Analysis Overview
Threat Level: Likely benign
The file http://google.com was found to be: Likely benign.
Malicious Activity Summary
Browser Information Discovery
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Enumerates system info in registry
Modifies registry class
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of FindShellTrayWindow
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2024-08-03 09:38
Signatures
Analysis: behavioral1
Detonation Overview
Submitted
2024-08-03 09:38
Reported
2024-08-03 10:09
Platform
win10v2004-20240802-en
Max time kernel
1324s
Max time network
1147s
Command Line
Signatures
Browser Information Discovery
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Modifies registry class
| Description | Indicator | Process | Target |
| Key created | \REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2392887640-1187051047-2909758433-1000\{5265AAD6-429F-4A6C-92D3-33AEF298D5DC} | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8e84a46f8,0x7ff8e84a4708,0x7ff8e84a4718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4188 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4188 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4296 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4256 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4080 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x304 0x414
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2208 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6468 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6800 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3516 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3604 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7000 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,7556804720639771256,9110588776615588676,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | google.com | udp |
| NL | 142.250.102.100:80 | google.com | tcp |
| NL | 142.250.102.100:80 | google.com | tcp |
| US | 8.8.8.8:53 | www.google.com | udp |
| NL | 142.250.27.147:80 | www.google.com | tcp |
| US | 8.8.8.8:53 | 8.8.8.8.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 100.102.250.142.in-addr.arpa | udp |
| NL | 142.250.27.147:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | support.google.com | udp |
| US | 8.8.8.8:53 | 147.27.250.142.in-addr.arpa | udp |
| NL | 142.250.27.147:443 | www.google.com | udp |
| US | 8.8.8.8:53 | 94.27.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 94.102.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 17.160.190.20.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| GB | 184.28.176.72:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 57.169.31.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 72.176.28.184.in-addr.arpa | udp |
| US | 8.8.8.8:53 | th.bing.com | udp |
| US | 8.8.8.8:53 | r.bing.com | udp |
| GB | 184.28.176.49:443 | r.bing.com | tcp |
| GB | 184.28.176.90:443 | r.bing.com | tcp |
| GB | 184.28.176.90:443 | r.bing.com | tcp |
| GB | 184.28.176.49:443 | r.bing.com | tcp |
| US | 8.8.8.8:53 | 49.176.28.184.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 90.176.28.184.in-addr.arpa | udp |
| US | 8.8.8.8:53 | login.microsoftonline.com | udp |
| IE | 20.190.159.23:443 | login.microsoftonline.com | tcp |
| US | 8.8.8.8:53 | 23.159.190.20.in-addr.arpa | udp |
| US | 13.107.5.80:443 | services.bingapis.com | tcp |
| US | 8.8.8.8:53 | 80.5.107.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 68.159.190.20.in-addr.arpa | udp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 8.8.8.8:53 | ts2.mm.bing.net | udp |
| US | 8.8.8.8:53 | ts1.mm.bing.net | udp |
| US | 150.171.27.10:443 | ts1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | ts1.mm.bing.net | tcp |
| US | 150.171.27.10:443 | ts1.mm.bing.net | tcp |
| US | 8.8.8.8:53 | testfamilysafety.bing.com | udp |
| US | 204.79.197.201:443 | testfamilysafety.bing.com | tcp |
| US | 8.8.8.8:53 | ts4.mm.bing.net | udp |
| US | 8.8.8.8:53 | 167.154.64.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 201.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | tse1.mm.bing.net | udp |
| US | 8.8.8.8:53 | tse3.mm.bing.net | udp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 8.8.8.8:53 | tse4.mm.bing.net | udp |
| US | 8.8.8.8:53 | 157.123.68.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 198.187.3.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.221.184.93.in-addr.arpa | udp |
| US | 8.8.8.8:53 | assets.msn.com | udp |
| GB | 23.200.147.72:443 | assets.msn.com | tcp |
| US | 8.8.8.8:53 | www.msn.com | udp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 8.8.8.8:53 | 72.147.200.23.in-addr.arpa | udp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 8.8.8.8:53 | c.msn.com | udp |
| IE | 13.74.129.1:443 | c.msn.com | tcp |
| US | 8.8.8.8:53 | 1.129.74.13.in-addr.arpa | udp |
| US | 8.8.8.8:53 | browser.events.data.msn.com | udp |
| US | 8.8.8.8:53 | c.bing.com | udp |
| GB | 23.200.147.72:443 | assets.msn.com | tcp |
| US | 204.79.197.237:443 | c.bing.com | tcp |
| US | 52.168.117.175:443 | browser.events.data.msn.com | tcp |
| US | 52.168.117.175:443 | browser.events.data.msn.com | tcp |
| US | 8.8.8.8:53 | img-s-msn-com.akamaized.net | udp |
| GB | 173.222.211.43:443 | img-s-msn-com.akamaized.net | tcp |
| GB | 173.222.211.43:443 | img-s-msn-com.akamaized.net | tcp |
| GB | 173.222.211.43:443 | img-s-msn-com.akamaized.net | tcp |
| GB | 173.222.211.43:443 | img-s-msn-com.akamaized.net | tcp |
| US | 8.8.8.8:53 | 237.197.79.204.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 175.117.168.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 43.211.222.173.in-addr.arpa | udp |
| GB | 184.28.176.49:443 | r.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 8.8.8.8:53 | freevbucks2022.online | udp |
| US | 104.21.30.207:443 | freevbucks2022.online | tcp |
| US | 104.21.30.207:443 | freevbucks2022.online | tcp |
| US | 8.8.8.8:53 | 207.30.21.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | d1dvnx7eh6slvq.cloudfront.net | udp |
| US | 8.8.8.8:53 | d266key948fg17.cloudfront.net | udp |
| DE | 18.173.184.189:443 | d266key948fg17.cloudfront.net | tcp |
| DE | 18.173.184.189:443 | d266key948fg17.cloudfront.net | tcp |
| DE | 18.173.184.189:443 | d266key948fg17.cloudfront.net | tcp |
| DE | 18.173.161.104:443 | d1dvnx7eh6slvq.cloudfront.net | tcp |
| DE | 18.173.184.189:443 | d266key948fg17.cloudfront.net | tcp |
| DE | 18.173.184.189:443 | d266key948fg17.cloudfront.net | tcp |
| DE | 18.173.184.189:443 | d266key948fg17.cloudfront.net | tcp |
| US | 8.8.8.8:53 | 95.27.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 189.184.173.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 104.161.173.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 117.192.66.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | d1myn4ixnn41tz.cloudfront.net | udp |
| DE | 108.138.34.188:443 | d1myn4ixnn41tz.cloudfront.net | tcp |
| DE | 108.138.34.188:443 | d1myn4ixnn41tz.cloudfront.net | tcp |
| US | 8.8.8.8:53 | 188.34.138.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 172.214.232.199.in-addr.arpa | udp |
| US | 8.8.8.8:53 | aefd.nelreports.net | udp |
| US | 8.8.8.8:53 | a.nel.cloudflare.com | udp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | tcp |
| GB | 173.222.211.40:443 | aefd.nelreports.net | tcp |
| GB | 173.222.211.40:443 | aefd.nelreports.net | tcp |
| GB | 173.222.211.40:443 | aefd.nelreports.net | tcp |
| US | 35.190.80.1:443 | a.nel.cloudflare.com | udp |
| GB | 173.222.211.40:443 | aefd.nelreports.net | udp |
| US | 8.8.8.8:53 | 40.211.222.173.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 1.80.190.35.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 19.229.111.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ajax.googleapis.com | udp |
| US | 8.8.8.8:53 | d2lmlpk6xgu7kg.cloudfront.net | udp |
| US | 8.8.8.8:53 | cdnjs.cloudflare.com | udp |
| US | 104.17.25.14:443 | cdnjs.cloudflare.com | tcp |
| US | 104.17.25.14:443 | cdnjs.cloudflare.com | tcp |
| US | 104.17.25.14:443 | cdnjs.cloudflare.com | tcp |
| DE | 108.138.34.215:443 | d2lmlpk6xgu7kg.cloudfront.net | tcp |
| DE | 108.138.34.215:443 | d2lmlpk6xgu7kg.cloudfront.net | tcp |
| DE | 108.138.34.215:443 | d2lmlpk6xgu7kg.cloudfront.net | tcp |
| DE | 108.138.34.215:443 | d2lmlpk6xgu7kg.cloudfront.net | tcp |
| DE | 108.138.34.215:443 | d2lmlpk6xgu7kg.cloudfront.net | tcp |
| US | 8.8.8.8:53 | 14.25.17.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 215.34.138.108.in-addr.arpa | udp |
| US | 8.8.8.8:53 | go.smartorfast.com | udp |
| NL | 34.141.179.97:443 | go.smartorfast.com | tcp |
| NL | 34.141.179.97:443 | go.smartorfast.com | tcp |
| US | 8.8.8.8:53 | get-gx.com | udp |
| US | 3.233.39.16:443 | get-gx.com | tcp |
| US | 3.233.39.16:443 | get-gx.com | tcp |
| US | 8.8.8.8:53 | 97.179.141.34.in-addr.arpa | udp |
| US | 8.8.8.8:53 | www.opera.com | udp |
| DE | 18.195.246.164:443 | www.opera.com | tcp |
| DE | 18.195.246.164:443 | www.opera.com | tcp |
| US | 8.8.8.8:53 | 16.39.233.3.in-addr.arpa | udp |
| US | 8.8.8.8:53 | cdn-production-opera-website.operacdn.com | udp |
| US | 8.8.8.8:53 | www.googleoptimize.com | udp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| NL | 142.250.27.138:443 | www.googleoptimize.com | tcp |
| US | 8.8.8.8:53 | www-static.operacdn.com | udp |
| US | 8.8.8.8:53 | 164.246.195.18.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 138.27.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 239.132.22.2.in-addr.arpa | udp |
| GB | 2.22.132.239:443 | cdn-production-opera-website.operacdn.com | tcp |
| DE | 18.195.246.164:443 | www.opera.com | tcp |
| US | 8.8.8.8:53 | 97.27.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | region1.google-analytics.com | udp |
| US | 216.239.34.36:443 | region1.google-analytics.com | tcp |
| US | 216.239.34.36:443 | region1.google-analytics.com | tcp |
| US | 8.8.8.8:53 | 155.102.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 102.27.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 36.34.239.216.in-addr.arpa | udp |
| US | 8.8.8.8:53 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | stats.g.doubleclick.net | udp |
| NL | 142.250.27.147:443 | www.google.com | udp |
| US | 8.8.8.8:53 | www.google.co.uk | udp |
| US | 216.239.34.36:443 | region1.analytics.google.com | tcp |
| NL | 142.250.27.147:443 | www.google.com | tcp |
| US | 8.8.8.8:53 | googleads.g.doubleclick.net | udp |
| US | 216.239.34.36:443 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | r.bing.com | udp |
| US | 8.8.8.8:53 | th.bing.com | udp |
| US | 8.8.8.8:53 | www.pornhub.com | udp |
| US | 66.254.114.41:443 | www.pornhub.com | tcp |
| US | 66.254.114.41:443 | www.pornhub.com | tcp |
| US | 66.254.114.41:443 | www.pornhub.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 172.64.154.167:443 | www2.bing.com | tcp |
| US | 8.8.8.8:53 | 41.114.254.66.in-addr.arpa | udp |
| US | 8.8.8.8:53 | static.trafficjunky.com | udp |
| US | 8.8.8.8:53 | ei.phncdn.com | udp |
| GB | 64.210.156.20:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.20:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.20:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.20:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.20:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.20:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.16:443 | ei.phncdn.com | tcp |
| GB | 64.210.156.16:443 | ei.phncdn.com | tcp |
| US | 8.8.8.8:53 | media.trafficjunky.net | udp |
| US | 8.8.8.8:53 | prvc.io | udp |
| US | 8.8.8.8:53 | cdn1-smallimg.phncdn.com | udp |
| US | 66.254.114.156:443 | cdn1-smallimg.phncdn.com | tcp |
| US | 104.21.56.52:443 | prvc.io | tcp |
| GB | 64.210.156.18:443 | media.trafficjunky.net | tcp |
| GB | 64.210.156.20:443 | media.trafficjunky.net | tcp |
| US | 8.8.8.8:53 | 20.156.210.64.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 16.156.210.64.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 156.114.254.66.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 52.56.21.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 18.156.210.64.in-addr.arpa | udp |
| US | 8.8.8.8:53 | a.adtng.com | udp |
| US | 8.8.8.8:53 | ss.phncdn.com | udp |
| US | 66.254.114.171:443 | a.adtng.com | tcp |
| US | 66.254.114.171:443 | a.adtng.com | tcp |
| US | 216.239.34.36:443 | region1.analytics.google.com | udp |
| US | 8.8.8.8:53 | 171.114.254.66.in-addr.arpa | udp |
| US | 8.8.8.8:53 | hw-cdn2.adtng.com | udp |
| US | 8.8.8.8:53 | ht-cdn2.adtng.com | udp |
| GB | 64.210.156.5:443 | hw-cdn2.adtng.com | tcp |
| GB | 64.210.156.23:443 | ht-cdn2.adtng.com | tcp |
| GB | 64.210.156.23:443 | ht-cdn2.adtng.com | tcp |
| US | 8.8.8.8:53 | 5.156.210.64.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 23.156.210.64.in-addr.arpa | udp |
| US | 8.8.8.8:53 | storage.googleapis.com | udp |
| NL | 142.250.102.207:443 | storage.googleapis.com | tcp |
| US | 8.8.8.8:53 | 207.102.250.142.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | b9569e123772ae290f9bac07e0d31748 |
| SHA1 | 5806ed9b301d4178a959b26d7b7ccf2c0abc6741 |
| SHA256 | 20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b |
| SHA512 | cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795 |
\??\pipe\LOCAL\crashpad_4048_MJRPCVOBLDDAXYTD
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | eeaa8087eba2f63f31e599f6a7b46ef4 |
| SHA1 | f639519deee0766a39cfe258d2ac48e3a9d5ac03 |
| SHA256 | 50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9 |
| SHA512 | eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 4e90b9b218cc6928920f24a469b51761 |
| SHA1 | 6db27d3696bc6b7677fc2f07a636d04eb7db852f |
| SHA256 | 021a88892f554699b521fe57bda8171bdb896fe0542c3dd43bb5d198931fcc5a |
| SHA512 | e1b1ae7ffcd083542556f52a5355b4ad9c9d742324260feb3df3de0d94828bf4b8b32ab2f33fe0ac377dea78f23c5c2483b1bcd02b65b5adda9d1d292792082a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
| MD5 | 3e552d017d45f8fd93b94cfc86f842f2 |
| SHA1 | dbeebe83854328e2575ff67259e3fb6704b17a47 |
| SHA256 | 27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6 |
| SHA512 | e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | c89847728aaf262542f0b574587b1eed |
| SHA1 | f8ead1f2fb2b6d44d01428f8da5845679479e162 |
| SHA256 | ddaff774e8d07a0a389c85bdbf45ca6bc350d9b6c080986a85c1ce7887092512 |
| SHA512 | 53caf9ea82b7918561dcd4ed4a2722b2314784d8c7500b8531f168ad8e0cca98078c4db920fc3f4a18ba6b9c28aa3699b4bc155d9646d3cb9b0f893756296c86 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 53b6126b859859e5dd301ddf0cd6a248 |
| SHA1 | 53d72a72a4dfedebe50f1060b374516b7b45a3c4 |
| SHA256 | 6e837c8caf71f60d8d0ce4b5cfbcb2bea3c1c63fe65cdd3e088790070f641e00 |
| SHA512 | d3a28ef2afc5b110e2630d30aaa6787df07425f95b18c8db7e24ccfea454cbab2c31511c6ebd482a6a9d6be21ad6da4ce7badc36b7936e759cf0f7248b3f115c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 58d409e5b29a53fb3eb48a2c35d110b7 |
| SHA1 | 729ced94fa6e9e39699bfd0a29db4c1df230af93 |
| SHA256 | 79eb416a124bf4c25faf14d0fc68c88e3ff440a1408d789384146005de84d9e9 |
| SHA512 | ea50b06efda11cebd08c2ce41a96168e40e4155365ea37fb13b7417462b619add858fcf0acc3bd2ca78c22a6361dfc4589880c397b45e783a22945a392788c25 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000020
| MD5 | 913728da90cf90d8e78af59c60b47c3d |
| SHA1 | f42f2a545d4fcaf4f76d0f060f52e33a47df7f1e |
| SHA256 | b0b478f9aa6aaf8d5811e296047ae1f8ee07f4c4998fe9d7b960755ea1fafb82 |
| SHA512 | 3af86e053dd56aef03e6f967a49b1a0d492616a71e2e49090e0c8e5cbe58ff37ccc55e91f06bf34096059a49f3de84b0bca587f3f17c366f97c0f7a0fd17c974 |
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
| MD5 | 679193925766c9f8f02c0d73054bea3e |
| SHA1 | 458311036c184bb4edf36d21fd356b0f8126867d |
| SHA256 | 49946903706e28a0236199d613fa01c779f06c8416ba6076e574cb6719bee2f6 |
| SHA512 | f64136450353c3a7280811c11cc3b34218d23be4bf1ceebdf77db0d71bab89bd6ff56bbc71d9548986217d73ef70505edd374859d2f9b99a00643989640d9fe7 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
| MD5 | ed3c7f5755bf251bd20441f4dc65f5bf |
| SHA1 | 3919a57831d103837e0cc158182ac10b903942c5 |
| SHA256 | 55cbb893756192704a23a400bf8f874e29c0feee435f8831af9cbe975d0ef85d |
| SHA512 | c79460ded439678b6ebf2def675cbc5f15068b9ea4b19263439c3cca4fa1083dc278149cde85f551cd2ffc2c77fd1dc193200c683fc1c3cdac254e533df84f06 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
| MD5 | d6b36c7d4b06f140f860ddc91a4c659c |
| SHA1 | ccf16571637b8d3e4c9423688c5bd06167bfb9e9 |
| SHA256 | 34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92 |
| SHA512 | 2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
| MD5 | 24a806fccb1d271a0e884e1897f2c1bc |
| SHA1 | 11bde7bb9cc39a5ef1bcddfc526f3083c9f2298a |
| SHA256 | e83f90413d723b682d15972abeaaa71b9cead9b0c25bf8aac88485d4be46fb85 |
| SHA512 | 33255665affcba0a0ada9cf3712ee237c92433a09cda894d63dd1384349e2159d0fe06fa09cca616668ef8fcbb8d0a73ef381d30702c20aad95fc5e9396101ae |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
| MD5 | 2e86a72f4e82614cd4842950d2e0a716 |
| SHA1 | d7b4ee0c9af735d098bff474632fc2c0113e0b9c |
| SHA256 | c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f |
| SHA512 | 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
| MD5 | 710d7637cc7e21b62fd3efe6aba1fd27 |
| SHA1 | 8645d6b137064c7b38e10c736724e17787db6cf3 |
| SHA256 | c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b |
| SHA512 | 19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
| MD5 | b38fbbd0b5c8e8b4452b33d6f85df7dc |
| SHA1 | 386ba241790252df01a6a028b3238de2f995a559 |
| SHA256 | b18b9eb934a5b3b81b16c66ec3ec8e8fecdb3d43550ce050eb2523aabc08b9cd |
| SHA512 | 546ca9fb302bf28e3a178e798dd6b80c91cba71d0467257b8ed42e4f845aa6ecb858f718aac1e0865b791d4ecf41f1239081847c75c6fb3e9afd242d3704ad16 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
| MD5 | 027a77a637cb439865b2008d68867e99 |
| SHA1 | ba448ff5be0d69dbe0889237693371f4f0a2425e |
| SHA256 | 6f0e8c5ae26abbae3efc6ca213cacaaebd19bf2c7ed88495289a8f40428803dd |
| SHA512 | 66f8fbdd68de925148228fe1368d78aa8efa5695a2b4f70ab21a0a4eb2e6e9f0f54ed57708bd9200c2bbe431b9d09e5ca08c3f29a4347aeb65b090790652b5c4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | a8102a5d44bcd8261399479752b86720 |
| SHA1 | 054c4190013334a9469e08f75cfc4e09ebce05a1 |
| SHA256 | c5e12b2243dbca04051dc3a8d0b1e394823b812c2c2e098c6ae7c2cef0ca8f34 |
| SHA512 | 9882f30201c6fe313b50b4b41fbaad2044fa318f667c18df9b46499fb73faf58ae96505129f3b49a086b02aacfa48a1904bdaf7eb36af7cf445dd4da9a5687e9 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe585966.TMP
| MD5 | ee0ede57d3c5af7f04cba1b484cd4638 |
| SHA1 | 366126ea3c1c9f1cf17f887d0c39c1cdae8cbe04 |
| SHA256 | 59361073db6965b119f23c718cc925ebd694cfe7cf7c7493212e602c12c83395 |
| SHA512 | 3922d6d8bb02d5f5f3d591fa2e084e2c9d2a0cb9631e3153b812dbab0ec21821c27370ee2edcfac216599413d08fb85babd7d41f2d3aea8c02dfe611d5eb2d89 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | b6dd65261dd7f6c7348cb20b01491275 |
| SHA1 | 03360c0b0921c54a88f7f62dc663a251d3ad04c2 |
| SHA256 | 2f8552fd417762c06444df38928f3a9d72eba803e8bdd1d1f9c66f07efbde14f |
| SHA512 | 287361c0ebac8fe85022ba2597975415bd1d3bbb7753e6e13bb7dd68e38864ada06175e63d575a3f831431d383015f78f033baaef021a54580600512f7f84bdc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | c6bd76e3ba1603430a6f4b5106e756fe |
| SHA1 | 4470faa21f4ffd28edc8026784ef159dd8e2664b |
| SHA256 | 8cf76b4e7eb491f63c43b90190efaab6aac23cd5b561621b876e718c999a3a80 |
| SHA512 | a9a97026ad7915f93abd3ecdb2fc1ceb1029e7e6feaaab2a3a486b2ad2cf54ff4e571c7402e39378cbc1d02793311606da8668a76d4562019d695cf3eb9486a6 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 9678ba8e9c20c190deacf36c2ee245a6 |
| SHA1 | 21b385c33f74647ae30faffcd85078bd61b9f59c |
| SHA256 | d598c8db785ea2f1928bb76ef7bb634373983d3746c92436366d92e205555b80 |
| SHA512 | 08bb207fedeb254dd8361946fda0fc6103783f38399539586db9c86df4960eecfb3f14c55322152f711639eafcf41b0b00616953b03a2f8649a30056d0518906 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | f8bb4e110aa0b542415f7a50a5cb22fe |
| SHA1 | 4b3739ac98d94463679ee531fce2e3ac146dc8d4 |
| SHA256 | d389a91f4847508a9ad27e497bbcb528c9e77198acbf64462e85398a5b7526b8 |
| SHA512 | bf80590c17d517a7339e513d5a4322748881210781563f68e78c3572e1920ead6c5178c6c458975e28d338f2a3072f30e3a86f50e5a2df5ca16d472b38e41496 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 92bc608f63e40ce60358778d6c967323 |
| SHA1 | 4ffee8d490f7fc1706da61b6ab6c23976211de30 |
| SHA256 | 1f3a5ce06295043ffd41e5df67a45578116e2d5c588c452e9c484c1d007368ea |
| SHA512 | a675d02929db220f1e0afec9ef2fbf5f1d9e7e1c7645c8b83e7feaf9b9b06dbf05f226aa49cd4ff82c251c06584b28d027712e0555bdaaf88729e0a43034b614 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 75a3528e07fb2e6085097c5685ba24fc |
| SHA1 | ad107c987d280540aa51e8f23a099ac0f5477a3c |
| SHA256 | dd835095b53b76b35c89e0600e64e7aeb6610c3648d860459db519599806da6e |
| SHA512 | a63889022b66e08114474d475d8393df22a4ef992213464cfda72aa4d9fc8606766d1dedc85e16da8a00d720a3c7b0a6ea2d8ea1d5b2be3e7351290213df8a44 |
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
| MD5 | c4e980ef280d4d1a5aef67954988273a |
| SHA1 | d71884bc9e3beb9f6ba5678349df5ab545d68f6e |
| SHA256 | 0acaa6b742073fae39a2418e996166ad9b032967842a7415a04fd89a8b761534 |
| SHA512 | 16c4ea856522399eea1cd03c614e0a6d832f3dcb3fba9562ecabddea5012f1b16ebb560b8c3432e45b54ca39b8060b1089f9171b1a3903f39434acf55ada8e51 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2b8e591d-581e-4f91-ae19-94e5c39d976c.tmp
| MD5 | cc8d9b5fd744b465fe0e394689bffd81 |
| SHA1 | fd5cb9a9d8c0e50de4022a3e93a832909dfb7221 |
| SHA256 | dcc9946ba4d359577174a6b2b29b5adf43bb5afda9862ecbf431205a79fafedf |
| SHA512 | f005acefcbf965516e3230a5d01997cb5820cd1eedefd43b9df7eef11e9d5c15199743f4981bc2b67c78ec9ee296aa54e22d872253e6db835976e6763ea49e8e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | b3ae1e0d6bedb68a3b95f56dd2e92b2f |
| SHA1 | 99101c94d71ff256df2e81e4254677e4e8005c02 |
| SHA256 | 821f2052428fd21400a93cd4fccc8e6ecadd17aa82c7f1d34c9bda67eb9c254d |
| SHA512 | 7c28645a97ea0ddad57111be952b55a096fe32458d61ebe4ca7a7c217ae8f4cddf97be8bf4511ae02c086c2778a926ad1573ba24743dc6fdbee52afe15423e5a |
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
| MD5 | d0c31c2558dc962d6391829eecab444c |
| SHA1 | 93e2924ff8577a967103bc92f90f3977429ca03b |
| SHA256 | 235aedaa30341ada72e67be0bc24cbfd8d59208c832c27eefdd3b6d1cb649ca0 |
| SHA512 | 607ab6d5d8992248bbaf732a431dcc693fd61ad339544c9ae19292950c212e513509aa7ca589c297a8c94d063f0d8efa95471d41e4ed457515c0d4e3160a0d41 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 1cf2f98c70d150e74dee8576159628ac |
| SHA1 | 52cca89b2d9c34c0e90ad5a433460a34edb66936 |
| SHA256 | 115d5ca04cbbbe47bb40b34ca57ba1589518130c622c05b725ada7582463c6d0 |
| SHA512 | 7968525939140afc9dfab3c8ac37d390ab84f7f22a9c6a165761b52a005d2c45218cf73accf7e0383f4b450ba0cc06f9e28397491b8c7ed9badfb52d01f40ca2 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 2d8eb08f206060e0a3e69b87304bcea6 |
| SHA1 | 8b5e6da95adb328839068e168a13d4b4f4aa66d5 |
| SHA256 | 0b16cb451b8e124a200bd5a926fb156cbb429c23ad5ebd163e3299870d6497f0 |
| SHA512 | 17d9c661b94803e2c3bf9bd1faed3b68c67452eef0a4f65cd9b8d6c4b2004b6ceabb85d45c652936a5dd928fe4150b01965aec82816bd199da30617302d44964 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 82a3b73edea61fae4cdf4bc55206cf18 |
| SHA1 | 40d8c1a5df7a0541e3c51820281f5ef36b233f3f |
| SHA256 | 8159b009805413b256a79db22bb4173b029d7cfdedf030051808a3bc005686c5 |
| SHA512 | a2ef7d230d18c0059cda2f5fd2c4e02b578725c9a0db38ca38fab6c735c239d344cb7c1a7337bc6a0c85c13fa668095473d69199481d36e95ec85c1747b8c058 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
| MD5 | 209af4da7e0c3b2a6471a968ba1fc992 |
| SHA1 | 2240c2da3eba4f30b0c3ef2205ce7848ecff9e3f |
| SHA256 | ecc145203f1c562cae7b733a807e9333c51d75726905a3af898154f3cefc9403 |
| SHA512 | 09201e377e80a3d03616ff394d836c85712f39b65a3138924d62a1f3ede3eac192f1345761c012b0045393c501d48b5a774aeda7ab5d687e1d7971440dc1fc35 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
| MD5 | b07f576446fc2d6b9923828d656cadff |
| SHA1 | 35b2a39b66c3de60e7ec273bdf5e71a7c1f4b103 |
| SHA256 | d261915939a3b9c6e9b877d3a71a3783ed5504d3492ef3f64e0cb508fee59496 |
| SHA512 | 7358cbb9ddd472a97240bd43e9cc4f659ff0f24bf7c2b39c608f8d4832da001a95e21764160c8c66efd107c55ff1666a48ecc1ad4a0d72f995c0301325e1b1df |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 14ca6c3488df83edc32d451f37038cbd |
| SHA1 | a63a18643183fd0c3981a97e256f2898f51049c1 |
| SHA256 | ae021dc6cb1baca211d96c135bba3b3c5b03d53692fe26c70ee11d89fe52adcc |
| SHA512 | fc904d10397dc7dfafe594ffbbf73ad57bdba3ec8fce5a58574bbb3345fcc8008597eef286219bec635ae82c7edd70747fecbd2ecda52160e773cdc48e87157c |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 38ce0d59bc6508df67a1b6965ea3d2fd |
| SHA1 | 792e4bc060580419ade1ee9de393525f389ef5a2 |
| SHA256 | b2f8711b27703f6c175d91173a1fae8180ce0e3f6fb35e66ae7b2fb961181120 |
| SHA512 | 38c3170abd2200beb12994d1ca5050d8eca95a114ed3aa72f756d626d15f974d2a73bf052a72e6791e32d4fe4f53c153e7b4bcd5c0a25da8f9b7db39c9667509 |
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
| MD5 | 0d396d56694d1ce94246c9a1e760881b |
| SHA1 | 263979e3e4de9b7465dcb050df724cb3ea6e5554 |
| SHA256 | c766d2012355df006d942ee2f9ca1d0e2bfff6a1e6687df496ff62fd95af78ab |
| SHA512 | 8c08091fb5aae84a764e191309ea144196f700b73ecbdf716366b78a832a43642aa3e81a4fb8218c30cb01865ddd1f3d89e7ba743cf350c69ebadddd30b09eee |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 8ac6f207614a3aea7459820d46e428bc |
| SHA1 | 0b021cf137bfc9e32b175bdadb90b0e7151602c7 |
| SHA256 | c08ac338b7afc7dab24ad701d7d1185471bc729e95405317603351bb5768eac0 |
| SHA512 | 52d2838fc61fd82f474fa3a92dce22749e8aec779de4ad6546751d5a10f796003c42aab292c2762240b707aeeb0d877993dfb4fac246f09377cff0bdfc5c6db4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 15654f7fd77d1f6df364f30fc08bfc95 |
| SHA1 | 853b3c3b62986381b2e9086d38b4d74c5d9813be |
| SHA256 | 28daa0ef9cc36f72457f1b95854ce6ede9ab47a8f41f6d77e8486c1bfe2f7d0e |
| SHA512 | a85561d43b3f04bb31cee57a3af00d3972f1a1e4f3a8c1e812a2e95d95fd6dd4f0ca96c99d070a639a22c68ec6558188fdc2a53c3a18a3b4717aec5bacf942e8 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | ad59340e34fc24b07ec712c65e353636 |
| SHA1 | 07a7e21dfd3a0c3d3027af581ee728d58f612a8a |
| SHA256 | 997de8f35ef4d66d337e82d67d2d02502fdcb7732d1342df5964bd859f624b43 |
| SHA512 | fd44c985c0f87446c0220c348013f8920b956c0ba6e1481605522323b6d419ecf517a786fdb3eab36cb618599a0300b63e75fc4a99ea5f73e19f89f46b226d4d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
| MD5 | b2da713d389c883fb9d8f3d4860ce873 |
| SHA1 | 29676701eb9e1ed5dad1d9081a3a51860e70b7d7 |
| SHA256 | 82d726e9fc52275d088cf4768f5650a8032b5cef52b8bb7e8c96c9e7cbd52fcd |
| SHA512 | ba6e1a15faf7c31e3c61345a9a4512b73a769618b1c45be2ba8a53b8328a593e842f44245e18b2eea369d1630cd3e36f3ba084e118bcef965f50cab4ac7b65e4 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe59e805.TMP
| MD5 | 632d376f33257c80096b4bef2d553b0e |
| SHA1 | 3916eb4398fc616d46c48575399c38535aa9e774 |
| SHA256 | 73ffe7951dbfddea94d28680fcf212a2c4528c5b7862dde0aad63aafb1fdda02 |
| SHA512 | 601748b949295cc9403cf106ff9a9af6cbcac6c2687491cf9f016944defcb2291a8f4433ca5cf85f4340eb6016363d88f896a5d7ce860e5bd871e794d77d970b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
| MD5 | 40644c1d19ce16d01c90272664875809 |
| SHA1 | 759d7fb9cd4f24d21126220a1a6c2c6835647b50 |
| SHA256 | 06e038c3013e2a12dc03f37c9c1c537f2b3d7a29354d117d18c3635e56f27c69 |
| SHA512 | fccf3af5da01fb119fa0d887695b5449bdc33a1ebdf50035b4b5fafe8d36bc14a7531ab137d35bfa860609ba510cb5d11f2adc932bf2c8e1754a64b029e1dba3 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | c9fb82dbacfc4284246219e0411f9319 |
| SHA1 | 859de2044d10abd3c451645c76109e14e843b297 |
| SHA256 | 124e183aadf812cf6d26064dff080a7c4f99c252dc09b345a727b5aea56131b6 |
| SHA512 | 11e2d3a994e3f7e05113f320e1ba257155f87b089c015cfc372971676c958b990912b37727c8546e80a1cf945c14fc77ee6e68a3ddfe64dc73814a0bd8c9416f |