Analysis

  • max time kernel
    1324s
  • max time network
    1147s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
  • submitted
    03/08/2024, 09:38

General

  • Target

    http://google.com

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 32 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4048
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8e84a46f8,0x7ff8e84a4708,0x7ff8e84a4718
      2⤵
        PID:1820
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
        2⤵
          PID:1800
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1952
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
          2⤵
            PID:3552
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
            2⤵
              PID:1704
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
              2⤵
                PID:3788
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
                2⤵
                  PID:4832
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
                  2⤵
                    PID:1984
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
                    2⤵
                      PID:4284
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
                      2⤵
                        PID:1076
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4188 /prefetch:8
                        2⤵
                          PID:1108
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4188 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:4436
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
                          2⤵
                            PID:912
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
                            2⤵
                              PID:3996
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4296 /prefetch:1
                              2⤵
                                PID:112
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
                                2⤵
                                  PID:220
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
                                  2⤵
                                    PID:3508
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4256 /prefetch:8
                                    2⤵
                                      PID:624
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4080 /prefetch:8
                                      2⤵
                                      • Modifies registry class
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:3836
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
                                      2⤵
                                        PID:3188
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
                                        2⤵
                                          PID:3756
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
                                          2⤵
                                            PID:4508
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
                                            2⤵
                                              PID:4628
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2208 /prefetch:1
                                              2⤵
                                                PID:2204
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
                                                2⤵
                                                  PID:2760
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
                                                  2⤵
                                                    PID:4248
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1
                                                    2⤵
                                                      PID:3016
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
                                                      2⤵
                                                        PID:1544
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1
                                                        2⤵
                                                          PID:4684
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
                                                          2⤵
                                                            PID:3888
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1
                                                            2⤵
                                                              PID:3348
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
                                                              2⤵
                                                                PID:1664
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3516 /prefetch:2
                                                                2⤵
                                                                • Suspicious behavior: EnumeratesProcesses
                                                                PID:3088
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
                                                                2⤵
                                                                  PID:3944
                                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1
                                                                  2⤵
                                                                    PID:2476
                                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
                                                                    2⤵
                                                                      PID:3936
                                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
                                                                      2⤵
                                                                        PID:1288
                                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
                                                                        2⤵
                                                                          PID:1860
                                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
                                                                          2⤵
                                                                            PID:3448
                                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1
                                                                            2⤵
                                                                              PID:2192
                                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1
                                                                              2⤵
                                                                                PID:4428
                                                                            • C:\Windows\System32\CompPkgSrv.exe
                                                                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                              1⤵
                                                                                PID:1732
                                                                              • C:\Windows\System32\CompPkgSrv.exe
                                                                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                                                                1⤵
                                                                                  PID:1376
                                                                                • C:\Windows\system32\AUDIODG.EXE
                                                                                  C:\Windows\system32\AUDIODG.EXE 0x304 0x414
                                                                                  1⤵
                                                                                    PID:4492

                                                                                  Network

                                                                                        MITRE ATT&CK Enterprise v15

                                                                                        Replay Monitor

                                                                                        Loading Replay Monitor...

                                                                                        Downloads

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                          Filesize

                                                                                          152B

                                                                                          MD5

                                                                                          eeaa8087eba2f63f31e599f6a7b46ef4

                                                                                          SHA1

                                                                                          f639519deee0766a39cfe258d2ac48e3a9d5ac03

                                                                                          SHA256

                                                                                          50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9

                                                                                          SHA512

                                                                                          eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                                                                          Filesize

                                                                                          152B

                                                                                          MD5

                                                                                          b9569e123772ae290f9bac07e0d31748

                                                                                          SHA1

                                                                                          5806ed9b301d4178a959b26d7b7ccf2c0abc6741

                                                                                          SHA256

                                                                                          20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b

                                                                                          SHA512

                                                                                          cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b8e591d-581e-4f91-ae19-94e5c39d976c.tmp

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          cc8d9b5fd744b465fe0e394689bffd81

                                                                                          SHA1

                                                                                          fd5cb9a9d8c0e50de4022a3e93a832909dfb7221

                                                                                          SHA256

                                                                                          dcc9946ba4d359577174a6b2b29b5adf43bb5afda9862ecbf431205a79fafedf

                                                                                          SHA512

                                                                                          f005acefcbf965516e3230a5d01997cb5820cd1eedefd43b9df7eef11e9d5c15199743f4981bc2b67c78ec9ee296aa54e22d872253e6db835976e6763ea49e8e

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

                                                                                          Filesize

                                                                                          209KB

                                                                                          MD5

                                                                                          3e552d017d45f8fd93b94cfc86f842f2

                                                                                          SHA1

                                                                                          dbeebe83854328e2575ff67259e3fb6704b17a47

                                                                                          SHA256

                                                                                          27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

                                                                                          SHA512

                                                                                          e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

                                                                                          Filesize

                                                                                          64KB

                                                                                          MD5

                                                                                          d6b36c7d4b06f140f860ddc91a4c659c

                                                                                          SHA1

                                                                                          ccf16571637b8d3e4c9423688c5bd06167bfb9e9

                                                                                          SHA256

                                                                                          34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

                                                                                          SHA512

                                                                                          2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

                                                                                          Filesize

                                                                                          69KB

                                                                                          MD5

                                                                                          24a806fccb1d271a0e884e1897f2c1bc

                                                                                          SHA1

                                                                                          11bde7bb9cc39a5ef1bcddfc526f3083c9f2298a

                                                                                          SHA256

                                                                                          e83f90413d723b682d15972abeaaa71b9cead9b0c25bf8aac88485d4be46fb85

                                                                                          SHA512

                                                                                          33255665affcba0a0ada9cf3712ee237c92433a09cda894d63dd1384349e2159d0fe06fa09cca616668ef8fcbb8d0a73ef381d30702c20aad95fc5e9396101ae

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

                                                                                          Filesize

                                                                                          41KB

                                                                                          MD5

                                                                                          ed3c7f5755bf251bd20441f4dc65f5bf

                                                                                          SHA1

                                                                                          3919a57831d103837e0cc158182ac10b903942c5

                                                                                          SHA256

                                                                                          55cbb893756192704a23a400bf8f874e29c0feee435f8831af9cbe975d0ef85d

                                                                                          SHA512

                                                                                          c79460ded439678b6ebf2def675cbc5f15068b9ea4b19263439c3cca4fa1083dc278149cde85f551cd2ffc2c77fd1dc193200c683fc1c3cdac254e533df84f06

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

                                                                                          Filesize

                                                                                          19KB

                                                                                          MD5

                                                                                          2e86a72f4e82614cd4842950d2e0a716

                                                                                          SHA1

                                                                                          d7b4ee0c9af735d098bff474632fc2c0113e0b9c

                                                                                          SHA256

                                                                                          c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

                                                                                          SHA512

                                                                                          7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

                                                                                          Filesize

                                                                                          63KB

                                                                                          MD5

                                                                                          710d7637cc7e21b62fd3efe6aba1fd27

                                                                                          SHA1

                                                                                          8645d6b137064c7b38e10c736724e17787db6cf3

                                                                                          SHA256

                                                                                          c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

                                                                                          SHA512

                                                                                          19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

                                                                                          Filesize

                                                                                          88KB

                                                                                          MD5

                                                                                          b38fbbd0b5c8e8b4452b33d6f85df7dc

                                                                                          SHA1

                                                                                          386ba241790252df01a6a028b3238de2f995a559

                                                                                          SHA256

                                                                                          b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd

                                                                                          SHA512

                                                                                          546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

                                                                                          Filesize

                                                                                          1.2MB

                                                                                          MD5

                                                                                          027a77a637cb439865b2008d68867e99

                                                                                          SHA1

                                                                                          ba448ff5be0d69dbe0889237693371f4f0a2425e

                                                                                          SHA256

                                                                                          6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd

                                                                                          SHA512

                                                                                          66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                                                                          Filesize

                                                                                          43KB

                                                                                          MD5

                                                                                          209af4da7e0c3b2a6471a968ba1fc992

                                                                                          SHA1

                                                                                          2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f

                                                                                          SHA256

                                                                                          ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403

                                                                                          SHA512

                                                                                          09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

                                                                                          Filesize

                                                                                          74KB

                                                                                          MD5

                                                                                          b07f576446fc2d6b9923828d656cadff

                                                                                          SHA1

                                                                                          35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103

                                                                                          SHA256

                                                                                          d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496

                                                                                          SHA512

                                                                                          7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          4KB

                                                                                          MD5

                                                                                          92bc608f63e40ce60358778d6c967323

                                                                                          SHA1

                                                                                          4ffee8d490f7fc1706da61b6ab6c23976211de30

                                                                                          SHA256

                                                                                          1f3a5ce06295043ffd41e5df67a45578116e2d5c588c452e9c484c1d007368ea

                                                                                          SHA512

                                                                                          a675d02929db220f1e0afec9ef2fbf5f1d9e7e1c7645c8b83e7feaf9b9b06dbf05f226aa49cd4ff82c251c06584b28d027712e0555bdaaf88729e0a43034b614

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          4KB

                                                                                          MD5

                                                                                          2d8eb08f206060e0a3e69b87304bcea6

                                                                                          SHA1

                                                                                          8b5e6da95adb328839068e168a13d4b4f4aa66d5

                                                                                          SHA256

                                                                                          0b16cb451b8e124a200bd5a926fb156cbb429c23ad5ebd163e3299870d6497f0

                                                                                          SHA512

                                                                                          17d9c661b94803e2c3bf9bd1faed3b68c67452eef0a4f65cd9b8d6c4b2004b6ceabb85d45c652936a5dd928fe4150b01965aec82816bd199da30617302d44964

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          ad59340e34fc24b07ec712c65e353636

                                                                                          SHA1

                                                                                          07a7e21dfd3a0c3d3027af581ee728d58f612a8a

                                                                                          SHA256

                                                                                          997de8f35ef4d66d337e82d67d2d02502fdcb7732d1342df5964bd859f624b43

                                                                                          SHA512

                                                                                          fd44c985c0f87446c0220c348013f8920b956c0ba6e1481605522323b6d419ecf517a786fdb3eab36cb618599a0300b63e75fc4a99ea5f73e19f89f46b226d4d

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                          Filesize

                                                                                          5KB

                                                                                          MD5

                                                                                          1cf2f98c70d150e74dee8576159628ac

                                                                                          SHA1

                                                                                          52cca89b2d9c34c0e90ad5a433460a34edb66936

                                                                                          SHA256

                                                                                          115d5ca04cbbbe47bb40b34ca57ba1589518130c622c05b725ada7582463c6d0

                                                                                          SHA512

                                                                                          7968525939140afc9dfab3c8ac37d390ab84f7f22a9c6a165761b52a005d2c45218cf73accf7e0383f4b450ba0cc06f9e28397491b8c7ed9badfb52d01f40ca2

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                          Filesize

                                                                                          2KB

                                                                                          MD5

                                                                                          f8bb4e110aa0b542415f7a50a5cb22fe

                                                                                          SHA1

                                                                                          4b3739ac98d94463679ee531fce2e3ac146dc8d4

                                                                                          SHA256

                                                                                          d389a91f4847508a9ad27e497bbcb528c9e77198acbf64462e85398a5b7526b8

                                                                                          SHA512

                                                                                          bf80590c17d517a7339e513d5a4322748881210781563f68e78c3572e1920ead6c5178c6c458975e28d338f2a3072f30e3a86f50e5a2df5ca16d472b38e41496

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          c9fb82dbacfc4284246219e0411f9319

                                                                                          SHA1

                                                                                          859de2044d10abd3c451645c76109e14e843b297

                                                                                          SHA256

                                                                                          124e183aadf812cf6d26064dff080a7c4f99c252dc09b345a727b5aea56131b6

                                                                                          SHA512

                                                                                          11e2d3a994e3f7e05113f320e1ba257155f87b089c015cfc372971676c958b990912b37727c8546e80a1cf945c14fc77ee6e68a3ddfe64dc73814a0bd8c9416f

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          9KB

                                                                                          MD5

                                                                                          82a3b73edea61fae4cdf4bc55206cf18

                                                                                          SHA1

                                                                                          40d8c1a5df7a0541e3c51820281f5ef36b233f3f

                                                                                          SHA256

                                                                                          8159b009805413b256a79db22bb4173b029d7cfdedf030051808a3bc005686c5

                                                                                          SHA512

                                                                                          a2ef7d230d18c0059cda2f5fd2c4e02b578725c9a0db38ca38fab6c735c239d344cb7c1a7337bc6a0c85c13fa668095473d69199481d36e95ec85c1747b8c058

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          4e90b9b218cc6928920f24a469b51761

                                                                                          SHA1

                                                                                          6db27d3696bc6b7677fc2f07a636d04eb7db852f

                                                                                          SHA256

                                                                                          021a88892f554699b521fe57bda8171bdb896fe0542c3dd43bb5d198931fcc5a

                                                                                          SHA512

                                                                                          e1b1ae7ffcd083542556f52a5355b4ad9c9d742324260feb3df3de0d94828bf4b8b32ab2f33fe0ac377dea78f23c5c2483b1bcd02b65b5adda9d1d292792082a

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          7KB

                                                                                          MD5

                                                                                          58d409e5b29a53fb3eb48a2c35d110b7

                                                                                          SHA1

                                                                                          729ced94fa6e9e39699bfd0a29db4c1df230af93

                                                                                          SHA256

                                                                                          79eb416a124bf4c25faf14d0fc68c88e3ff440a1408d789384146005de84d9e9

                                                                                          SHA512

                                                                                          ea50b06efda11cebd08c2ce41a96168e40e4155365ea37fb13b7417462b619add858fcf0acc3bd2ca78c22a6361dfc4589880c397b45e783a22945a392788c25

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          15654f7fd77d1f6df364f30fc08bfc95

                                                                                          SHA1

                                                                                          853b3c3b62986381b2e9086d38b4d74c5d9813be

                                                                                          SHA256

                                                                                          28daa0ef9cc36f72457f1b95854ce6ede9ab47a8f41f6d77e8486c1bfe2f7d0e

                                                                                          SHA512

                                                                                          a85561d43b3f04bb31cee57a3af00d3972f1a1e4f3a8c1e812a2e95d95fd6dd4f0ca96c99d070a639a22c68ec6558188fdc2a53c3a18a3b4717aec5bacf942e8

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          7KB

                                                                                          MD5

                                                                                          c6bd76e3ba1603430a6f4b5106e756fe

                                                                                          SHA1

                                                                                          4470faa21f4ffd28edc8026784ef159dd8e2664b

                                                                                          SHA256

                                                                                          8cf76b4e7eb491f63c43b90190efaab6aac23cd5b561621b876e718c999a3a80

                                                                                          SHA512

                                                                                          a9a97026ad7915f93abd3ecdb2fc1ceb1029e7e6feaaab2a3a486b2ad2cf54ff4e571c7402e39378cbc1d02793311606da8668a76d4562019d695cf3eb9486a6

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          6KB

                                                                                          MD5

                                                                                          53b6126b859859e5dd301ddf0cd6a248

                                                                                          SHA1

                                                                                          53d72a72a4dfedebe50f1060b374516b7b45a3c4

                                                                                          SHA256

                                                                                          6e837c8caf71f60d8d0ce4b5cfbcb2bea3c1c63fe65cdd3e088790070f641e00

                                                                                          SHA512

                                                                                          d3a28ef2afc5b110e2630d30aaa6787df07425f95b18c8db7e24ccfea454cbab2c31511c6ebd482a6a9d6be21ad6da4ce7badc36b7936e759cf0f7248b3f115c

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          7KB

                                                                                          MD5

                                                                                          b6dd65261dd7f6c7348cb20b01491275

                                                                                          SHA1

                                                                                          03360c0b0921c54a88f7f62dc663a251d3ad04c2

                                                                                          SHA256

                                                                                          2f8552fd417762c06444df38928f3a9d72eba803e8bdd1d1f9c66f07efbde14f

                                                                                          SHA512

                                                                                          287361c0ebac8fe85022ba2597975415bd1d3bbb7753e6e13bb7dd68e38864ada06175e63d575a3f831431d383015f78f033baaef021a54580600512f7f84bdc

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          38ce0d59bc6508df67a1b6965ea3d2fd

                                                                                          SHA1

                                                                                          792e4bc060580419ade1ee9de393525f389ef5a2

                                                                                          SHA256

                                                                                          b2f8711b27703f6c175d91173a1fae8180ce0e3f6fb35e66ae7b2fb961181120

                                                                                          SHA512

                                                                                          38c3170abd2200beb12994d1ca5050d8eca95a114ed3aa72f756d626d15f974d2a73bf052a72e6791e32d4fe4f53c153e7b4bcd5c0a25da8f9b7db39c9667509

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                                                                          Filesize

                                                                                          9KB

                                                                                          MD5

                                                                                          b3ae1e0d6bedb68a3b95f56dd2e92b2f

                                                                                          SHA1

                                                                                          99101c94d71ff256df2e81e4254677e4e8005c02

                                                                                          SHA256

                                                                                          821f2052428fd21400a93cd4fccc8e6ecadd17aa82c7f1d34c9bda67eb9c254d

                                                                                          SHA512

                                                                                          7c28645a97ea0ddad57111be952b55a096fe32458d61ebe4ca7a7c217ae8f4cddf97be8bf4511ae02c086c2778a926ad1573ba24743dc6fdbee52afe15423e5a

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                                                                          Filesize

                                                                                          96B

                                                                                          MD5

                                                                                          b2da713d389c883fb9d8f3d4860ce873

                                                                                          SHA1

                                                                                          29676701eb9e1ed5dad1d9081a3a51860e70b7d7

                                                                                          SHA256

                                                                                          82d726e9fc52275d088cf4768f5650a8032b5cef52b8bb7e8c96c9e7cbd52fcd

                                                                                          SHA512

                                                                                          ba6e1a15faf7c31e3c61345a9a4512b73a769618b1c45be2ba8a53b8328a593e842f44245e18b2eea369d1630cd3e36f3ba084e118bcef965f50cab4ac7b65e4

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e805.TMP

                                                                                          Filesize

                                                                                          48B

                                                                                          MD5

                                                                                          632d376f33257c80096b4bef2d553b0e

                                                                                          SHA1

                                                                                          3916eb4398fc616d46c48575399c38535aa9e774

                                                                                          SHA256

                                                                                          73ffe7951dbfddea94d28680fcf212a2c4528c5b7862dde0aad63aafb1fdda02

                                                                                          SHA512

                                                                                          601748b949295cc9403cf106ff9a9af6cbcac6c2687491cf9f016944defcb2291a8f4433ca5cf85f4340eb6016363d88f896a5d7ce860e5bd871e794d77d970b

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                          Filesize

                                                                                          2KB

                                                                                          MD5

                                                                                          14ca6c3488df83edc32d451f37038cbd

                                                                                          SHA1

                                                                                          a63a18643183fd0c3981a97e256f2898f51049c1

                                                                                          SHA256

                                                                                          ae021dc6cb1baca211d96c135bba3b3c5b03d53692fe26c70ee11d89fe52adcc

                                                                                          SHA512

                                                                                          fc904d10397dc7dfafe594ffbbf73ad57bdba3ec8fce5a58574bbb3345fcc8008597eef286219bec635ae82c7edd70747fecbd2ecda52160e773cdc48e87157c

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                          Filesize

                                                                                          873B

                                                                                          MD5

                                                                                          a8102a5d44bcd8261399479752b86720

                                                                                          SHA1

                                                                                          054c4190013334a9469e08f75cfc4e09ebce05a1

                                                                                          SHA256

                                                                                          c5e12b2243dbca04051dc3a8d0b1e394823b812c2c2e098c6ae7c2cef0ca8f34

                                                                                          SHA512

                                                                                          9882f30201c6fe313b50b4b41fbaad2044fa318f667c18df9b46499fb73faf58ae96505129f3b49a086b02aacfa48a1904bdaf7eb36af7cf445dd4da9a5687e9

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          75a3528e07fb2e6085097c5685ba24fc

                                                                                          SHA1

                                                                                          ad107c987d280540aa51e8f23a099ac0f5477a3c

                                                                                          SHA256

                                                                                          dd835095b53b76b35c89e0600e64e7aeb6610c3648d860459db519599806da6e

                                                                                          SHA512

                                                                                          a63889022b66e08114474d475d8393df22a4ef992213464cfda72aa4d9fc8606766d1dedc85e16da8a00d720a3c7b0a6ea2d8ea1d5b2be3e7351290213df8a44

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                          Filesize

                                                                                          2KB

                                                                                          MD5

                                                                                          40644c1d19ce16d01c90272664875809

                                                                                          SHA1

                                                                                          759d7fb9cd4f24d21126220a1a6c2c6835647b50

                                                                                          SHA256

                                                                                          06e038c3013e2a12dc03f37c9c1c537f2b3d7a29354d117d18c3635e56f27c69

                                                                                          SHA512

                                                                                          fccf3af5da01fb119fa0d887695b5449bdc33a1ebdf50035b4b5fafe8d36bc14a7531ab137d35bfa860609ba510cb5d11f2adc932bf2c8e1754a64b029e1dba3

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                                                                          Filesize

                                                                                          1KB

                                                                                          MD5

                                                                                          9678ba8e9c20c190deacf36c2ee245a6

                                                                                          SHA1

                                                                                          21b385c33f74647ae30faffcd85078bd61b9f59c

                                                                                          SHA256

                                                                                          d598c8db785ea2f1928bb76ef7bb634373983d3746c92436366d92e205555b80

                                                                                          SHA512

                                                                                          08bb207fedeb254dd8361946fda0fc6103783f38399539586db9c86df4960eecfb3f14c55322152f711639eafcf41b0b00616953b03a2f8649a30056d0518906

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585966.TMP

                                                                                          Filesize

                                                                                          538B

                                                                                          MD5

                                                                                          ee0ede57d3c5af7f04cba1b484cd4638

                                                                                          SHA1

                                                                                          366126ea3c1c9f1cf17f887d0c39c1cdae8cbe04

                                                                                          SHA256

                                                                                          59361073db6965b119f23c718cc925ebd694cfe7cf7c7493212e602c12c83395

                                                                                          SHA512

                                                                                          3922d6d8bb02d5f5f3d591fa2e084e2c9d2a0cb9631e3153b812dbab0ec21821c27370ee2edcfac216599413d08fb85babd7d41f2d3aea8c02dfe611d5eb2d89

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                                                                          Filesize

                                                                                          16B

                                                                                          MD5

                                                                                          6752a1d65b201c13b62ea44016eb221f

                                                                                          SHA1

                                                                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                                                                          SHA256

                                                                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                                                                          SHA512

                                                                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000020

                                                                                          Filesize

                                                                                          17KB

                                                                                          MD5

                                                                                          913728da90cf90d8e78af59c60b47c3d

                                                                                          SHA1

                                                                                          f42f2a545d4fcaf4f76d0f060f52e33a47df7f1e

                                                                                          SHA256

                                                                                          b0b478f9aa6aaf8d5811e296047ae1f8ee07f4c4998fe9d7b960755ea1fafb82

                                                                                          SHA512

                                                                                          3af86e053dd56aef03e6f967a49b1a0d492616a71e2e49090e0c8e5cbe58ff37ccc55e91f06bf34096059a49f3de84b0bca587f3f17c366f97c0f7a0fd17c974

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                          Filesize

                                                                                          11KB

                                                                                          MD5

                                                                                          8ac6f207614a3aea7459820d46e428bc

                                                                                          SHA1

                                                                                          0b021cf137bfc9e32b175bdadb90b0e7151602c7

                                                                                          SHA256

                                                                                          c08ac338b7afc7dab24ad701d7d1185471bc729e95405317603351bb5768eac0

                                                                                          SHA512

                                                                                          52d2838fc61fd82f474fa3a92dce22749e8aec779de4ad6546751d5a10f796003c42aab292c2762240b707aeeb0d877993dfb4fac246f09377cff0bdfc5c6db4

                                                                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          c89847728aaf262542f0b574587b1eed

                                                                                          SHA1

                                                                                          f8ead1f2fb2b6d44d01428f8da5845679479e162

                                                                                          SHA256

                                                                                          ddaff774e8d07a0a389c85bdbf45ca6bc350d9b6c080986a85c1ce7887092512

                                                                                          SHA512

                                                                                          53caf9ea82b7918561dcd4ed4a2722b2314784d8c7500b8531f168ad8e0cca98078c4db920fc3f4a18ba6b9c28aa3699b4bc155d9646d3cb9b0f893756296c86

                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          679193925766c9f8f02c0d73054bea3e

                                                                                          SHA1

                                                                                          458311036c184bb4edf36d21fd356b0f8126867d

                                                                                          SHA256

                                                                                          49946903706e28a0236199d613fa01c779f06c8416ba6076e574cb6719bee2f6

                                                                                          SHA512

                                                                                          f64136450353c3a7280811c11cc3b34218d23be4bf1ceebdf77db0d71bab89bd6ff56bbc71d9548986217d73ef70505edd374859d2f9b99a00643989640d9fe7

                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          d0c31c2558dc962d6391829eecab444c

                                                                                          SHA1

                                                                                          93e2924ff8577a967103bc92f90f3977429ca03b

                                                                                          SHA256

                                                                                          235aedaa30341ada72e67be0bc24cbfd8d59208c832c27eefdd3b6d1cb649ca0

                                                                                          SHA512

                                                                                          607ab6d5d8992248bbaf732a431dcc693fd61ad339544c9ae19292950c212e513509aa7ca589c297a8c94d063f0d8efa95471d41e4ed457515c0d4e3160a0d41

                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          0d396d56694d1ce94246c9a1e760881b

                                                                                          SHA1

                                                                                          263979e3e4de9b7465dcb050df724cb3ea6e5554

                                                                                          SHA256

                                                                                          c766d2012355df006d942ee2f9ca1d0e2bfff6a1e6687df496ff62fd95af78ab

                                                                                          SHA512

                                                                                          8c08091fb5aae84a764e191309ea144196f700b73ecbdf716366b78a832a43642aa3e81a4fb8218c30cb01865ddd1f3d89e7ba743cf350c69ebadddd30b09eee

                                                                                        • C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

                                                                                          Filesize

                                                                                          10KB

                                                                                          MD5

                                                                                          c4e980ef280d4d1a5aef67954988273a

                                                                                          SHA1

                                                                                          d71884bc9e3beb9f6ba5678349df5ab545d68f6e

                                                                                          SHA256

                                                                                          0acaa6b742073fae39a2418e996166ad9b032967842a7415a04fd89a8b761534

                                                                                          SHA512

                                                                                          16c4ea856522399eea1cd03c614e0a6d832f3dcb3fba9562ecabddea5012f1b16ebb560b8c3432e45b54ca39b8060b1089f9171b1a3903f39434acf55ada8e51