hxxps://discord-nitro[.]en[.]softonic[.]com/

Analysis

max time kernel
72s
max time network
74s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
04/07/2024, 15:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://discord-nitro.en.softonic.com/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
1504	msedge.exe
1504	msedge.exe
4352	identity_helper.exe
4352	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 52 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe
1504	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1504 wrote to memory of 2592	1504	msedge.exe	83
PID 1504 wrote to memory of 2592	1504	msedge.exe	83
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 3532	1504	msedge.exe	85
PID 1504 wrote to memory of 4288	1504	msedge.exe	86
PID 1504 wrote to memory of 4288	1504	msedge.exe	86
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87
PID 1504 wrote to memory of 5064	1504	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://discord-nitro.en.softonic.com/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb85646f8,0x7ffdb8564708,0x7ffdb8564718
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2020 /prefetch:2
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6568 /prefetch:1
  2⤵
  PID:5904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6828 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7276 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6816 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:5916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7532 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6900 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7664 /prefetch:1
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:5552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7644 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8304 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7572 /prefetch:1
  2⤵
  PID:6460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:6928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6876 /prefetch:1
  2⤵
  PID:7052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7368 /prefetch:1
  2⤵
  PID:7144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7700 /prefetch:1
  2⤵
  PID:6208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8528 /prefetch:1
  2⤵
  PID:5596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:6108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2252 /prefetch:1
  2⤵
  PID:5760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8812 /prefetch:1
  2⤵
  PID:6480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7812 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9116 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9160 /prefetch:1
  2⤵
  PID:6724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9176 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9084 /prefetch:1
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:6808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:6180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8824 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3044 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7403119785358243783,9148594598991767551,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8108 /prefetch:1
  2⤵
  PID:5404

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2956

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4300

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
db9081c34e133c32d02f593df88f047a

SHA1
a0da007c14fd0591091924edc44bee90456700c6

SHA256
c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e

SHA512
12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3a09f853479af373691d131247040276

SHA1
1b6f098e04da87e9cf2d3284943ec2144f36ac04

SHA256
a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f

SHA512
341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
17KB

MD5
67e30bbc30fa4e58ef6c33781b4e835c

SHA1
18125beb2b3f1a747f39ed999ff0edd5a52980ee

SHA256
1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba

SHA512
271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
19KB

MD5
8a63fdfde9d24ccb3169b342b1287c3f

SHA1
2ae1da7f53b9046ec19d1bfdde16bdaf37f0f7b8

SHA256
950933c47c4246daf19fde1c270dd74b6f615cc0de254d9d6108cb9c5b7b98e0

SHA512
633d49c9fcf8040fbebeef364536be2491e783bd0ddf97b530ca75c104a035a11f6d1db4aebe99a499bf107c235e07fe7adde0a303ceefe5127a1bba0ee9975b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
104KB

MD5
7651b1187bb58ac4c7be625337b35e5b

SHA1
307d969ef4137a66fe2793737dc1c546587c7f43

SHA256
0632850d01a46bc2f8c223155a4bf6c398b33596bb711e098440623f118c3968

SHA512
a81d2f768af155bdc642941404e7ddf95a2cea33c9374acb5fe32f6f5266e337fbef32f904551f61fcc9f9ab5a1c6a5ad130ab85b38bc2258e2f82c0ca1e9c7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
30KB

MD5
15a76d8a42d704ad1dabdd7d7bfd8e16

SHA1
52f863c8a4c19ee4dd494c03b27de7b9c7655223

SHA256
3eebc476c343066117efa32e4f062b080b111cab82fa2725032065c62110f2a9

SHA512
0c5aee3772d563c08bb0e91fbbf0db9feb6ef5a8646b3d3f0e8357da202e46b53a3f5fb4b0ffa4b6549fecb79ff88c94ec73a11666191336160a3c0cfbf484c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
134KB

MD5
886da4702d91857a59a899d1c0bce9e7

SHA1
a67f489c9a202ae4499d7c8317e3df486ffe1e46

SHA256
850805cfbb02446ac40437ba6e242d7d59203f3bc5e25467e6c72ca98bdabf76

SHA512
68fd4ec4e2903068f767ab919ff911b490c92a1c1c52e08aa763ca2e632d14c0e604d681f81db31a96e2f3768df92d3bf45284b6dade1cc8982053a75843794b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
20KB

MD5
b371fccbccf1c844ac35be32b27d3e15

SHA1
7664b9f087fece1cd0a3ded5359c99dfb55bd534

SHA256
f8f3631287e809f21a1a90927c09b23ebc6c13d394101b72a111e25c9863ad8f

SHA512
5cf502767888bb8c5b5e422eccb5ecc97bcf444c61deacd8e26118a60d2c05b6caee2a136c8d14f01f821a75a5dd61c2167e4dcaf61492fe1a6cea84e3a922aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
95KB

MD5
e39d69ebb359fe017192d91f04328f31

SHA1
e30bdd6cd612afc4b7053168678f737ab2222cce

SHA256
f0e833226de7e5e1585bf9478cce410dd2b2334fbcbac1e650e08382d845c49b

SHA512
aa12ebac87e945192cdabb05b3927b63db8ba24930d146bd040dee0b3cb5e44da24ae0ff3a16bd4bc01bbbe484bdee1bd1fc769d5ee94117b98f9b4404928029

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
145KB

MD5
5af551639f7fc501b08aca2b94ac5981

SHA1
ff7ef4d9b6f21aeb45ed1f837b47359dadc3e298

SHA256
99ec71fcd27ea88a10963e2105977cfec80f08fb0d35d64e57f8b7ffca3fca94

SHA512
5d28349cd7deb814a00a9d2b8cd9eb20272ddac76b672e70b8315a6da299480a894a29de2bb4678a5e1632e2828461a528d3c285bfb5e433c8d5b34fa2b957c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
147KB

MD5
178c87110a6ab8b441cc64432f72c97a

SHA1
8cfa86441e89e7b357591e2662da842e33aa178f

SHA256
e600414418c8536c4ba31acd2fcf8d2c0bc75830c2957dfd3227680453b74d23

SHA512
49036f08a0036e5fb1b5d1d4c82a2689ac3dd1246568b936f269d50fb7edc0ab9b734c0e0b170735d4494284d73fecd3d6567665200720a3145be9e866fa57f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
82KB

MD5
bb51dca8a1ec8c4bd0dab3b36052ba73

SHA1
e8b74a3a4bad4edbfd7b7280000a0560665cf59c

SHA256
4e90c0b7dfdbf88d1cadbf10e9aeea309727e5c4e82902f54440cafc8a04a348

SHA512
24c9d85c16d6032fddfae296833be5d3aeef610157655f6f2fdbb0e1681e0cf143ac4ded041bc2b9aaa1b8f654712393464390aff8c7a494b93ff9716632fdb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
47KB

MD5
f44fa0404218f9f588110d598da00d09

SHA1
2123ae6643c80507253125afed15b89ea251b88e

SHA256
4872044609bc9e7753b4e2a4abb909700f7dd8ac8896ae444beddd78d3c8b18c

SHA512
755fc8c13d69c344791f6e932fab74a38f482b006cdbdcef9fcfdf008424adab0396ed8b5c64bb4c8d527f0c47787e203f99961edf12a675212504e2e637ba2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
76KB

MD5
de2967899ce6ce69c3da9bda23bca765

SHA1
f4eff39c3e636f4ef41d95f91e495f1a528fb276

SHA256
787714d7f8a521c3acfe27c6a5cf947812c9356700c51e07ad6936c90e79b178

SHA512
b92ffaa9a4f647bc8af7c71d935a630c6ea3414ee184733a91c9844a388617e0c440a7c2ca118fc9a79353e2925d5a4f934f0ff5deeeb65daa28f10608be5f9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
18KB

MD5
240a76d4c580328268c3d16f328aee36

SHA1
fb582d50035fac66899ccdd56385a7e8615f8934

SHA256
016d05c44b7cb742a68992bc8e076e036eb64856ee8e2fb81a291ca0a36165c5

SHA512
bc604b68044ef2b1963436cf2af708bfe4905faf2645ffcb8ae3d12f67fbab8123289be12453ee1d2fbb5d6362494b990b1ba89b0c344ce57359e7aafb8bd4b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
82KB

MD5
fff6375aec0cf30d45697250d3455927

SHA1
d95d9de8a4d9f84ae0bdce85c257d04acc34b4d4

SHA256
8627bf0522741893c1dc7e3ec4e119247fc75a9eb67c095d85709199052b3f15

SHA512
99dac7292ff425fbc74a4237d36202b39e1e57c3684173002b99930c6ab3f96a2c8015971613f8af7e8a23b8193d0d8eff18529e726eeed047932aed62d4168a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
25KB

MD5
1b7ac631e480d5308443e58ad1392c3d

SHA1
95f148383063ad9a5dff765373a78ce219d94cd7

SHA256
7fb66071ac6c7cfff583072c47bc255706222c2a4672c75400893f4993c31738

SHA512
15134314dfd36247db86f9b3d4dcb637e162f8fd87c0ce73492ffdb73a87492fc80330655617f165dd969812ed2ebcc42503f632d757bb89ba9116137882119d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
27KB

MD5
831ab1ba056cc5e8b696c2b24538a9e2

SHA1
6d653d4650980c36c8a306347a835a309d70f99e

SHA256
9c68f78a022508c165b7e1e77136c3716a6a16f13c6eabea504b97d2ef87c856

SHA512
3de8a9df404fd5df45a55da7c3877cc1ad20ea57ac9c19052e3a24e9d44edce25647a87c3ebeb6e5291ce483f26fe8d8fd88ec8cb9d1f124855b84f77fd18061

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
62KB

MD5
1721006aa7e52dafddd68998f1ca9ac0

SHA1
884e3081a1227cd1ed4ec63fb0a98bec572165ba

SHA256
c16e012546b3d1ef206a1ecbbb7bf8b5dfd0c13cfeb3bdc8af8c11eaa9da8b84

SHA512
ff7bfd489dc8c5001eea8f823e5ec7abf134e8ad52ee9544a8f4c20800cb67a724ec157ca8f4c434a94262a8e07c3452b6ad994510b2b9118c78e2f53d75a493

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
19KB

MD5
3ffbd1e963d6dcce5ddad8916f3d0fd4

SHA1
f9eed0613dc30a8822bdb897914315f5a0e949e6

SHA256
f603aed80eb6a8d8568689c4c735b73eac658e5a402f7d8840bc5fdaeeff9f73

SHA512
f0dba2780a4994a38a400b577229c7dac71e8c175c4c6d73bcd750086b4e45e2f13a1ba43ca139da2998c7fa1d0d8bf39ebfea83b31441aa6ed1df70e8498bf9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031

Filesize
16KB

MD5
9c6b5ce6b3452e98573e6409c34dd73c

SHA1
de607fadef62e36945a409a838eb8fc36d819b42

SHA256
cd729039a1b314b25ea94b5c45c8d575d3387f7df83f98c233614bf09484a1fc

SHA512
4cfd6cc6e7af1e1c300a363a9be2c973d1797d2cd9b9009d9e1389b418dde76f5f976a6b4c2bf7ad075d784b5459f46420677370d72a0aaacd0bd477b251b8d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7c3fb0d94ec7c543_0

Filesize
32KB

MD5
404793d6f1a34ed222596839fa3cd182

SHA1
5d510de35f1212f9c0dcae03759bde96f269ae14

SHA256
ecd524e55984c332c708f3d025aa89869904003bcb8d9a80bc79084fea1270a0

SHA512
b5efeacebc27b3bdce606de0882e2eb8123ddac75ba984fce99520e5901604bdcaa8ba31b43164e032c5948491ba2e0f363b029a5d51f4137f4fdc0e507a4ed9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b349ce44bbfc09e3_0

Filesize
32KB

MD5
d37b394c57b52d36b6b117b170f7c5db

SHA1
032ad905ddaabb4abcaca03caaf35515732bf35f

SHA256
500a6c7400d96fb661b3cc0a98c4cb6b1a06d8e2b57f4566445d947540905ec5

SHA512
e88aeb15c910f5220bba9a3a3e8b46b3a66de060f6788dd565c33f1575bdffbafb6e597a69c3f8ab92a2dcbb11d0705c1bef77ad888591a32fa65c143260bbf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
6cf24ef3d058180f793a09ca1d10a840

SHA1
4f784e63ae2b8dc9fe437515f948d2c0b9b9b9bf

SHA256
705ac300d433c46c7c2d606962efc48f7c07523a6ec1ae20b33e216fb88d0487

SHA512
bee0586e6681309ec87f873ecee75562e4d0107108b03439ea23ba46bb4e46ad63446a2872b14c29b3f90ddf2dc00bc2853b81015965a0d5f78c5cde3c8d394a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
14KB

MD5
d3703b4bd7554e38addebe630ab1ad91

SHA1
9ee74de6a2062215acdb0c5a1bc7293fd3098740

SHA256
949b9f4a98c15846184eb3c3cdf514f2fa288c30bc47473fdd69316fdad924bc

SHA512
35e386777312c5bd4e09d0c36e27355506de18bf217db58f97d6d29ac4a99558056ce1bbb1db73d6ad77dc1ab7ef5fd4832c0eacd2bfebc3d9ab9876f291fd53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
3a949ee03584d2a3d91f710399ef266a

SHA1
1e0e586c9ce0375f3270845a100a4a67c1a2d53d

SHA256
506db80549787db6feeca21bae646f1488565b838df7bdc6ed35721f9de3c4f7

SHA512
79a7175e0467fc994ff38e408e3a62cb2a8e787a20b8d08ea5ca9e702635620ede1921a721107de89ffeb4271f05b994a8f74460276fedc692c8ea29a6ff8938

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
9aab903ef0c1a73c079d5121189e16a1

SHA1
48a225e48e0a82f3f898b6935a7bd0fb7e26447d

SHA256
f10a6c42b7fdfadbbefb640490324ba26af7c58cd30fdbc0098ee535d84029f1

SHA512
2003a922309d3d2da07ad34c16046c663b3c375331200a24ab2bbd9388f276c9a35f520fd11e1a3bf769025423917a11734c3931909cbaeb05d7c3c1d9b2c6e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
009b7921aa4b0cb0123eff944b560de6

SHA1
497afe85f9ac70bb6c537a07ac85eb1a5c0fbc3c

SHA256
5472f21e595600655ffe562ec9d25df6b293cccb031f74138cfe6de98ae5a27e

SHA512
f2eeb011131c270d835277f10ed583464b766e68e5743f0d67e276ee32f724d4d32fa2045c3fa71cee1f5301dcafb235bf4566d3997f68b11e45cdac50e0cf71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
23529845a0095bd647a684287368ee98

SHA1
388fc1c8547d0476c7d362a0fcd58c58af8951a7

SHA256
f985a7f7be7f949c34b17c8c38b2e8ff64c5327a88547906b7803500dbdf43db

SHA512
c866053d90fffc1ff5628ba03d6b356be2b98c1c1df5212b7e5c184654a7a2afa4cef110816d58babed0b2da722f72a2357861d99dc02247d65fef863d87b22f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0046a8450b70cddedf793ea0541a1027

SHA1
1ce08875d56bf8974942eeda3a2cf0c372769a39

SHA256
2a65ffc2cc117f0cca165da1b7c021f615c3f9716bc44f3d9378f934dd564c8a

SHA512
48a406c958ad7fcc3853947acd50eafd3221f1c6e5eb81a8b9d3a115a3d055ee928eefd93dac37b362600f4b180ede74b63dce80e0220f670d0af90f4ac15200

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\6e8e7d83-c1ee-430f-ad44-2a5c71fef34e\index-dir\the-real-index

Filesize
72B

MD5
88fc4e670d7fa96451a62ec469beaa54

SHA1
2207e3d0aa6ca17b2c861521433e27e7d23ac7c4

SHA256
137d556ae0eb2ff24af41a1a1191d6652681661a1133382a9b1c31185e1e72b0

SHA512
bcc17a41da2c2106539f162c8bdafe4c2da4506232ed608483ba181ca0b59554a0436f70564fbda107cde098a97d05672130e23e2d02b041ad0daf0c06f4319e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\6e8e7d83-c1ee-430f-ad44-2a5c71fef34e\index-dir\the-real-index~RFe583776.TMP

Filesize
48B

MD5
d8d0ca8f980b77f5aa5f27b2dae4717b

SHA1
d9e949a134bfb740428fdb43f04b7c8b32104354

SHA256
b6361f9958d386279db3e32ae110f118131d2d2c852bb6c8ecf7fd9d755b3d63

SHA512
e5fc448fc355424d8bb9675f4f4ade9b75fada7bfddc25529c2bbcb7964d06e026bcaadb3103f891332b9420f24b500ddd8ecbe5633185bcd6b332780bf8a63d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\883466f8-01c5-46b5-947b-945bfb1ef0ac\index-dir\the-real-index

Filesize
1KB

MD5
32b8aa78227d042e7f0652bbf9948e55

SHA1
0033d3118c4e8408f9666e70f51dac34cc2fc9f2

SHA256
7b06a1627296bdf4ec2cd81a66165ebe74ed9a52337028c5802a533eb1294747

SHA512
2e4cec4f20b6a8c23fe51e0a541e4e5ff5f7889dcfe729e873dcac835213849a657591a11844364d2179f2ed26f65f1b9a064e839f4fb42a1369762b5bb609ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\883466f8-01c5-46b5-947b-945bfb1ef0ac\index-dir\the-real-index~RFe58500f.TMP

Filesize
48B

MD5
db1ade596863002ca14a2c4fdba2e6b4

SHA1
a807167b196e91d871d415384d7aef0bab73169b

SHA256
bb33b3d2abfd0410b09675e19b7ccf226f9eeaa174a1c1737ac182098e047ef6

SHA512
416bd84daf5dd6461ac8605a493ee839fa86974c51bd5e8366bc3a055414885e4f550fc374b7f3d701f0fe9d45e51c984c41905b41bb8ff6a669b0fe1f9ce168

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

Filesize
193B

MD5
fc583ef220bab564d1ee809436b76956

SHA1
3296b4d708a8512d18a53c27048f7bb228a60175

SHA256
8e6488f2b250068c14e86bbfb3650044e63b1887aa9bf113bdc0fdac269c428e

SHA512
c702e48dafcfd0f4b38423a30e03077e01bd6ed3e2a1deca0577b5c9ff837654f39724c3c1654721d000c7409932e14c5eb6e2e18fd9c110b71e34f15ab78a92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt

Filesize
191B

MD5
076e9d87fee89f6ce5e66394a28a834f

SHA1
e1991bdf893b4b2ed531204284cbd530bd0094d1

SHA256
3079eb08358d68ab89372888b0d6b9370d3fd7b6b14a57ad68ddf16eae51eb16

SHA512
0847a47fe42041f3fed8fb257e6a8affb8deff22f9cde9602660ac9a3151be55d77ecbb1cda54da295fecc6db80066ca472552516fb26cf654606a540ab20f76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\1182b646fe1b7c2fb535f6df1b863e7a17f43db5\index.txt~RFe57e4a3.TMP

Filesize
97B

MD5
207050911d24be900219f0b5809580d0

SHA1
31ec54a40f1a22c134e119baa9a8cd96885ac2e0

SHA256
246d761cc2cc3e903192691c3f83f3b537796986b15520372ab1fa523db70131

SHA512
a3203df62b0e8d7afb6c65cdcc3a76ed94cd66e97cf5c7ec41cbab094d67c9ca95a849a413bbf932b65a96c89d4daf9861fa859189d94f0e93a5eb6c60e0a897

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
216B

MD5
f5259377831dff2b2bb1dc601d84e300

SHA1
57c0e1cf3abb906ba145136f60e88e2e062b7dd5

SHA256
3eb9ace055c2de882961efbf2f0e7ee10d72a7a69241f80462898e9ac02b7478

SHA512
d41464c6faf88db0e1763002647f41f86b0e96c1d6c99a38e5d52b74cf570ce12fa8cd475beb52b21c7cc2c6ffa820d9f2a5affbb9de24ef061418f15fbc9259

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5832c3.TMP

Filesize
48B

MD5
b89d7e8e4727594082cf02fbbcac5aea

SHA1
4ca11d40ce4e005d5272358fd8bbeb82c022b041

SHA256
270c44ae985b1d93a1683089c5525501224612f6cd4641995b8c56daba1b7578

SHA512
cc52c28fa1b579b7f18557e8ce7cbc856866ffb96cb942ea71e9b5c6e6575ca0683e3415b1ee904ca174efda663857ceadf21a286d5a8a19e11ec4e6833bdd1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
caca2e3dfb8511aa0240fcd5dd1ffcac

SHA1
a6c26c7b02450885d0911fedd5dc92246604bfac

SHA256
cd1a62ce0ec581d0944a80a58a61204083c7c24f6be1b1fef9d9144eb96b253b

SHA512
1fbf323bf46b7ab2929053f930fbcd2cdaaee5f5d4dfbedd9f7a2c85c2ba6e120c504d4cff29189c8aa0817acd62d91c6f82b4ae61c5a4827c7024347f11897f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
b134b6191fc4df2ea641021baae5aaac

SHA1
8cfa1264e35afaa07e3c5a4ce258b2a9fb3db7f1

SHA256
752d25ebbe74a53baabda62fa02bc8a9e733d0a341e900beaa399c84a018b02d

SHA512
678684ca20f9411a1bc8ba7ae7c1e2fbd78ea33f31b08db78d3eeee0e397bf25e04df31f13299daeb67051ff2ce75698a50764f328e0631954a8deddc8fcfdd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b016.TMP

Filesize
1KB

MD5
a24ad012af47c28efc44ddbd71e6e315

SHA1
a0e68aa004769570588b7e6db51a37a2d4354aff

SHA256
5c96473b7bfa2e01bf2ada192e1d9751b914797ebe3d4ab7be0dbb91f6e40691

SHA512
541ee67b6c1a9411d1466b5642512390f9ec59e16e5f3a65dfe3f525d594ab7b7c79cd72a4e84518936586d027103e2c06529565190abfce67d14e6b19d87f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bc417245-ac7c-45f4-959c-af8f600b0ce6.tmp

Filesize
3KB

MD5
ca57be4d0fbfd968b0c40fc4ef6fc165

SHA1
a81a8ab80b96fcff64419b8e12faca50a4c8a919

SHA256
0eaf97a9136d26949fdd4ee41baffe1afd57537f7c55651ee85fc78cbb1b5e3e

SHA512
3f20cc9eecd6d6c9c1831e374b4238844e3c0a724376bd5ade4c1804aeba50e095a77051670de905a38e094e8c0e2c8708b093088512ba19e6e7240c9ada333b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b5deca9f53ccb3825bc1b7838b4b3c37

SHA1
07b229b2c84915994520d976aa610c026f58c04e

SHA256
76691437292a888a554586e8763b824e58c807b5e9f0f67b0c8490204256b2a5

SHA512
d93344c23dfa6a352e9eda167684a6782246acd91726f4abf71d65cd8ae5d9146bd11375b67660d70ffc04b244cf88bf22891bd795fcf3dc10987c18edf08839

Download Submit