512
cbecd0785bd17b687cb4920df87520407e043a16beeeb9144a73acf30f9a1ecb12e6b77c8fea57b403849ab79b178a5de738f75e4b58ea91ec077fe0ec56bf6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
94173f9c3d3fb243cd52e9404c8240d5

SHA1
7238a875f5967ce57fe582e31ec0857dcafbc8f3

SHA256
496def950001fb6e57dd36785e384d672c1a5228511d4519746467bd06c17c44

SHA512
9c602cef84b68eb57f6327b68fc874adc450d408fe5837461eb31ca74a780e707c241ac08938c6844a985c423ed5500a0e552897587131532676893fca8d10d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
7564d2856e201a4236a9cdcbfcfa9109

SHA1
5dc1a0cbe3b14267a8c6b9d21a229c617a4b43cd

SHA256
13f094920ff4fefcb5d0d03ab33d93f70400c6e4c3c67f63ca090dcf327b3f8d

SHA512
65477eb13014e9f911feb74b2213fde042d9bbf679e39f7777edda223887d05e9a9d66c01648067f674fcc1abcc103339c10be9dcdf1a8b67aa8fffc38b1e7b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
a5431184a9d038a2d01355dd575fadc1

SHA1
22365a3837f1b9c7d1406f9db55073ebb35b3625

SHA256
6c02dbdf258eb18b1a506f74e565fbcf70a60b8888e2f4e1db8c8afb6e3db38b

SHA512
6e92ba515972b8dff70b448e6ca2dba5a0a59caa6f981e0af7e1219fa9dd537344009b888fd9f1655fedbb204d597960b50396eafb7d25d87ddbf1aacbfb9481

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
28b3a8cd18230a02ce51e3368cb3d581

SHA1
dc7b237f097e39a18d544294d4058f591457b71a

SHA256
4b07292344c606c5f323bde175bd8a691782f65dec4a07cf13fcb945a5eb656c

SHA512
cc63b6de869fa8f1e49f9c5da4157b53a390f0214969b30066c3c193cd88e0d1ff3aac9f38c5d0e53bafb7dddba49358d9b470fbd0006707575cf335b210a4dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c30e8e91cbaa8d4735febef1bf2547a5

SHA1
24a19c5262d1fdd295f7238e0e6859b1712fd4a3

SHA256
b2ebb7e1af711b75593a05c07b9f0ef93b109644e400e2b2f9d375f8e91174bc

SHA512
90dd033eb9ff2f8db399ff1e78789920942cf39dc60930830d58fadd27cb0e839e70b9e51d537be244b660ba39b80954cb247f16a2c9343000ed3622ffd530a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
83d0a99d0e7c7fab5fc1624db69e0a19

SHA1
bad87cac7ec1788fd16eb7c5a4cf1df2e1373b29

SHA256
74097e51293cb0640f0f18bc5a30ce82f661954d943ec9bc743eb93fcf7adc0e

SHA512
405ce976754cd18d70eb18336560224be120c82bdf60a4b19d1229c5c8cd0fde2f31bed4ce0481ab2e2e36e30223ab19678a54cf65933f3db637840a5840b9c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
c1fc3ddb57c2c6720079d287a3f2d56f

SHA1
faff5a8b464e70c38516910c0e71878156223d88

SHA256
004b34c1f8c6956773cbd32dc0afc2b22059f7b9bd923b6b73efa6e1604a2a2a

SHA512
7ac9015e92cfc545921647c5d4ee6d69461bef9afd2f4507a7aaef418501675cfba39570b72d1b79b2a889d2591b20b2b544af5ca7956cc19309efdb4c94dd97

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
13KB

MD5
475ecd09acc231e21d0317310e246001

SHA1
9c1cdc5a08a02bd25f9c9445c06a76a70c0592e0

SHA256
1e40209245d047a9ef3bf346640225ea8debe6d6af5e3073d13501de184dabf5

SHA512
ebe05546d073c9351302af701c91993550b8ace863d45647123affcbebeccbe34b59e190c3f1a7f893e064bab44601326497b77a297707c4cec7f938ab160dff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6367bdfe38e8bf4a7e68be388c1ac813

SHA1
b9049f0e45b875620f6fa2abcaad05a798d96818

SHA256
a602dbe57918142a950cbc2cd1503909df9172f597e22b4c4fcaa3b50177c35b

SHA512
3ce0030e7007769fb1c572ead39d8a2f237965cd9db26132b2f59ecdf295d79e0b24e440f0b99e4b556a2ad9dd8e62cdea1e2e2ebcbb68a200d36202cc332151

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e7ddaad22a4eb1582488a145e9fffae5

SHA1
04553df6e1268546d6275627e91f827b73e7ef78

SHA256
f836cf23f81d0cffd9911003cec8ab51b48b7b42cc577cdf22d9d403f48855ee

SHA512
325e3b2420af9d33f694e7c8ac503e2cb126bf9ab3dd85cd914dad6f403997e8ed50e445c1eec1fac6a4b47efe9dda312ca62b331dccc998eafea55b738171d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8a95db2e8120e16db7752fc01d4c6891

SHA1
d1123786faed1792b4c04e6fffd512faf99ffbd5

SHA256
2c6282f689b9f787f35fd91e6a7625af3442d049e7584833d80e497ce510a04e

SHA512
7f0c8bdf7ce17838f2b492941f58ef882b79e95e273a9bd15eec61e93393ddcdbc4f1523f791587727a7ff7b7af08d67904dee07b69a7dcbbd83d11d90c364f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c423469792fc0d1079409581f85d89ec

SHA1
be934b4576b179013d9b3ef5d7bc3039ee4e1f8e

SHA256
9b03159b78d8d9344c40b63437d4adefa66529186ce952e49bc02742a5437bf7

SHA512
d630d9149c5e61109f083a151ac2547b0d42cbca5380822756df1dfb70686c4fc872096de014e332c863aebeb3f928955000d0cd82eb159d9c0968224b9c06f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
87b207c70b9ba07aa9d6d7d9c301f6ec

SHA1
511ec4d50afbe4ce5e718d0dfd0c109a0bdeab5a

SHA256
d945c64578363ebfbc58c80526cac2957002fbf4c12fb1786af30f745c803ec1

SHA512
3a24ef0de65bd8cf4c3920492213f08d73223e09780db15973304224ad9f7db2458acdc8fba1802d1ad79421238a835265f71fd13ac0fa6ad2d264a91d14d4a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d3a994026a4a9057e00bf5bfec5a19b6

SHA1
de9961cefe6f351d73ab7bc3811e6b83d32b6f5e

SHA256
eb50145bea83ced42f6da3d2c630e9bc3de890d1a935e008e558a025b2b29626

SHA512
3d8079acb07205eb8a6099b12524147addb5b38f76a978ff68da5512f14728b578200a179ba0350f4e9e6da5b2efe38014d795e6e01b8b06ee16a4c30bf645df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ca609251f62039b49d84ad46fd68b165

SHA1
8fe5f4266f5840c1f3aef09d21fbbad5db748562

SHA256
ac1900b0d58ee0aef610c219c5b2e6afafd9c5e8657359b1ed3f3791073bc54c

SHA512
a4838d69e66f706ecbc58093b8fbfb3b7b4737074b49e70c1651c0c0485d5c48821049f9ac8ada1ed5c69d858d74c863660499e06145fbdf857a84e7995464e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7f257cce35f36dfbb9816d492682f0f4

SHA1
44b545a91e4ea0498d8467fd15625e465cde7df3

SHA256
c50ab9f31527a20ca3caed0400fdc776b5ab5dd6381ff6081070c37d745cbcc4

SHA512
d91d95190726944709ca01c0372520dcfce1550a1d48900b501d019a68ae651ad3a5fdf870fa1ecc185b1c7a36a302742a8305d9e480ec47787da86888c0645c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0ba773d2454ebab2900b4a561ef15241

SHA1
5d232676966b3b5b82da5d7343acbbe78a71aaf6

SHA256
a1607e61633e086d64554aa257adc2ba2ddb611a326e76fe4d10977dcd11e95c

SHA512
d2de307ad18735f7775d6b569091d9d3114068728715d6e058c23024e964c1b287e91164232910e98f5190e06bf76ce959014c6d303171be10f594b05e8b1cfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
5ce5ebedd02a65a86370869104aeaa66

SHA1
0963942b9808c37988e134a95c1067b4746ff180

SHA256
822ca63e5a793b0e7cadd2f47d3e63e7890b17ed88931630f2a2b1eaa0e90e83

SHA512
64cca671ffae2c62f4b38b6e000830a17dc49ed73db36eecf55bb68c8313bb038663c3fd6433256ce48dcdac5f030ca226dccc6314ba7db343be8e549a980bf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fdd2059840ff0078ce96b529d24b32fe

SHA1
4372ce04ddbaa02825c2a575a282aba2d6dccc35

SHA256
68949948277ea97aedbaf013ce638a70de4950f5d8a0b2ef2401b3dbeaba55a6

SHA512
2dc4591151e26e553628a3c6c506639100302ced6b4ee925e71782cb3cdf5a05d6fe0978e1b3d501fe2ac8d19b63374dad7a171139835d395a9308251954ea1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
9cdc337eee8b7b4ec9438515c8d8ebd4

SHA1
3ed155cd3d7dc26d4670d7c61db2414b46b78416

SHA256
288a539fb6b124184e1a7e06266a4557e87468dc3a3885ce39a2129eed368186

SHA512
fedda27027a221fe2ae89efcd0c92c94d0cdb705ac6bfec17974552a536344c58613226732d88890dd743b46cbe3329c578f605664814c68de3e1980d2267eec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
de00ce424f5c5ab5a090101f93fda605

SHA1
21b762caf07f3b38ddf62e759de37d8e88b9c35b

SHA256
ac950d483bb6196fd687cfc2df53c358eed50e554c8d055ea1e3cdebd967647a

SHA512
c9c76e351a0635b763d08ae375ed6766cc718a0be8ea6bc7851425186d67eb1276e2db7232a210ea96b370893ae3fa3c67acca870983c260d388d720bf164cc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b2f6261d08c0a8d81dba92c85cc7b1ed

SHA1
aa25fa550f693e1d1efc74045fda63a8dcc679a2

SHA256
186482c675130c68175aa653cbbb0e3c492d91d94ecf9f325228484adc600dc0

SHA512
b58c99dc6da74596f70bad263714faf8cfa3a9ff889053562c3fa89ec59ac651ef1d8f89bf39c358b2b8368c222cdfe52f5042e967750729193306bf7005ff5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
42da48593395f660ec5e7abf40ff6d5d

SHA1
0cea48790a0c9134ca60cf72c4015248c825e343

SHA256
81c19e0d4d91b275e4eaaf849242e838a5f2d3d3620c84bbfa623d9adbc58554

SHA512
9a790367bebe179811b5d5bc30f7d9463cf1befdc227152bd3af1fc1f3964017d8b617daaf8d986ccaa7a3ef69ec229c345b472d46dd7139dad489bd75f76f14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
03381f3d3a5c9084e862b2c788d67450

SHA1
7b9aecc708ae13d5d9b60eb166d6d5c99cb0fea6

SHA256
14fe1405e3be9f9788b9618f47e802964b7c538ea08d906590c11e77ecd88de1

SHA512
9d5e6f033394c9712a661bc902ad5948e379167cca8882e75ba5c181d8f3aa68c970edf9c661e9ec0b5b37c4e63a453ae872dd1ce3115b54783599db759722c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1af3e6c1bdc16445a0774aa26356859d

SHA1
f7ff5707d1040f71c1faf43a6b3af30aaace44c9

SHA256
24d6d6c26e432251f61f045a76f79be426b13fb7a75af6bcdbf44c7ec0ab6964

SHA512
3fe164f371320f4fabf1636a2f40dc9a4055369d6d112b547ee117c8eaf429c9c811b20cbd2f926f2c9920f60d84363341130daecb2f257c6bc1907fa32befba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
40365f8657adcebc15e93847e19e840d

SHA1
32fddf30b68b8faa81c04d4f137fb59946ca8d15

SHA256
98d59a264a5e3191711c46c57cd13d9584f5e7001f9610f3fd608fc6e6deed6c

SHA512
d695215753e389fb85cfff7aaa925f641d577d377f8cd3b03f9fee78e5538338649b792676cfcb8398269ed7bed0884e074f0fb22f38c94f9d4aa288c5b31afc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
790c2b20473b57a8707fb40772fbbc9c

SHA1
379d8d847b9ba8f4f2becdeca3b20e31d929ff58

SHA256
26f096d0362e2efc438d7b6a0f7797cccec6e2e1d07613f84c57ec06faaa28f3

SHA512
b01f59163d9fb98083305629c703244f709193753408d795eeba80dbe63c0cbaa387d40f7d5cae40e432a34a5c84072ce917b0809b017f3537985747af876185

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e76b441ed34ed799b8e80ef918c2eb64

SHA1
0bffadda8cf76ae0548f3b31e5e4af743243400a

SHA256
5e8269d265ca3399c9441874322078459351076fdf0d75e502728c584994b1ba

SHA512
d7bd53836c652ed0d9d7836b4952557311f0e4328ef18860dab6bfd1453b1dd0935956291f71da868a4c5eee2fce4748b16b76ff4155e83da4896c15c816fffe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1a537da183a1d7555d6661075d8aec23

SHA1
22b3a777ac971e9d6ec166d543ebd17635a9844b

SHA256
8311e327964b05f27b7af142adf19b107ab39bf5953962f691a229be02d7008d

SHA512
8300899e865b24275c3d156bf0aa15de061979cc3fe6e7d338a8340c5e24d29f47a42dc2f45d52ed0c1434f81d55c047b39e0eb1eafc7e7e48ae576ace64898d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
dedcf7d68600f495bb4f763793e4cb62

SHA1
45f4ddddb56d824e7f750d33e900ae334ce071b5

SHA256
2b1b4c09accd80972f843bd87868509a23fbe630234cbe5765e262d9dfc16a03

SHA512
0940d8b5c399e3a20662c06d0ff4f14b1edf716de9638bab7c13d223710e3fc54d1bc55177148689c7a979b9ce1349f07542aa3a2fc347a689b7acd6e2af138a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
62f9e4c82ec7651d5051a5a29cd9ee51

SHA1
460c24411b55a14915910111a53c4e517fa54497

SHA256
7c517916d3c963495c9d3383ab28cca1aab57c9f38b1057f6c498ba050da9b9c

SHA512
9e3e972f5f5a19c9afb3cd0b3d4ac5855b26e3aaa3192cac6dbda8ce2419e61ef2b2c6c64a9b16e99b6bf0e2d06a40fa2c26bc9493baab29940e364fc5345eab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c39ff91e1c9fbe9d3775833f6c57532d

SHA1
3574587b013e15844e80de738b41de053e81a9b0

SHA256
3a17f972c53c925aa670cd2ce53df74a2f58389f9c18c1db80752c409dbf0933

SHA512
f0399f1ae00a109826cfc63d347680a9039b22313159dd45142d4ecb80d787ebc40eaff31f303678da6185da32742d4971d8467282370381f8d9f98720ecfa55

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
cdc0c2aac7f45b7425e1c95c087e8ef2

SHA1
f8b25ca8a94b663c56d44fdcaf091d66af9fdfcc

SHA256
a128cd2450de5557a3757aab0ecd7d86cd68b1383f38019efda068be8ae30d12

SHA512
60ce30790e590bdaecea56ee8e3fb1f7e603199ab76705d32e8bfc4762d0a66774f64b19a5ba487f024ebb41b187b10bba01348355d869a2574d38d5d02292f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
97e8ae10aa68f0bf7a8e94f402474144

SHA1
154538ffec048deffa0c8a3fb370d8cf35df7adc

SHA256
236a9988aa18bf70417177f17323e55bb051d409547a80417342097cc94bcbaf

SHA512
992fd7eaa7faa5868b85dadf37b919ec9e481b95aaec39f84a094bf2a588dc5b1d7cffea813d394f00cc812144991af45baaf1e53d00fb1828b219d67c10a642

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
091ec27c502324333ba86f037c20675d

SHA1
0d3437b95008828644d88c62b39ad12407d277cc

SHA256
496497c44fe24c4bb475d94a05596bc36656d4c73550f69ec873a4c69875c009

SHA512
e302032f6e2f46fefee3597fdbdcc9b8d8c031e74f2e56dc5a02288a5678223929290d1bbdd32cd1340d8303503895e92eaf8d0fbfb1b2041d4d50f2097eafce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f4d2d955fcb2a2bbebe71bf15884252d

SHA1
f19ae4f87572e1152c8482c96e19577d89f2c18e

SHA256
88aa3838846cf5f5b5bd5d7d1b14cc26696ea4f1b8f39bbc8c1be5443119208c

SHA512
92197347212d0c4f6dacf9e85b5c02cde67bd9d66f23316823929ff36ab82c302c5a52f0245f89a13223f9f1d82fdfd9b50072d3f517ffd193bcf4ce8c85f81e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
21f3cd9cc2e819f9aa32425ba5332fdf

SHA1
1e0d34deeb2d6bc5a347551b762938380959e36c

SHA256
deb55e52fcc96b9a1e87503e9e11c787363d3b7e875a1441dad8730c0d2e0733

SHA512
9476f70455acf493ed33534cf7f9a8e65dc3d27f79c12fab6bbe786bcdeb3df821345b19139a6f6fd4ecd51d6bf75cda6546dcb6e1a7e37b315d513ea52c7a3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
5b4c12946f264172313816d4cdf288b0

SHA1
2b6a18dd8bb535e7734178368afda03c3cac701d

SHA256
265448af0775bca7b3709d853ba14f29721060507c82a307338ba0b58f9b2cb1

SHA512
82110b9219fc342d955aab3ef1ebde5e32beaaae2f4748cc04aa26405de8d599d7cae970dd01f42c86f18765bada5916a8fe788e312ae747211b8ff3b3ea357a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0c3def30065c385e6f5a6a5ccc334c4f

SHA1
262d7ffba929b2594d7cee25a4c744472887e0e4

SHA256
18570aa76093d2da48fedd1826aececc546e50b0e22d99cb80febf1b77ec9b9d

SHA512
00d3533b92ecffae2cd27ad369294a3ea91525b6015589a2c302b27cac8ec23a567eada9aea583fdbf8c95e6c6177a781fe101a7eaa8524488d5df418e9724d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7025a36a0da434721d02998008a02f9d

SHA1
686a2c69558af53b4febf8ca79bf3859647d4bf8

SHA256
97e5cb798332835576f3339194a04f8dee9fb4fd77b992448984cd207c092b04

SHA512
485e5ae5a0c780fb68935de26354b4ea9c20eb0570cfb2dd771a2f1b6d84baa5fb8a39ce4047693ede3661297449df8d4a8d759a63848a8a33ba11af7dd894af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
afff56b2d358bf63ef3342107eff3be1

SHA1
6e823a9ff11264129747c81f0ed921299fc6f166

SHA256
fffa545013cf7a0c260556f677a3c06febfab811bb762b3351b36df4a05cff8c

SHA512
904e2f1d4f1c0f536161f2e1bcc821a79da9dcfd86fc383c4ec1dc800ea9129667a36ff78b6d61f9e38210907a5383558acdbc7e53306d10e415ab4167c6f836

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
64c34a605c7c065f5620c71a76dd40bc

SHA1
f7d673cdd47fe8598da76bb4e4f8fa55f5d83305

SHA256
b6ce7d8a46b11bbca61b25e68ec911946c799e2e709c8c999acd46956518bb6f

SHA512
5b5a9f6c1373cc54c0d952bbc657c8e0f2493e87ef647f8c764e0029b2d5c027c43ee51e59e84e7b16497e973c4f189d1acb678a3500ea6f8bed494eaf803400

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8949790ca3f3d02070bc0d4c0fddc9f0

SHA1
c1c0bb36fd89afb21b186f1e9eda079685cfb019

SHA256
b6f5b48fc71cfcd56ed50fe73c7513a4dd18210a5bf47847bd38caa483d77057

SHA512
673bfeda63b6029ed6311b5e8a6728e208b108886c49f9b316f47a3653e2f614aded8fbead987607f109f769eb66613e8ec859d5b901b156a2969d188c4b6d00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
60fe1b87d52265fb35abd32b589d8c37

SHA1
e5570cafceb32cf1492f55536beb02ea460ac062

SHA256
83a8150d092fd7396c21743bf1fd0e8bd908ed73de4906433a098a5420fbe491

SHA512
51fad8d8df96fffbc72f5947ebf94f677afb81dc73af649550a741c03b70d6d991d97e42d7688c5197ba217e5f86bb6a82d6c27f218275c10caa30c51eb9e13f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
29b478f82f5404101d30de3bc145fb8f

SHA1
bdf63a57ac121c88e888afffefa93cedcabeeea3

SHA256
1a321eb9291dd88a0a3f9f25ae2a64b30ac3fb2b219be9d4a5434bcc265b6bfe

SHA512
6ea3d53c551dc2b0939944949477b8a23420190836f20b28e10df16120e12b5be908ecad8b56b46643ae9f12961d8148012051530964117d28d7d81197cbb241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1bb10a700e78c8562f8a5296ab7e876b

SHA1
e06e15f5867992fa3640f01071437b7bfbe5c9f5

SHA256
7bd983290767a21c3b332ab80848c0c17bd363d80f79b382f51014bf9784e8a1

SHA512
64d082f7f12c9529dbce44d5d59d1a6d7c8878d52a704311fa2ded9d6088fb7c81349489e143fc30f31c2e2abf8be5b9010a3dbaecbc6687a17d012535673fcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e000.TMP

Filesize
537B

MD5
21c09f436c84551ccbde3355df2b2657

SHA1
866563e2dad598c5d3b4a963389f8852a2e404a0

SHA256
2847c3009ec838dca58895fedebb0b7c45fc70fff00bb41762b88eb37e7743ac

SHA512
cbd5d56f37b8300aeb930849a7330df07e2a014da2068f0d57cb677ba7932b7ef735a47acc2de27f83c0702e4fb54dd312050c33a20a80488dc1f48a17fc5c35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b27d9eafe726de8993c77431a2883cdf

SHA1
ce1751f68e4dff41d2be8c6aaf5895691eff3245

SHA256
88696cbe52eab0a7d3de6b254f9549090ecdf5b13c12023d916b1d0bb9525e00

SHA512
737f570bc9fe260540d09c50e30a073d295c107823e2a593fc059c4c846ef4efe6d1516a958a5142db53da52cc35c2c917748e645b288c3f2172c2f420126861

Download Submit
C:\Users\Admin\Downloads\Unconfirmed 479457.crdownload

Filesize
24.6MB

MD5
d4b875a68a984de73f5f73ac8729e2c9

SHA1
8d2ba5bed9e4acf51a6817aae20c2312ad52e56d

SHA256
75f7e4dd9b5d9ba0d62fbe67dae556bce5a313b4396062de811b36a06c6e93a4

SHA512
981a1600682f74ee02533384025354e3e4978865e42c40e410b6f63b9b4b624051d5fd32dd997c92345bdced63c236f1232ec8d4acd6de7a72efd6140dd7738b

Download Submit