Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/04/2024, 17:19

General

  • Target

    https://www.youtube.com/@CrazyGiverHuges

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 11 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/@CrazyGiverHuges
    1⤵
    • Enumerates system info in registry
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1528
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ffbfdd046f8,0x7ffbfdd04708,0x7ffbfdd04718
      2⤵
        PID:332
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
        2⤵
          PID:2320
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1808
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
          2⤵
            PID:1404
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
            2⤵
              PID:3660
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
              2⤵
                PID:1096
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:1
                2⤵
                  PID:1740
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4868 /prefetch:8
                  2⤵
                    PID:3208
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4868 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:1284
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
                    2⤵
                      PID:3676
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
                      2⤵
                        PID:4488
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5340 /prefetch:8
                        2⤵
                          PID:1224
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1
                          2⤵
                            PID:4304
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
                            2⤵
                              PID:1600
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
                              2⤵
                                PID:4708
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
                                2⤵
                                  PID:1988
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
                                  2⤵
                                    PID:2480
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6192 /prefetch:8
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:1036
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,16675779039720690435,282017853337678589,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6788 /prefetch:2
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:3356
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:116
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:4536
                                    • C:\Windows\system32\AUDIODG.EXE
                                      C:\Windows\system32\AUDIODG.EXE 0x2f8 0x518
                                      1⤵
                                      • Suspicious use of AdjustPrivilegeToken
                                      PID:536
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:4928

                                      Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

                                        Filesize

                                        1KB

                                        MD5

                                        55540a230bdab55187a841cfe1aa1545

                                        SHA1

                                        363e4734f757bdeb89868efe94907774a327695e

                                        SHA256

                                        d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

                                        SHA512

                                        c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

                                      • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

                                        Filesize

                                        230B

                                        MD5

                                        92e984d3e01af1eca7bf853b40ba4763

                                        SHA1

                                        c296b08f08fc4c03ca606646ec8bedc66084d290

                                        SHA256

                                        7f3d77a71939b6b83a09f7f5524f09d0c3a3781c9a9d31d7e4ba59916551a22a

                                        SHA512

                                        a347097e05d2df3e4f1b0e96d457b157cbd422c42b1c88df833bcc940d5b2ea9c6cb366e71116812f75ffe0ef4626e38befabd8f90bbc5bfd0835580573b66c9

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        7740a919423ddc469647f8fdd981324d

                                        SHA1

                                        c1bc3f834507e4940a0b7594e34c4b83bbea7cda

                                        SHA256

                                        bdd4adaa418d40558ab033ac0005fd6c2312d5f1f7fdf8b0e186fe1d65d78221

                                        SHA512

                                        7ad98d5d089808d9a707d577e76e809a223d3007778a672734d0a607c2c3ac5f93bc72adb6e6c7f878a577d3a1e69a16d0cd871eb6f58b8d88e2ea25f77d87b7

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        9f44d6f922f830d04d7463189045a5a3

                                        SHA1

                                        2e9ae7188ab8f88078e83ba7f42a11a2c421cb1c

                                        SHA256

                                        0ae5cf8b49bc34fafe9f86734c8121b631bad52a1424c1dd2caa05781032334a

                                        SHA512

                                        7c1825eaefcc7b97bae31eeff031899300b175222de14000283e296e9b44680c8b3885a4ed5d78fd8dfee93333cd7289347b95a62bf11f751c4ca47772cf987d

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

                                        Filesize

                                        21KB

                                        MD5

                                        bf9caf227610a7bd03d4debedc303daa

                                        SHA1

                                        426e567ac2cd43ebab398a936474265279aeee3d

                                        SHA256

                                        09694b978110df82df5eeae65cda1117eac821e062be75836a1a97dd7e7199ed

                                        SHA512

                                        5d9393fe7c6c1f657c521a77dc8afe202021b1854d552aa2cfcfd8e1e4b0a29c33fd6abd24719430357b29f580484f6a925a40552afdc54d492d486e83528627

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

                                        Filesize

                                        26KB

                                        MD5

                                        5e56156df5cdca51ebfb624be165027d

                                        SHA1

                                        d1e0452facdcb6ff6eb4a6610fa60137ec68fce6

                                        SHA256

                                        eed1886feb5df7a307130c1a8ef98826ae2ae6cd9ca3b32d7a798936a93a88e7

                                        SHA512

                                        81c54f2d2e20dfe6aaa669fba9b7ce7786a78f59b63a605b6aedf10d3da1365e28262ccb4ffa3c7905307b386cd47a999659b04d767c04947d2df17362169272

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        4KB

                                        MD5

                                        7bb759848a3424990794063d4c5731df

                                        SHA1

                                        435ce3681243ed4aad155679fc0cc3f4e9950197

                                        SHA256

                                        71bde9e193d72e7015b573429dfbdfb1f773542fff922488123836f82fd8f4a9

                                        SHA512

                                        c6b0babcb4261a63a08a73120f177a94ee040bd5758bee10ecf6bb058ca66ed9f554a6bd13f902ea934b48cf755110aed8b9d428ab31eb1fdceb78b7ce2068ab

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        4KB

                                        MD5

                                        29aa2e208bb5492726a12b1998d34bb7

                                        SHA1

                                        c729c70820e17f6ecd712b85e428b4893f839115

                                        SHA256

                                        0c83f808c0ab5f38e5bd3127ceb2d240ef5663bc0893bb5db04ce737f8ec7ece

                                        SHA512

                                        f625f83f7e8b5bbf1606ae184f2139c7f89fbf8c445fb37c138f5aac134be7d36d49ff3fa6c58e068e0b5ee44ec412c5eaaad58a9d92e4f0d20fc32d0bf1a951

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        4KB

                                        MD5

                                        56a91480bbe22b13a35e477f4c879c54

                                        SHA1

                                        ef7bb8682c974e546ba462e49c3d05b04f03f39a

                                        SHA256

                                        9f626470df09d1d2fd68696d503c17c107dceeed1894414cf166b611549ed7ae

                                        SHA512

                                        8550ea81e97b65ec69ff81f4048152ae47943666d7a35c0042981b533a91df1a132b323436424b8829d2bef3a97fcc8c8b74596dce25ac04d993b537aea42379

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        4KB

                                        MD5

                                        5acfc2609e58490d4f6bffdd691dc144

                                        SHA1

                                        a0114446492252e8c1516921e0034f343941c4a0

                                        SHA256

                                        075b5d946219e41edd4dfd45975b233318260566e3cf994f6d74f3b1dc03b86d

                                        SHA512

                                        0616ca3a2f7e82faae1bf136163350127830679bbb45dc879db29b08703af267ecebcb8976152893b078cf3725ec518883ecfaf1b5d77f6ab33d56e98cb8ddbb

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        111B

                                        MD5

                                        285252a2f6327d41eab203dc2f402c67

                                        SHA1

                                        acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

                                        SHA256

                                        5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

                                        SHA512

                                        11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        36c51128ffdbb03e4af74932bf4f0394

                                        SHA1

                                        7aefbfc3a36f3f00aae0810984d51f2bd764a562

                                        SHA256

                                        b5132a4cd54067dc5ce868604683be9c6eeb4e465d8e8ecddfa7fbdb499d3df0

                                        SHA512

                                        1ef48082d02d42ee83a0b1d3dff479c0ea880676b27909ee8cc2e748421729cdc3a76548f23d3d109758bd316c38de36d971a8d7b8090c30ee9088bd0b12c8f8

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        7KB

                                        MD5

                                        642a6fc62bb30c3a86b3c6c486b50ebe

                                        SHA1

                                        cfec7f468d99a82a5f00bb9a4419d2ab42a90135

                                        SHA256

                                        d3ae76d1fd7f50be873289e8f458c076e68d54a20b40badb01548261bead8724

                                        SHA512

                                        bcf20acc199cb2ac29b7bd21e55da5c9f29ed96281da25bf10a33a1ae3c6499aaca940235adb1af002da1c0a966b433114e34789d1b51bb7e06245ddc4fad013

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        8KB

                                        MD5

                                        7861c67725c3b55be53a27187317af16

                                        SHA1

                                        44980c9c6047e2ec0351f51528cde6d9f960c875

                                        SHA256

                                        f8bd701a78c31f6fff12b642cca4bb128cbbc03cdb67316879112e74f9de92c7

                                        SHA512

                                        4d657444eb0199e0f50944189426ca3462c41bfa31029ca1ab1cdd770f1152d1fc76d8080e042dafd287585c44d85f22056e1c5d34583d3349b436cc9a025a1c

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        6KB

                                        MD5

                                        4c575437af754cf06d9f8be97154fceb

                                        SHA1

                                        2ee390c185cd70f2f136c41e60fb807565ba501f

                                        SHA256

                                        bc43338c6fe9b18c278db46a2145e9f2c32dae900448a611ca7c7fc839a57774

                                        SHA512

                                        f0f8a507fc5e090538dedcc4565f7154c70b57b2d26884b3c059224f94d35a2e4a1b6a27ac4f37b3c137179ce4984c3105cca1a6451055548a823e71a688d82e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\844c783c-5389-4902-9345-549777cc8ec9\index-dir\the-real-index

                                        Filesize

                                        2KB

                                        MD5

                                        2776d8363a414268ad09abd9f25061d9

                                        SHA1

                                        c7803313a2fc1fe2f219a5ed91a1c1bd0ab970cc

                                        SHA256

                                        3465f3d511fbe0d740c1e168d2bc0404bf39edc8eb0b7280fa870d76511905c8

                                        SHA512

                                        016c550c7d1345d8ea7ee8404cbb071769529863cbc75467402acb2a095d8baecaa646a4b33291473ffb630054161bfb40b96511e60c21434feb12f1e1a70f3b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\844c783c-5389-4902-9345-549777cc8ec9\index-dir\the-real-index~RFe57c515.TMP

                                        Filesize

                                        48B

                                        MD5

                                        9499b32837c6db9bc47962599af7d48d

                                        SHA1

                                        20ea9c00fd9f5a315407b0a5318126461688b01b

                                        SHA256

                                        f2f07241b17ed23fee0099ddc1625459cd09f751a76e7ed5372e204427fd8062

                                        SHA512

                                        ded5714afcd459e4fab8e1657b44cd47013277021128fe19d0f581b11933a15ab070872dddf2722d702e8bba783fa8e3a92acede6f1f150cd485c9f329118452

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eb2398d5-1f3f-4762-a029-95d22b56c482\index-dir\the-real-index

                                        Filesize

                                        624B

                                        MD5

                                        18ae36935fe65c6801ce5deb44c2fab9

                                        SHA1

                                        5d927b8ae5213ab5f0804098d633e3bc65b4826c

                                        SHA256

                                        9cb1946846582a3770aa5a53ea4c2f2b6678c1139a24c29ae470285ebb9aed28

                                        SHA512

                                        60d9c2a0cef8a95a59f51e2eca8e3d1bcc7921fba23445bbfcec7d94875a8e36aad40632c27143f202efb79970ebee4437da97794e3622a1ee2b0afd949ec950

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\eb2398d5-1f3f-4762-a029-95d22b56c482\index-dir\the-real-index~RFe57c208.TMP

                                        Filesize

                                        48B

                                        MD5

                                        2080a501445f59549ad009fdc511ccd3

                                        SHA1

                                        c1d9f5f2fe125d7039e8ae440409b807891f5f7b

                                        SHA256

                                        09275c9b5fc0028eb1128914df82c7d305bed8dfaec72467cb26e997851dafd3

                                        SHA512

                                        3ab6350b58242ad9cf2f6ab2a8e3c8862ac6e9e383631fb6c3508a76b41032732eef059ae9f788c4e9e03dc1d07c60cc9105df1f75ad9e9f6e1f409091ec6af0

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                        Filesize

                                        89B

                                        MD5

                                        e0d31f1bd64102a84c4471c84a4aa27b

                                        SHA1

                                        38a7452b28c3e428b5737a692da8e961c7e7cf4d

                                        SHA256

                                        0a81f6bc190a44f99a2a3313f682fd4389fb2cb08ea16ab13d1c496ffb194d70

                                        SHA512

                                        906afd2715b3d59d956c3cb86475341713d7433393a968a219e7401f9f71cd19e1d8d357d07251e380441c23ab700919dfd3206c7a400e6b98544e58aafa9e68

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                        Filesize

                                        146B

                                        MD5

                                        6d7a21a02d1283b79272b8e351f8829f

                                        SHA1

                                        29e6b4fbb3d52b60ba2ee5768a08773793bb8603

                                        SHA256

                                        d81093965cf907eba6df416c914d8a16b5beff8c86c6914f850d5678a21b4f11

                                        SHA512

                                        2e7eb24cb042ca314cb455edf998bc0ebf4d9bccb59bbf972bb1fd294c338d968cd67d43a521dee8519a9c4f8a7a64a10f74b54116d523cac96c6bd6570fff5c

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                        Filesize

                                        155B

                                        MD5

                                        a1de695dca6b53021699318ede4a7aa6

                                        SHA1

                                        c21079369f407dc74aefac18bb9451cb6a430edb

                                        SHA256

                                        3d14cc0eab70d1b1d27848b7ab63767fb5d39c2b3359a80e1f9e636a1f8e6f21

                                        SHA512

                                        d6091b110176e09acb964fa6bfd256445ab79353e39c6af9411faecad150c7ac25b3c5a1f46f1bcfe8c75faa3291de80f868110a0e2f8bcc683f73740e15720c

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                        Filesize

                                        82B

                                        MD5

                                        e1a50331c570a9df40bf8379f49e9277

                                        SHA1

                                        05672a450abdfc4c5183bc53f5712fc7361b8a50

                                        SHA256

                                        4b83f28c23be523869794d9200ce178b4472c016b713f28bb04d052564d77505

                                        SHA512

                                        f54e2c79be999f08c059e8ca18380baa392238923214631fef8c3fc8eb235b3c73500bae5ad0a3e230f82b43a18fb755673ad1724257571227e9394e35bcd9d2

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp

                                        Filesize

                                        153B

                                        MD5

                                        78a9c1f094a35e5ada73356099001e57

                                        SHA1

                                        857e6022f42db9aa0bc20b4211320884ef51939c

                                        SHA256

                                        d0460cee6d559190f8e0f35d68cbe9afdae82e58fe8b63cc0e7acbbd6f2ed505

                                        SHA512

                                        cda53e090e37443a9ef684ca2d76eecb757e72e63873f29ce7700faebedc7f5a7cb231448174dd276fd08dc52d7231530bed70a36390354bf426a7372c7ef623

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        46295cac801e5d4857d09837238a6394

                                        SHA1

                                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                        SHA256

                                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                        SHA512

                                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

                                        Filesize

                                        16KB

                                        MD5

                                        6868bc232422cc24364905935c149b1b

                                        SHA1

                                        607fd5a2a307d52c413a361003d1548be5c9ca10

                                        SHA256

                                        61c4cb48bfebf22fb8ad1f15b715162516db472e7e57834beb6d215b697914ad

                                        SHA512

                                        9e3375d45a21d5cdeb5b623475b77944e16da8c990f133d461f2ce516020c0bfc5491c15c8ea9ac2481baf748ae24bfa4f38bd39ad005a51fd2a8ccc60dbd2dd

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0

                                        Filesize

                                        161KB

                                        MD5

                                        62c8d5be18880487fb19a57fe6aba07f

                                        SHA1

                                        2f2d2e59738f80be61cf50d4d47711654f14718c

                                        SHA256

                                        a7ff3804092730068b9143aa73574859c9cc5e164601515c692aee54fc2ee5da

                                        SHA512

                                        566a3a64fc5761912b92ead47bd86bd7929896628fc1306d087c728f082e430fa02b0f9e284b574f710dfc93d33d41533f1b5174246e5b07ef34970618ab45a0

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                        Filesize

                                        96B

                                        MD5

                                        5b7b13705ec678fb62e42f988e01b053

                                        SHA1

                                        697853fdaaebb51fce886d556b8425daf92d78eb

                                        SHA256

                                        d3ba3396fa0b290e3a657d14aaaad5cb45fdea96577a2944108eb5c120f63aac

                                        SHA512

                                        7f6310f7260c0084b2d5a156744bb3cdafe66c17c8d12b69b4a058b260037702f65292254e36965fca8d37af9484626d13b9b163fb94854df2b677909d35776f

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57ba67.TMP

                                        Filesize

                                        48B

                                        MD5

                                        9c553feafb2e4deaf63813d764c31834

                                        SHA1

                                        b87ca1971e8240a4fdd406534890b6a901cd5b4d

                                        SHA256

                                        9d811e89e776d4a3bd17187c1484c56efd8032cf9c90c832a4cec89382e4c1e6

                                        SHA512

                                        f1d32b319e8b8543e2525a936681b1642df3d848c065464d36b0e2be752af7c5a1137b7a8142aad26101074cbe68bccb14d012f54c5c9ddc22d9c7aaf3b52337

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        3b7edbeea05fbf97325a0d07e92e3fc8

                                        SHA1

                                        fe2d4747e939311a57d9c24447787eb3975f5a8b

                                        SHA256

                                        8d01650c0ab058f3869025b00775398f4649c3b663809f432763dd4dd1b93eb6

                                        SHA512

                                        e8c3ee1ac54aeaf7ead3e6b08c8b25d405b95e285b8607f53a6ae77c718479998b4efce56e1028b6e36b1ae6998c6cb4ac451ca4c544bbc5a60d68ddad46cf60

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        5823bdffde56e80785c8ceae40a2ef5f

                                        SHA1

                                        21a9e8ffff5e87950e5d0a171e40222a717e748d

                                        SHA256

                                        70a68023029006df54e2b63d84dc70c82111fbeb6856df8f70de6d83a5cefecf

                                        SHA512

                                        b3fe023531bc096141cc3c9ff694f46cb80ec9308a68bfde7e6cf8679da9d4c98f68e8d271a20854fd3c8cbf598069cd5e5c4dc3136362b8db7832be6369a10e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        2088eb53ad2ce28001e7f973d94f95e9

                                        SHA1

                                        2927dcc56f75ddc936af7bb0b3696855f126fc47

                                        SHA256

                                        ae1c8c556a8e8d71cbcd869ddf90b73ca792df1b1ed243f180c23f14af1ebc21

                                        SHA512

                                        8d9fc563669133627e62f6e718ecd43fd42b8610b0fc385b6caacb17a07352bfad8e4f7399572fb217a8c8c8d848892bcf208545fc81152b834f73dd4aee30ee

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        416127833c1ec3603acd3dcb27b5d1db

                                        SHA1

                                        d132370fa04401be56e4a57cf35f6d948592b37e

                                        SHA256

                                        0c81ec08e6bdaebd5146094bc099552a3f1e6356f1cccd8438b3a7c2dd674c77

                                        SHA512

                                        d08b6f540df96aba32b94236bec067f48844607cb03466eba99ce02c9e2cdf58cbd07848ca0f0649e32ccb456b37f5aab690062a1c30d357cb634351e5769dcf

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        c2cab52be550f2ecb5a9364ef7105dd4

                                        SHA1

                                        dc1da144d1a1caebeec8c27426944626c8cb48eb

                                        SHA256

                                        ca56987db92699df68b062b951c4fb574a1143121d40ee5e54994628f57be79f

                                        SHA512

                                        eca1af32bf2b02be0805235bce95e64d5a6d611087616c914d20f422385a69605634c5eba321bf4f157e8623fbc0c86460fd0d26d8bc4747a70ead2c88a42e05

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        a0a24fb6a02ccbe240d30ddb0b907ab6

                                        SHA1

                                        231e4890caa64015e7731ef670cdc1df693928ba

                                        SHA256

                                        c4f8f52ca933e4167c1711f75b08c25426f414f04e4ccb78e0601506a39e4a5c

                                        SHA512

                                        6fddb9de598ff3ca7957140a4dbe796528341bfc8a5daafe75dbeef7935e4c837e9e41e7bc09e0f59f8dd7fa4a330ae08c5274682d80732a67e72d82c4279170

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        1KB

                                        MD5

                                        92c17828d4671adad0030a63bc5cae0e

                                        SHA1

                                        8639ba4b325ec8e49501d9304a025f5e1e6f7c45

                                        SHA256

                                        289cae4a77577cda14de949c7dff283e1c898b8ea93e42cca1bfdde599a96804

                                        SHA512

                                        7f0736df83bb006e38150b02da0ecb6c6da7200a2b76ea4e6fac1c12fbc85e9add2b74e1f75ad0fbc387d3f7c5ca5dee4145f2c10dea5b1d5e9b06c9a57a6c9a

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        37168bfc660190a30f782a1bac783498

                                        SHA1

                                        40fe6983bb45b11de7dc5cdec90b4b234034f9ed

                                        SHA256

                                        1ead94ab09af01944a211f1e172fb4ef6ca57da6be2dd365ab003fa30ec4ee01

                                        SHA512

                                        dc6380f5008f317dcc5909884c39bd9f930eb8c9f987fb55d0ab624cf6e6b3fda920bdc9165c599b99b68b8e2b74e67956acd82d6639b5fff7dba88117ed3044

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        2KB

                                        MD5

                                        8a5385d1e5b8d48989bad5ad4927084e

                                        SHA1

                                        d5c69c8c4696bab4085d0b2c41be010439e5dc43

                                        SHA256

                                        102887865b3b127265dbde9dcb66d75cdcdbcabf258f85a767a5398a10fa41c5

                                        SHA512

                                        8db8bdb3be065b47aa911aac13897e84dae06bb1c7b60dd8b8efff9b6cbd277191fda5e7be36127b7233a16a2bd755bdf60c6d83113e7016d94ce9320ec3b608

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579b94.TMP

                                        Filesize

                                        706B

                                        MD5

                                        9087d7211ea26500cde92a832d460f5c

                                        SHA1

                                        934f64b2132cc1a263944d5da887a31ea3960597

                                        SHA256

                                        8a07578770a76ba4db1b0c2b47afaefab4d879a2b5507db347e71574c45b6754

                                        SHA512

                                        c8777010d1de6e7a4917d63011a70e116dbf4624b1c90726d60074a7a41596f115a7a4ffd32c773494bad7d4b5c45a88f355aa94cdd4372674d4a987e53dac58

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        6752a1d65b201c13b62ea44016eb221f

                                        SHA1

                                        58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                        SHA256

                                        0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                        SHA512

                                        9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        11KB

                                        MD5

                                        65cac3329cc8af9e16beaac9aba90dc6

                                        SHA1

                                        d9a3d06cf03b3233799c8f6a7607e0457527f895

                                        SHA256

                                        5e13110bbb0da715fa8824cf507d018831e9fa26ea43a2b48e0b4adb73ef98f5

                                        SHA512

                                        6346b0701e744ca52a09a68f864ef67e57a8bb6597526f7a174c6ca3872e80b29585c082d6931df3b8765ce4039a4e0cf0c40ca57c2dc0f1ebff03dc2a1e251b

                                      • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                        Filesize

                                        2B

                                        MD5

                                        f3b25701fe362ec84616a93a45ce9998

                                        SHA1

                                        d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                        SHA256

                                        b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                        SHA512

                                        98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84