hxxp://steelseries

Analysis

max time kernel
149s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
13/07/2024, 18:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://steelseries

Score

4^/10

Malware Config

Signatures

Drops file in Windows directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp\Crashpad\metadata	setup.exe
File opened for modification	C:\Windows\SystemTemp\Crashpad\settings.dat	setup.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File opened for modification	C:\Windows\SystemTemp	setup.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133653675971779695"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-514081398-208714212-3319599467-1000\{6262D5EA-5C10-43F4-9511-8320AC1C324A}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-514081398-208714212-3319599467-1000\{0C8C99AD-7ECC-40A0-ACAB-6BBB86D80976}	chrome.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2808	msedge.exe
2808	msedge.exe
2004	identity_helper.exe
2004	identity_helper.exe
4748	msedge.exe
4748	msedge.exe
5508	msedge.exe
5508	msedge.exe
1252	chrome.exe
1252	chrome.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe
3844	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 36 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe
Token: SeShutdownPrivilege	1252	chrome.exe
Token: SeCreatePagefilePrivilege	1252	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe
1252	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 5788	2808	msedge.exe	78
PID 2808 wrote to memory of 5788	2808	msedge.exe	78
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 6132	2808	msedge.exe	79
PID 2808 wrote to memory of 2276	2808	msedge.exe	80
PID 2808 wrote to memory of 2276	2808	msedge.exe	80
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81
PID 2808 wrote to memory of 2120	2808	msedge.exe	81

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://steelseries
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd200c3cb8,0x7ffd200c3cc8,0x7ffd200c3cd8
  2⤵
  PID:5788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:3336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:5836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5080 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5296 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:5508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3432 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6480 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1860,16236388758855386916,14522538369843100171,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=6504 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3844

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd0cadcc40,0x7ffd0cadcc4c,0x7ffd0cadcc58
  2⤵
  PID:6140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1932,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=1928 /prefetch:2
  2⤵
  PID:6096
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=1732,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2068 /prefetch:3
  2⤵
  PID:5220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2196,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=2368 /prefetch:8
  2⤵
  PID:580
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3084,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3104 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3112,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4432,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4416 /prefetch:1
  2⤵
  PID:2876
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4760,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4772 /prefetch:8
  2⤵
  PID:3940
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=4928,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4936 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe
  "C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe" --reenable-autoupdates --system-level
  2⤵
  - Drops file in Windows directory
  PID:6112
- - C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe
    "C:\Program Files\Google\Chrome\Application\123.0.6312.106\Installer\setup.exe" --type=crashpad-handler /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\SystemTemp\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.106 --initial-client-data=0x244,0x248,0x24c,0x220,0x250,0x7ff69c514698,0x7ff69c5146a4,0x7ff69c5146b0
    3⤵
    - Drops file in Windows directory
    PID:800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4352,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4308 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=4972,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=4484,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4548 /prefetch:1
  2⤵
  PID:3280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --field-trial-handle=4460,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-appcompat-clear --field-trial-handle=4396,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=3536 /prefetch:8
  2⤵
  PID:6012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=5004,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5052 /prefetch:8
  2⤵
  - Modifies registry class
  PID:4684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=4500,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4468 /prefetch:1
  2⤵
  PID:5688
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4992,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=5288,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=4276 /prefetch:1
  2⤵
  PID:6116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=4784,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --field-trial-handle=5392,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5812,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --no-appcompat-clear --field-trial-handle=5844,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=6080,i,14038960438754391747,13413060559846281212,262144 --variations-seed-version=20240709-050124.519000 --mojo-platform-channel-handle=6084 /prefetch:8
  2⤵
  PID:5176

C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.106\elevation_service.exe"
1⤵
PID:4820

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000001

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000036

Filesize
18KB

MD5
70cb158eb99d15ad2d481b96bb253973

SHA1
322d7df3ba852ca26a89fa6c40bb980436d672e9

SHA256
4a70deb85ebe0f54a5754d087a28c7b57d3fd7cf1977eb491e3e76848b83cbf3

SHA512
df3b0fb2201b6855982bc504dd8638aec5f18a9f3e83b179ed96ccb6f8e64b02eeea1bbc6284d077269664549ba2aa2839fb334e7b46a464cb142510add14008

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003d

Filesize
107KB

MD5
6c3d24946eddd0ff3b92e80127748dcf

SHA1
741d6e0b2e7f14e0b48365a07e4979ff4a3987f2

SHA256
da9ec22b7c4a0ba9cb7738c986c112baf6ec952fcc3ae020d2547f5d0918d014

SHA512
8b2b886de17b9762b59cca2e8aaccd693840dea310ea3705f8ba82e8c8a18088a468ee8f70bfc3c059d630299612cad7a7713f24216f744af4705c30ac9a9481

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003e

Filesize
367KB

MD5
1511492a1aa33b40125e240532a37e34

SHA1
be98b89416de8d3e5d69139831ab3ca7ed5f1338

SHA256
cf77847e354bf4af08a29b2de8420479d98ee676b5dfd97d07a80d08a668b2f9

SHA512
8695a592eabd42d37d8675a3d09be68748a1efb9462afc9e4e133542527618f489518fc8dd3fa0ea5f69be5db533c072cbf070bcd96214502de68c48221d185e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00003f

Filesize
60KB

MD5
e10a43debe6eec1fa0bfdbf1b186b110

SHA1
6b021fe3cc52acf4b35e860dcc494ad302df39fe

SHA256
92e01010d5fca989e370d2a8e4cc7c8f834a0b7f7c5adb4d9dea7b6ab52ae607

SHA512
3e0dee79404ab1bcef33d996443c271c7d4fb511fd9889ce5ff1d88c5a50d37a16388fd781aebe90c877d850eb063f4bf57372fa70897015e7db31da8e81b4a1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000040

Filesize
228KB

MD5
34f6f2fba163de7e35a0e1a006a96524

SHA1
1792f94358ece8b770a2a5fa820cbc1a5ea85d2c

SHA256
3b13c8eb138e6d998f52a22377f418d984813f53f64d12e2752401a18c7be0cc

SHA512
9b49b92087141a8f803172339c7b715bc0699ff33fae7e2838202e30897740e9ac824f66cea08dd3331ffbc99698a206c86667bd72e674767ff9f1890e2a3682

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000041

Filesize
83KB

MD5
2d6e158069d2a9f48afb61f75e717950

SHA1
11c9c3b2863289067e8d3e1f22ab8033982c49f0

SHA256
dfd7a49a2b98309cd7cae11cecd7589907758d3d4d73b34d898fb14b5c662e61

SHA512
688546d33eeb9d3efbe29ae8804969b2a6243c950915f5216b29ed6b0fec792c808df320575124b0bf333e8676cda1b12bb35fd35417fab64394f7ac9d8bafa3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000042

Filesize
59KB

MD5
4ee62a5df30e5227d944b83c6d402661

SHA1
e5fb0bc9411f4103b811c5e547c6ef6f8e9a7ee9

SHA256
82c1d80c05e7b5d6a9cf3d78614b27d476984b87d8d520a8151e0ba1362e4597

SHA512
f77943ec3622a22afcd12b044a595afa9fd7b0584798eb51cfb9506566ddea5d88aac4729c825f21799d15411cc0da478013085ef5ceba69456cd49ebd4b82fe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000043

Filesize
37KB

MD5
a91493d007a35c3fe886d6c7cbe06785

SHA1
5e74f4016619ef8246b8fed68349ce65a5c5d699

SHA256
9d1cd23f692cf7a78015c51330c31b42e70d1817387df1ca31c8697414bb9d7e

SHA512
60554cde8c6bc17b637a6e428dca93dee54eeef1af1a8257a25d683797193db6ee8514f5061372f41bd1200093b84daa52ad9189e3dcc5ce4313b156e4402344

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000044

Filesize
47KB

MD5
da4067330442c5ce8300f8fa4d3e9caa

SHA1
a44196a1bfb9449e299861c1e143ea6c73dd15b9

SHA256
869af9d71fe528f26918c622d015b0de0d10f0b42566f414e63128ece5f8094f

SHA512
d35dc002bdc05afa753abc5e6ca306d4feb9f986782472e416e4b6c7f982e67b5d709cc9ae402521066703893696d4246b6a52be913ef38ed2a227473d133632

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000045

Filesize
17KB

MD5
5009bab98f7e6a770a8c37cede01ac25

SHA1
ae8cc7788b9796accce738bef27f76926b03762c

SHA256
4d8c82aeba9971c2f37cc6add4bfcaca06a667a849db82423995ab0aac4450ee

SHA512
81f51cdeb98fceafccca34aa911dfdd0b137cf61cc57773dc182bada5a87d4baa113678aac491d5a90473298fe7ef5737573fbf612533856a7ace6a3868db3b0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000046

Filesize
18KB

MD5
f47bdc84b0c69117b4a4da687a2b3848

SHA1
39f9c2730ae05e374ac7cc056022d3e3d5cc5f8f

SHA256
45a0b74a7da22d81cbe452cc4da51c87308313aa6e91f206eeb7340ffdee5e86

SHA512
5fd64edba4c1cccbaa842b94e32b77c0a366a8866b109ebd2587b8a2559230ecd53cec8e81b637ab029f4b976ac09d6023364f825eafce0c3d1482b57a1f8529

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000047

Filesize
26KB

MD5
90cf7af4486d213506ae9b8b61315326

SHA1
2f1c495f202f4b2a0717a949818aa55d11e5b329

SHA256
c992dfa4eaf6dd5dcbe2a73a8ad630b0870f37b4f73bdad4e46b956fff0101e1

SHA512
543cc69db23079b3d2119b69c18c1986daa2eefef380f77148478119907dde116e22c7af8ae1626f6df5b2a978392fd3aafd5795b6d6e54327c5bf3a5aad0299

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000048

Filesize
17KB

MD5
de7bb1ff36a885d943bde205d17232f6

SHA1
ddb5ab0cce2503c31ef25bbd225b5a441b161ff0

SHA256
042d652f8d2eb26a80868c1918fdc5d30c75138b955476d04df85b4fb50b7672

SHA512
712c07fcc1b31e845433638001020b88664104b008002c32dabbd227a9161c6e681fc2e447ef0327897a541f096532db7bc661246042917ab6ca338a8782409c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000049

Filesize
23KB

MD5
f4994b9af2b0bb11d8fcae2381e2ed9e

SHA1
90f52468e2be6a3185e0adf8e953da1a3be67d57

SHA256
37f13e52ef4b466a2ebc924f2e8da0e2badcc472df3a95e209a715ba5ca1039a

SHA512
27d5e96f83e440688523e4ac683c17842865c0590fd4e7a7e323b9cbd4a324ef13c2bed02c66e296be73ebb96178cb190d6a6f6254dad7e9aafe090bd6a220ea

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004a

Filesize
81KB

MD5
513395f5597260ac62096e5eded3d165

SHA1
bf3f75e1584749352d85ef32991246f9006fde15

SHA256
b6bd7ad4b0d71807a602cf1dc6e22abff4839a66df03179fbe39a297e791a6af

SHA512
fb3bf64415e0e90dfc67359dc7e0b8a58bbce899ccfb591f24e3a13d8f09e34d7238106c49d3f473e2788abd353d5599a152e7e5bf2f07d918a8319d4db146a3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004b

Filesize
20KB

MD5
1260a026e6ceaa277f2bd1a7b8a1d61b

SHA1
859092663a1ea8ea051e599a7ad84e75542dee89

SHA256
72e0fedca1d59260793061e75ef0b24884ad4316cc25b9701aa61c807a42c9fe

SHA512
c45d6ef05faaed947e2b696dae088a745500a5dff87c6e66d1d8392bae697149b5b316f45e800d1ed7d3439e188ae8f3f61e3aee4747ee4761d98d0359c5764f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004c

Filesize
90KB

MD5
9941c7cd9e38b5917be59036f9929a22

SHA1
e1ddc07c162211c7ff32862e2b7f25d0c9e98e08

SHA256
305d9c4cf1288b45440c00da0daed3d71dad801a8a00a4adf4e7f32195ea8967

SHA512
bc958d76c374657289facbcf695075a75c8fe1d6df40661cccd688b8a0e889a2e62e1259d894f48f0ded2b83a1734e7f01ce7027193ba4fb94584549bf7f305c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004d

Filesize
57KB

MD5
17ed981f37d197736efc971ffd195e0d

SHA1
65608dad0ca72e3952d0d20299859cde386929b9

SHA256
664ebc0d2051e38b90ec5bb975746bf16c06aec7745bdd3c4f00628daeaa09c7

SHA512
b95798dbfce1b5cfb34df9695860a6c1eadef8166e2e4f373a528a28a47cc9302b90646725934a4ef7c9f437ca6ab8e669bcdf8e5141ad81cbf41e0c59381c04

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004e

Filesize
91KB

MD5
bdcc4ab06c13414a85ba3b1a5541fe6a

SHA1
ac8db88540c3ac21d4b34e0e878ac448f2a7fb2c

SHA256
70a56d6eaec6afda54348d67243fa39d4316f96822b1730192eb827f6037f712

SHA512
e87f65c055bbe63b95e722d971a42b3f126aab6390919d234cf54446ac343561e2dc226b00abc1a20a2c8209aa2a91ac22231e6f03968196949a6d569ce4f5c2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00004f

Filesize
21KB

MD5
ea081ac23c85c236bb25178faef7f7ed

SHA1
5486ffbbfae495997542534034b8c215513ac9bf

SHA256
7f5b1f556c32f6f4710bae1021954d9c872075d0ee1082ec32ed15b35348a187

SHA512
e28f4f6f34be7ed027c053a09390f9fd4f18e6d3b6648faef1f8ddda5c03fe2ea96bd0348eaef7f8f82da14e9b4a2e06ceaad2a6e1d1628faf167b2bf4a70c28

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000050

Filesize
90KB

MD5
d444a4c21fd2f6562ff1b8f80c98f6cc

SHA1
ddeb0a3b752c815de981b0cc55adfee6f0449076

SHA256
660b265f2ad88541af4daf528f36e7a6ca31e7751a9ccd1a749d1aa4126da876

SHA512
d5ceec833869bea30649f72543e24a2793c786e9fb5c089095569f983c83ecd6bdd4ffef90f8cfcc1bd6ca65650b9d1af520803adb6f5b62a7d1170ef4ae8255

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000051

Filesize
50KB

MD5
9247813012d5ba86a782ad65a6320d58

SHA1
13402dc6489bffe252e7ecd48a096a58d550bb40

SHA256
ac15bba19e2258603b08f8a9fb1010b834be8e54a054f96f9aac48271e111e9d

SHA512
2bf97d792e61646e2900012c0b7ce92d5010a63fdc7a035693d9a78da0af64b5f464bb4fb73790d0ca3b2f5b9dd36b95fc973f453fb5fb253241c00d4a54846d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000052

Filesize
97KB

MD5
8b8efd895484635a99b0c5ae18df8b06

SHA1
c2e2197cb4ba5df4a77dd410e3e2c1ce071cd163

SHA256
cfa40d5a87dbaef4097cf609347086fc4fe4bc07ab93dc7aaceb72e9c5393bd7

SHA512
9d80adec0a6b784590e14a6c7f70ee6a218d9732b7cd6fe22a27c5d022f19e2da46c99543bb4a4a44fbdb5f3035df729dea5b5ab8cf4faa735a714668c15f8a4

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000053

Filesize
304KB

MD5
3875c7805ad9d1f806fadcf185601374

SHA1
3adad385b7695e4fd2fb35976b16db5d5a23eb70

SHA256
bb2a40dc6f287f5e9d40dc01edecea76c5bd233bdbc60eac73bb5d11bb63345d

SHA512
495ea40aa9c32ef52575c43f1a8349b07d70bfd72f54d082ba23b3fd5b3ac62b5a01cff2c6ad38739792288b9803666ebe59684300312b1bd8b76fdeb97043bb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000054

Filesize
48KB

MD5
190b740a12412632e5c5a0045c392048

SHA1
d5865574a98554c7aa58e4152b694bcfc304ab14

SHA256
e02acc461c2b3cfa8e545bb4c7cc1b916f5a6a7e3f59fcdf473a1fe9d6e946bd

SHA512
9cf727fcb74691c9a59901a4e94d6a77e2cf97bf93b1b32f4d6be2ac58da28669ceadbc7f46b35de46dcf4e4cab5570bbe88fded9c56d88d71f3ab8c00de80bf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000055

Filesize
103KB

MD5
23db09ba2f7dc83d74b0b0c31e3872ae

SHA1
f70aaaeef0d4da0a4534568179f7e5a7a56ecb37

SHA256
410e11d7bb6b4e7cf8f54fbb40711371d8172334b9a32d01edf8afa915a5f91c

SHA512
2e8492648d207eec907d1eb49023ade07ebeaa1cb1f3a8550431aaec796b0c381b95cabf2f1bc67dc353515a9abed42404d928e1bff64a34addeafc3f63e24f1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000056

Filesize
198KB

MD5
edef136f7d20a2b770e3ea14345ad488

SHA1
f13a68c1e1cd75cbb66d9943bd1712cfc21cb5e7

SHA256
e57aadb22e0533d1fe81c23888b00e17e30e7af2dc359c4f948c4ca925e70155

SHA512
45602fa6b80764a33d0ebe2b165bc27cbc3a546134fd6490b8d4c8ebb4abd30a772f3a93e9fa64c6bc03d1bc02b34a7b0966654e55ac3a90c05b72146f1be785

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000059

Filesize
43KB

MD5
778bdb766b30fa65ca6c38e30497e16d

SHA1
c9796ee4434a630914a7c569cb0a9b13506e1fcd

SHA256
f7eab601e3425cd70087f818568096e235771b4654fb25a3e937fbbc251872aa

SHA512
20d760f562a91dfb778786ee684b4ec4a3e3a78535ab87e73ce7ed68e0d572689723cc76d98e8b1752646b24e04fa1f2e53fec28d85edf21cbe71d9d710be1b3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005a

Filesize
56KB

MD5
8826a629510700c227cc51431b7880bc

SHA1
b3b0b41e32c50089ee6eeaad0bb844718a3eb576

SHA256
2f881b3eeb0d90c17798af6f50059d16cf31b11a36ed2d5889854407209150fa

SHA512
4da0229ee1d0656588dd60c9d304983d1754c728213a5317d40d72493b2b1f460605c059656fa88fad3950e4839d505b318595f80bec03dd78313fe41801c82d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00005d

Filesize
2.5MB

MD5
44c06accfc46475d29185421c84e7e7a

SHA1
9d6784f153adb5c6f1e1af431662b588f92ddbf4

SHA256
1caaffc5b2d816ca8751c0b786a611ddb1382d98edbce8edf1c1a3174502afd9

SHA512
56e9f4ff005587d9ea14e3c5c62345e6dd2d079d7ad6149df0c78275e8c42f2246f1b8b4cd1196cc4fd315384f28f06bb45fbcf75420bad4ca5bf7afc4e8ca03

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000066

Filesize
17KB

MD5
afbb8c488df652a7bf5dc27151a76855

SHA1
5f54ed8b14dbeaf8b204199c4bb4942a8621f949

SHA256
03a6ef1eb6ecbca321f2ac9368f79bd574a5ea7bf1036e73860859665e19c85e

SHA512
e4db697f3ab26b22c8c0db87ff27781304edb2d981702603613023209dc7ee080ab7077b2284c01abb94f59b7afb0519a4b49a42bdc0d91421661910ef8982be

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000067

Filesize
31KB

MD5
b9bd3894329f07cd55dad915503150fa

SHA1
d3331e017760f308df9a178e34c81fba8240012c

SHA256
ad01f74c7c3dd2f6da7386880cf50161e58303f908aba655f07809328e7ce7a2

SHA512
7e2cbf226f87d9431f5f877a0f80976e0787e6de9fae1ba771dad4ed8fcf549a1e89f74811adcdf5c3d4d69fa55b99ad4bff4f1339e6b9f96a1ea8d1565c3663

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000068

Filesize
152KB

MD5
f4196bdd2295b1eb5917fc028648e3c3

SHA1
2db58ea43decb9c97bef1a52023341069e084cef

SHA256
8b3d5f64d075cef2476f1ec46a942a9a1ad14180e9a74cd71360e25963f49469

SHA512
f8823fe36f61efb98678f964c5a2f1fcce600871c17976289516491b5455ef5a6d0c1347ec6e4f8a9ba64315d839878968d6e26150f34559140813358f101426

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006a

Filesize
20KB

MD5
81eb724c6110282f7837986bade788f3

SHA1
757e624f4a4380ede6500500181f28a902ee31dd

SHA256
18579f2cf0c1c009733a8275a760f4ba135288e620b9e240451a5d2ba3b23d49

SHA512
681056d78a1916c76eaeeaba445bb19b3d4459566f3955593e71d5ce745b50203d21c631f57a20a6ec70df3dbc2dd077b97a09c08df995d0b929d3fa2026270e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00006b

Filesize
57KB

MD5
5c0e09666ba29f6bc2aa19bcb7521eee

SHA1
75355aeab1c265fa89fd1ac8c0513024cad252b5

SHA256
43fd77547302d2568c98b2e44ad509a48b7a7d2378ea3728c8a56289b0cef017

SHA512
73f6a256a079db90b335b4fb4f326d92a4eb6e77ae54dc1fd47d5f548de910e8f0cebec01708a71de2f2aa803da2d779354aa8a4a36711da2740da4d503e867a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000070

Filesize
593KB

MD5
24efc2b9f280d45d9c0ccc833d5b5706

SHA1
40fe00c6ade6374872139eba225d13bb76a90499

SHA256
a3b20a6e03831d2a1912563ec4a815fa332130fe4793cea4f1b105cffcb89374

SHA512
d20605ebca212d07a18bb656d578288b8ee811eb4e8a469070485298d203e9e61d22ef06249f5d87d5f7d09b20aafcb7ce5a66c592f7a939abc57d3d0da8ea15

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
af6cd5bd5c01450690540e4259c9b682

SHA1
7e181a69321f038a92516cc8817efbfe0d4a90c5

SHA256
87bf87db0c8e783fc2ae581a562eb3c3932092309618e495322816e71803819e

SHA512
3d61ddc54a3c174dce600da720945dce6f9e0fffe1dc621ea309df34371b316b9eb20c652bf1d4df96e4cc71a9a80c271709cb960228c27abbe6ec92835effb6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
14KB

MD5
67d214cad3355d11cca29f6fafd776c8

SHA1
cf712fa353a66aff217271cb81256d663b55ecc3

SHA256
32dfa81d64e2e99a51acf30ced71adaa357e3739dd7aec54f856efff718b7509

SHA512
ffd77d720f3f3345cf983cac82e238ebf85359b89a02a34f580b89c7c6c5ed6626eb51b49e18d7792fd6ef79c1663160975f139e0abf662c97a5d9e2b40e46a0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
3f04f7e60216fe8ad82d24ce1a6831c1

SHA1
82a472eeec2bb398d59c8668b68b04b47746c41c

SHA256
05bd225aef7ff0bb5ae163c6759a42d3d6ffc9b91c3060cb1e44a7d57f6f4680

SHA512
f6418943ed49b009fdf93a4b0982ee5009947b8975dad5f3fa9e126d2b8f334a4340755ab5e8caa8da5662efa2074b89a2d0e6fa2860f91d062ba463e77f1c73

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
87fe8f573693f36e0d49267be4b103d1

SHA1
5246cbcca6e6a0bc998c8e449f01702a7390255b

SHA256
3b56b50363d21bce0f1cb5ac56ca40b2e15c3f04230303dbc3a63952c2ac465c

SHA512
707fe6c6d9a8a4936d67b36afb9330afa780980c617ba6c987bb5b46afd9f23fad6c4be5d12ed1050bc4f750c41dffb4f3b336050776d39eb6bb516198afe150

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
c4e586e9f6cf3ba4257037325235a3e6

SHA1
04a570f3beddddbe6adaebf4ef6769395056c705

SHA256
6517a4dcb21cdd518af654628edcf63c99b0bc77f74ff0efffce1b725be4e0ff

SHA512
317233a77b1bf1c6610b9acfbb0ea91fca9b0932810e6b094d23e6b4fc908a37c7131927a5767d1d5b4d99830cd6c7929e71e986b43af5106954f241abe01d4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
4KB

MD5
8c90e7a10265ac9388aaaa080690e720

SHA1
83f275cc0dc232ad2b0b22f1ce786b5121dc9ddf

SHA256
e62117ddaca0bb693de65dfb93f696c7b8287f18969325a7722a2a13d93b14b9

SHA512
3d720a49776ac1c2cd9a505d2fc7d58d15e37860814ed2069d1e554edcedc3fe9ca4ebfacd814b0b05420200b08b354fd667a3071e68a22cc3c2eabb50efc493

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
5d6d28c90a03d5b297ea73546e56b07f

SHA1
652c0883310662bdf8a02922bda8f2043fc96182

SHA256
912f52bbc07638d80f945e2c70569eb1c6e0f1b96f328f1e63bdfd353e1647a9

SHA512
710825eda5ecfbedd678c1cb78ab99c49a612ab4454d0ef0925e589715a6ba0b73516cc26e5b1b131157538774636e6aa51e6842d3a7b77fde38a880c6067054

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
ddb122f3a6c01ac5466104062852a4e5

SHA1
61284a45c21cbcc32402b54d5c3c17a1a01863f4

SHA256
f90ca93368386c7fcdd78774d03bab29b874432db09d350900412043d9299233

SHA512
f090bec618dde078db353082ba5d065151b772e752ed4939cbd839cdfd1742d2106e284f7cfc5afaeb9e7d51b359ab9876a38b78e4a3155eae7350086322ef78

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
e25ed70cc90eec101fb15fe733821df0

SHA1
9550aa6e9f73a60fc10c4c729dddf8d26de82f64

SHA256
8ba9da7c3e5b9d6dee1e83b85467256a98a39296ec0d202ad06862d92b709cf6

SHA512
4faabd8b97b0029c7be2091509f75ddeaf8e71931069ca8790c89be26661e0cb719796e638f8a77c1eefc043731b0388a77bf2481207efc837148e508fda17d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
072c82fda142305bcd604e88197a0b20

SHA1
f8f88e2348b24e903b9054fb5a8f01b4eabaffcc

SHA256
dccaff32d5a7fe4e7955974a03f67cdf781806b97cfa3328005c2c4882d4ba58

SHA512
8106ac719ba3f3715d2237b10488c4980f06e280277eadf2febbefddb965be0a22eecc72a964839e9dbf087ab5f8757a4abdef2ba0e12b7e02ed5bc5f630d6eb

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
94950c278f9acca7835b64500eaf2132

SHA1
96b284ce9843840fb128a9290034a621fbcecf61

SHA256
ccba3380674b007685ab057a1c949ee95fce457d1dff4220db0ce6171933b9ae

SHA512
1bc72b9da8dbfb70bade2bb09f0ca8efe4f519af0998c322c68e6490f33c25026d2880ea8aae81a19838a8b6c6a4ce2782a6b22ed815bbcbce365116d5034b48

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
d7b44c1e024f9d34c34dcca369d7097a

SHA1
72f94087a287ac382ca3bcc25828ff5a6e03d3d9

SHA256
5a82ed98aee8bb23fe7c33b7a1b6dfed415423ba8e4a3a26a1c47e8b960854bb

SHA512
80aee121dd1d997447f6e76ed0f21689f58bb6f382c39a203aae9541025e9bc693d81b935b498c340b60f8121755f35d4ff28f700fd471477e2654810458eff6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
8KB

MD5
d876769f1b44b8573696b677ae0b1af3

SHA1
94a3db631c579a7c450aaf0d045716fd70bf8675

SHA256
9bea7fef4afdd2df948475a0b28166089e8551fcba5b608c092c0adb17d28c25

SHA512
da98cdf2b5d5b0212eba027660bbc72e464c97a16f12c4a062206287c1ef674633b45576a0beddd48d824d135334e2b07ef74edcfbbc224af72c5a5cd9217959

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
0a732069c9fda2580f5cb2f2e998294b

SHA1
61b3cf5b5fb768aa3816364978eb700697619351

SHA256
ebe454ef06b0b653eed7dc3af2f94f0ae4c4306e65f372d0fb6558498c33f423

SHA512
072a71d0ea024680e53564b94bff3067abe69f9c8c29400b41b5aa2ceff25600ec14351cd7a75a1d693f2707b82c545486bd2a4481587339a19b73b4a83236d0

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ae05cb8f-81b5-4104-a682-763cc5aff8d3.tmp

Filesize
15KB

MD5
5d13b0356bb647b13d27da2fb977aa97

SHA1
bf6ea7d056c5a4227e04c446375cdaf2b7aeeb84

SHA256
2ffc998e2f4f08af20df9212a71350158b1a084218f80bc7cab2904d9719f8f2

SHA512
ebac6f610d8e327d7ba00d658810d1d3111fca24ddd1487f911d1a26a647369a6aa751333972bce470f33b9023ac6269416fd618f99604edcbf3d01dc6ad0af9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
183KB

MD5
a5713fa0149ba77dc9b6dea2af5a578a

SHA1
334649b9f09b74a520c5b1b05f745e24b5e2f976

SHA256
b2dd9d3b698ca7fd5cd045e70c3294af6dea1831d556251ad69158df7398e20b

SHA512
808a30d9ee004f40f908eca9ac1dd0a381e9a1dc3567bd68d9784e85b146585c2b89b055bf9beacfd84de632f114eceabbd08724e62922b5ebc2001b9f03c8ca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
183KB

MD5
27d926b58f14e85711bf2fa4b3f62458

SHA1
7792aad0fb75b2fb8bd2d331de4d99eedfc31f00

SHA256
a14f2069bffc2bc4d2f78b444dc7859b6d14f81e631a74178e47ca53d6764c07

SHA512
cfaef0fbf6eda7860b3af32b788638908c304d3d1d2eb0c35c114c1f250e4b640358264cad0d3a6762db6ca8f982cd438a0713c72040bda19c321ad3fd59d6e8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
183KB

MD5
c43535ab7739c9f1a0da58a794eea7aa

SHA1
b63fe762300372616110d860d9b0916e3a00ed1c

SHA256
cc9e12a5474781e4c26c72fe74b3bceb752319ee5e18939dd80f0ccf43763bb9

SHA512
81f4ebdd10ebab31b2217bdb3e3c844d86f71b974fd9d367ba46b7025e7ccdb7b8c171a1186efc5b398ab06d61dd1ae4638ca49d1728fcb4579f982d8abd15b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c0f062e1807aca2379b4e5a1e7ffbda8

SHA1
076c2f58dfb70eefb6800df6398b7bf34771c82d

SHA256
f80debea5c7924a92b923901cd2f2355086fe0ce4be21e575d3d130cd05957ca

SHA512
24ae4ec0c734ef1e1227a25b8d8c4262b583de1101f2c9b336ac67d0ce9b3de08f2b5d44b0b2da5396860034ff02d401ad739261200ae032daa4f5085c6d669e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6f3725d32588dca62fb31e116345b5eb

SHA1
0229732ae5923f45de70e234bae88023521a9611

SHA256
b81d7e414b2b2d039d3901709a7b8d2f2f27133833ecf80488ba16991ce81140

SHA512
31bacf4f376c5bad364889a16f8ac61e5881c8e45b610cc0c21aa88453644524525fd4ccf85a87f73c0565c072af857e33acffbbca952df92fedddd21f169325

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
62KB

MD5
c3c0eb5e044497577bec91b5970f6d30

SHA1
d833f81cf21f68d43ba64a6c28892945adc317a6

SHA256
eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb

SHA512
83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
69KB

MD5
7d5e1b1b9e9321b9e89504f2c2153b10

SHA1
37847cc4c1d46d16265e0e4659e6b5611d62b935

SHA256
adbd44258f3952a53d9c99303e034d87c5c4f66c5c431910b1823bb3dd0326af

SHA512
6f3dc2c523127a58def4364a56c3daa0b2d532891d06f6432ad89b740ee87eacacfcea6fa62a6785e6b9844d404baee4ea4a73606841769ab2dfc5f0efe40989

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
43KB

MD5
18d0961161947cc8ff53cb476e005e5b

SHA1
f8ee3ff87725fe24c0565c63e6634c60aa6a45ba

SHA256
3d6fb629f65a9bb2ec596215a38109f04a408c479aa96585044aa19b5b390b58

SHA512
e68f50692d5fc3353f23fd48e2bbe7021015f944c60abb52dae9707034cf5c5c798659530e15c760df06afeec5432baa1c0b995e6b541ae0392b4913cce56ebb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
19KB

MD5
76a3f1e9a452564e0f8dce6c0ee111e8

SHA1
11c3d925cbc1a52d53584fd8606f8f713aa59114

SHA256
381396157ed5e8021dd8e660142b35eb71a63aecd33062a1103ce9c709c7632c

SHA512
a1156a907649d6f2c3f7256405d9d5c62a626b8d4cd717fa2f29d2fbe91092a2b3fdd0716f8f31e59708fe12274bc2dea6c9ae6a413ea290e70ddf921fe7f274

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
88KB

MD5
b38fbbd0b5c8e8b4452b33d6f85df7dc

SHA1
386ba241790252df01a6a028b3238de2f995a559

SHA256
b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

SHA512
546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
1.2MB

MD5
11db7fb3182a548620cd81d9834e9f61

SHA1
5d63717ac35666c5f31d483f54a21518b0b5766d

SHA256
af9a7f542fcfdfd061209de29b5ce5ed540d6e702fca08af262541a92c82d3ed

SHA512
06e000fb72af7acf73d11424ab54a1299e7611c4e8535abd7cc67de695d3a016825d123f3a2352e9bd92a92fffb5edb50a3fcb39553f4b332313dd13d3836116

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
43KB

MD5
209af4da7e0c3b2a6471a968ba1fc992

SHA1
2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f

SHA256
ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403

SHA512
09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
73KB

MD5
7322a4b055089c74d35641df8ed19efa

SHA1
b9130bf21364c84ac5ed20d58577f5213ec957a1

SHA256
c27e6cbe88590ba6a04271b99d56aa22212ccf811a5d17a544ee816530d5fd44

SHA512
bad26b076fa0888bf7680f416b39417abe0c76c6366b87e5a420f7bc5a881cc81f65b3ef4af4ba792aa6030bcf08bdc56b462775f38c4dbf48ff4d842c971bea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
40KB

MD5
3051c1e179d84292d3f84a1a0a112c80

SHA1
c11a63236373abfe574f2935a0e7024688b71ccb

SHA256
992cbdc768319cbd64c1ec740134deccbb990d29d7dccd5ecd5c49672fa98ea3

SHA512
df64e0f8c59b50bcffb523b6eab8fabf5f0c5c3d1abbfc6aa4831b4f6ce008320c66121dcedd124533867a9d5de83c424c5e9390bf0a95c8e641af6de74dabff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
53KB

MD5
68f0a51fa86985999964ee43de12cdd5

SHA1
bbfc7666be00c560b7394fa0b82b864237a99d8c

SHA256
f230c691e1525fac0191e2f4a1db36046306eb7d19808b7bf8227b7ed75e5a0f

SHA512
3049b9bd4160bfa702f2e2b6c1714c960d2c422e3481d3b6dd7006e65aa5075eed1dc9b8a2337e0501e9a7780a38718d298b2415cf30ec9e115a9360df5fa2a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
134KB

MD5
4ca67bd39bf52c0e14abecfd237d73f6

SHA1
d25c619066e48aeebe389d49bb67b0eedc407281

SHA256
470f4e45992966faf92848490cd2c33462c00a74a688dd137dcfb5890930ddfa

SHA512
5654d73c6e59d5ba2a4f9a229154c3c4aebf2821ae7aeb7b1ea968a0156027baa1a1435ca6ff1e970cb808208ab2fb2d32f495590376ab6b020866d7b87b2cdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000036

Filesize
20KB

MD5
1f033cfe8a059e17e2c2eee0e82e3687

SHA1
4e25a66bc18764253dd9e2ae6a78dd6b7a87d666

SHA256
4f7b9d42c076c0f6942b647725adad412e072684ebeefd66d142451aa0e9fbac

SHA512
78c488ba2a11209c64ba673e213d7878930dab0a0f38964c13dfeab2b59dcf7156f34b9387dbb617205e8898381dcc1da461ac9a1139c5fc1ca58f7b22a500bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

Filesize
17KB

MD5
53939dacc1a492f8f9adb7566a33d367

SHA1
be03c60f88daeb9c77b645f25983bdb09c34e929

SHA256
4075618b27a7b55ec8ec7f6f16db2bebe821fe80099bc1a0b3b508bcbaded2d4

SHA512
74a159ce51faf85227546d11f774166155b6bdfbb8559e93a91dcfc3846e4ae236589d0450da1311adf4d6cd6fab99fd43e5d1aae44dd7dbaf351181cc6e81fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b

Filesize
162KB

MD5
48015337e8abaec85da6d0e022ce110a

SHA1
74f60b053f701f3a9664d7e6d14475549667308c

SHA256
94f99ee046e53d3f49aacd86d2da61ab3c45227ca2023f4f9fb0abf1b2a35732

SHA512
b5568947aca1560aadd0fdb5418b73c5d6341eee33c0e7a82ff293d83296add0616e6b949100b2e19ce67f874785942806041def66e907b180529f90cb27350c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003c

Filesize
131KB

MD5
22a074b64f16c3c2a80de1ff6b009356

SHA1
0a587c9baff7cd817bdbe5a651162103bf3d7485

SHA256
f5dc864f3d8d8acc2e685ca7ae5edd581fc20c300d4f4c072eb1e01ddfde9075

SHA512
5969262800bfa76c970e87a1088a1474e232574d98165775d417fccca72e459c782dbca0ded29b9f93e695c1f2356852d0e8b63a117afb01add89a8ca3206648

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

Filesize
103KB

MD5
a5c69675d45e0c3a85e70bf8a1648cf0

SHA1
bf4fdccd55ed88162867d5fd1b614270786b8a31

SHA256
900b27f875dd3945576436f77523d61559121cf83d06c9f75106fcc4fc919544

SHA512
b57368c3e170be9d3eefb6c91495d8c99f3a6515963bbb1cbc01f39a6ea9b0772d22ab1c46944375f2180e117f38e5bc550a638ed5809457cac21778f5c6cb61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000041

Filesize
45KB

MD5
1ef03bf3a779891a32c1da43ff1b23d6

SHA1
72a4d4115c025177769b393c1d4bf8998ab09b38

SHA256
ed2e61bbecdd9150c345dc799e906d29d36266efd380ee36b38347d6318ebd17

SHA512
7f76a88320c569a0e65261e00a1ef1a4045ef1493e1cf0fbb68d4a5b0ce12a9ca3d2144c600421f46792da748a92a7b2176de74dc6282cc04203d0fc2c3bdfcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

Filesize
60KB

MD5
40e6a7d7848df57fa5e9730ba4b1bace

SHA1
d99b42ec5cd250592e4c43984fa311dd8703c213

SHA256
abe16bc1da030ad08b590434fa270c6a1b2cb6cddc72c8a907787eb05e2f6eb4

SHA512
a6c81560755d773a36adb04aff4365d85c4043e0f924edeaa63bed0a91b09ff189f96aaffe4e5d22c5f3dc9d1eef7a51bb47c4d38843ef87556217bda7f5a9ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

Filesize
134KB

MD5
4f841d8f7596f3b47a82322be6fe25fb

SHA1
7a0a7a9ecd07980ff8165e6a574d6c1d2a195d66

SHA256
7d5af211e08a6be7a24be607cea47110dab163131f3fe8bbd85c5a5748ff2c42

SHA512
a8ed365831c99f5fc7b4ec8acb6f444a2e7e0b1739da6b54a287ee1ebfaa9bf0e70b6345315f70d5ae6e8ef7f3f9d3ad309990eabb3738ffcb12b9451da8e3f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

Filesize
54KB

MD5
ca025d2d8ae4b3dc51e058b782590501

SHA1
eba33b512ac06ec853250fd52a43f49af25de701

SHA256
be1572389dbe49a82429e9db9854bf32884bbca0825031cb1d14d84f677fb518

SHA512
45befeb37605f646801ce73e483ed461c808f7c15ef2ce5e6bfbbac9e61cd76e614602ebcf6c98a8ae09b3c28c7c2036975c26200837828705b13596978a3985

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

Filesize
84KB

MD5
a05436fc7ef07c9f76e7961528be612f

SHA1
08a34df3900d46c4c1fface27eb1a14a97f8da22

SHA256
4ba28eaf056650e0aa272e4aeffcceab15e385337667b7facb68e8c875512de8

SHA512
87b54a7478bfcdac0398f093c7cfdb645470654262cebca2ee6499d97653a963e74ab44e421cd2d9fa560a8acb96f539e9dd59bf94a2f4213efe63d6c83256d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

Filesize
90KB

MD5
3b844448f9b9e762abb5c26f912934e2

SHA1
0a0940c3bb1d64ecb7c43054bfbb0fa4bf20671c

SHA256
60fbfc83b34302c72c2aebc4a58ff767f3cee51de028eb798acd31a0c66ab6ec

SHA512
ac7eeb218ede1e687b9d9437a20921a3a007ba8cc8f614c6081485c5cec5e61cf26e8382af9edb91cde43d58cf59b290e32b7212c4259cf8e387d665a72a8f47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004a

Filesize
97KB

MD5
0b03b8b3d19965eada8b9d7c9cfb4481

SHA1
46156e2827237d3fd07ec04ad4959147d9ee55fb

SHA256
8c1d6f3ac9b7ec672419170602b31b5dc6c2bdadff38108bc0e6c1eb6a9525aa

SHA512
7cfd4d8121cd709b9ddc2a9c252990a11ad8511ed86f659ad2c473c28fadb0bbbce10bb30f782e343d3bc4e12b3841494ef59889f34f995673d526a8ca652d8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

Filesize
38KB

MD5
2efeec08f2164202809bd0fe402a0ae1

SHA1
38f1e87c19da50d106ca04ab2089d70eb8bfd337

SHA256
d9905201825e52171fa08d938d0c3e5d463ae6e3baec91289b3efa2478685b9d

SHA512
9a70fb3f609351602d4e303762e4ce8f1cf75929e76a75bcc8062fde18e1fc97075e5628946f46f688f96b51b9f03df273dbfbf3a054338d8a4c22ee174518ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
57d775b7ed5c77081c7f27d9155be48c

SHA1
735b0bf7e0ed0f918a77ee7c0b79c73b39b72674

SHA256
d84ebd887f8446a218b7a2ab9cd86b4299c93473e3f4cba68f69e73a030e315e

SHA512
6ebe486065f20afbfb7228a1c5eeb23d0f01dd1a0b2b8d5c843cc3a31f093cfe72ba0b6d43777c534699e73671d0225d25a168373f1a0dd4a16676327f1aaaf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
7KB

MD5
4d9ef51f2d69e38405c14796709525fe

SHA1
a730290131a3bda2c0036f12b5086321009c80e0

SHA256
5b6bd671164eeeb22fb3c1f886c7adf2411014c42dc05ac4b37b8e982ee6ea6e

SHA512
a269d6377a799a23735749b623dccd1c5bfacd2915b0a0cccf96405115cf3d529f0215453d870552018c8186006cd6a95393a0e1d1e0c138cfc1c4e8552f7090

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
26c79e2aa3dcf9c70a7c59a977d8b4f3

SHA1
f7ad49772b6ead73baa02a6dbb10f69e3350e422

SHA256
e87b633f50b455bd22a1ebe3b62cd8ed96255fc76a2d2e8148e3862ee098ad11

SHA512
51498ce3d0fa36303eca26f54bf37ae169c79b7fd7dc1f0162d1061cd3b3b697fa4bc2621135f9d6593ab49c336f390fb4d29cca4c2eef7e4bd1e852ec04bef5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
bf437b99965a722e3e419f97ed6df6b3

SHA1
f4fd30e35f4a9efe0a33de97457214ad833aff9b

SHA256
453ca4f01149c037c9d53816c71a713ad44792dd7155f61573b95fee880cf22a

SHA512
0f7cfa7d8baf43a948413f03e1bd0c434c50eb1d67330d8a7278a4fab0b3ee645ee26d7d5a95b34cf81a10e3ce889ffb4ab210f8c9f66a25aa815f7c691363c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
14713b3bb77d6f821ad23e9be186b250

SHA1
9d7c0e5e4fa608c70cb36db3ce96b8eac2612b7e

SHA256
03f92d1322d971d8549ce0dfacda0868d447fdd94fa8219f2038580ecbafc246

SHA512
0783cbd17af1f31a438aac8a8c2d405e41ac4aa49822fb86e4986c51d9bdb736d9a4f10cad45536075b8561e35c2fdcd10f2f7bca014d56f22c7e6466f1eeac6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
22fdb65f46e4c138867279cccadb56c7

SHA1
5ebf18c046beda87bfceb57c93abc0e5434ba291

SHA256
fdea1fe56f1d1235f987c407b57533cb183b2ae0c984b61e07967dac84e48f91

SHA512
feb8bab8b49fca53462bc19ed3469abaec3b10ea2d922f9cf216323c9ecfd34b3a6a23474ace7ff76120929886729c183567d9a4884f5fdd745f3f67bd11f731

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
027ffe0474c7a76424d515376b545fb1

SHA1
f383c9eaa27c5bbf9ec8dc361746f9ecaf4ac663

SHA256
82d27dc6187f0c831da37c21740e45b20df0d6bc396701b3a41a8fc2d13207ef

SHA512
2ba3ab81a8c4f02a9e281422405197433554b8c366a646a4013252d55aff688bb8640f1aaf0cf5bf3074fb95dbe130f0983c633d09c4f0ca5e997c5b1ed9ec5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
c16b1d428f548c911f934e309d2dad7a

SHA1
1c42db7afcfe05ec8ce6218a566b06b5952b7b34

SHA256
b24283d3e6a61d4110c4235a019808402f6d0c29f6e6c9128d405572688e40ac

SHA512
f8379cc7acb2d606c59991e7c175220ab2ea89301f2a63ab41fdcdb2dab160c53b9768a671c02cfcf5243f6f1320b0f8d3d49f8f66402949249a4b6927429c6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
700c70a33d42a6f793bc643db2413f51

SHA1
7526e49bf2c679f14d2a80ff27db58e9d0abaa17

SHA256
0f6eed1c23e1eab6eb5fc31558a17de666146049d085499ff397e1cea5935225

SHA512
0dae8fe348e7f50934ccf601ffc32509ceb41c99acc258d9296bb6982e6feb2d9daa7dede62e5ce4f06e3620ff965a64b52c0a22444b6cd87f9c58ba81809aa1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ef9037c23ea0b7973d7aa750abb87a95

SHA1
85d50e10dd5b0c6762c877f4b6444445e7c3d961

SHA256
63bcbb9191e30143e1a6c7fdd5041a4112d97a3f37294820d08a5e3503dbb1bd

SHA512
5a2cd262b9a8d88feab3df69d5b3078b97e08852062ebe96df78649a4da714dc23409b495237b53ed8607d48e2334a4e2106a8427f396cbd857ccff81a84c4cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
77741429abbd35effccc98d19a3a8628

SHA1
eed89cc7ca991caa605794fb1e21201034e18aa0

SHA256
df30052bf50b9dec5188b5770a9ecf7129aa6a5934b14964a2c8dae625b40281

SHA512
417fc13c91cc59bea764d0629cbfeb71f343a4bfc28027fde906e4307832b2e25207b3f5e3e57881252d8ee481e4dedf720346220b209bc5aa5aee137e84c627

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
b4f65e87ca0f7ac76d22a6d02a2edfa2

SHA1
c781646151d85849c6f1ae77d20695ec70607fe7

SHA256
051d55b93ed0d02f216a81b472ea2cd3d696b75ff4b9e7a69af98269aa89fbc6

SHA512
61b30139792197f62e8754d4644021ee277e65795d6b8c2a79da86515ddb8c6cc8d7d28ff50bf07bcc5e8f7cde33b2c8378aaf71379e13c4e8d22c508a8babf4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
0ace09dc71bcdddf7b35ddfc008e1ace

SHA1
f93684812dae78becccb04449486213bd3e2d5ba

SHA256
2eff353dab85d2dd56c1bbbf04c8534b78ec994b75d73ebf9bbfff5f4bdcabea

SHA512
e01de283ee1d8a1a4768ef2204deae01a4ea54c4b6419a99ee21893ac071006bfd78825c86f27d179b975e03459cb9648e6e827bd934375f3d17c9398530870a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
cab22168ab491d3cb4cbe4fe0b5ba920

SHA1
35ddac1c3c973f8b82de987188b6e4801f07b1c4

SHA256
86c1ba1dd3eba85063ba9f022544aaa98e7060903ab69b4583e91c9984a6b54b

SHA512
23aa5f1f6acff6a4de5932bb30a4b8600602bee87b30beeadc9056b40428dd4ed471924d47ea8ac19f83b284a45b36980981f1128fe16ee40ed1978477a3e766

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
302c0e7b9da01049ec6903aee89b4974

SHA1
ab291b1c7ea5dc0d96fe290430a20263062bfd91

SHA256
6803fc5434485f29e44d05120bafa3f87e571b31cae730e6d35a668fa7c22deb

SHA512
67b48129a1b8a35178d46285b6cab8ccecbe68d47c6a6e8627f6c5349ec28845fdfd775d2f1312bf4ce8a3be1718780bd906550e6e49e4a5219016479107eb5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
233ef6de3818e584fc14d136534cd67d

SHA1
522ba060fb024086aa072dd73e2afffd692397da

SHA256
f047f145d22bd0f9a19e7752d9c369604eb1b41db8fba248790c626923eaac4d

SHA512
531ad23335c493c8965054178f0edcd2b63fedd2740d48a8b16b8634620a2523095cb89a049333a0b9ba9bd55672c415ba903aa24ee0beb4e657353c2577f29a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581633.TMP

Filesize
538B

MD5
858b80a9941d3fc3ee62b389ea6b2866

SHA1
792131a3e254f4cb84f5b6db6a2b494f0040f120

SHA256
0bbd7171b8d2988fc7ececdfeb545d20a88825fa818c5c36368c5909c6ded53b

SHA512
e15ef01417890b39d37e9faefc8ddf82cbdbe16237f8bc3533ce44abddc42fac9192a0331501c6da5f7489be29021d6e447ea8c1f7215bc6cd947891e31b4a0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
08f89a69dd14b7586591ba113df4f5e0

SHA1
a44532bf6c675928675268bc8c65b4b737ae6747

SHA256
4048f14e7c95f8e3b335c9450e5544f3d9ad3bca915d4bb96e4cb74fc70df847

SHA512
783fbce62bb87ac80c7bbbe1209a11be53776d1bd05e26f91522f9a87f897f7d937f07cd5bef37834ff6680daf4703eeca9055005441dadbef777b7d90a492fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
e1b55ee33eb87397d77515fe592c31e4

SHA1
c8c3f267553d19c1d0f245039ee418c0ad737c69

SHA256
32dd0dd0844fe9f3276fed31c4ff6a21701cc169a75d3d5bbdca5c2588f4d23f

SHA512
412afc1878c12519309af1f981c63a7a564e3b9a864b69ed6685e8abc5bd934659b6be8518bff30d007bd245a6f532ccb36742c34a5d746d3421c6162d225163

Download Submit