hxxps://github[.]com/enginestein/Virus-Collection/tree/main/Windows

Resubmissions

05/08/2024, 15:57

240805-tedcaavekb 1

05/08/2024, 15:53

240805-tbzq4s1bpp 4

Analysis

max time kernel
149s
max time network
150s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
05/08/2024, 15:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://github.com/enginestein/Virus-Collection/tree/main/Windows

Score

4^/10

discovery

Malware Config

Signatures

Drops file in Windows directory 6 IoCs

description	ioc	Process
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdge.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File created	C:\Windows\rescache\_merged\3720402701\1568373884.pri	MicrosoftEdgeCP.exe
File opened for modification	C:\Windows\Debug\ESE.TXT	MicrosoftEdge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000\Software\Microsoft\Internet Explorer\Main	browser_broker.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133673469327379107"	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\CIPolicyState = "0"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate\CTLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CacheLimit = "1"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Explorer	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\OneTimeCleanup = "1"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "23"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 5a727bcb4fe7da01	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\FileVersion = "2016061511"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\SyncIEFirstTimeFullScan = "1"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\ACGPolicyState = "6"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\006\ACGStatus\DynamicCodePolicy = 00000000	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\DXFeatureLevel = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\CIStatus\SignaturePolicy = 06000000	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FavOrder\TreeView = "1"	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Settings\Cache\Content\CachePrefix	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "0"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = e7f411d14fe7da01	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\CIStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "0"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "543"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\Total\ = "753"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\MrtCache	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Internet Settings\Zones\3\{A8A88C49-5EB2-4990-A1A2-08760 = 1a3761592352350c7a5f20172f1e1a190e2b017313371312141a152a	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\HistoryJournalCertificate	MicrosoftEdgeCP.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\""	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\BrowserEmulation\IECompatVersionLow = "395205405"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead\Meta\generator$MediaWiki	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\AdapterInfo = "vendorId=\"0x1414\",deviceID=\"0x8c\",subSysID=\"0x0\",revision=\"0x0\",version=\"10.0.15063.0\"hypervisor=\"No Hypervisor (No SLAT)\""	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\bing.com\NumberOfSubdomai = "0"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\www.bing.com\ = "0"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\DynamicCodePolicy = 05000000	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\Disallowed\CRLs	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VersionLow = "0"	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\LastCleanup = 0000000000000000	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\Main	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Software\Microsoft\SystemCertificates\CA\Certificates	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DXFeatureLevel = "0"	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\Main	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 9da922d94fe7da01	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\ACGStatus\ACGPolicyState = "8"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\EdpDomStorage\bing.com\ = "0"	MicrosoftEdgeCP.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\CIStatus\CIStatusTimestamp = 0fae17e64fe7da01	MicrosoftEdge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DataStore\LastCleanup = 7f4320d14fe7da01	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\www.bing.com\ = "543"	MicrosoftEdgeCP.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com\Total = "132"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DomStorageState	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\Internet Explorer\DOMStorage\bing.com	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames\	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-VendorId = "0"	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\Wow64-DeviceId = "0"	MicrosoftEdge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\004\Internet Settings\Cache\History\CachePrefix = "Visited:"	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\121\ACGStatus	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\002\CIStatus	MicrosoftEdgeCP.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\DomainSuggestion\FileNames	MicrosoftEdge.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Internet Explorer\Main	MicrosoftEdge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\GPU\VendorId = "0"	MicrosoftEdge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe

Suspicious behavior: MapViewOfSection 8 IoCs

pid	Process
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	348	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	348	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	348	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	348	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	2924	MicrosoftEdgeCP.exe
Token: SeDebugPrivilege	2924	MicrosoftEdgeCP.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe
Token: SeShutdownPrivilege	4748	chrome.exe
Token: SeCreatePagefilePrivilege	4748	chrome.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe
4748	chrome.exe

Suspicious use of SetWindowsHookEx 5 IoCs

pid	Process
1260	MicrosoftEdge.exe
3520	MicrosoftEdgeCP.exe
348	MicrosoftEdgeCP.exe
3520	MicrosoftEdgeCP.exe
4476	MicrosoftEdgeCP.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3520 wrote to memory of 656	3520	MicrosoftEdgeCP.exe	77
PID 3520 wrote to memory of 656	3520	MicrosoftEdgeCP.exe	77
PID 3520 wrote to memory of 656	3520	MicrosoftEdgeCP.exe	77
PID 3520 wrote to memory of 4140	3520	MicrosoftEdgeCP.exe	81
PID 3520 wrote to memory of 4140	3520	MicrosoftEdgeCP.exe	81
PID 3520 wrote to memory of 4140	3520	MicrosoftEdgeCP.exe	81
PID 3520 wrote to memory of 4140	3520	MicrosoftEdgeCP.exe	81
PID 3520 wrote to memory of 4140	3520	MicrosoftEdgeCP.exe	81
PID 3520 wrote to memory of 4140	3520	MicrosoftEdgeCP.exe	81
PID 4748 wrote to memory of 2564	4748	chrome.exe	94
PID 4748 wrote to memory of 2564	4748	chrome.exe	94
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5164	4748	chrome.exe	96
PID 4748 wrote to memory of 5172	4748	chrome.exe	97
PID 4748 wrote to memory of 5172	4748	chrome.exe	97
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98
PID 4748 wrote to memory of 5240	4748	chrome.exe	98

C:\Windows\system32\LaunchWinApp.exe
"C:\Windows\system32\LaunchWinApp.exe" "https://github.com/enginestein/Virus-Collection/tree/main/Windows"
1⤵
PID:3368

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe" -ServerName:MicrosoftEdge.AppXdnhjhccw3zf0j06tkg3jtqr00qdm0khc.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1260

C:\Windows\system32\browser_broker.exe
C:\Windows\system32\browser_broker.exe -Embedding
1⤵
- Modifies Internet Explorer settings
PID:2932

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
- Suspicious behavior: MapViewOfSection
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3520

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:348

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:656

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:2924

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4476

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:4140

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:2352

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Drops file in Windows directory
- Modifies registry class
PID:2908

C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
"C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe" -ServerName:ContentProcess.AppX6z3cwk4fvgady6zya12j1cw28d228a7k.mca
1⤵
- Modifies registry class
PID:2104

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4748
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xcc,0xd0,0xd4,0xa8,0xd8,0x7ff953999758,0x7ff953999768,0x7ff953999778
  2⤵
  PID:2564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1528 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:2
  2⤵
  PID:5164
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1788 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:8
  2⤵
  PID:5172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2036 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:8
  2⤵
  PID:5240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2884 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2896 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:1
  2⤵
  PID:5260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3600 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4828 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:8
  2⤵
  PID:5744
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5056 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:8
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4856 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:8
  2⤵
  PID:5872
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --mojo-platform-channel-handle=4820 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3792 --field-trial-handle=1860,i,2836425809384985360,14153846775925144259,131072 /prefetch:8
  2⤵
  PID:5620

C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
1⤵
PID:5512

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
3d702f6ae1914d9da3df326baf3fe99e

SHA1
81f951c9739e2b89dca97818a1511ca92da0efa2

SHA256
ee75057bdf161236f29af3a17c99b876626eb3bbd241fa4d3c155d71aa77fe13

SHA512
f289e2a02bd79c8c31e417dbfdacdd71af6398fc49ec2236fc71deef2d4420c310265673667219dd946461c474222f329137eca2784ded3cef5f6aa487a608f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
818a8f023e20e9eb5e00f29f90425f1b

SHA1
bed0ffd67f9f90e3e6768433bd9e0ad2c51145c3

SHA256
eb9d57524fc535a7439e2617de6f99609eabaeb43ad8af63feaa37ef8ea150b5

SHA512
9038f453b235453133444acae3f5b32e59b360582fcec0612f4d7bb34121c9f85bc63dbecd044c94e402f22c5e12e5ce9897743cb0a8c932efc7fdfd21287b76

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
1KB

MD5
44db25ad3bd4858aeec20b13994345d4

SHA1
a555bdc47eadb1a7a59a97e185473e97a8eed766

SHA256
faaa09f7c2d11fad98e2fa07bce932db8622e9f8a0d1fc8c6d8a3d1ade99cbe6

SHA512
2f07295cee1cc8b902920525b5d581149f1406e9b1c07ab4c3d879401becb9226f1b2084e7162a4b05b1dd93f497429d503cd02d48adc4241e2245dff0d90bbf

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
47256400e426dd2db599214310ef36b3

SHA1
a035d484e8048c563913e36221952daa73e4ab03

SHA256
861d17b493a992a10bf0004b3e380e248aaff2d898bddb6c1473aa464cf35d5d

SHA512
3d5dec869d33b1bb5e24d114f273528be597b98325c674d5c52298d4052b236d6abbe4f9839b437b115387680b172963635a32abb8b36c666830ed4eec469b33

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
7778ff01090e6f2d899ade4f672b1309

SHA1
0458de40da64d629a407d88dad3cb48f5eba0b18

SHA256
d6cd76f999c7ea2544051128b4a513f5e44172f196f83829545c44acc1193774

SHA512
aeb9e49d573fa23debf844178db3e4bbc721edc124cf89670366bd64cdf47b6cb65647b765273ed6ea1d2dd51f5a952cad7630392e0f19efe5643edd340fa2f9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
84816fd530c26714804589399f593dae

SHA1
eb770f3a351c033fdafb234c8cb133a82ef2ae63

SHA256
1224e9390a8a1c3d44fce10730d7ef184a302bd7eac5d2fa2c4e296c45e9434c

SHA512
f3b536662f0448c442dd9777dbf07cfa44a5c82349f3fdbf4315641aeb84625ee23011ef276244fb7c287f8e1466852b9c5ed2fc7b1771105c5b27965c9076fc

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
369B

MD5
029961180c0ada47c33b34da08124d11

SHA1
f6dc59789d6bae27aee072cfabd10275f2e53424

SHA256
0c878667390f57128d6eadf4927f7c131680eadc14ba73fe7139dad27be0ba16

SHA512
c35962af81f5d8068f394580a835e9729f490d42c81dac0761e39598b9334bde09b63a43079766f17a52046ec9f35c158a560d3466f2fd2d26aef5ad3937c7e3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
6e1a7276c262e5d1985feb7ff31ff765

SHA1
47c2a8140ce77453ebfed6d8d2f7772c00a866c8

SHA256
e757956bc0bc0819028a733a6b60b332a1d24117040846da2bf4aaa7aaa6d280

SHA512
bec94d26741f550084e2ae517c1e51bf8df60ab21b2fd737e9dd55474bb5862158327f4ca8e90d17b5b20e48646e4dc7025d1dfdcf8403519ff0908b0bdebbed

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
b82d7da88d5d4b3ad1be843f26cfa993

SHA1
994ba0ba056f04f7305737bda9325291c0cabde4

SHA256
d4d33d1c0a66f3bf07b5e0591ce7aecb0df96c187cb9c88252f187c9dc90934e

SHA512
90ea37d5d31a4d4b3da9b7e7e81bd76c1d5c87aaa868087a893b82928dcb9d174f7428ff3e006d23934d6b7aa1aac20b0cbc39de7b98edf99558be060bbf0d34

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
9f94e17b919bc614574cfcdb059e2343

SHA1
fd0f2403bae53892cca2cddb5ab1c2c53d30522b

SHA256
2e7d4b32254d8d88587cd7efa79920e98cb5b078e800fcbde14aeef06af1a63e

SHA512
8cd1d1bb50b4bf17beaeb71c3749ef882c059961eec6cba3a1eed6667979855c76379b33b50ff10bfe283d0ae0647d75a5b21c8afa10b9675d118c6fc99c9697

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
1KB

MD5
5e54258cc5d0a556dc2f81ff8c37f8c8

SHA1
6079171b61239b6e8f5a2846510fe7dc57c34d7a

SHA256
21b02c60ea8f2c241f5bd1983dad4822dc4daa7be7ebf6ba711c1556de48f9b0

SHA512
3aef9200cf190275f56272a85737be3898897402ce90c00c03f426cb217d4cad7746109286652fec43a1c881da8a2b09db68c5c6e687a1fa9a9faf1f688014d3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
1f8345a8eb6822405c0f081ac81f3016

SHA1
2690ad250c3040219d7e903516e8db3f0889b737

SHA256
9ee7ab6b58045c48c3b7642c4f4e094ae926464f121ee544d7f542d97b1f43b2

SHA512
2bb498789a9bb39aea07d480ebd7648cd0737b0195195ce3dd772ba3c8418cb0488f360bcb212db2a66f1553ffb34966b2bae8c37d3ea38a210c7bee839fa888

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
5KB

MD5
61323820e86d901a2c5845da8027eff6

SHA1
b080cb1d60b7e9273d8dd0bbff298a518ca40ff2

SHA256
01a4fb3385d87b9558d83f95b21401328afe27263b079f3d16da1a32bf9aff42

SHA512
47820ff40b6bc5db4e5cab0c26e879e289de3d60e9a520f0a005bf69baded6609aa7bfde229b759a604370f7b72a9c5bcf58fea2cca54621aae723d52eb2838c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
554718f67225f1252346db0ed6ea5f3d

SHA1
e46829e3d3c6d956a7271602184d58d6d70d720f

SHA256
5324997188f06fa606a7c5d21c32a0e2f7e6481a76f9a8ed6687c18ab52b6460

SHA512
7ddd673d23bde022c65553d12b6aec78a5e5861b84bf93feefadec006cf2fa56c2f3e75a5b32b64bc753daafc4a991d0777b18895673c31b47b76822c766fb7d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
a5b10f822b4ab4f4461ad3f5162ced17

SHA1
2773017ad3ddd0ec2bfd9f69c2caf758bd0c0d5e

SHA256
9e3853cdfad92fa7c64da8447ba9cdd18accfc949ba62a59cb15af3f274d2d91

SHA512
38d9c5b01774c482fed22b2bfae10180bf5d52d7d1538f5e050324c67dc3ed98bff0a22ceae46485515bfd5bab4cec1edbde1d38c597c606a9dbd69c571d1b6a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
12KB

MD5
e5d8c0640a648a1e88ca257efdd7788a

SHA1
b46d60930743c347aaa187b7276213c7d4375ccc

SHA256
30c7cf12bc61a721408bd584d392fb403ad880589e5eabd9daee37fccfe3e0b7

SHA512
796a7453131b957fd3a4ff9b279e233a886850541af745e180501f9a75b3415e05bee801f0385255a7b0c2d595cc14d6617897352366aef809be64d3117335d2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
292KB

MD5
fbcf928d54443d2ade25aa63224606f8

SHA1
e1ad8ec1c3c88ad3ce255f6fdc936e0701830676

SHA256
92879b5ec75584b58768e78ae5483e72e33da3837ca771d32a92bdc75fbb8e07

SHA512
8b2305dea05dd516d28f8c8644e7145e3a7358bcd36716c43dd6799843fdebe09af4e5138f10a02e95c7e3a6c1c8eace30188d59d41dbdc4ba60404df2799061

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\persisted_first_party_sets.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\OHP8MVFQ\edgecompatviewlist[1].xml

Filesize
74KB

MD5
d4fc49dc14f63895d997fa4940f24378

SHA1
3efb1437a7c5e46034147cbbc8db017c69d02c31

SHA256
853d2f4eb81c9fdcea2ee079f6faf98214b111b77cdf68709b38989d123890f1

SHA512
cc60d79b4afe5007634ac21dc4bc92081880be4c0d798a1735b63b27e936c02f399964f744dc73711987f01e8a1064b02a4867dd6cac27538e5fbe275cc61e0a

Download Submit
C:\Users\Admin\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\AC\MicrosoftEdge\Cache\M0E00OD0\suggestions[1].en-US

Filesize
17KB

MD5
5a34cb996293fde2cb7a4ac89587393a

SHA1
3c96c993500690d1a77873cd62bc639b3a10653f

SHA256
c6a5377cbc07eece33790cfc70572e12c7a48ad8296be25c0cc805a1f384dbad

SHA512
e1b7d0107733f81937415104e70f68b1be6fd0ca65dccf4ff72637943d44278d3a77f704aedff59d2dbc0d56a609b2590c8ec0dd6bc48ab30f1dad0c07a0a3ee

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\Windows[1].htm

Filesize
250KB

MD5
17169fad3df66a9d338c937ad2d07cdb

SHA1
ab692150c84aa2d9535f03166f0508866d858909

SHA256
20057b085ab5dda3b4ed0a00825e00d1bfc8c88fc91e9b1ca4df74d1ff968fcf

SHA512
63c9263828670f9da05f3fad132f672c9d32aff75307d154bd69364bdddfaeb609c5f56cf5da7154a82040f791d6e119a6316e1f960273ddd37ac476cbed5976

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\app_assets_modules_github_ref-selector_ts-754e509608bc[1].js

Filesize
9KB

MD5
1d6485595870049a86e4ce73aec0e892

SHA1
66b442bfdb99a784c0f0ee42217fa77e8110746f

SHA256
428ede3c1fd73e8680513fe588e4f3b05b3d5a20a5187fbc95938615f071a23f

SHA512
754e509608bce12bda4cb875d63fb03a1293f5dbdfe90ab0dcfaade8c58a9898d1998dfa07e68ec983a98f6bc5ca63d54dbf28dec2aeee65809c728652b92c5d

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\app_assets_modules_github_repositories_get-repo-element_ts-48feb572f2be[1].js

Filesize
8KB

MD5
4d8ea72e0bee39532bbc8780d5d51271

SHA1
c142e254a2b6755271e8fc22bdfa0151d01999bd

SHA256
e9fe744775bc0e876431918e73c379af3268773ed32d8f3c294a9b1ec06759d9

SHA512
48feb572f2be35b84f30a58463430bae483b4cc8a24c76f3e425d5e642b3b30d0d82b0c8690cc0d652f539424b9d58c199c0655836885ecc074afecfa07c375c

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_clsx_dist_clsx_m_js-node_modules_primer_react_node_modules_primer_octico-c56103-e91295e60abd[2].js

Filesize
28KB

MD5
59b1ccfeba4c676ba96ca28766640910

SHA1
5504c5a8e3355794f4e7771241c274b98cbcb303

SHA256
494a827200d1e11e4c08519cc0c7fff57c999e9a47763decd5ec6623faca5611

SHA512
e91295e60abd95b3bfc9d11c8db34001da35c4e5982cf58b57c32e6eee688e19454545346cb0e3b8e15fa92aac2729cb2c522fd38be8b7b7b4a193b805bcc6eb

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_github_quote-selection_dist_index_js-node_modules_github_textarea-autosi-9e0349-ab4976fc78a6[1].js

Filesize
31KB

MD5
670eff1e936ed44151e90903e0f286cd

SHA1
86ad48dcdc65bb33515e3ba82eedc77142b717ef

SHA256
764026cd8e6b740eab68b749c84d253e2e6231afacc5bbeb2fb7f0e0dbdc1205

SHA512
ab4976fc78a683e43f4b77302356b760c16e53b329caec3ad519a39003fafe805d32c8222348cd8e5ac944caf1313283b1535b8749860d1deabc3b096e637bb9

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-e53a3f-a0ab54a84a9d[1].js

Filesize
22KB

MD5
f33ff292a2051038f47630c51fe0ba9d

SHA1
ae3ec8edf8368fd20152c881b20e1abc70b22de8

SHA256
6860ea3dee4deca339569770050db3b369c7dab3970bfedef4f557038550da62

SHA512
a0ab54a84a9df936368a297f12e4567171e72a541154d337b71ce30ab5731ea83b5b524df63b9eab7f073bbad5276cdecb7ce5542fc737e9a76829324e9cfa93

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_github_session-resume_dist_index_js-node_modules_primer_behaviors_dist_e-da6ec6-5de3eedc1320[1].js

Filesize
8KB

MD5
9c5d3b27f0ba2ac8670f6d6bbcc5448e

SHA1
a1fb9b26f44b6a835d6e3547f350a1ee17aba73e

SHA256
63e1578e28e58d18070a75c923b936f0d92ce8be99058ed80d66a9d5a90f227b

SHA512
5de3eedc132092a565d571ae0105bd63285825faf693cd05b3f34fb8c9bf6cedfa97f72fb326bfdc2d526e5b7ba9b93b7b80f252f64057366375269c5028638a

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_lit-html_lit-html_js-ce7225a304c5[1].js

Filesize
15KB

MD5
b4de96241178473d9f682dea5a92e41b

SHA1
e274c147c9bcb636b3bf4f9df1acfbada27d8a90

SHA256
c823056c4e37d95cdee809f535000bb37b9c8d956ab0410c98a6f4a8fab4f47f

SHA512
ce7225a304c5935fa3fdab2e736d9738651ed0fa6f4503bb65deaee022bc03c3033170d53adc2c1a77c88904ea14a9603519b87990f04e47885209a53c893056

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_primer_behaviors_dist_esm_dimensions_js-node_modules_github_jtml_lib_index_js-53b423ede32a[1].js

Filesize
8KB

MD5
7609e9c9e92849341074061d54840414

SHA1
bca7f250abb5a00b6881125f9bc47ac8b7bcaf1f

SHA256
51665dff0fc071b5d207f500140620da814fe6de21c864d0c3ce5103d4e967f8

SHA512
53b423ede32a8836b0fb116823c89e93246a97f955eb137f095cc52761600f7a209534f85fec66325170b4a24a1235d4e5e4abe4033e095d3665ab379ea70a74

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_primer_react_lib-esm_ActionList_index_js-1567f1132a28[2].js

Filesize
25KB

MD5
98249ce74ed3ee339b54fb4bf2a55bfd

SHA1
e4304a66b3323e0910e236f5266b16f31f092512

SHA256
de9f25a82b14bd0569ba5922452b2a56b3208acce439cfa86913d194396610b3

SHA512
1567f1132a280bb6f8412a3874fefa7f7619c0b518b31ca57d3f86a8ab177cb9b95058f7b152d15bf658628d35762e3ee16d7e929489b1fe9a05bf9aa7b26871

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_primer_react_lib-esm_Box_Box_js-55a9038b54f0[1].js

Filesize
15KB

MD5
c660c2ee0360a1d18bebeb12641857ee

SHA1
6fa2bc02090373854b6bcaa15096f517018c375a

SHA256
0aef521ca83330f959d3fce2efef9175fdeb618c55c79ebda619d1a8a87987e2

SHA512
55a9038b54f031de7844ce356e22d2e2a145f4b2f7c0453439586079be60cedafc3eb4f45219ffe9ce2beae21e1a67f12523db049f948e7ce777aef7cdd2b788

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\1T7O0R1Q\vendors-node_modules_scroll-anchoring_dist_scroll-anchoring_esm_js-node_modules_github_hotkey-1a1d91-fa9f29a8514b[1].js

Filesize
12KB

MD5
3c0abe787f5d954832b6c7e4f53980a8

SHA1
1f9439165c4fb8e21c008ed0f1e8bfa72b85c33b

SHA256
05c8f1a4059c21735d401df0d102a50aba011941b6158e5b52d4773f1b829d79

SHA512
fa9f29a8514b6189ec5e5caa134d9b511c65b8643af85652126d52554a1c1d8464bab5400b70d8ec54319d133517bc1e9d974b31e31fcb0e6811b76f0ad7aaca

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\app_assets_modules_github_behaviors_ajax-error_ts-app_assets_modules_github_behaviors_include-467754-12b67c78b7f2[1].js

Filesize
16KB

MD5
944530c8575dbdbdbc9682c3d281b3cd

SHA1
d307d42068cf58d4cbaa0d1997a011543b8400b8

SHA256
9219ee05e0cd16e0c2355bcdc5e4015e3fb718a31d07bbf9ea728122bf24d1bf

SHA512
12b67c78b7f27582ae2e41e7df27d7b3a7fffae85c8b143d1b0ae67f8659e07077e50d9252b5a1dd4671d84d32ca92d6d4915840a54b5d5f94ed89d559f3eae9

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\app_assets_modules_github_behaviors_commenting_edit_ts-app_assets_modules_github_behaviors_ht-83c235-39e927e92ed9[1].js

Filesize
11KB

MD5
5e662507256ee1153d1dddf94e75feb7

SHA1
9f8ef1d1ddae2569e3c3b70d977aba577c96652c

SHA256
521f4d5bba885ee5c650db12dff95420d353fd0b707f7adfa1f493509be74478

SHA512
39e927e92ed948bad017a7964569456e7f9131d0423859aac4e6bf16863e1d95186222b89897c3f591ed00139847e69ebe8b6260e14610e40694f5e03898ffe3

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\app_assets_modules_github_behaviors_task-list_ts-app_assets_modules_github_onfocus_ts-app_ass-421cec-c712b754a62f[1].js

Filesize
14KB

MD5
bdc0abec4f488d32ab6515bd1016b4e0

SHA1
0060a7c3ad2f7a752654c0856a80f77ff572191e

SHA256
65fdf77665405da8ed46f1dbe1f95fdd49832e69049cd6449ceffd235023a5ab

SHA512
c712b754a62f23f513c700b540781d4dfa6fbf82fa5778fb6253efe80ed6525a76ad088b9a891e73b73a16b0f3240b8f80983951fa5008e716a66e981f413f58

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\app_assets_modules_github_blob-anchor_ts-app_assets_modules_github_filter-sort_ts-app_assets_-6deafe-02c326c4f267[1].js

Filesize
5KB

MD5
06a4307499e15fc1aa5ecdd883a59859

SHA1
57a46edf06faa3bb311798244f0bb28efdb70c61

SHA256
03ab480b218b6e5ca04373af50477e76e29b9f2a5b4174a2ce3f47c30606ed8b

SHA512
02c326c4f267009b2e67b3fc2281ef31c598d85c7fd677af8e83aaef1fd71dc1c4b7b209d50074fa044c7d56d1353e726bc27dcee2f484d3da06085bba48e260

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\app_assets_modules_github_sticky-scroll-into-view_ts-78ce1c8782f5[1].js

Filesize
10KB

MD5
866d194e4ef2729fbcf6d986a8b03799

SHA1
f954b2f1ada60f8972a82e8e90ee9041513a7234

SHA256
a14516867431a8663d4354d10e0d0142dbb6952645b074862a1b713c41c33678

SHA512
78ce1c8782f5645f221780938981a5d1b723be32d6867ce910c50054218f9c860019ea6d3c58995bdc92ea3b2814d94b7860da5452abd1f429a71da9779f770a

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\behaviors-eea438ad0058[1].js

Filesize
226KB

MD5
6e13d44dde2a9e16268e46f0b1c11a81

SHA1
02bc8edc36cb5f5c4b7b6fdd48b410d5546cce98

SHA256
35e627847c8b03d4a2012b528bcbd29a6046889c52f86b916e1c56bf48798660

SHA512
eea438ad00587b6be0c70eb8453c1f675be44aef6b6fe920e8008efc6ac86190287ab168d0ce031fe2ef3c28268b585a938cb21767c967953f1fb991d37f9805

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\github-a1c8541470fb[1].css

Filesize
125KB

MD5
65a95ca8fcc17d52eb361fdf0d77f57e

SHA1
b93e7bfe0ff5baac21c6d453326fb784a52f1702

SHA256
79a4c33d657d19b374d28a76b3063bfe2a168589fbfc3aa99b07e9fcdfeb1d4d

SHA512
a1c8541470fb6173268575cc8980b529c397f515446a8b83546e9ee86bf594effba83e6f61aaed7c1f573ec24914606bd4af3b2b19f26ec5c9dc7f0cd911db21

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\global-9e9ac94b9f81[1].css

Filesize
285KB

MD5
7a76a5e48751eb053f5f8057d2e25c93

SHA1
a25ef7761e64e711c814a9e4ed0789608a730247

SHA256
5e34d6147313eae17e7b7a64c1b17b54e602d41a7d9272e2bc86486ce79ded4c

SHA512
9e9ac94b9f81ece4a8d84b8f543fdeb7fd5fd67372c3a8cebe4984b7a977af9462d0c1d58fcc417b3cf2c1320ec45f4ec6fb806d52e1247e066ab86c7fe0c47e

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\light-efd2f2257c96[1].css

Filesize
48KB

MD5
b8473fdb0f4749de99341662aec850f2

SHA1
f593c957a26528558217837aead34cf718d27443

SHA256
8aabc55d211fc93acb563c9cf30732577212a998196f73b067f9795c8d1ef72b

SHA512
efd2f2257c96c12eba6da741c677030ac63c34a925846080ec606e5a974706726479bd5babea6dd0ac7e8e421704263787986fb07a9c384994cf403bf8bc3dee

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\notifications-global-957ece5a6535[1].js

Filesize
11KB

MD5
c871ea45a79cde2842def266c0481ad0

SHA1
b10e6d6ebda3810e6946e4a3ef85a952cf8ba291

SHA256
0e804321c2ebb9ad348b53cc67aa9a16079c4ad277591ce27c2c144aa50b0014

SHA512
957ece5a653553051e642bd00a14696d5eb78dfb5e4ff951159503a8d85628cba897508a2075a150cd374c17016840227bb97de76abfdb7cfdadaab5010b4395

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\vendors-node_modules_delegated-events_dist_index_js-node_modules_github_catalyst_lib_index_js-06ff531-bf7e5a3732fd[1].js

Filesize
11KB

MD5
57ade457a2db48ce3827acaca61735c3

SHA1
fa201f97596c327ac68bf39600e91f3edced1368

SHA256
6e2d6a3eff85e0161488a91b33ec517d2aa727580a74be88666b47a0b4459a71

SHA512
bf7e5a3732fd2f07f6b274beb43d15397f077fc66beede98f59a295819dfd2814c935729244fd1eaa99a6788810b64cc00e57c846f3b0c02fa6ac514ffd2a3b6

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\vendors-node_modules_github_remote-form_dist_index_js-node_modules_delegated-events_dist_inde-893f9f-6cf3320416b8[1].js

Filesize
9KB

MD5
fbbd4bcc22313de76bcd2b3e4bb12e0b

SHA1
1422fbb0c4a416eb66e429d2cf797ed29a70dca5

SHA256
8060d4de1a065854c98adcc50f292dcab8f424a9edbdd4aabb7409cc4c6eab99

SHA512
6cf3320416b89fca281c439927ac3d76da74f9463345a891c4904c8e50b476e21d11ed06aa2316ce770c36f18337aa4e2619bd3fd28a4cc8454d649110060726

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\vendors-node_modules_github_turbo_dist_turbo_es2017-esm_js-858e043fcf76[1].js

Filesize
75KB

MD5
bc119e97d7bbac343f62984dc8d4dcfb

SHA1
b7fe0a56ce370e54bad0aae6d96bf52cc192a03c

SHA256
09620d3f9286d39a8eee8f036655e3555fab6c6b6ea0abd84a466aff8ae3814f

SHA512
858e043fcf7611a217e05ae5a181c4addfa23f21a298036b48430fbaa153a7248777408c1238742e7f6c53cd6bb4a1d6b6f60344048fa3714df464ce44b902e6

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\DBD5RUDH\vendors-node_modules_virtualized-list_es_index_js-node_modules_github_template-parts_lib_index_js-96453a51f920[1].js

Filesize
12KB

MD5
7b6a14cf341122f898139383421d81fa

SHA1
6a06ae26974d95507d4b2f08d89c726707f31349

SHA256
729874dd25b54af397b158e7d249fd5e0d0423d45bc2470a6bb1140a54e56ebb

SHA512
96453a51f92073faa4b763f80658bef3f14d005ddbb8dc157321c02080dde34df8a1b0ba665ce221019c067162dab88cfd5095ad09446de665ad3afcafe574ae

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\app_assets_modules_github_onfocus_ts-ui_packages_trusted-types-policies_policy_ts-ui_packages-6fe316-d8f40351c6bb[1].js

Filesize
8KB

MD5
407ff92ca4fd65e29f7ce09eddb58338

SHA1
64058be928d79d4c05949580a282fe22c9cf6156

SHA256
43a3eac5881a4d9b2ef070517c54c072cc7e6d25a35f2d47164837fae6865a57

SHA512
d8f40351c6bbf635d03a4d268caeb9a7f85692e0b672d394b7a270d13b34c8d8d5eb7a8f8e12ceb7359a1a457df5cec3316c8533c5474ee7d00317d5a6aea418

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\element-registry-c4548128e0e8[1].js

Filesize
46KB

MD5
db5c4fecd9277971a35a91995b0b51c0

SHA1
bdbf57bd7967d6156a0884bc93b1da74db42db7c

SHA256
01b8192a4a60bfe45e1e421febbce2bfd35b60284a516839b1da2b517160ac87

SHA512
c4548128e0e8f59862ce65e0ee2491dd5547dce96b7b60602aa11e13ccfebdd889b92ba7c9b9196f7b9e052c9e3779c4191b4c262fd81a7de8131e14130a4bff

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\environment-bcaf5ff1a8f7[1].js

Filesize
13KB

MD5
9fd9c45896ee2ca1ea5c306a8a0d1c58

SHA1
9113ec322802ac10f6874167e2e100a2b80fc93c

SHA256
43db7372eb07401197193ce723ddc6c30a579f5900b75bff41e71a53bb2ff9bf

SHA512
bcaf5ff1a8f71b465358bf7621d2f0d5d0df9fe9d2426195968b74cd9acf011a332dd76eca662c9a71108993375549be7665da88ce76e4236207d60967831339

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\github-elements-7505bd7456d8[1].js

Filesize
36KB

MD5
77200e300647c2e5916913ff6ea1ee5c

SHA1
6ce9e7c56e6f9439b64ea4268c293b0cc76dce6e

SHA256
c4bde6dd23ff94a9a0c5284c00c490b8a10399191dd06f7912a045a6de9f24c0

SHA512
7505bd7456d8fa7adbed30703a8a5bb04e9c4bfdb7cef0917ebcdf5a55dd6f2bfa74aa02416e7a24e21c5facfdd9a897e0e1002053d2cb4b922e626d517a79e8

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_braintree_browser-detection_dist_browser-detection_js-node_modules_stack-68835d-a18220f1db8d[1].js

Filesize
22KB

MD5
0cb967b7b9603edacb27a261ba59bb63

SHA1
ff39f99d51916d3bea1fd5ae853abf93ffe35b2b

SHA256
f4ceffa8ba23288e7d15bdde1bb227559443380c041d0febf6bcd525946bec41

SHA512
a18220f1db8d086f2cae618e9196599eff46935aa7bcbc601276acf10bfa09b700b37122aa00d227e61c1b1257b7304ec064221d8926c330789b2ad3ca0f2824

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_auto-complete-element_dist_index_js-node_modules_github_details-d-ed9a97-841122a1e9d4[1].js

Filesize
17KB

MD5
d50f30bd48bf15a39fb0de84d338b063

SHA1
c974701a469b2ae91195cc57a42c3157c0210646

SHA256
21c5e70f201ea5ebcaff6f1244e6a7fbfca84d1878cd41d4400696bbbe09af5a

SHA512
841122a1e9d49b8484e68dc82869b7835e54a9d632909ec4f0c386ba843d2eaf20416c75c19c4a250a8cf22de8ef43f1fff6d77d29630132266c6f533c487e2f

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_clipboard-copy-element_-782ca5-54763cd55b96[1].js

Filesize
8KB

MD5
80708c39dbd42e80616bc4a61b51c1bb

SHA1
a87eb08671b07a1c2689a6caca2486727af9ae3e

SHA256
10e085fffc04da9cbf0a46c8a6e120d34947c4ed859f05e26cb0abaae312e094

SHA512
54763cd55b96117e15652c12e9ca5e8ec71e58eabbd9537a7e6c833ec124199eae23091ef59275513f2cacf055e9ae69d7683474fc31f81ef823578118c462ba

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_catalyst_lib_index_js-node_modules_github_hydro-analytics-client_-7901e7-4b84c23ea573[1].js

Filesize
15KB

MD5
5567c8f1746f2e828c361e84220d1305

SHA1
3c038f36ab737689caf12cdc832df1beb7ad782a

SHA256
8fcfc110252d25244107b3cce12be4181bd2b76abfbf58e3392465ffb093003d

SHA512
4b84c23ea57301420ede79e954cf867d2b8f95ed75d568621028f58304b6fa7987d24e5cd829988426a5fdea611b853cc67e94644f4b23e530725c266c6b74d5

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_file-attachment-element_dist_index_js-node_modules_primer_view-co-15cdfa-3077dbaafc30[1].js

Filesize
117KB

MD5
88bbf6472a8c2854ce87874f25db5c33

SHA1
97a713d1e263f1ec6f4585880a3b6d04479265a0

SHA256
040766ec09e0e64adda57d1e4c3e1494c04e02c234779c8284416387c06ad869

SHA512
3077dbaafc30ef9f8414a71fa1625775959508516e3612ca32d27ccb4d2279ed9a0929fe2c8fbf2d02e243275f5723f2f054d864579e24c38dc2a8825c7c90a9

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_filter-input-element_dist_index_js-node_modules_github_remote-inp-b7d8f4-2355048ff048[1].js

Filesize
18KB

MD5
c6175500bbb3bf8dc98aa0d4229caab6

SHA1
59fa80835b3a054500c80573c5403dbe3b6c72dc

SHA256
936cc4f56aef6760208636c671f028f76a6a896b1a113df7f64b4fe10ac9cbfc

SHA512
2355048ff0483d1b53126ffa8506d15da3baf9cac2570b99cf6c1d019b4702231500ec72485e529b4ab8250631e664d080818ec91cf9339770528948489f92a8

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_delegated-events_dist_in-af795d-6b8acebb2278[1].js

Filesize
25KB

MD5
80e14683f48a20d0dfd6ec5e2a5f9061

SHA1
6bdc4222ff5868b5299fb0bc76308113d1219e6a

SHA256
d6e059540c8e0d2c5ce758814b414ffeececa003523b3f24fc3dc973afc0107e

SHA512
6b8acebb2278d1cb6289f583fb8479f2a77150360b995475317e88c8b698077c47f4cf0a62fc256009a973735c04cd86df29248067749c8b75b287d3576f8a94

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_smoothscroll-polyfill_di-75db2e-adf929d695f3[1].js

Filesize
13KB

MD5
39c9822240af7e9d31ad72836ae90bf4

SHA1
809afb6b10419a3429466a2635da80761b91106d

SHA256
a9cf8d3f90605df1ede183ce15eb836e9211fbb0014b0c5ea282942fe96866b0

SHA512
adf929d695f38240a78c0dfac2b5a59a1bd8d78aa1f3b122daa8b3eff311ba441f29d11574934d7bce7aa25bc04b15807f53f9e47aeed1ed865cfe26d3a9ac92

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_relative-time-element_dist_index_js-f9b958f5f2df[1].js

Filesize
15KB

MD5
46afaaf3a6253f2ce9568db9e301ec8a

SHA1
b365c36e165567048bad614c98baa22bef4b9b91

SHA256
7ef807f7b9fe45ec17faa06e235c7adac46227f7589b91653fe4e0ae3a7a0ff4

SHA512
f9b958f5f2df5e85cfb021de43dac548c271eab2ddfa4463c213d7bf311b7ea3b7b93b7231de9834db884bbe53b012b3a1dde85eef9c6daaf46609aeb446fdb4

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_selector-observer_dist_index_esm_js-f690fd9ae3d5[1].js

Filesize
9KB

MD5
e131f8c9b77918aeb94fd82199a423d6

SHA1
71eaae086cd44a8904f39d27fb5387bb957976f0

SHA256
01f9a0ec0bb24312ae0395b6aa238f8d910dc35c08ef5a25a1e9cd8feac83c32

SHA512
f690fd9ae3d5a240e479fea97ac82940f136f3f2e0262cac840345f2b956123117ca94424dc354d90d13f1c0169c24b19526505bb2fad70c8c364899474a9495

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_github_text-expander-element_dist_index_js-cd48220d74d5[1].js

Filesize
14KB

MD5
69f387b852329683c3f4856ccb905f60

SHA1
a58ffa40abbb4c6f5ef0545c1ffb932c21d73cc1

SHA256
d9cdb2e9f9c648237f22c43f8f12e85d8944c75ab325352059c3e53516635167

SHA512
cd48220d74d52b956312b2c59ec764d2d559e73c51789f9d649e108925f79ae3c910744161904b2840894bfcff64507971d5a19f921e5190a710bda4eceb63e2

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\NSBM32X1\vendors-node_modules_primer_behaviors_dist_esm_focus-zone_js-c9086a4fb62b[1].js

Filesize
8KB

MD5
19e28fe2dcffe5582e6352b53d0b22ce

SHA1
1e656d3443915c4e4bc9782f4366b4eebcf45720

SHA256
345e3daa928a64bc11b3778cfb36228d0025c260defa0b78e4c0ebe66c419737

SHA512
c9086a4fb62b90cd43e0a47621528a23582de79c4bdb1b2eac386f8e331c5ac891aa69975fdfb487a4cf508852c1c3ebc2df24e00ffca5443fb6e22f3b3ee99c

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\code-9fa8d759d6f1[1].css

Filesize
31KB

MD5
c9804a16de013087d2baa1718fec5ea5

SHA1
672290a6d0941b6a682e81de1b81f0419db8752d

SHA256
610710f9967b159c483ce3e70ac03bbeba7870b130c66b9f829cd65270384ae7

SHA512
9fa8d759d6f1651549c51f4e1cf8d246d2e2153c223042bc01f22aedabea44e86a1ee0911f1b9823ea4b0dca13b68d96e64bb2899f2be3749f43439a38a9bfb4

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\code-menu-ca7752c753eb[1].js

Filesize
396B

MD5
4b136b63e2349b3a7bf6a65b2802ce92

SHA1
60687f026f74d5aa835c9bc639e46cb4a3909520

SHA256
d7435b0fafaf73fe86daf201501d5719ddd3d64404ea8cf71a0adb161e08aec6

SHA512
ca7752c753ebeb9954f2f04360314809c53f7b6da551b0f1352fd145d04eab8e304e4ce2d76a7bb6ace560146c6475bbfe203df5dfd8c714532ee03570b40413

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\codespaces-9aa895d4ac0a[1].js

Filesize
30KB

MD5
c8bd5d99aabe3587cd58953dd75cf96f

SHA1
a0df9695b848fd34297a4de6b21980a25b355b7c

SHA256
6eab842999da9ccedfb1a4cdbfb9c214ff7ebecab2290e4bc34e846c3f91c71f

SHA512
9aa895d4ac0a29b7f9cd26dbbcc45fa7b02f3a7fe22b6ee4d9c6bc98a75449d54dd8fa578a6e4124a20edfda0eb59d0cb97b17ab9090ab9f7e9531e853098483

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\dark-6b1e37da2254[1].css

Filesize
48KB

MD5
96ba1deb375c1c66bb092fa0a1765be1

SHA1
03f188ec52d09882b8403ed57d7aa73a224ddd62

SHA256
d6bc29d6a4e33c7f4da1d4b8060cce6dedf384d7334b71661c277e985ef8c156

SHA512
6b1e37da22544d5626c6f78691a8d8f723c49c95a782f5195f4b00b0e1b9d4408402c25d5915e097ef31273c3c8d06d81d1ba1bb08e12677941b8b1f24d92848

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\primer-38e58d71ea15[1].css

Filesize
333KB

MD5
69a61dc716e08413491c664cd61c2a93

SHA1
9d73d2222720623c57b11eaa90e296b743cb3058

SHA256
5be84dff60d0b63e2cc4d21ba3742d1d22457187fac848569c15300b1eb412c6

SHA512
38e58d71ea150bb7d19051dd0d47c3342c4b608f20111e501c1e572e234f9584828bf87dd9ea7c25fc4a30b58a08f77780163b54cd7d34de2665657533405075

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\primer-primitives-8500c2c7ce5f[1].css

Filesize
8KB

MD5
e9c08b9ba681ad6606bd18f264e73ef6

SHA1
04d1e96739d82e07587f10bd2d953c8e70b93d9d

SHA256
b08c9718118f5b814e632ac3dc0d8e009e5dc2913df183f0ed322e6817e997df

SHA512
8500c2c7ce5fdad5fa01aa92156964108335c704a127ce290d201395009914c814ac6e08a467e45d1ca0fc75b2269b7f09a6d437939d91c9513c659a80cf472e

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\react-lib-7b7b5264f6c1[1].js

Filesize
209KB

MD5
c0772c4a7a3f6a29256a69e8feca82d8

SHA1
75ff0ed2d25d36f7c6e933030e691228e37c5264

SHA256
4736f0203a41862c10e5b93529b15897813bca088a8dc952250ba7c19b6901d9

SHA512
7b7b5264f6c11eb55aca6b7788e67f89f5638a53c75589dfebdb7e08f6fcad5b2555a90eeff60da4578ee429cbbdf1d886f55a30355d9386d7006241e65ee632

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\repositories-76e4d3c3d00b[1].js

Filesize
69KB

MD5
70df0ed8d0e15870f9d825bb3acf05ae

SHA1
2e31a1491a9dc575beccedd8f054f72db5fbc03b

SHA256
14a33ed4a25349681c37cc7b669c8ffe69fe6a6fd85fecee6cfaaefe533b0241

SHA512
76e4d3c3d00b8a3be84f354e1a7708abc73fce3bbbbe8952399e8abe48e5eab09d736169db8a3b70d522017d7aad8928f558ec204a1b54d3505734c3a6b5e00d

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\repository-a7f555d78ff9[1].css

Filesize
29KB

MD5
ba196d4c1e022d5cab19e2235db82d92

SHA1
67dd8cc44c4162482ae7d7670a25a65326e037ff

SHA256
52440dfb28add980cbe1a0281f173b8c557bd64feb90406c2d057e98340bc46d

SHA512
a7f555d78ff9b024e16e85c155bad21d385ba1cafc68ef058baaa1e350aa4e56790991818e6e8fd93875e9bda66bef77e3289349bfb34c00c93ff945afa00251

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\ui_packages_updatable-content_updatable-content_ts-cd36524126e2[1].js

Filesize
20KB

MD5
de3e68a211e0466f2a79555cf236d612

SHA1
72c1580fb33ebc9630e2ce46fab6605e2aa76b52

SHA256
7c9d8b9a9e21d576a498e6dc473ae3281c53eb02a71bce1eb6bd21d438e8634f

SHA512
cd36524126e2193b0b93d5388840c768ac2f9f9fdc29d6d6d6f56739af381289bc4b6e0329e7f1f098ffcddbaaf78ada6d5e70cae39bef3cdd3b889fcf6590c4

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\vendors-node_modules_color-convert_index_js-0e07cc183eed[1].js

Filesize
12KB

MD5
b36809a997ce5e5ad8b0b4f661ce60d1

SHA1
fff11cfd01b744a770de926e13dde8f546e565e7

SHA256
687890a8b37083fcbd85fe5fcd960a6d80378b01a5f86287f207bb7c807b5ee8

SHA512
0e07cc183eed2b6d1302e51254f6b4f204a920873dadd83581483d52bf9a2e6537ebbb0417eb04567411dac64232653a0d046abf2c31c4809bc72fc6603b0749

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_github_catalyst_lib_inde-dbbea9-e73b311a14f1[1].js

Filesize
7KB

MD5
1f9e895454770e1761ae99dd4376e3ca

SHA1
1fdffc28e441a9c15df55dfaa565a3a27ac26e2a

SHA256
4e81ad5d4bda114b1e514c806f9e6275e1815cd20b5bc8036212537941d39445

SHA512
e73b311a14f1d2a0299829139774493c67a6b550eaf3a10b32496657c812b60d859ed364306d11e051c2d25fad6e4ebe7518fa62fc82f420517d3741a7f71214

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\vendors-node_modules_github_mini-throttle_dist_index_js-node_modules_morphdom_dist_morphdom-e-7c534c-f8a5485c982a[1].js

Filesize
5KB

MD5
e87764e4b54806bd9528e9413f05201a

SHA1
5d1c284dc8e2d047de24f8380f71ea9989d732bb

SHA256
a38e79c76a05e2473cefde9829cb125563e2bb06965aa3d0a41b314816bd1097

SHA512
f8a5485c982a797682c4138b024f83ea2669b7b7458c2d9eeb2c18526260e2dde0b3bc68d98415f8513e4ce099e46783a9ef8ad08b58929ca66972630953822e

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\vendors-node_modules_oddbird_popover-polyfill_dist_popover_js-56729c905fe2[1].js

Filesize
9KB

MD5
2eb9961e08f81bdca617ddb67c2fb708

SHA1
15cb6d7ffe93324b38bb62bcc4ff14d1a57f94bb

SHA256
0f2cd40ad364711db1fee03cf9f6ca04fc56f5c3ba497dc476c5879e129d968b

SHA512
56729c905fe263a6b7978bc67c09b8dab69592e21aa9addba78866790bdb2dbd85e41e6a6663d511e73a8edeb75933b549b3c393a465748790a6fd50b337cee9

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\vendors-node_modules_primer_react_lib-esm_Button_Button_js-e151c17189c8[2].js

Filesize
16KB

MD5
d1b6c4d10b97500009f14c00cf8a0be0

SHA1
ea5b8b06e1f430c486878804af0d9ab5fd27152a

SHA256
280e90e10922fca82f776c10e40f9d692fda0474723fbbb9aaff77ac42cd5908

SHA512
e151c17189c816b447272668e70a272452a27e67a86cb890e8ec50237cffda8db22eb43c2e668f9d7c14953c12eeb8edafd6d5610f6fbb7d9bb417563e3fa50d

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\MicrosoftEdge\Cache\OCWMXFMN\vendors-node_modules_primer_react_lib-esm_TooltipV2_Tooltip_js-ffca9cf46775[1].js

Filesize
14KB

MD5
a4fc81ffee4da6704a3cab4386917a48

SHA1
2f1b15888f3987e6c4c43eb0087402da29f6197d

SHA256
50d8979e13f1d0b3e2b887ff7f251796bd481493d647e456ed7ffe14c822de89

SHA512
ffca9cf4677540790208c03fb19503ce29214d2ea3cf60303de8b0b90d34282271a905ea8df439ee125802fcebc58c625d53f7f2d6654733f34b57638ef64086

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\A66A8DB907BADC9D16AD67B2FBFFDD5C

Filesize
281B

MD5
4ec59ac8f3b2ae95168c9cabd3147151

SHA1
de7d5e63c988b9c27f17a6dd8b3e2d6a1208fe2d

SHA256
165a9f3c3e0d665141953f05ec60ff6959e6b15cc50d9cb2746a26937181543b

SHA512
832e5712fa43c890d03ca4c437b11b23bd74d7c383ee095e2bc9380845f592a468fb5cd1eef7d637ae7d34a0b9bc3c11bef84e78d5c42e7ac78ca05aec026599

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

Filesize
1KB

MD5
b5ab17d4f916b16f107429fbd0724c93

SHA1
39b2c6bd172c89440129f35b481538eb6e7dd54f

SHA256
cd67b64ae69f04d81477ae47f5fa7156d56a698721cd4d3e5e0ade91734084e5

SHA512
788dd105a5bb65532e3dd64f8091481dd7e9e6d37ff897fc1ececfd23e41cbd1065b79d583713cd035fef81ee677f22cef7aa969641826b1c222ea983481f9aa

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

Filesize
978B

MD5
fcd451d100451b87ac42092de358782e

SHA1
f701b9bc3fff61891b31ff0c826f33c874831384

SHA256
116d2c6230b40ac3a295209a862f90abb051b458d16f0a5cbab293935c6e2585

SHA512
1fd1ea3cd1d740d1ac9a25cd48dedb6bea007c89702de2799357a784680f60f649114367d9cbbb1f001e8a9edfa5c9301b00b30be5c63202fd330839be600062

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\A66A8DB907BADC9D16AD67B2FBFFDD5C

Filesize
480B

MD5
b77ed9e6ad2924d4d7097c1137de14c6

SHA1
7d39f431fae7d57538a31c370c369488904a323d

SHA256
55669699c8ba1e173a4662ebb7b761f7dfdc03fc39e999ddcd5acccd80c5495d

SHA512
c8c4e64b945dbf86af4fc43d324d63377076f9b684b1b17439ae45af3540224e99f0742af117e54f6dcc1b1477ab93526e2072e0af27ce44e90eccd4eb46dd2d

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\B2FAF7692FD9FFBD64EDE317E42334BA_89854CA6A0F0936A4D2ECA78845CEA25

Filesize
482B

MD5
2c96899ca58745935f585a814a6595ad

SHA1
5c7f2d3b8cbec807bcb2ffd90095b3f87036d628

SHA256
a45ab670e5c4f822c14941519b846a291b8d9c4bee5f84bae84223f3f33b4af8

SHA512
6d079507a2b931ff2f39e7ff1f8cfc338f2352fe2c2084273448447123e73495f672fee4f4f423d2d9320c169dcbdfc6902d501a0df2b92eedc9186f4fa14774

Download Submit
C:\Users\Admin\AppData\Local\Packages\microsoft.microsoftedge_8wekyb3d8bbwe\AC\#!001\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_B5F77004C894173A10E3A199871D2D90

Filesize
480B

MD5
48deeef68e63f0d1471570c9a01b2aa5

SHA1
1f2a6e4d80865720a1772a75e671b1462e391355

SHA256
66a819b7b7029b7d09c7982c4061ece7ec212276e0e681ff761d315174bec183

SHA512
3c703173cb2f9b5e27e0cc930388b11c65302c09d6a8d99dbc63e1035aba1567faeadcaa5e12693c73be1428d0119095af83dcd7865173608a2e0e979883fa44

Download Submit
memory/348-45-0x0000015122500000-0x0000015122600000-memory.dmp

Filesize
1024KB

Download
memory/656-71-0x0000018AF2610000-0x0000018AF2710000-memory.dmp

Filesize
1024KB

Download
memory/656-58-0x0000018AF1CB0000-0x0000018AF1CB2000-memory.dmp

Filesize
8KB

Download
memory/656-61-0x0000018AF1CE0000-0x0000018AF1CE2000-memory.dmp

Filesize
8KB

Download
memory/656-63-0x0000018AF1DA0000-0x0000018AF1DA2000-memory.dmp

Filesize
8KB

Download
memory/1260-448-0x00000284544B0000-0x00000284544B1000-memory.dmp

Filesize
4KB

Download
memory/1260-0-0x000002844D820000-0x000002844D830000-memory.dmp

Filesize
64KB

Download
memory/1260-447-0x0000028453FF0000-0x0000028453FF1000-memory.dmp

Filesize
4KB

Download
memory/1260-16-0x000002844D920000-0x000002844D930000-memory.dmp

Filesize
64KB

Download
memory/1260-35-0x000002844AC60000-0x000002844AC62000-memory.dmp

Filesize
8KB

Download
memory/2908-339-0x0000024B47010000-0x0000024B47110000-memory.dmp

Filesize
1024KB

Download
memory/4140-374-0x000001E0317F0000-0x000001E0317F2000-memory.dmp

Filesize
8KB

Download
memory/4140-367-0x000001E020800000-0x000001E020900000-memory.dmp

Filesize
1024KB

Download
memory/4140-369-0x000001E020800000-0x000001E020900000-memory.dmp

Filesize
1024KB

Download
memory/4140-378-0x000001E031930000-0x000001E031932000-memory.dmp

Filesize
8KB

Download
memory/4140-372-0x000001E0317D0000-0x000001E0317D2000-memory.dmp

Filesize
8KB

Download
memory/4476-207-0x0000024B74010000-0x0000024B74110000-memory.dmp

Filesize
1024KB

Download
memory/4476-257-0x0000024B74A80000-0x0000024B74AA0000-memory.dmp

Filesize
128KB

Download
memory/4476-252-0x0000024B746C0000-0x0000024B746E0000-memory.dmp

Filesize
128KB

Download