hxxp://Google[.]com

Analysis

max time kernel
1199s
max time network
1194s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 00:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://Google.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

Processes:

msedge.exe

description	ioc	process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

Processes:

msedge.exe

description	ioc	process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2804150937-2146708401-419095071-1000\{CEF5B969-4B3B-4EC3-81D3-C4DC600A5360}	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

Processes:

msedge.exemsedge.exeidentity_helper.exemsedge.exemsedge.exe

pid	process
3196	msedge.exe
3196	msedge.exe
1692	msedge.exe
1692	msedge.exe
4800	identity_helper.exe
4800	identity_helper.exe
6000	msedge.exe
6000	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

Processes:

msedge.exe

pid	process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

AUDIODG.EXE

description pid process

Token: 33 516 AUDIODG.EXE
Token: SeIncBasePriorityPrivilege 516 AUDIODG.EXE

description	pid	process
Token: 33	516	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	516	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

Processes:

msedge.exe

pid	process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

Processes:

msedge.exe

pid	process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

msedge.exe

description	pid	process	target process
PID 1692 wrote to memory of 3644	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3644	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 1132	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3196	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3196	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe
PID 1692 wrote to memory of 3284	1692	msedge.exe	msedge.exe

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://Google.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1692

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbaf3846f8,0x7ffbaf384708,0x7ffbaf384718
2⤵
PID:3644

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2040 /prefetch:2
2⤵
PID:1132

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 /prefetch:3
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:3196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
2⤵
PID:3284

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
2⤵
PID:3096

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
2⤵
PID:4724

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
2⤵
PID:2120

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
2⤵
PID:4692

C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:4800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
2⤵
PID:1988

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
2⤵
PID:2928

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
2⤵
PID:3992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
2⤵
PID:4148

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
2⤵
PID:5484

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
2⤵
PID:5728

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5872 /prefetch:8
2⤵
PID:5992

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5904 /prefetch:8
2⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:6000

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
2⤵
PID:3916

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
2⤵
PID:3068

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
2⤵
PID:3320

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1932 /prefetch:1
2⤵
PID:5540

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
2⤵
PID:212

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:1
2⤵
PID:5716

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5980 /prefetch:2
2⤵
- Suspicious behavior: EnumeratesProcesses
PID:2828

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6588 /prefetch:1
2⤵
PID:4800

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6368 /prefetch:1
2⤵
PID:1448

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
2⤵
PID:1516

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7104 /prefetch:1
2⤵
PID:2348

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,18404124459039724386,7134953310767156070,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1992 /prefetch:1
2⤵
PID:1436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1764

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4924

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x500 0x3fc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b4f91fa1b362ba5341ecb2836438dea

SHA1
9561f5aabed742404d455da735259a2c6781fa07

SHA256
d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c

SHA512
fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eaa3db555ab5bc0cb364826204aad3f0

SHA1
a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca

SHA256
ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b

SHA512
e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
69KB

MD5
aac57f6f587f163486628b8860aa3637

SHA1
b1b51e14672caae2361f0e2c54b72d1107cfce54

SHA256
0cda72f2d9b6f196897f58d5de1fe1b43424ce55701eac625e591a0fd4ce7486

SHA512
0622796aab85764434e30cbe78b4e80e129443744dd13bc376f7a124ed04863c86bb1dcd5222bb1814f6599accbd45c9ee2b983da6c461b68670ae59141a6c1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
40KB

MD5
9dc9673c5af1dcf765ad951ecba52c69

SHA1
9d5c1202e46a7d699bf85559b0a827bfc3a57751

SHA256
bd993164fb521b40693bef84eab25d964ddf89b16788458e661e453eb418da46

SHA512
bf515983dc980667844bb4a30b05400ef01df2047496335ca2770466bfe8a2170a4dd822fc56bb109b6235ace7e4ff52a75957d2d9a752c3bdd8b71265b698e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
84KB

MD5
74e33b4b54f4d1f3da06ab47c5936a13

SHA1
6e5976d593b6ee3dca3c4dbbb90071b76e1cd85c

SHA256
535fc48679c38decd459ad656bdd6914e539754265244d0cc7b1da6bddf3e287

SHA512
79218e8ee50484af968480ff9b211815c97c3f3035414e685aa5d15d9b4152682d87b66202339f212bf3b463a074bf7a4431107b50303f28e2eb4b17843991c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
1.2MB

MD5
81a63a086d1c0fb065b12ebecf8cd7f8

SHA1
4ae54a6f2a83df9c901b196a6c29c3436b3a3f0b

SHA256
706678b4abec74ac3221737a9c70bab8ea40cf26ee6a89cb321e6c1503fee0ce

SHA512
2d33384744684bb31c7a30b263d6d2a1fe7bdd3dbaca9867ec6955795e23e7ab5996137210c651c608c22b1d9800bc1a29ef933958fb57dcac2482e8d3922877

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
33KB

MD5
fd2b58574f9637ba7ef639267349d848

SHA1
6eda5ea93f549ceb5693f6f1c038893fa56a510d

SHA256
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec

SHA512
9de7eb0ddaea236cbf912f4b87fa94c424cdea041e756200926c7e28bac860f69e0d9104a790678d1858cdd7101b25d1e25164a89f81a758f35bada3765c6893

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
73KB

MD5
81f9e5eed7f617d1e353f52ecba7109a

SHA1
76e2c852a88d4d637d5c77606d345bde0895c09f

SHA256
a818f1b9107dd401f4dcfe937e2742b348d6cf60a050bdb76127658cb4dd0ef1

SHA512
2b111c6d74f006556bd967c15e15c3732a5f42f66fb98dc7dba61f2b6fc76b1f1e5ef39cfdd2f403703f70387a4ceaf917707f9a4c8b66f2aeb00a76735e94aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
89KB

MD5
7f061c504092214ea12ed25633074fcb

SHA1
4366c244fbb1c4b494bc45593ba20ae8aa4fa88c

SHA256
5ba21c805434a0b01a45550a81684918ccc047d0278179f2d30570c0363826f7

SHA512
d21b7968064aefc1e9011fc9fe0e26a338a64ed60edc676afc8f24dd25f28bd871d1faac078af21641e881aa7e23257c00dfe236fa3e8afeaa8a1e9325254e4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000058

Filesize
1024KB

MD5
6b66c4f131dd27d4021fc8594e41ea9f

SHA1
23bd38f8b752932bede0755e1f09662311e2239c

SHA256
00f3948013900791339e15442a99a6597b0637c2437b71b78916618c61344cd2

SHA512
cb77ffc262fcfd0deafbc55639bc115f0cff2f9c5449ab4ea4224b3743f78bbf3af3bd7b6fca3c57c6357a5437255ed12479e1b7f18b44bbb3296381bb57a185

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

Filesize
495KB

MD5
f80e82d6acc63e9d9efb017ea5ab759f

SHA1
e940ced243c9a9a604c94bc1bc71ed3abcf9c3ed

SHA256
c181a90207ce8ff2f37a16d4b5c7b717090bf296c56d6602c66cc5d70a0412ae

SHA512
ec753ddc744890ec9fcb00d615151390494146e07fd33fdb7b6140e53993877c6494c391ce77e6538e1e290b8f59a3f2de8fc3f177fea515d499d190ae93c9e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000075

Filesize
43KB

MD5
790c81db9bf945fc2a3a3912c2a5b6ae

SHA1
bcaeed70f5e969e369dd2303df53da089a81bb8b

SHA256
5dd15e15b2c3f3537c06e593e5700225dd28f13678e9649866c7d3c477efaba4

SHA512
7693db525ca06118bc1907e9962ba691f1973bf5639986cb303c03894440dfb9252a2e9633d5bfff58905f8b0fd9dd63d75b48991412ccc4f0277127a08365d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000078

Filesize
91KB

MD5
45f65ceb9813b8bff78f7e10fbe4a7a4

SHA1
2b649ab6a5d155895bad9c29d30c8e45482ef9f6

SHA256
41c631ddd9247af7e2c8be0e88d355931754719516bb3fc377f33450462d0c2e

SHA512
8b40490a12dc4465f669da25ac087b7d98cb75c5aacdf2023dbef4415c1ac85c2ecaff918ce8e130bc7c4a205cb6d42e6ce30d9d44c2d5d10b2ae98acf7b2a77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000079

Filesize
22KB

MD5
8edeb5a220fe2ebde6e724ec46a47b01

SHA1
4cda11549a4866dda172d7e9eda415ce3f84fa3c

SHA256
25426e5097ffb53fe93f88b9e6fd457aece2c01ae06c9cc02aa6d0f59e04b7a3

SHA512
279187e4788378c7b27a7d606293622be31423a76a749d9ae03c2b359b91482f937c466b1288545f8d2251b8df306ada2c30ba5d1d186b63946aa42327000118

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

Filesize
22KB

MD5
cae0a3bff6c55245d9c41f31ffb59d80

SHA1
ebd40dab223720af9a3f7f6fd8a1d979a50ffa92

SHA256
0373c3d6ccd255a22794c4d134d7072a5eec32cd132571889538389959075abe

SHA512
f0fd812b0c5db1655a224729c1d2f8bca5dbd797f333ddeb4c8779a0c7db7e142f02bbbb209971ba324613bd6c467f2dde4f940c246236752cf47e9c53fc73e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007b

Filesize
21KB

MD5
365139c81098a7d1a09be5ad35636cc9

SHA1
1ea3cc8cd2e4af315129ad24f4788e7b5ae48b74

SHA256
a8afb3784cafc474c077c92a5e640ad01bb8b8ddfec1db4908e9291fa3d48ba1

SHA512
1934dff330d81f0b576522350f655bfcfb10d4dea9b23b4a0c7581ade4044d7c8a81e62caf5c3ab1009fc1bf99d083ddfdd2c1a17f748a1566320868db1516eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4a7c011982c0fde2_0

Filesize
78KB

MD5
4abe063c6794522d0c5dea44cdf9eafe

SHA1
fdceaf21b2a9758fbd9465195d124c9388fbd37d

SHA256
e22a9674667619c332323e63ead54092b49768caa31b8f93954b6adec7201416

SHA512
f8be079fc221820703bf0bdcbf187325b532bebc99f88db8df58b7e788edcbe67f8361c93b4ae318e986e0dc4938574b23ce1b0d71a3f5471d302553cd4b0974

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6c40d08de5ccf1ed_0

Filesize
280B

MD5
85aaeddde1044294f277b65395570f28

SHA1
98828cdebd2b9f96ac20ab680bcafa26f0fc5e6f

SHA256
c04021babf4dfc123bbb3ae43d46e7449d7d9d7c9b5f900fb016197d477d5b70

SHA512
6177acc83ccaeb4af6dc3c9849ac438874f048a189526db02c582fbfd044cca609f4ae01c079e79bd783881229a81e897f632815f8b76ca3081e310b7f67ebe3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\889f97f81fec5c8f_0

Filesize
276KB

MD5
95f3aebe896f4a96863222c93ce98ee1

SHA1
e936d2fcdfbc2a6f352d076870273dbf2d10ed5c

SHA256
c4faff8df5175da6f714d2a78ba0cadbdde1811c5843d54977b37e3c0e43f50f

SHA512
593e20528d4ed544ff2a747958a0c748a556e1c3fa990f9897abfb0f5b5f512c67246b5b72f8322315be9dab40bf19f2cc8c6907563ee8ca7e0785c6c73536f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c721c4bc4b4ceffa_0

Filesize
252B

MD5
02482bda856edadf622a8d6400628dbd

SHA1
cf10ad61e41fc6b5e75d86c0bae7d8ff55c533a0

SHA256
054d4a0329cbdf8ba4b60264a72416b845e9377aa0afce0a1505de23531cad49

SHA512
d93065e938349ffce5fd05afe83dd6f4035b9e1f9a8b43a35834692ffd6d9e11fe4f6695dedc09a3ee786713557ec3cd272b8b214b46af58285330660af28a56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f09935aff6ecef35_0

Filesize
265B

MD5
ce368d6de246e7a8266408ab8c838148

SHA1
a3efd39e9e049cfcaf952164d13d808db7ac3ccb

SHA256
82c1edffb436253b5d65c3399fb8d414be7261c5e6d03f6ca9892525fa69a25b

SHA512
3b5e178195d096b50e50dafb292efc2ad8d2dfdd0b7508647a82acb3b383013a2858e5c0dab0b7b75e6f2a00315630ee6c9ff9480595ef97ab8180c0a1c7075a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ff4e02800b756356_0

Filesize
375KB

MD5
a4d1824682ecc4262abff5fb1a6081c3

SHA1
9aabe1b2e94255cf77aa8285928a9ea27213d819

SHA256
14a8a01a3381dc39b5530985b13172a409c52036e6f1bd316e2de6abd4e001dc

SHA512
6e661f23adc9141f614c3ab6769b5601bee7e032b9d38bbf9610f9600feb078f66bc120543ee2aa072a26d197028b2afd729fc6bdd596e95909b274b88905356

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
82e18aa12d3def477929e2b414297948

SHA1
bc7257c091847f108643e2a8a9213892209ac4af

SHA256
63221ffe10517e1b63d7cf69a1de7b314c7156be495f6ff73e8273a70b945be1

SHA512
c261a1b612f1d84f6886fa9d4712aa5f0a0c3348f483a04ab309342fa308e2a80a4c67acb7792b592fbb028f34987f0b69fb7fb9e2a99f5a025e8d7513b462b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
e10dfad0ebcd92ca12a7cb56912a0897

SHA1
c4a4dbd900a0382432b16ae353d329a8ed913f10

SHA256
12bcb82c05ea6b02645b1df08901ac36f460237adbb5c45c4d25050c82115855

SHA512
19e3633a68bbfef6b5a64c882da84c2847157d27c4e7f716642357aa08d5e12e27475bb31b7b35210f1e56081ae3279bb2567fd7aacdeee9488cba6480e16bf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
7bf5665692cf9f978d9ead5edbdd6379

SHA1
c2772caadf96d16187e0e2f2e37448ddca42e228

SHA256
c85bdfcc0e9f69fb83536ec3a9507ee4a2281ca58c421fb271c8a0ba45ffc43b

SHA512
0c5d7e62ec2d247c56e8b09a0f6886dcf104541a32ff04864821e079f3858d40c1c8ab4706bda3ad962c54f43309d71a2b0d39301af5fdde75da66ed78c5baba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
7e3c2eee6bfe3a1b166503113b3662db

SHA1
a5670680df0466d77ac69d8797200415635a823e

SHA256
b3eca87a3120ce636e9923b80c7b07e5e49dbf7dfd1fed88e60cbbc73a8b1856

SHA512
f39daef0ec4fc30317197821ecb9fadea636a93e26ea72ebb4cda0e7629132a1e24ebaababfb88a5c74c23ab2a43ed393e01ac215c0f4d11d61df4a01ee35ed5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
1c5e276fd851b0ade40761d2c5fe0cf4

SHA1
552811487087a452f0f15b86f0a878727d34bcf3

SHA256
d6d717f03178efa1841b9d09486b4a14c9f7df7cd98c1b75d5e4af26455fca9e

SHA512
4d392a876cf39de1e4ef862d87fe936d6cce6f3643a270e8b38db533c1f3a0d16fafcbebc3eef31dfbe1f75646c8a92219bae2695d1cfe334542fcb4f2cb4d9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
27aca78697c116eb4c7ba7e8e5d4c80a

SHA1
e061ac334dd754a796eb8a6860981e451ad542ae

SHA256
3c89bbcfcab8a9645b0a5ef3fcf838d355687cca6e60feb94a42d8fd16b5fc3a

SHA512
e7862e2bf3a8d370af52a2f96cb72b6a4ea2139aa7bc53b6319ba2702ca870ada8a61507c8527b1a31a5385ba8a73f968158a63c5e50c9dfb1974fe187f13d37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
e7203ceba771c865c352a347b746c02e

SHA1
d6c9277424fcfbc3fdb9de3f7c5155a07deefc57

SHA256
ad5f1bacb453e35588c2fb216f630f949771f699f0baece417b15ca9e3bc81b6

SHA512
ec554a724834552c4073b28e74fcbc1a5cef33c0cb253126f28c2ce96139da856de2fdc8385ef41ba5b3f9a8657d0e26910b2ae19c77c0236ed81b697604be38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
a40ec35314e8f92e190378094ed36acd

SHA1
090022ab15a96a5d2c6b4e7e67bdeab4fb32770c

SHA256
892d6deb2adeb61997872554f51d7fa5154674bc0be0a3ae4d1705f9c2a26a90

SHA512
47d70bd9d8cfd6778abe0da7475040e016fbb216e4a3127d40675f17dc655389f994f54554dee10e2b9a11189dc2a62f0319da41f5ae083b83a3a4c5240d994d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
29a767887cb2f00b58117c15b75f608d

SHA1
f7809acfd231bf784a23f5673b7c41ac084c64aa

SHA256
6ea9dd5a6894e64673fbb3b5994b9f1f904448e0ed96b7c7b17af3e46df7265b

SHA512
0c02dc2023f040cad24850abb54f4fbe9aa3931861b2b0fa83cc7a6be133d9228a88712baa0bd73e36c532b82a660c6b96227e1818de6230a4d80d3a02af2a80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
96B

MD5
3cd9d14c646b9b36d7bdc2832b3cd818

SHA1
2f8792c8332012b9fa001cecbf2b9a0244f89cdc

SHA256
cc3f620deff5c678f140b8dea0b580babfc606b0d6af7e5a77e19e7bd5824cc6

SHA512
645905872f120690d5e39e35cdca0a542504e4771d65137b5d29c47260bb0ca861e1fab7669cbb3a7a8b9f8e6f8a6776376893a225a68c3a1d58e51df4b5a707

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\10

Filesize
128KB

MD5
c075071c3a0d16414580019f992fe41f

SHA1
d11fa102abab8a4e61f7c6cfad73d455bb0711a7

SHA256
e9f0dff84674a34fc11f255ab0d274917e150a42f740890b086a18c9633d94ff

SHA512
2e9ef98d72458ba353531b72393fa1e43bcc05daff1fd110996552fbc2d72cb591800684386a52a2e097364b3493b79ff542d128f11d9f214e32a3972671eb98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\1b

Filesize
223KB

MD5
7f89c2ada93e6884e7e64cfbad4722f5

SHA1
a0a9b90292263a3000895ec030e8f2c8d0072eed

SHA256
73870c7196224edb21c56fee51a025ba8be356cfeef9f7dea3c4012ae409986a

SHA512
6e1e3ee50421de8238c1c9302778281133d512a9879b3d30b83fd5e7be9d85b3371d2233b74bbc376b5c0675e345bd5686b8def928e26029b087e87fe4aec2ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\28

Filesize
256KB

MD5
3165ce90642d8d947556864f838e033d

SHA1
1e34300350c4b0ce9343191344284c8637305172

SHA256
c7d08cbfe57f3fe79123507e50c1fd1a69f33905f5c450ecb4c06fadd85a1322

SHA512
6de9d2e59405a220c0814789cca0d95a4a034a894eb0e1c60bf2227a2e520b727888f4da72e3f8a11e9dee58b4d145631a167561479f676e092e071732f6468f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\3f

Filesize
227KB

MD5
f274142745e9c84cc5cbd53b12f38314

SHA1
3266fa7d2706941ea86df605714839a94d90fd80

SHA256
713d42b2bf281f77c67dad0ddcd2259fbb5fba6dd4b26ca3a8c3f979d542a482

SHA512
d86a196cccc67fa4c4ef442cc842b33cd2e81765b5c0b0dd7a42f0ad0e66b71692f5b4eb906dec5022cc31741c44c9aadb4fd4f90085060c05d3cfa4241c5ba8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\51

Filesize
256KB

MD5
9088a4c4df1a78e08710d451792d0201

SHA1
2a24881888ecec11da1f2c2d3265e09de764cb12

SHA256
4abfb079543168198dde84e968b26e74e027fdc2c3aa767cbae148bcbab3b5ad

SHA512
15499171fac6a2d44be0e6ada7866e20471751e5bb351a745d33da1790f1b581ce10384a3aa5e4276fd585e34f16aebabfe49f34e3304764a051b756a683c205

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\78

Filesize
226KB

MD5
5dced50b249aa4254a8e5d2674a4675e

SHA1
dcbb2b4a1cd65f73b5e16bde30cdac1c00c72c10

SHA256
da1ce8d7ea7d7d6a5058e3b971d003cb96fe7daf4621e70d33bd4b1fd5adbac3

SHA512
a58d750a556a50774b0a4d7a7f11002aab1ed846e4fb28e7df3df91c92e5fe5568edc2e034ffd9df6f61d83c77a05309e0e5fcd87d08d2a079d2b00245b66b16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\8

Filesize
227KB

MD5
b9998dd50234638014e35112a664fd81

SHA1
5d474d9feb50cd2bc7c972e173a60f2296a7261f

SHA256
e6a17b93768284b548bbb4c68885163bc9372ba946465e5e1c6afd095e677903

SHA512
89d96dd83a56afbdabbc975f43036636f070e9bc00b029730c759d0a8e96f6b19e65efdc7743fee1018028cdc5828a73ef6663142a703065cd2789014cd199a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\8f

Filesize
256KB

MD5
2c0ecd340ac562629a38d24e99aa5eb7

SHA1
468eb215583c300acfcc43cd881c29dbfed7a90e

SHA256
9ae86fdb8a7730795f13de3e541db6219180f12d97618ba8347415a146b88880

SHA512
9f5d46b5a22d0bd5cdaea85f9e514d7c3cc58f53e03fc747b7f07bbb4cda2c37acb76c7900f9bbf2248ed3a442eba43470111a94d6fe76f48cfb3c288bf13a0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\ca

Filesize
227KB

MD5
b769ad5075f6ab894c7f477ad19fde3a

SHA1
13b23f94fc9103f945a6bb3cfd96d93bd2d7d04c

SHA256
672743659d03a9d0cc9e1f1f10e0f34f8a28d7b3479efd11238b5cdeb3d8cf83

SHA512
515e41702e72740a6df516cf6bddabbf51a5376862bed2e2abfd5831f28ce7874b2b02977beba8cd6ae3c78f5f729a04bc424effab6ead50e7999d707731c315

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\00\e6

Filesize
128KB

MD5
f2d80171fc360ee271a78b86fd1dcb79

SHA1
8149b736eeb8b69bb53bb6abe3d9387ce3ce4e11

SHA256
246fe952a8af406cf591e13d2ca1f2e3417a486fd5681c78bfd95662003cf65d

SHA512
bb6c6c951d53c8842548a5cb2355335c686d080d965a308a98b100a4104e779298a90622263ccdebb2d2dcc2509c9c37da77545601e3806a0abdfa175a5caa20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\01\139

Filesize
223KB

MD5
19d36964360daa09f4d7efb96157edfa

SHA1
5c18205123d89f5a27672d6504798dace97ebb78

SHA256
a31429aeb36693ba67e4f9f74fa76a411661806975b4d4878be89d2c097bd39f

SHA512
232a4404cd05de5d7d8a00b580157d090185b0f8205a44b7335eeb67ad72a1ecbba6dc6ae75ec042b4a7167d532bad1de0fe61a0cbcd965e197f75a6d684c60b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\01\15a

Filesize
256KB

MD5
25f9a89f92f791e52633155e3c87d71d

SHA1
314380978eb6a7af4d5560a02af5f858f17edcd3

SHA256
ebade14628340d924ca3b1f69394bbd19456e113c442de5fb3de48b9ba853fbb

SHA512
64c668e80a9a1084ec8b4e4165a42215725a31acd07247cc6a070c18731c56b9f56847ee3ed938360bc349588a25c570c43862917e2bfe139aa8d31b4d2c667a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\01\1c9

Filesize
223KB

MD5
de4e8358e9002647409bee3e456dbc3e

SHA1
4eb9b90d1b70403c2c6f544ee58a43ebf59ebe4d

SHA256
f4da39ee848469c82f0686ab8c9c4fdd164247dd91b5efb3e93c36f2d97ade64

SHA512
0e91cf16722924c5c79f23eebf3271a9b43ab9ad998704cc1ec871fa7041ac4afefcd0516bdb91e0b347783240708076b96ba1cbd0e5e12598ad7bf5c6d3e142

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\01\1ef

Filesize
256KB

MD5
bca2f3fc85c7a4533b03efcfd5bd9f49

SHA1
6089df5defb7a8b12f1d276b18e21c83b22c8ec1

SHA256
58fa2543b2e21ba7c8fd9f7eea96832766ba28c7b1b75befe361a88440bcb96e

SHA512
ced81d85cf8f3b2aaa25a93e1329f7528d7b4b42af6fac6f4474695d6d6451afca9aeacd8c5a640e76b143b04c4a1f61da09dcb9182f8bf091d8a30156e5b3f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\02\27e

Filesize
227KB

MD5
236ea0c2a2f8eb10c452d3ce4274a8a3

SHA1
ea127473a91716f27fbc5a3584b7950545feaa04

SHA256
17eb49ac2e71d1e26158c154a231d0e3542f90d379949d9435663483a9ae16d6

SHA512
2ffa70c925cac76d78c8d18d5b692e1cb8271253edaeff7d63fb90369c037309ae9659fbb8347760676ff6759b89a4e8011bdd0eeea9309f4a74fc49491ee50a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\02\2a9

Filesize
128KB

MD5
dd5d6232c25a29028daa0d2b8134d383

SHA1
fc40473292765fcba9ab0143a5b46db82bf2ee7f

SHA256
bd66fcdec7877b8be09a25c31e9878f5112f3d5cb12af1b36bec1546c0053a96

SHA512
095b0db9f2a3f7ff9c3da37eb5417c427d07b5d2698513a22e3b0ae8cad91ffde40944105ade2412ab3d974a295af1e5143ecf84cd39ff5afda2f9e25d437fb2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\03\35c

Filesize
223KB

MD5
cd96c73b8234e56809c56f93c5e27bcb

SHA1
846e5562be5d72d8713b3d4d4de8a2cc07224e9a

SHA256
120fdd699fb7d83191b08d45d3a975ccb64461c2b8f00d31a8294fb63ababe5d

SHA512
d94d7ad672e4a92795f84eedc9fa094ca739bafae8055aa5c8ba6c0726fdb0dc2a2592c4544d1a42cd5682ad7111bcb4d5ae8e538517eb649794395d2ae80b76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\03\38c

Filesize
256KB

MD5
3126f5254afc81a15b6eee25f8704b9b

SHA1
c0594b654c32352db630543fb8328647acb4225f

SHA256
c09af16a35068da70b5013e8c5fe93cb2753367635a758c80b282106affae07a

SHA512
ecbbb2b148ce8522e44d6b564b936639702c28c363d1e0256184e61a3a5a8b01a320af978c1ec0eafe0e4d0a702fca6996f91b5af078fbe98137f4d0184daa05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\04\442

Filesize
227KB

MD5
054893865ff3f5f9ef85498838548666

SHA1
1b1eee9aef29e67ce00f391bb22fbef9796099b3

SHA256
6355e9302ffbaf3c98de9c36e923cdbb157862e753807c65f041ae14db7fb243

SHA512
538c4560832af65f326328e9cc72c4642ee41e4e9f534df937fa3a56c3c9e0c5f0dc32eec87d065c95410584f81b22e4c87495ce13e6cda62f3cd2c2e947b2fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\04\472

Filesize
256KB

MD5
5db9236fad7b53009e2a3f2e9949e76b

SHA1
d6ef1f7f95d206b2851c90c5a319527cac01d394

SHA256
c995706732738a965da5c18239dd3a36a633068540bcb347d14a945a215e4165

SHA512
5ff87742a75dc0083c52f70ffeb18d06289fd86dd102512b90bf368a0adb3aa3e9b1db9e0e46fd12e74817e5238c613fef90f94ad0f4a429b58e406b73224cf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\05\528

Filesize
222KB

MD5
a7185ab3352356ac47012ad98d12cf26

SHA1
306948611a90cd42985c61e3dbde3d1d215f32d7

SHA256
a660bbfc256c1d24575eca51c4e67bde5fff95b1226cfce909df298eb3356ab0

SHA512
600b511929d7f79a220f206b4d54daa12832df2f06016f50385c66d77a917ea33864da5cc7c9f8a8fb71be56d1f2c7cb559cf0ad16fa4c6728aa009803cbf02f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\05\558

Filesize
256KB

MD5
aa4d81ed64bceac796ed83352538534d

SHA1
e9937364a2f8b37d9e23a4907ae36f20974d7acb

SHA256
5df15de5630fa95b0cd277c44fd657ad01c7bff35ce03302e408b66b63fec6f3

SHA512
dfb4b392660b7b5bd42eb412092bffbfbf3d9c1537a73dc688873f587757e9b29f2d84afeb561ae4350371bb14b309c3bf60051a65b1a97721a17fed9416d920

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\06\60e

Filesize
222KB

MD5
746583b341476d2e95127f0aa759e728

SHA1
851cccceca2051b8130cc6ba85c26825525983c4

SHA256
4e9ba0dfaef790672d6c530a60c8acd8c860cd6072a4f88ecffe3713497dd131

SHA512
b35643d753e9b5e56829cb2f23f4fc35104af67b160ca3769a569327e2c1bb9b44cddd536e37189167c3d0e08683796ac0934ecab5d0b9472da94233f82cb66f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\06\63e

Filesize
256KB

MD5
a510ffc260c9dc3c04e3fdb4c2f77872

SHA1
94d8c5493042ac62bcef33ca4f564b9ae35befad

SHA256
2dc70a4140d2983a56251c4f002a5a0ba65d5fb5b56391a0e16b7951afacb45b

SHA512
9c13fd901e3de87ef6dad349f28e09215db2e69c6209bf4deb55bcc10eb645bf744237841221a1884ba0b4b35a91af5764c70b5191031e6000758d07e669fc68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\06\6f4

Filesize
227KB

MD5
ab1f79a510bb3ad611fe56025f4481a3

SHA1
085b3d14f9389cc741d5c96df873515af8a605d4

SHA256
05a97efdcb19d01959efd55752413bb5f1c25fb5c4680ffdfad4e675281502ea

SHA512
343b43ac6e8c43157b763ae2f602e200f040cde71745dbb100267065f75bc7d6bc7ee9bb8eb99f7ccce900d9e9cba3a9ed4456f28144ea49359aa5407cf6d2bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\07\724

Filesize
128KB

MD5
3b838e65040e39808204931418489ab8

SHA1
7317b2907d72557ea02234e50170be02ef5b22c3

SHA256
4a1d06632cdc80aa3dfac5bf4f841b3ddaaca51de9c27cc0e078b4f3c8377a5f

SHA512
30e2ca79563abb8ed05f390a944cccda5ef46fcb80403cae761e86b956b5a0e03d67c987427a19b8468e55e67cfe48c8c68b3ca07a91cae12745e1fbf859e2a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\07\7da

Filesize
223KB

MD5
3555c5f8bd59fbce8e052a46169d46c1

SHA1
3ef7b9526f08df28adb65f743e6fecd86583dd5a

SHA256
d94a0413c6fceef9983b73e7c868cca958b24641f6c8fa4d05e6370a0ec02a9f

SHA512
2ed09888a778a642a6c39f628f675631df213c49e02c42bc14abe13ab5ad5b92eee0103aaba1abb9c69e1627d02648ca07170ac6328a35389af7320a7d74d740

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.blob\1\08\80a

Filesize
256KB

MD5
837067156e5146e7a8553aeac7a215cb

SHA1
2222ac02409a369e2b1e35814e6fc5171307f343

SHA256
73d06cec64105596a86391b53acc1ab41719f2397478206d3e7aec20e763fc02

SHA512
a42c45615e47000ce443ff019f3407433524f84be923478738c20287a2c23a0580914190c5f818b8f03b0823ee76b479c38c52186ef10533fce23434ec1fc402

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_html-classic.itch.zone_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
bc6dfdf6d1add2e5b90d8f01fb63500b

SHA1
1f0b986f619ca89639dc488a2e254ee0931e85fc

SHA256
bd00145b4cc39af9d7b2e64c3e73eafe01262a542d894e5602094ba7499d556f

SHA512
0ec2e6e3a23a8c0fce7e481926fe9870a9857300513d366f38f84b67841a98afc561a14af4668448adb32fa72357b97dfdca7fb2ee342166d7edc3999539f283

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
212bc538a664955b5dd6e705b6466e74

SHA1
4af3a86829c9aaae5e74b61734f65eae535ec4fd

SHA256
cb1f091619cef5751d421e523d1510b71f92e8a9b72b0002856834e3da028cb3

SHA512
353a851e8244b265348486f590aea59d41aeb555519b2a516c8a595828364cf94d0ed9f23d242bc4b8e1b1f97be91ca8bbd87fa3c22ef120891b4f5bcc729f77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
ac5ecaaa0d0b479852a906b496e5cbf1

SHA1
c69bdc825f817d0b807019016ad49ae4a51b0b14

SHA256
e456c06b3ef719440fa62ab8ce7f1421c1f3280947ec305b71098b8b7cc02956

SHA512
139e00b7bd4d907b24220f4c844dba9c1738f94cb031cdd30940f3abe282338ca4bbc47c712848661ae4e145e9946cc0e884ffc77b6e87080a835215da02ab98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
4f6a9bd431ac10d089d31a8945134a5a

SHA1
8576be03e60cc199f24e4d30808179313b8e89e7

SHA256
e6cbb4787d39a046ab7db864d519ab5eb5f5551901932b944b9ea79b333533a0

SHA512
530fe87a35b657656c902ca6a0e1c156156ab19b7f67ae8a87380194e3631a55edf05629d9baffbef4c4ca939ce877e36d4c0c6b0d0eb8736b12336ec742cb81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
9ae1a0b8eb4de7691994b055fb5f0d2d

SHA1
156ca1e5a7069618b5cf25f3b3f612e7380327be

SHA256
6cc2ce3fed481a2d19b121adce4bb5b858967fa75ffae67d0eb2f0f24e511a47

SHA512
ac0257a2e4c2e141efdec53894700758b0dce2938f40d88b29769d05363272b180cf6979a1b309cacdbe8665ceaa89a959ed3c8362779de0448218d9b995b95d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
f12fa90fb9b78cd4bc8864fb0d3aae25

SHA1
f071c3cba2fd55330a624b5fcf698baddc7cc832

SHA256
8a8ea13e3f9f0cfc50c301ac5d7cbe5cf9ccb4ce6d05df3049185ee1784eda37

SHA512
625c8f3886623d9bffb10cc4509db9fd0cf20f774d62bd821ebbeb248772961f5757fcb511b434b6e9e3d16ee6376e9c4081ab63d988a849d14dc5edf078de4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
d8beb68c87f19ce755e5d33464256b4f

SHA1
420786c7d50bfb14327431ef977286c39ba0c659

SHA256
908fd363222dbce45a10a4eb152c28dc9b218a4a0180082a13751154739daaa9

SHA512
4d07d2ccf8d1b262b6b06648c88be90a5e09d7e689d68d92896529bd0a86cdacd2cdc00e829ef684bf49d629a44040195f2a51c72ebb67d9ebc921046c0f76b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c53802f2ae23be5d51a5f8cd50a1207c

SHA1
a708fd7aec22b6708af2d02354fa6410b1326765

SHA256
90296f272c15b3bd20112ec3c8db56559e9bcea75cffeddfdbd671624eff9d87

SHA512
fcc15095fa238b474ef869dd30f8d8db93c670c9e5dc59e63faa5ee5dabd51e1108ba22486e6034f6af5953856d697779daec9b94d58452288607e112045f37b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
17f3ae032dd982efae5f66343af5af2e

SHA1
89ec7a6362095011206a67c82aaceadfcd7166de

SHA256
aa803c278cb992ecc89a92dc88c2a9e2f26c0e4ec7a2e00d1a55834708d93a02

SHA512
430f2df6b0370d24875b0e69e20e18ccfcc2de957ac4e36bdd9029a1549c9596d922db9a03bf15edbebea2f2d67dd4e05ee9cb630ad6d01393fe4bd150fbaa67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
a8e1341a79fbd44c9049dcdb701192a2

SHA1
af38085d8c4821ad319a8028248fc8947b72aa94

SHA256
cadfbfed078f2632d2146df1cdd5cb992bdc91ed2c95e1d0447b7baf90beec6d

SHA512
5eea7a3ea62e97e6c19f85cd94c2d8218f435a1ac345ab7a72a26b95273060a04ff3b08b30333422da3fe0001561b2a136692fb67fcb36de07e725fd0c6e0dec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
2f074da94d2c13c8d5da54c4afe279c2

SHA1
6421c0dd7e2763479e2b6fd5ee4cdbeae29ef4ae

SHA256
216c730f0c1c56fe316b7789972b7e47ef35d09bf1e2b32f00c2436181ca8df1

SHA512
f5840907d8a3229714fc7a67ae11300bc28001c0a519198d4096511d8c80d5c2a4c7ee77196894027953c987c9f7187e6f45f07f49e15faffc8ad59ab7ce3aa2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
1a809d197ddd991f13f0fcb0536a8a55

SHA1
eb27c0607338d37a67e920a21fc92f1f52d73a35

SHA256
ce2f6e058d1ececb1332b38030d288bba7a9c4ddba4aae914c8032ff7c709263

SHA512
14653bbd7eb40dcc34395525bceb8dd686caa7c2797d0f4e995cf8ece26a55c82e1cf1c14a0d7ca7783aab9df553a06ee9c60bbb98fdbe1578eb909916f484c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
e21c57d6e24791a2de0aeec5fcbfd3b7

SHA1
418ffade912bb484eaf1f92a4163538baf368714

SHA256
c13701a24fc3a387e87708b26fc6a72a35cee9092f3cf35a4dbb8d9f94192d9b

SHA512
e593025d98db5a6ce2511a5f7cf8043770bdef01b5ac3a47a8b0b0c3fa5f0a8fdc711bb81c654b22e9f866ea4480efe5c8b692a23171a82e3b7c9c79bd70e8a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
6e82f634cc7bfe06039d2427186afc71

SHA1
4f530761001a1a9d94ab0db4804b9e476f0751cb

SHA256
3ada846f040aa3e63c9a4d96b5615b7c811b14bdb6fadd24967078eaf18db83b

SHA512
98438a9b58b4a3ef7403b2f1b0dc0ed120a9e53438808dc1b8e544db6e7d6a77b7124985d24afd4d218c55a9594dae67e0a0fa7e24e6ebf00da58c67d4b7876b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
fc99b8a77588538a522c47b79a6c3cc9

SHA1
41a6d9fe0baf0abd3f8dd6c1984fb4f1a4821f52

SHA256
bbaeb6ca9506ac3401cb5e7b590136229e036b99cfae9e6f68ee004549eae146

SHA512
eece5dd3b8c1f5d700e033ca7b0b3299f2166cb56aa68bc6d0e90716a8f7fde5605509a5e0c5471d1aa7d3ac66cdae5080d18004f3e5d8b9626dfa81fb4e3138

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
4287d387d5445829cde9ee1d35a4ddd4

SHA1
a95989763208a7dcfb6979caab976a17e71f16bb

SHA256
4215e2bed6f38fce9e962ebb21c4477b6af702b850ae7181ca941d0bb35ada2f

SHA512
c77249e49f88da1d5e4786202e130502aba10be7d37634519659f6b4c3f001b55dcdda8566f8b521da23a71c3b78486a3b0e8979f71ddfd40268012b18f46c8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0e01dc5bdb5cea304a7f0dc275219b36

SHA1
e4fe6d0109836dc9447c57879ebbde1d0d979340

SHA256
073c82caf7244e2a8f6e2fd0a5559b1ec43f0c44c4ca09ba5e20e4f74fa1eaec

SHA512
a9d25426b1c10a30a4b3473f4bc675224e64b4c529532cfd308886e3f70a57e3d9ef17385ccf30875de28ebe236d9b6755810835066f3b6c07d4bc53ee149173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b96d385032ff8d957bc974d089c74b5b

SHA1
01002f53341fc0153dc0b5315d2038d4597a141d

SHA256
163596f810ef583d995701bf855b7a4fed736a3252425a314c33c6bf18fd012e

SHA512
1103fe6eb5937e6eb3ed82803640f254b4644c34661ef93c766a21203f766470bd1befa5a54106ef8b718280a0f113e1c5c09992045cd21d3a8e9e55ee7eabe7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a6a33c36f9ae5ef29cc45fd7c88e6a0c73e1c12f\index.txt

Filesize
99B

MD5
8cdcb4ca11ac61a77bc7088c7aef81af

SHA1
64128204014499ae63eb4011a180911cf66b9d91

SHA256
7f0ccf75af84bfa33b34bc6a77117ae990e3d0a58067f442d76616be42925585

SHA512
0be06b873c83cb2e28aaa619d0f1e9d277607219b555c5600c4b8e888b106a9522c60163c15b448f046eff125ad463ee0d5100418cc638511fdc42307fadb6f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\a6a33c36f9ae5ef29cc45fd7c88e6a0c73e1c12f\index.txt

Filesize
92B

MD5
44eab9ebba4338d4b07ebe4a2a17410b

SHA1
de726bff7304145a79de545c5ed6d77eca4e84b6

SHA256
c2dd1dd34a299e6b4269ab407d59cfcf5ad06d5f72cd3bb3387cbabb4e4ffd01

SHA512
8d79a5247672a9242114f6bca57362becb48bc17d3051b3bc54f6d9493d48aa14d4ed36ea99831844ec899a699f8541d52fa071f090b906cea4617ed5796ebf4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
a6983c1c67337121d30a9219d229a2df

SHA1
25b2c8e46098a271f8b7ca5ff7847ee2d9d891c7

SHA256
344eb4a38fafeba49e88f3ee89171a70c64857146f962a42c4c7fac17f507597

SHA512
7bc05bd250c8eebc4b50581ef4c8941d75041840e5ec19053032859a0182e49a85ea5e0c4b49dd0c4a14ba7da3be07d2862a2f7ea2a3c278c0dbafc7928a19ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5f095f.TMP

Filesize
48B

MD5
893cfb0daed2a0542a437767a65ac62b

SHA1
c8746d5628aca4095d6efd7cbe810c9172199ec4

SHA256
221b16733729b8f10cdf4ec486e220b9ac8a42292bfc852caf97898f98e24875

SHA512
216d5b2704997a5031e63cc1aba83a954fe6a1e9ba7d1e4e453dd17b1b0c49060d1c8e11219c1b18a2b3af264ece52ac71cdd6257e3dff8ef3fb0b2ead07a853

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2169a0119c3059ffca8e7378fd1e05b1

SHA1
378af2afa254747ed7623884b16b918a919deb02

SHA256
cd8a68cd9268ddee2ae7d7138f33f7f3246ba65903722e498e398ddd09735b12

SHA512
60b6d35f9f515dc05b5536ae12070709879524d84ba37c36e2e7adf187ba5cbb7ba52d0e67715b72e809675fe2e1a29d982b525103e04b08aead2b1b595c5142

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
16d8b1425301d4299ccb716342ee4e6e

SHA1
7e6f934a36d93be016bada9f67289d1949fcdd15

SHA256
204a9369190e28810ec7fb666baace5c1712142f4e963437430484eb66f8f63d

SHA512
7899a3f453c193a2705a013ff93b9526d0e5cf3d0ee7d87411ad439465bf760f2ad82578312dd3e8d0da2883614c8cca618e88c3ad51748921b8a9aa71dbb253

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0d7748008c72325eae6834c0dc865f73

SHA1
97e8f5f51f25745d7d799ed969147659f9109814

SHA256
443e8c130131f60e268da572af5a57c481a3de2bf8e6a0897d1ecec7572c9a34

SHA512
2899d9a3632e9ece8cc7bf00ea7de654c7f3c91e5b3d33c8c1783beaa80ade04a7d5d548d167be49b3a6c22a4cec37ac831cf898a833fbb411460eae3ea02353

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
58d64530685e33f8123d8182494868d2

SHA1
194e1a5dc8d1b346ae71262afe9d9c22271047aa

SHA256
cd683f2382db944680b274d744ccfef60e69eb7df07ae2350931ee91b58d2c71

SHA512
1e88aa238d07921a02196beb6f18f82973154cce12f31ad5dd63fcb4acc1fc96beaf77392d4f1d0a17b5a5880b1228fb34fd8e387a4c0e7aa73325c3d4ca0674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8e30cd6f4db52f84e6c5cdcf17e7668e

SHA1
bea50a402bd79725d439d5d619f76e2b52502f12

SHA256
9189adc62630ffc90997b6491abced050740dbb66c98b0c765eb6a45b9e122ad

SHA512
cc659cf5dc4d4a9330ea3265931c9cb384dadeadcda33191146d3e87a459f5a28dcfc999723f9eb96ed5f0bba2bbf060232dec45ee001642f6e7d57064f7609e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a5f4.TMP

Filesize
204B

MD5
56d9f0ee9531a9c1da6f7dd620ab68bc

SHA1
d04a9c27c54160dbf9520549e4c3264315c22c5e

SHA256
4351ce088dd84faf2e3be0007cea1787ad139209e76afadda13a7d4fc68cdace

SHA512
8e19f6a33f9edb8ebf6b8b6286310a5d8e31a4698b8a8b6504d4f01557fa3fe17fbf71cedf9acc589d5f50111d210a277d102e320bf2d40781d5f9ef17b26734

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8aea442-94cc-4c90-aecb-cd217dd5e985.tmp

Filesize
8KB

MD5
e79ec614307f4d063a431fb0a8cb930d

SHA1
8b811f343f9dc40f12a01d8423e5c322dafa4855

SHA256
c2007d2ef35d6b9642cda6bb8480242b0d9d165f05d99b819c6c3d6af46cf38c

SHA512
44cb00c7694f3e45593e3156b28fabd66f9878e81bf429c6598ef206835fc389873eff0a9efcbf7c5616ee6a25b40f75ba48ea5d83e040ff24ab41b64b9c0221

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
bf32813a50795d83e6d65e133af0aafe

SHA1
609ef52838bce4299c2211886e5b265fdb44c048

SHA256
a5fe1211daf991ecfe3703a19ff039042021bec33350947373ee780a05a792da

SHA512
a11603c1e4f0d00730a3634f65597c22a5dd095aebfa5fe2a050e7ee37bb23840b6d77129e162b0a25615903a6db220de6c900e64bedfb57aa6ea85f2ca21268

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
a036c3a9f75d11074c628e0322473d3d

SHA1
21f0b983e7914880bc4422097b84b79840964364

SHA256
d4359f247901000f813429636cee9f92f94592fbd1044689689751f3a5a1fe87

SHA512
9bfdc6c3f4c9c5de33bf2399e9e6f602c4c3db2f49461ac047254222a5418e5199a3e708070b7f7eee15c293ecac5fd999a158d73b297ddb62b96309f084aa20

Download Submit
\??\pipe\LOCAL\crashpad_1692_SWUFRCYOSUCIZYQH

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit