hxxp://megatec[.]ru

Analysis

max time kernel
404s
max time network
405s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
22-05-2024 20:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://megatec.ru

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

Processes:

msedge.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-711569230-3659488422-571408806-1000\{79E8300C-A2F0-4355-9738-D0B6A9E49039}	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes:

msedge.exemsedge.exemsedge.exeidentity_helper.exemsedge.exe

pid	process
4516	msedge.exe
4516	msedge.exe
2616	msedge.exe
2616	msedge.exe
4252	msedge.exe
4252	msedge.exe
5420	identity_helper.exe
5420	identity_helper.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious behavior: LoadsDriver 1 IoCs

Processes:

pid process

668

pid	process
668

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 47 IoCs

Processes:

msedge.exe

pid	process
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

AUDIODG.EXE

description pid process

Token: 33 1864 AUDIODG.EXE
Token: SeIncBasePriorityPrivilege 1864 AUDIODG.EXE

description	pid	process
Token: 33	1864	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1864	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe
2616	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 2616 wrote to memory of 2076	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2076	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 2196	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 4516	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 4516	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe
PID 2616 wrote to memory of 3512	2616	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://megatec.ru
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd7e6746f8,0x7ffd7e674708,0x7ffd7e674718
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5828 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1800 /prefetch:1
  2⤵
  PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3968 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3092 /prefetch:1
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3640 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7064 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3616 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:5708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:5696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6568 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1736 /prefetch:1
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2684 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1848 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:5636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7540 /prefetch:1
  2⤵
  PID:240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3620 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:5972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,10701949298429263349,1907919342063850045,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7484 /prefetch:1
  2⤵
  PID:5136

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2372

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2ec 0x41c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1864

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ac52e2503cc26baee4322f02f5b8d9c

SHA1
38e0cee911f5f2a24888a64780ffdf6fa72207c8

SHA256
f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

SHA512
7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b2a1398f937474c51a48b347387ee36a

SHA1
922a8567f09e68a04233e84e5919043034635949

SHA256
2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

SHA512
4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\27106122-6c74-4d42-9fd5-181cb3d35752.tmp

Filesize
12KB

MD5
73e7bea5fc43979c7073f13f2ba321c5

SHA1
c2fdcd9ec3f590f62132e97679ec389c583fbe46

SHA256
2f6e0f24cbb7c90d4d4312e771e4dd85f3a252e2b7e36ec62ff835b809fac57b

SHA512
771fd995cebb74d9d984f5f2b56a0a6f43da4a2d26cb55cf2ffe5baa0d130d2a8e198e38de4d95bed165fc99aa4ecdcce3d1e3f12f07faaf7b1732dde2ecf78b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000077

Filesize
71KB

MD5
9e151343dc96c33765b0cd5aa2d72922

SHA1
18fc3fb652e6dec25d29e7802c093d0dfefdaeaa

SHA256
131fb76155635722359fa3ab0fa07c14f3031f6134b6077e71b0c3e4d8b4154f

SHA512
fd95dbe5e12599c62abb121f6c678191c98d25b57f322392d99b4191cc1d2ef115adb37ffb7dc581148ac4d340419fcfbc02e47dd4fcbcc02d1a387ccacb9739

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000085

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000086

Filesize
56KB

MD5
0f88ab2700361c3c178d41d1cde1a531

SHA1
712f1844a4e166b1cac72764f71b066928160d9e

SHA256
ba07596fe72154090638cadadb1d4ec92d0a96b2f5ab14558eabee7faf95f134

SHA512
8dca52b568b0a421320813a91aecb5252d05febd8d1b3d4362d6b30406e8d4e9f255a779d112d79d57cc8150673bda50de4e916f934639a13ea674885429a4e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000cb

Filesize
549KB

MD5
5b409bbc0f90007e58641f53199e0ef5

SHA1
147bf096974c77e773be96a451fff9083571cbe6

SHA256
324fdf9133c49fbf455472231a2116fc6b0b12c8e38fc3f20a4a93524d9ff05b

SHA512
51cf1bddb5b617c92e4ef9fa7217d28d18d23072f3e776c9f8e7418cf5ddc2cff8c743df82842caac33ccc908001e56f5de580e336edc542e92bd2151fda5eaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
7d9888873c9357752d03c8c7f789db33

SHA1
c4822de5711d1bef2baec351a9a5a519c0f8f5b0

SHA256
89680a187f97b17a666e8ddecd6adf5e820a49dd48ca5f3d14bc15d611ed6a39

SHA512
25eee932aab9b3b93414823f478d8d2edd513cfb7b40501647331ce3b9900feded0f7824682596c43fe62bfc375026259688250bd3f2c3a92f699f8bae2f4c58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
7cf0d4e351cd287f00a2a06fa47860c5

SHA1
d9ef5031443d3c44c7194f96725cce7c5d19b00d

SHA256
11d0fe6a3e48d960f0617be47ef253f546de5ccf465bc09040050cd46a203af9

SHA512
e9fb73a452e5966e3397ef1575540d66a66f8fa646861b00f85831df0f577d7e3c259a2afaf09de279a2a5855e1eddd0bae3d2a883042f0ba144bc2bf1e5a808

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
6425d8495e381f6351ecc6486bcc68ce

SHA1
32edcbb682d9be133483c560069339ae8c645e60

SHA256
7cb2b85d0ba07f913045b834e05dd5c1bbe16a8ee2711d1cf559bac87c523561

SHA512
404d066afea5de606c5d9a25ecf2a897420cee8dc6332f68c21b6edfe1597dda18488f70879d7c5de1e14d13776cb6009c59b1ba78434b63ae363d49c42e94d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
dacb45ff1cdb6b676fd54a63d6a29b8b

SHA1
8b4d3916d17059c00bd72dbfb8bce4e83e5ffd9d

SHA256
1a831607e66c9fd817389437516c2fb2835e3d9f1645a9643ffea781251cef4e

SHA512
e7ad53d57782c54b3632dbe4bcda57881f836c9bf4a5b16811f746a535e81e9df2839c99b5b3497144fc397dca537ae134aca1561efe42c070b6d7e72dc33c99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\002\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
88a487d51c883427ef1b9527e1183814

SHA1
5d90ca37d2a4bc31ce28d9b8a35c2f7377611e72

SHA256
1806ab0494d540ae5203dd10f706ff3bd40663fd3f41a9437508550ff1758ef2

SHA512
6dc8a4a37cf72440554328dc7de2539bd819bf6b7ae9eebb2674a289ab4ff844de6fa26f4e5c6538fda333e6c1297fb56541e6d74beee96d84dda42db5b48ffb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
8265479441dc83a27a71e054e509b3f3

SHA1
9a9fdf0045c648db046ce5dea109be02e08ee4db

SHA256
72d7e49ac332fa99ca545bb51aa328d1f56948b5adad2825bba967e53bc6c674

SHA512
efdf3ead3f6cd8a6b6db18b5282929ca8d23abae27c47b92da031d9d56208db63a7878fe5b645295ef9c6ecb42590a72c6991aa7129f358c6514a7133d2f9649

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
ee41cf9ffee65813dc4eb2a14115e79c

SHA1
3d53b34c071862a5d3e1b74d9dbecc77d6c7faa1

SHA256
9f024d7abab611ac5e12ad51ee9b1d027beb0ca86a9c9c127a78784d43e8feca

SHA512
6c730a4865d41b3e9c438b24c7314e1715ef143c6edc7628bdd4fc112620cc24a0b18079761477d8a307c351e9c206503098fa1ab61b48817decae0611adddd3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
f5d4ae64257133b25a3baca05a1f1577

SHA1
f9196312e27e62b7963039988c34131cdfff4163

SHA256
ff416279ba6271e661692602a3aad906035b184b51d249a869d94bae1c79a5d3

SHA512
4ca4e51bd50eeccc0fe95f10c79060fbb6c619989956d63d1a8c7b61902cedf1cb1a5318de1f7dda9086f9f7858a40e264574e62377d8d82cd388ba88b4d8e24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fb7ac699f71da58ee38805a6a9bb3aa5

SHA1
e3c7d803f260fc414d899cbfd2db838b87b5d86b

SHA256
d59e6c52333c063e2fa6bb79a653c3407ff9af0a9dbb931eed005ffa7ae20689

SHA512
ae18ac038453738cf0395bfaaae1aebc88044b3129dd61eaf38f282cdb7fc7a510a007fd4bc62246e1d7fc4bfa26000e5fa71ecc0a1232ebf2f90f074170279f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
408fd867e1de01dc7a90d4918814bb1c

SHA1
4b3654259ac453f061fcb18a674d9a71a77944a5

SHA256
a6213d653fead761e3dfa586d3cd46f33542bc91aff893b8eca47acbb2d576fb

SHA512
9c112f3b59efd457c80d739b9f78814d07d46122c7580898377714b435b38774c8e4b5666ea27c986d28b6b5920673728597ce117cb2a228102ed34c8c755662

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e5c2eb27f3770c78c0271951ee8dd543

SHA1
0cf3ba510eda8a00032a21ce4e8b5ef65b1b333a

SHA256
d51b0179f2b84f75a6671a6e02f45b11eb7abb49d18a148876d8c51d6c01713e

SHA512
4211803a18f11da120c4b0e4ca9a4ca50ca402f0e50651520ed73681886736df92e143b536c56197356fa6ea616382b6b16648376e5df6a13691dc93f326c833

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
67df4ba7070307403eec7bbe0183b270

SHA1
f0db898e21eed03439f8a281b851ae32a08f5d99

SHA256
e5af0ca9b2c97dd1b16a93b6049195d1d8581c9117930d1c0079c204a71ccfa7

SHA512
98706f5e07c2b7ebf846fb380492bdc52a4b1070713a448431ce9cdd2fb093d37597fbc338b1e4094abe5a17081b75bbbad9c9996bff4d1421ba4e94a5151b65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
c7d58c05f08bd8e757f81529b9305915

SHA1
8b7aaa4a2904c1324a4b81c3cd0338caddfd2683

SHA256
2686f7e86a2b86eea0d1e25a798c114045647c25382dd261101c4c268cf10089

SHA512
56aa495bc503da6f431da7ed5734853321f8d4668455d09b8c121ad12b242cdeb3bd325766eea370129106a5f58c25f02a5dc05a8dc959fd8639ab2b4dfb91c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
17a03282f8bcc468960638df3dc520a4

SHA1
9df3938528b334ddf2339cc4403a64f90de29ac6

SHA256
0719b1ed739cabbdd406fcaf88a9875ccf27b95966f403f7c92663af8207febe

SHA512
5bbb7197d762a27b2f62ece643dbdf3e0a0ef24c1b7323a7be0388ad0eda28aed8cf36342509c9c28b48441960d848fc221574803ba020c34dcbf6e33cc3b365

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
7f819086298600ec323621f23facbb97

SHA1
f6c572eef117aa74a607a3f7b63fa97685a7a22f

SHA256
858b4a594e7697b59564911ba34659953d4126ec528d0d7a09bb3a58515e545c

SHA512
f7ae6d1c74bfc595ecb5c84ed88485b6d5e0d9c92f5358fb35eb80ee89543fb9395d54227da21c03b39c7adaa98f074d5d8571353c586fbbc33ec7608723cb36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
b0a2877eb839ea97c467de7d5d3231be

SHA1
b5fb11e690cce06c64f35d0cf5eb1ccbc4d4acf4

SHA256
e1368040ecf26ccab65ab35e463e86f9649147a44e868ba4e9ab18b05a4e27c2

SHA512
86422e7cfcc99cafdeaf6d74fd2c076cd157d5cc88ce87b7569acb756802e6f96c7a02b0d1ea82f2b9d2eeec4b3043277e4cf62ef8691f19232fa435668b87b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
904c03ead3341b62bf67d0e32278561c

SHA1
05bda93788a5a131fece77664e46e3aaaafc1368

SHA256
3bee5fab7db6d2890a5c5190c8b65416640f504e89e97b21fffbb6673c0995b4

SHA512
546425d1abbdc63ba4987769866fc865c010f841fda02de97260aaa16586ecb230c1fadcb1a88ee0d3d0298223e4cecca8c2920732370c02a4e0a76496f6c183

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
10fafb53e46d86169d0c21faafb06bce

SHA1
8f16aa763048fff2e12f09b7bd9fc06b8b706dff

SHA256
7f4f3695ed61ee2d8ca81a54e2f12b6c24fddbda0f87fdda9d4124087ef1496a

SHA512
9aee5ebc9bad2fb22305d3ceea6d4aeddc0fc8f816696a3caec2c354d894fb9c025a0681c22b7575818ca9b4f51ec21664467d2e932e28a5edffcbd0b20af439

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
8fd83e862ab61dd3cefd5ac06bab5a82

SHA1
973ee94b46ffc601fb3ca594305ce0deca26aaf2

SHA256
301778f0285e8f8e4e909194b6f011baf65542ff133d5df0411224d4e09cb5a1

SHA512
7014aa61f63ac71fc6bca7cbc922de9bf907fce9c58054a0c35c1db38429f7ecfe9bc51bf63c21fda391f8c852b93f1920a26d86480551b35a61cb16ab217e02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d60f16dbfb9bf0c31b16d22e77d63f50

SHA1
98055f1d8c8d06b34f56812684c7d1d6d56b41d1

SHA256
28218666a72849095a026f22d432fdbe2369377267147a05e2087b101c8736ad

SHA512
2f08077d19e804874a9c7b958ec572a644fe45b88705b66c011e41e5bbbb1c25143c03917632d979a1d0f33a65b3f3c1e73965493ec0c574b3f59e780a897c58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e0de3964d24876c53cafe37508711894

SHA1
e69af18c0a7566a03faf9111c1b49c90ac042073

SHA256
122de3a1641872a314d5ea72e1aae0f7e9d815ed352ac2201e1754d7442cde46

SHA512
05e5218104f09fd6f21e507c376f07e62ee04f8145a7a66c39bb9c03d955835ee0b487d0afdbbb566b0d64591c3fa8482435b89e4cd023fcdeecea1badaaa287

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
595f98f655510f4439826e7ee41d65cd

SHA1
129154aa2175df9f8487f65e7a40ac51846a8b6e

SHA256
422d51245e47ae075003929498d8ddf04145a1bdbe30a94c6b54a5206439d822

SHA512
2a22517d094a3a8e9e908bd5415d7dcc833a4aa0fd1d4825d4243a0bba6f3776b722ac6dcfe7ddd774b72124a82cf07ccc21d2dfbfe50c6f270e4d1bbec06fb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
6fb89fc9d6c9622be3ac262ae1d4abd5

SHA1
bc058569109fc44d7db0ca98dd1be708b3f4ee6d

SHA256
1cff25fdad4158f1f2bbe7f475e18003ebbe0fb666ad6b2cb81fbdb68ce55eed

SHA512
d5c4d1128d95144c275f9b95841eac948361e35e102144bdb13f6b75c27b11ddd507bbdcf932d0c7e1021a6d4ff32f555c1c3d1ee77ff815df66ee2de04430fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
33d7c64e47f801757c32dbbb41d2719a

SHA1
f11c90dae402cdeac8065a8e4dc183af1ae44855

SHA256
e7205e2cfb0717714f6eb8dd6429d2b9484914ce1819ee98c8d9688c0bcfff53

SHA512
b212d93523922d62c22e41144d41407ef339a8d37a4b85281ae805d6805d6cbb007dd897e6f3a6add14fecd1abbb9a863a9fde493ed4e69648d71893300f8732

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
58e8231d336a7127132288ba310f2beb

SHA1
d743059037524ab758afa6df6979f1617ee66285

SHA256
f44a0b2e9c574eb085acff1f460a5cc5289de1a5701cec666d10a746891f004e

SHA512
62ed2f9815ed7274b23a17d2c7bfdae8390b07338ab414200c2eab12b94d3a8f830d86bb64ab95ba1b1817f7279ebe99b7c642def2115cb89c2db3d968a0d2ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
37a3630a90d4b3230af6b7c836e6316b

SHA1
3796f1adf62d2f3f68838d676188f11b12a2a6bb

SHA256
72d35ccbae4bc4150f1961b010761a032904fc5f60ed44734239db9f1c453354

SHA512
5f9f84b8ab816333b5f6dc20928da1d2d4d6d93cc5b761c655e6ba3b5810781077aedd632056d4f342e7bf182e67f88bf6b6d7bf8dcd5aaa87519ccb583cc49c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
b15279a7ed197c0268eef8e4eca86834

SHA1
a0f74fcb8cd919b6d5c6a20053adce4159093b1a

SHA256
566d8d919bc0e1de60f94303e34a3b15408f5d1b5019df23cf8bd2105b0bfd62

SHA512
318a4a04439c1174e61bbef6b9ec387f9bdd9c0eea32b78167a01940d7799142e3000d64c682fac64ff780a040253bad5bade1b8d2243388df8511c87c9fb456

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
13ab8b6fe8c6b79f321f541fde83bda1

SHA1
1ce6153b0cb586006c3c94d6c91799c9f8413aad

SHA256
df401adf3ec049eedc6b6eeab91b1cbaf05de0d4bfa79ca4cc056ed6e2a26bd3

SHA512
170c6161971ccb94160340c07da9c531fa6073568e68a6ecd7ad5b99342b0e73911f7bb96e8830752ae14d76d0fe59d19337627564fd320867cf0592a3c24f41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
6379f5257fc7aafde174a76b334920cc

SHA1
28c15d373d9453f826c800e04055badc749f7ebd

SHA256
f1981a251b698cf7609300dbd12e17fa9068dcdc7a14c15785c761482436dafb

SHA512
722c65f822e18e5be9bd8a1d124624d477d0d2c23d9a0afff1fa33f01f4b2d92abbfdbd92a9ebd5b1279dbce99154f862fd0d96481609b859bf1410a7a967071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
ad3b37d2e17d7ac0274002882a62fb80

SHA1
ac94f2c009a85732e48c78427ca3701e152b80f3

SHA256
0bc7fedecc72b589b7ed9e0400d5feac3c650ee2d76e3d102206c4e20bef587d

SHA512
0035ec0483bbf4c4b6c17903bd1c9b6c9e5d43cd0f75c73ee7c6cc63917dec06063ec3712be96c332300d60db9ab3eca7ea0fd3ae0d830bd5dfc788448aff84a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
d7ee5f95cec1aa061f5fe6913ca240f8

SHA1
d6d1e7a5abd69dafae649db2c1d601cdf6f73bb3

SHA256
c09a0feeb856fd15b48ef55156151077dee0fff1dfd16ef8d9ffb1c93e38ad12

SHA512
529ba22d854c3382f335b8e2994d46931e86e7ad1a29ecb6bbfcbaf46e4c6716b3a0bf8f75d3dc4f2faa9747a5191adeadc48e1647a2638f04081c1f8e61c714

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
fed1ee79d0d06886ca285faaaebebe05

SHA1
749bc97a7ac8bb438d8ed5f786a9c947e44a714d

SHA256
e62c567293e1110cc0be79b82aa68303e19b4592808fbc30ff30dccf90dcced8

SHA512
40241af89b7c1109602eb8a60b8d2e82c1fc2f4b012b8454d06e11347e81ff54d2169a10734f7187ff7cb73c8dccddd2be88c3fdd8de947dc2a8041f40f8ddc1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
241ab129b648e9c1b69fda71aff6f034

SHA1
6ae9fc5520c849d931c1c2a577639f6525147ce4

SHA256
40f9283cc34530ee78538cc5f7c1ce00f151a365fd45fad4557360ffb6a34a89

SHA512
fe81bc062d2b05c5b1833f71af29f1f133ef42dd79f5eb329b6979ddb56e7e8fd5fdbd253df9be37235ec7c97e631c261d3d2b0ada8daf052b66e922fef2baa7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
c5eeb068cca4a96bc0df0264bce0555e

SHA1
345d124fe0833578933d114d4921d2269d699606

SHA256
c58dfbe14c80d1979c5e75f08c559a0d5559478c391cd0173bb2f2c90eb701b1

SHA512
0244b8f99391d59eebf8ac6cbd2f7dbaedab0520eb256bed4233516361b24a9bf740d6b0bd09ca71a6631ea58630e5891d228858403b20e942e2960a77e770d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
bb687231ad935e26cc033afbb90ba6f4

SHA1
93f7917675a49cb9ccca3a92a2352dcf0934cf79

SHA256
29f444c4c4e8d35bb62c0210389746999dace6db893ee461d559b19d087765f8

SHA512
c6402abbfbb6978b0c544d3a7b825152fe9a257e070041c4a9c17d139e1c64af97a670c9b32768d889c18ba9d085c0ed3ffb0f5013384aa4f8599ad1a288bfa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
433391885cdbbd00c3b97765eaa59ac3

SHA1
7feca048723c778749d90c14929a412663d38e5a

SHA256
67cd29f0c87795770cb98fa68e863e294999b73c6d3b53d3ba15f2d25b1e8c98

SHA512
e8f28ec57fb3d7635479b904833f104c62d23e5ab8af0ae44659d3bd29bfabff0b7fbce10da1cf722313b10b1f65459bbba3f6010d7dd9ed4140d1752847e565

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
1907550e56eee9ad4b32069880afa75f

SHA1
a62b75173f6ebc497a038af39b4fdc4f77573869

SHA256
5d2f02a07cc1d8ea169ce591bae22d17e80af9e6dda300e22833293b6b6977b1

SHA512
3c0b45356bbc7f010b668dde0d513f6123bb0cc97dd4044aca37ab44b553330da508f507a232eafdab776c6402777f91e825008358458789f4dbabbcf1e827f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
78a00a5bbb5f141cf267da3ecd4303aa

SHA1
f799bd3a8ac953bc4f93dd76aee59e17bf24579b

SHA256
f10cc16b3f09bdf3637ff2cd8b0ab1e5a16050bafd36a10bc433f22e0feb96e0

SHA512
0bd5ddbcad542d6aeee4dbb648b6ff090bc4bd157d0203194507709d8a066f87c727be26ea69173a6f4b7a78a150dd79bf2ec4ed1eede83721f9086e3b2a1d5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
176c22e5f9b9dbcc27e4af0e52f3ef5f

SHA1
6fcd3e8df057e2b78c397070a3759c97ee54871e

SHA256
e07a72f4d8568dbefa34df3dc1668820707a78f3c3b01172823ddb8b1989d513

SHA512
9feb3734107c6c20d956e68ae06b66a7e673d4f80f59af5921ffee059941dba092fdf52b6777a3127fa0cc7a270520698e6b213faa2ba24a304ce8dda279f317

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
d0b4ffd6186dbfc9e386dd802fc47ec0

SHA1
032ad392c5d5d430d7d9516ccc22d851e05dbe9b

SHA256
fbd3479afbc5551498495a7ecaa337abb9044765e7110f1b3580d0238e0d6dcf

SHA512
e0d6c4bf30ef015f443413ce39f6e59148230f88740aeca7c13d729ec89b11fa0af962f94a063515f1e86f905ed79de1b8613a0eaa86281340e12512495a4934

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
90626c947381ec542d97b19e37129e46

SHA1
4ca71d40879b96121b54bc2d1352f1643d3ebbd0

SHA256
11f8d74809375b74e172edaca07879fbceccd8a73b6aac2cbdcd68552b823e5b

SHA512
bbbaed7f8600f8b01873df5381a3c4fcbf4c4718a4bbba2fafe372468370ca1b4dfc3f5749516ccea47a0cc74732cdac59b20db581b60ae82df57bce5f8f7d92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
480e3c6a2a6d8fec3432321535261304

SHA1
3489cd1252fabab680b59e7d0cfdd32bea2842d5

SHA256
aab8f9a875a0db3fd9bc75078450e0f18080b1c59095e5065d2a659129955836

SHA512
359acd6601d733c39b9cb54e3761e732f00ad6b51aeb579ea81c3c6b2988731ab5bbf265da681cc800e7c8e002146a23f7c721b84a627c96a17105c9803da9e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
13ecc09fa9d1b550c6fc597379854892

SHA1
966d836353ebda7693383b68873f938506bfcc61

SHA256
ba71d15544c1fb00a01a07602e827d6de5abf1b93e013d8144a1d30512053725

SHA512
05e97c628ea35df29b93a4604c47a4590a81a66f518a1f3c86279835699c09ef3fa99b160f3868f9c95b3408449619950c1362e7c1e0abfca8fda7e50bb78f29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
03cb58fd41f82aa383fbbc9da791a9d2

SHA1
d37ef177871ab2817ce1478a56a44afdb1f00f86

SHA256
c105313e12cdfa74889fe52634e566c7a296fdf4097cd030663d590cd03311e8

SHA512
502ea58cde1a5847e1a483c9fee36088407a33b8a54c7b4d2b2c3d6be4283d6beab36c286cdfedec4e025c5af2ff17bb20f2287c3067ffe0caad135f91bece2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
f9bac2dad7038cc60b4d58b60888a5f9

SHA1
0403518fd6ca6746adf34af09c81ba305540f4dc

SHA256
b28307bbaf2d0dff79025bb46e25aae11a9cdaba9824b5e5adb18db806fafb60

SHA512
5f2192c2ff71963a9dc236f6072824156cfc47ea99fa6c5bf8c44656b1835627f9a36dffb6443e795c3cf9d1e7e8c8a152d8719cc7baf4cd18c294b83d873d99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
2b32e51ca084a7646a3e61275c6c4060

SHA1
9db9cda17d4961dc315ebf1bfe5fc300d1a0cc3d

SHA256
5c49a7a433473a4ed5b4c7db28319ad60367c2f634a5f96f0ad969d8e792a2f4

SHA512
638d5f2b4fc020704dd4d63ad5ef321516fb1b2c3c33f7322bd3c461b84de0d402ef6bd0c5b69fb466b6f2ca1a076e5bc06cb54ff46e91e0a3b4f7cc4fc27470

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
1b7afd25851224bdd9b85cd730bb32fa

SHA1
106c38f7f066fc055f23b9e385c2ecc47490cc9b

SHA256
50f73f294e923d7fd950e0188be18524ffc0bc3ac576b3b9505769badb4c497f

SHA512
57af4836a15c8cca2cdacdddc49cbddf207f87e573f65e0090a292c8e6ac16ae809f79a77bba5288ec8e7626c98f35691fec60fde366cdb46f78f675f2463175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
72e834f154ec1f7c84e839267778a6fb

SHA1
052d4d833fe21b84f5cabf3e5149779e84b7ef5e

SHA256
502e54a29b2d51701ecaec63f8f77a474bc7b4e65dea0c126d72da6eb2e2f84a

SHA512
8b27d6c282fde5396fc4224dea664bcff22c9b7ba5dc66a892959caeb0b97379bcbfe209a1e11f5dcaf2b73f098832cc28b6f6d3076b96a69332b0dcd33a6324

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57cd81.TMP

Filesize
1KB

MD5
0819bdcf0e973ece69cf79d31caec67a

SHA1
85ff12e79376274df0d34e172790dc6ca7e469ac

SHA256
253308afc2d82b7bdb86de454b0796e19a563d8dbaaeb3f6f68de78b3c33ed1a

SHA512
7a239322001b2e00483041ad947448bb367be5368ae46ffed0ec779801f010f1567c5428a7fb0b11187fb6f0b17ed817736a347f1736d4864b08f8fb8da5a60d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c9a0db3e614cf134a8e78af53be24822

SHA1
acec1136fa88840b03209f79f629a90a61729222

SHA256
bc22e03ce600a3f16571f358c545a85c25cd581a37795c7012047566dc2ad0b1

SHA512
60d79269db69178b6b648d9384a4c1ca560dbdc5363bd4a4c034a5410db47f83931b3097b8781bf22e693a17d7202c9347b9284efb883af46976191db8345a16

Download Submit
\??\pipe\LOCAL\crashpad_2616_UXEYWKSIZYTHMMUX

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit