hxxps://web[.]telegram[.]org/a/

max time kernel
531s
max time network
532s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07/08/2024, 01:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://web.telegram.org/a/
Sample240807-b7efya1ckb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks SCSI registry key(s) 3 TTPs 9 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\ConfigFlags	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	dwm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_QEMU&PROD_QEMU_DVD-ROM\4&215468A5&0&010000	dwm.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_QEMU&Prod_QEMU_DVD-ROM\4&215468a5&0&010000\HardwareID	dwm.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	taskmgr.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	taskmgr.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 15 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	dwm.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	dwm.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 18 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\26\52C64B7E	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	dwm.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	dwm.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4182098368-2521458979-3782681353-1000_Classes\Local Settings	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4182098368-2521458979-3782681353-1000\{EC1C8D86-A1D8-42D5-A125-0D5DC44608E6}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4182098368-2521458979-3782681353-1000\{2D2ED60F-C5A3-484D-A6D6-678B0F740F89}	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2836	msedge.exe
2836	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
5000	identity_helper.exe
5000	identity_helper.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
1712	msedge.exe
1712	msedge.exe
1772	msedge.exe
1772	msedge.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
2148	msedge.exe
2148	msedge.exe
4320	msedge.exe
4320	msedge.exe
3660	identity_helper.exe
3660	identity_helper.exe
4284	msedge.exe
4284	msedge.exe
5968	msedge.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1004	taskmgr.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 46 IoCs

pid	Process
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
4320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe
1320	msedge.exe

Suspicious use of AdjustPrivilegeToken 13 IoCs

description	pid	Process
Token: 33	1344	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1344	AUDIODG.EXE
Token: SeDebugPrivilege	1004	taskmgr.exe
Token: SeSystemProfilePrivilege	1004	taskmgr.exe
Token: SeCreateGlobalPrivilege	1004	taskmgr.exe
Token: 33	1004	taskmgr.exe
Token: SeIncBasePriorityPrivilege	1004	taskmgr.exe
Token: SeCreateGlobalPrivilege	220	dwm.exe
Token: SeChangeNotifyPrivilege	220	dwm.exe
Token: 33	220	dwm.exe
Token: SeIncBasePriorityPrivilege	220	dwm.exe
Token: SeShutdownPrivilege	220	dwm.exe
Token: SeCreatePagefilePrivilege	220	dwm.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
2492	msedge.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe
1004	taskmgr.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2492 wrote to memory of 4388	2492	msedge.exe	83
PID 2492 wrote to memory of 4388	2492	msedge.exe	83
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 1848	2492	msedge.exe	84
PID 2492 wrote to memory of 2836	2492	msedge.exe	85
PID 2492 wrote to memory of 2836	2492	msedge.exe	85
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86
PID 2492 wrote to memory of 2780	2492	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://web.telegram.org/a/
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffeed946f8,0x7fffeed94708,0x7fffeed94718
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Suspicious behavior: EnumeratesProcesses
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5132 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:3052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5600 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:3796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6984 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=7552 /prefetch:8
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7556 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1896,9920308466894847584,14922047949979685630,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4896

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x518 0x510
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1344

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4300

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1004

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7fffeed946f8,0x7fffeed94708,0x7fffeed94718
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2736 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2152 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3736 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4040 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5056 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6872 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7512 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7452 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7764 /prefetch:1
  2⤵
  PID:180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8020 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=8304 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8456 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8040 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7220 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2964 /prefetch:1
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,11519956545607519028,5557110180161825388,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2488 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5968

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3604

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5060

C:\Windows\system32\dwm.exe
"dwm.exe"
1⤵
- Checks SCSI registry key(s)
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious use of AdjustPrivilegeToken
PID:220

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7fffeed946f8,0x7fffeed94708,0x7fffeed94718
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2580 /prefetch:3
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2968 /prefetch:8
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3648 /prefetch:1
  2⤵
  PID:6112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3656 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4348 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7764 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7852 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8312 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8340 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7572 /prefetch:8
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,2754996714803114356,18089367157692295414,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7572 /prefetch:8
  2⤵
  PID:2948

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3656

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2132

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

273399d5-3f8b-474f-be7b-ef4c1dabe1bf.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\273399d5-3f8b-474f-be7b-ef4c1dabe1bf.dmp
Size 6.3MB
SHA256 df01eecbabaf49ee30bae71cee7a4e1152543f23071fb647012c038b49ac1552
MD5 443f0f109eb741788bfc5d2f999b4484
SHA1 293df616d5b2cd2cbf1fd5ff00f9212abafb2cdc
SHA512 fa1e93bde04efbee0cd8abb414e5d0886d8f08d5375fde40d3b83ab98803ede52ef6dbbf4e55bb661fa9eaf3d431208991a2cde57274179d08c03b8058f6c04c
SSDEEP 24576:L/phTXRiji80e9Rb7Tm4u8CnNMRMt2JO/je:Tp+m8r37Unt40/je
MD5 SHA1 SHA512 SSDEEP

Submit Download

6fb71b6d-d783-44e6-8ced-e3b892128245.dmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\reports\6fb71b6d-d783-44e6-8ced-e3b892128245.dmp
Size 6.7MB
SHA256 73782ed9a325b72165f99b26d1b398cc390b9f04ff7d1e3064d7561fc77e4af8
MD5 d170996f376b4c654d7ac138433dfdd9
SHA1 c581338cb70d9c75e01fd2cc589221b8daa688b8
SHA512 fe7d139b70e98c1a30257bea7c1ed89f1ab554dd441623bd0236a4eb98790acff9f20725d49ba41d348591baa318950e12f4b16d3abdca8537244fc5f2f8f085
SSDEEP 24576:koBN31MU7i80e9Rb7Tm4u8CniSF8QmBR1wvxJrsrMPvntj:lNs8r37UnBWQX9
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d7be4042a1e3511b0dbf0ab5c493245e4ac314440a4ae0732813db01a21ef8bc
MD5 111c361619c017b5d09a13a56938bd54
SHA1 e02b363a8ceb95751623f25025a9299a2c931e07
SHA512 fc16a4ad0b56899b82d05114d7b0ca8ee610cdba6ff0b6a67dea44faf17b3105109335359b78c0a59c9011a13152744a7f5d4f6a5b66ea519df750ef03f622b2
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 3aebbf9c3e59508c7eed3efc45f146ac66f30c4a0f902ee654e0bc7cdcef7eee
MD5 5d5a7003cd4f7af8e08283a452ace08e
SHA1 0657e0a3db5d0b4049d6532ba8f9d5d7d607e86a
SHA512 daee03abfdcff7c3cb34b80cbf8f40933a37fccac997b687de6330936453ca8f8da93e162f53a5de27c9ac6bca6f9e83254e6e4fa6d37bf433e082cbdb5d7dd0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f3ebd6df338d1f1601364b4066c93852b68e8d70977858fc530d08df7b88aa26
MD5 b21e439bfb14154b281bfe33abb5becd
SHA1 f5225460064244de88cee44e857335377155301e
SHA512 7723efab5b0bfeda10a27dc5697b8014b43ed7b0c784b96f358ed1f113e0d3d7b0c5a93fe8cd76c9a8533f1bd1d4c322b7bbb2388489014fc462141f8bd171e0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7b6bc306e44c5163d4c88ac085c2e9fc08a3d69684b830378738e6b3f4fa8d61
MD5 86917c37c3c2093174804e0631652f04
SHA1 c1e27c2e1c9d38060c266f4fee52a923e829e959
SHA512 84306c9dcae0f85656dba3c2e2eb5108755e549ea4a3311418ec2c0e19788703f968ff0aee117a9b01811d1de9d968bebdfb2c934878f2bb672638061dee8570
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b3321a579ea049672eeffdb4ee3b498b76a4ecb848b34c7777d9e56c7b118ef4
MD5 33b5f0d34423478df718d3e9657e97c4
SHA1 ef44b7da7796f5d3092774de476b2d9c3aba4200
SHA512 ec8289bf59d7c516230c6e49521b2e73a449e940137d109e58c3c9644cdd2636dba6d9dd016c39d87f43e2e1ea7c13c77371c74c5fc4f1f5eebc22954d06b0ec
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 cc34b8f8e3f4bfe4c9a227d88f56ea2dd276ca3ac81df622ff5e9a8ec46b951c
MD5 983cbc1f706a155d63496ebc4d66515e
SHA1 223d0071718b80cad9239e58c5e8e64df6e2a2fe
SHA512 d9cf2ca46d9379902730c81e615a3eb694873ffd535c6bb3ded2dc97cdbbfb71051ab11a07754ed6f610f04285605b702b5a48a6cfda3ee3287230c41c9c45cd
MD5 SHA1 SHA512

Submit Download

f_00002e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e
Size 62KB
SHA256 8bf6fdda34cb70a0e5abb753af6440a64d37ed2fee81ab1d9c478f7d77aff84e
MD5 0800f316866f3b20e5443bf0b6c133a2
SHA1 0c26d720ec1078b683068d5586b3a204ec118bba
SHA512 84d9961ef0b3890094c0809750708d57ab23a9e21f76fbddae37fe04443b44c693dd087e51ed06e5ea2900f1fa7f2bda76f8991d3f8396dacfaf923438e48d75
SSDEEP 1536:pPELqeZGhXYJ4Arxjlk2+pSYfF6K40QwFGYAzYXTmr3U9E4CKDF5wc:pcLqe2oiA9KfF6FZzWTmcE4CKzT
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00003b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003b
Size 20KB
SHA256 c54a6c3031bf3472077c716fa942bd683119dc483b7e0181e8a608fa0b309935
MD5 6931123c52bee278b00ee54ae99f0ead
SHA1 6907e9544cd8b24f602d0a623cfe32fe9426f81f
SHA512 40221fe98816aa369c45f87dc62e6d91fcdb559d9756cb6a05819f1cde629e23a51803e71371f4e4f27112a09489d58ed45b2b901a5f2f00c69c082b3576057f
SSDEEP 384:KC6Ct41tIO6n7TN51LNfGvh7ClOU7bW2l0TJH4laPvjJnGZI8YQMj/gS1/0ba:KCRbZjkZCx5IJHHJCI8Yzgyce
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 a85a364606151ed6ac857cd213f28795f596d641d5efa33d72b1346280281b37
MD5 57b3d0471448b766d3d489a72432f075
SHA1 0ab2660f5a78f1347f73966f618aceef7fc9676b
SHA512 c0791e495cef3216e77490c61eba7085a7c0b0ff22bdd25d4e863eb73264cc9b9c239d033a44bcf2c3f03aa44e79c7c2b506956e6611685c69b5d5cd118ac0a5
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 5bb8399283cd946777eed61cfb17afd80fa7337d3ff28c4e34e979a60ebf363a
MD5 f7b0ae8262ff86ccd1ee14d990e1efa4
SHA1 95748dda9482e836bd7300f456cff55a18551796
SHA512 e3801b2dfc1d1775e6431d2f839984012a66832be2b83fbca211c0ef00c86db91dcc467c72a19100f60e751149efd8962f533317cda8945d48223d14af2adcdc
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 3136475ebf9e86009dd1d3045e1a627aebed60ed33971b315d694a316b4ec8f0
MD5 bf3c8e7d96168b88a0caf26104fceb90
SHA1 39a2edb6dc6768ac9b547469ddbfa14f81de9df1
SHA512 fec4eadb28401b63124803555c2a671e0638ea10cb2f200fa39579cf4e0c89003ac774f9b4e59c0c717e333d7e3085a2547c90ec5f9182c9e94add49d537e778
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 ca4496d3d7aae54f678cf9d625e67e1a1b2c1343dff4fc03c8477dc34df4a1fa
MD5 54875682514b51b5fee1709884e9bc98
SHA1 898f99304d056ca27c95a38c8d92c90afdbeefb2
SHA512 3a9cf6bf6c92c1ea81e5551879c4a82c0f8fc8174a500a5f28ebc32bb674821c8be3259ad21aaed4a45ea3098e3bf1d8706b577977ff129e2955062d7c5fe784
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 144B
SHA256 3885e633a4c101719c5126600748383dc3dafa8298777eb150d884dd30982681
MD5 123bdcc27351e85d28bab39886c9dc6e
SHA1 5bd0583088895688be0309ef0f46c308fcf8a47c
SHA512 5d1423407889bf85e7e83cc5a54ae087be2ea4b17247fdd5e5ff53de3c13c89a52c13de900e5407b5bb843d3bdf17faf3c5560004adb6f4c6f6a34a2a01d061b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 96B
SHA256 8b9ff216c76e2fe7a558f2ccef2075d922b44c644debd3f694564339c5f35f4c
MD5 db3fc430898520eb108c97ba5fca4315
SHA1 4167ea2603672ea9e4ffccbf4e2e11094a16802c
SHA512 24e31e980c63ffe74555415b514f0a642e42046d9bf30cb9e2911f6422ea95a2937afe66a7f77eb6ec00c1eb5467d7029b41126115580b6aa782c54f55f86f10
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 144B
SHA256 b4cac99dff48eb1a6c9189f04e7c56be2ce6dcec684e7d63a843e4ab5e5b936c
MD5 141d4545702e051b7874ca02002ae932
SHA1 a698f529884ae5bdc7c7932219e743573130bde9
SHA512 22f2ec609648fa3ed87535ade1736cfc919a75ef3b0fc58eecfd5bca91894248aae119a785e3f85c5e04e1cd67bee6bbe1e8dc33bd24a395d1ca975236e935bd
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 144B
SHA256 ec9eb21402c9df0e3f96d3aeb7e8067c24240390b0a3a18c6ff8ace7ee4e36f2
MD5 76193fd985dd85af95661c15efaaff6c
SHA1 07fda7b6e19d4d5574c95b7d73a8534f631459f3
SHA512 4f0723dc6459de71c7ee89f75314e7a927cfc7cddf1c60f6fdcee2f0bcfa4d1563104e84d8794cb205038f4428942f9be05aa3dba80a66b282bf268c873ab781
MD5 SHA1 SHA512

Submit Download

Favicons

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons
Size 28KB
SHA256 f65e6ecb252722547e71b674ee12cc8bc628aaa0af5ea732d10aa9acdb4c4909
MD5 209f4bd013300b29405bcd1856c810fe
SHA1 03678be28582b218189c918b10e30e5887bcb8ad
SHA512 d5d2a52c807972463fe768be7b8f77aad32325550a32e451dfd725b737aea3f1ba2142c60b2ed964c78387f00140d73c288c2dc7fcd9e9124cea552da544fb43
SSDEEP 192:0N8uLQcKtauw/DL1O1H4oGsplVOGKAXPh2PBfpwq3:08uL3KtaFd4GspuJAXPh25fKq3
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 124KB
SHA256 2a440e38ecad13f834f49e3639be93afe70866edbd5de5c85bb79a5ac1969e0f
MD5 104a21fd88bdc2c3603507e6551d4e3d
SHA1 7a5b2fbe6281a394414b2678dbc14341df283eeb
SHA512 f3a38b95c5d94726497d82ff781f2c04b39f277dc133e739eaba14460d6aa0ebefd866778142e18d65d913604b9243a4d30218c030b15a7d92677791c02781fd
SSDEEP 192:74E7uryIPlo2zz2O94kdKO6cVxv+bDo3irhnyTpvVj3XBBE3usCHLwt:7v7pU5vKO6cLgU3iVyTpJBBE3usCHW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.blob\1\00\22
Size 1.7MB
SHA256 306c26f523d0608e36bba0f441fe7489848bb40a5cacbe753d7f9ef1933c975a
MD5 b0e3339e09c34a3b6b7b2072b309d9a5
SHA1 0bfe0265d34d3ceb36aeff3fdec8538df894e4bb
SHA512 3b9876d5c8f81d2a24549cbf43adb50410eeb4b46729adf44270a09fc907269c4d9c846e45519509ee44297ec964639cdd13c0e93464c79428036a2dc105a478
SSDEEP 12288:OwQIaMiMPvnBuw6Z7BZ7CVexmiqUd62ykMAMN:oIaMiMPpuw6Z7BZ7CVomirMT
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.blob\1\00\33
Size 1.7MB
SHA256 a4253223a8ff5aa147b9695529898ae5bfa21a9e97ae0af60a751aa2ca0b875c
MD5 17b0c87235ad1f7797a64361877082ba
SHA1 d0e925e6aaa9b8b93f9a6ad32398a196fe899230
SHA512 a10ca7acb8995956dd9307eccbc1021835b8f5092670432f26cc51a331c16c2629ea98ab61ea2a2cc9ef90eb250b3d7165d40fcabcd1d5c6d2a28e3f922e22bd
SSDEEP 12288:YwHyaMiMPLnBuwYZ7xZ7CV0xmgqUd62ykMLMN:xyaMiMPtuwYZ7xZ7CVGmgrMq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.blob\1\00\6
Size 374KB
SHA256 d4fffbdb00f0d894845d2b707c7e09bc8f0e7e57cd30d4b21789444cd5137e99
MD5 1f4bb9d3258c7ab8489fc98a2409102b
SHA1 02fe02cf3b69a0eb14d52f7c0490993cfcd0b3f0
SHA512 d5aae0998ef6dd797b19373f4803e8b2aac3ecc21f49fb9b76259ac78d673a0370b49b1d95eda0993d49970632498b4c9ee03ebf142c2ffad282d3f81b406836
SSDEEP 3072:6I2IrZFaFaLsPjn/WL+LwXc3z02FhiwyPUFqDa/XU1MN:6Z9byMN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_web.telegram.org_0.indexeddb.blob\1\00\b
Size 478KB
SHA256 f8554f47d7b96a4f26f94e46d8c26f1ac081f1e44d9d411d58b47d4e91f15ece
MD5 d62513989fb829c3f5a30bd4a04fd01a
SHA1 8cbaf0da9e143af80f9acf2a785c477997c3a368
SHA512 1ee08a4566ec8bdcc6d5e109693e304368896fe6d9681a1e10b7c8cf5d8e3825c47d6bf43eaa5db1749a7b2d3dc221f44efd0a0265cb2166b8b871d79b253edf
SSDEEP 3072:/IeIKNZtAILO8YmnsTyTK2M9MPB7IIFQHZJ+LwXc3z02FhiwyPUFqD6/XU1MN:/h7FyMN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 6KB
SHA256 f04e4c13ee7c9b01d75e10611f27988d6eaaed8c4c05c46995ec544410dc05db
MD5 e972e35502f645028a1f85e5f128f2f7
SHA1 0a221c09c722d5989fdc4db6f525cb32d71de69c
SHA512 0fed36ae3f93138c9e31a316156a1e2c07f8a86f4486ac1da003f6b752d2147f69855e83b8fbd4f0509b15a6fa468c3d0b5f37b084bbcc755e1fc7143a1a401c
SSDEEP 192:lL+GzTDsFu06EW6VFcyMHMWWrr9Or8JMBNwlzWMYsL6bZQ/ea30a:lCGzTDsFu06EW6VFcrsWWrr9Or8JMBN6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 5KB
SHA256 3e3e96645a32d5a1cf5ee6c2f03cb0d9179844efbec632dc62e6f9bcc41a35a6
MD5 ac33c13ec82c38cd5c493a3fe0666ea1
SHA1 af50bea884b280c50150963a7077610e2ba52bef
SHA512 4386f4547cdc58c728acdc883450c6ce382b4c6b6cc111a64921a5e3c34ff2e7cb88bcc981a8a944b7eb535b85a3cd4163f33d1348cdbb55246b32603e4d5cd2
SSDEEP 96:JHMiNMrB0b6VFFSB6EtCipr0/GqGHIi+GMmZGdGqaGZO8G45GfQEZGzG5WGEdzGs:JHMyMrB0b6VFFSB6EtCipr0/5sIi+z8m
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 315B
SHA256 0c4b6c4db91e37a6803420c545eb05ca3c30d9807105a424af65fe79a73fbd3c
MD5 b814e134ef4942f2057ac641ee6949a7
SHA1 2c9f4759284b113219f27034bec0fb3f06048e91
SHA512 c9140e6d63a2b8ed2eba8de17eee690b68e18b13c7991906049896fe18c3c61905b711774e650f480acc81004581348f8447ed19a8f0b3d8a41ccec2d7411302
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 5KB
SHA256 f4270662b808ccb1589e006c0c4683133ff619e6a3c770b0dc91b3a4d65166d4
MD5 a335be51ab813e07b380a86597de2695
SHA1 c271a6d22f739daff4371efd26d6464b242a3339
SHA512 c7a4acb2b10addc8c5d29d887425de7f48ce500a6d2c28c51cbd9a5660966cdd3568e5e2ba800c50b7706072eb2770097635611eec147bcd6397f8c15237fe83
SSDEEP 96:JHMiNMrB0b6VFFSB6EtCipr0/GqGHVGMmZGdGqaGZO8G45GfQEZGzG5WGEdzGrxa:JHMyMrB0b6VFFSB6EtCipr0/5sVz821Z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 6KB
SHA256 2f04676fdaddd8d12cf74b4e807f75c9a9882f381ea8971dfa4b47537b93dab8
MD5 de3a2d0ca6ffa6a641ae42d40c4e7184
SHA1 e46430d327bbf9f5ed73b338fa8da7fa8e2162bf
SHA512 e3a1b53b8d3f6d547239341fc8566796e2c00f19ece1818bdca32c6f2d854b764b96bd28865351a91ca71c41dd3ad169fe1e055040d104374fe2faab94c18031
SSDEEP 192:c3/e5QBbbLWYqzWMAWkCrSWtHMyMl6VFB6E0BsTizjmLkrB9+/x:c3/SMXLWYqxAWkCrSWtsrl6VFB6E0BsL
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 aa73c24e6afc04a92b465b3f5182cafebf58c6df3dbbef61d03bd92b4fd91008
MD5 e56180b3a48543c9756f04d854a1bb1d
SHA1 21a57203bb2c9893a2074be6f120f34db8714489
SHA512 093c98280479ebcd7c4a3d93bc8436a56f66f5e026e2be69bd2ab424e8d647a27c976d6f5c5ec88cc52e54db5dd976431df0cb5aba40f86844c089ec9fbfbff7
SSDEEP 192:nGkCcrrooJ9WM0UZYMSuZhYz4Kkcc0ZNb/mkwTKLVuVx2pw0TO9ufSVJ:nGQrp9WdGYecFrfV3lfu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0399f6f1e27a1f50851629e98dc700da1d65054862cbf6cc6cd95cbcf2d0734a
MD5 c185b620f626590413315a2d386454a8
SHA1 ea30de880347d7eba7af895ae08c04fa04853249
SHA512 ddab0195f38ebb28adf028ad1c8f3ea0dbf320a5773bc3aba05bb9640072bb2456705ceb8b0e27ed5d0ecdaf9fbfb8d7f1767d8c10f1c6cabd3916d5d22244d6
SSDEEP 96:nGkzGV810wgbwp8QWMoiVmdeXwfjNIUBus+UWQyV+VDkGAiEwb:nGkzJPIXQWMnwfp5f+r8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0075c20e44ff50bb7393d6e621bddd9414b4bee39ebeda170b88cb6764b74b48
MD5 9cd9b0839c4052839e5c0b9024df949c
SHA1 f3f9a9edc09046b07375f4a9b6ee662f8553e8e6
SHA512 ae71eb5462e74d800985e031991ec43f8c9e1966e84be347c7f88fc275e9d64de9fdd96a8c18d38511fe59fdf77a0626726d315c74887aab8d743a1f01bcdcef
SSDEEP 96:nGkzvV810w9bwp8acrWMoi0R5mdefwE7uSuZh1/R6c2IP9Bus+UYQyV+VDkGAiEc:nGkzyPdXacrWM0RwEqSuZh1cc2Cnf+V8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 da1c1f356434d4707a0dfd510dfae81d0314d697ba6f7f45d19e0b173093bc64
MD5 e571df4d42fb342caf3248787a4e4b12
SHA1 a5735e028e9886e8471f9f09720ccb41cfd8b071
SHA512 6071612effce42b5a14e0892b6cb8c084b92096feb8fd695e277dbe7eb4afc7648fd8d3011c89344aca6f03ec6c7c4b5885dfc2973b71695576713c6d5fe73d8
SSDEEP 192:nGkzAP+XacrWM0RwEqSuZhYzkcclEVun52Cnf+V8:nGhPsWB0Y4c7VAfv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 69fc24aa6bcac46d131151102660a19fc942ed9b0ef9c7085b9798881db23a34
MD5 14093d443ab1313cd219673e5c36754a
SHA1 fddf91ba148b6e11a215148075e487be4bfdeeff
SHA512 12830e32daf5993c26df53e511e0ee75b9f82c4094d7a280b9187cf4a7026760ac48bb2e934769ab36786c33fe927e5e8c856336be5a58533ab84aa40785506d
SSDEEP 192:nGkzAPrXacrWM0RwEqSuZhYzkcc0rYjImkevKEVuV0G+FPD2Cnf+V8:nGhP/WB0Y4cyseVxfv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 56254081d294e37e076dedc2f3a3dcca22ff9a89f296588851e487f1ea50996a
MD5 85a6fbe3fb894cf2d70876cd3dc51948
SHA1 4c98fdf0ff63f3fa49cae708933137c7cb474d62
SHA512 f5928e55f5b5d70d304def696b670ad23055887716b1b50d2dd17923ca1e20194b3d3e210950c1b301254c79881582c7ad010751625748f32fb1aa5f26c80712
SSDEEP 192:nGkl8krDn7WM01Ejg0SuZhYz4Kkcc0ZNb/mkwTKLVuVx2pw0TO9XUSf1D8:nGSrHWXeYecFrfV3qfC
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 e2bb78a0bda22fe05ab823fcf59774427d16e7eb634409cc4010b81de9262945
MD5 fbd4bbba5ea09552f46d7dcde1e02096
SHA1 4e6bb0314f01c958f003063bba6a1bb880408644
SHA512 26df5eb2c659e73bcbc3c6c44da362dcc11e381ab21902f571f94c3b77009fef265084df5347aaf8b12093e3028f7329c69fad5005149ad9ec04561b50f4a617
SSDEEP 192:nGksAPrXacrWM0RwEqSuZhYz4Kkcc0rYjImkevKEVuV0G+FPD2Cnf+V8:nGsP/WB0YecyseVxfv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 fda55978ab7fc56fd960eb9b15f22f11e97d487c4be258047020e2055c5bab1f
MD5 63b55c1e2cf24c63a5072baaa92e2583
SHA1 574e111b5fa0c52c1ad8a4e5d6386f177e64f70f
SHA512 9282ab672511bec6e9452441fec4e3df22671fcbf4a9e6519808f5cb9d42a64f395eb015540a35f1d90ffa3bae3da180115090c4af4021f4962f525aa810f226
SSDEEP 192:nGks3lrotcrWM0x5EZEySuZhYz4Kkcc0rYjImkevKEVuV0G+FPD2uHfPV8:nGzlfWNYEsYecyseVtHf6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 90bb98beedc937503c58e51fc398daa2952dc7d41291787597dbc02eccee134d
MD5 3b31e320bf641a45283e95a6b3b7795e
SHA1 34f0043966f199ebaaf3fa2c9555253647572a03
SHA512 ae6301ace130478ac0d218534c36a7449661f1b2f17dbbaf59dffc615bf58908e46d5a79257062ef029b3dd9712e3f1abe7142e0889df568834a815f0de6792c
SSDEEP 192:nGksclrooJ9WM0fexKSuZhYz4Kkcc0ZNb/mkwTKLVuVx2pw0TO9ufPV8:nGolp9WEUYecFrfV31f6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e4772fb01801f87d11b3ccbc7b9bad6a3b7b287f934d5c770b3af6fd0ad7c3db
MD5 8a4e9969edb9805a6693752911a3f91e
SHA1 7f7205ba056354a3f0b653e0b62b3a96999187c0
SHA512 9cb320fca123236b03160d0a78a6c0e27f61f69ff641d65520006f1a73054e7751d77514c08d9917d8fcfef2ca20097b07ec872bb453100360028394c2cb599a
SSDEEP 96:nGkzGV810Ugbwp8QWMoiVmde5u21j2yqus+UWQyV+VDkGAiEwb:nGkzJTIXQWMJu2h2f+r8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 2b428739515e9213875bbf1299b964b239baccd669f3192d897fb4f56ae1abdc
MD5 163c4fa2c8c483888cbb8601007fe0e1
SHA1 cf152b851d81d9085719476408a1eb3d20b7e11e
SHA512 08b2f99fdba39bcc40fa6310352e3a047767fd46c129eea74f18efb0f2e3731210ee6d8e96ba93275256b2b8175f8231682d0d58d82230ba7122617d0c0fb862
SSDEEP 192:nGksdrrn2J9WM0UZYMSuZhYz4Kkcc0ZNb/mkwTKLVuVx2pw0TO9uf4V8:nGZru9WdGYecFrfV3lfJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 09c06c965620973634dd9f4419133fa94e0200be655c717bf21131fa45a2764e
MD5 c1b34e6c2f9f9ee34d8e7b7d4b25fa17
SHA1 7789c17f5c0c094e59202624b8a0cecef9e48ce4
SHA512 9ce951d8b831b9563c323a7d9fe160bfab250c1a89fc3450222e9c019afcd4ddebf6e68c83960bb82b396b2812a5fc3f4d645b1d41268ec9798df08b6d0d8388
SSDEEP 192:nGksdrrnhAWM0vQumSuZhYz4Kkcc0ZNb/mkwTKLVuVx2pw0TO9ff4V8:nGZrOW5wYecFrfV3kfJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 e40f21c41d22cab598e06406914c1975c4bc647568bce8342c23e37d11c0de1f
MD5 5795718cbc0b99870dc9da103e2dafa1
SHA1 6e9a9836245ec3f70d631164a641b87d61c560ef
SHA512 0235c81b555956b19d16e5b39b245e6247e2a4e9806bc8b04bbeb9da614f6fe20148e9df92cc017350e7f847f897a954ffb89cebad2e6171ba20dd5d7e84e052
SSDEEP 192:nGkCAlrXacrWM0x5EZEySuZhYz4Kkcc0rYjImkevKEVuV0G+FPD2uHf3VJ:nGEl/WNYEsYecyseVtHfX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 89b1fb0fd3b389e3b959346bcd53ac1bdab2d786402569bce4c5864c5bba4114
MD5 4be7bd284215df8e9cfafdd38f98d394
SHA1 5cc90b15a7a975cdd5e1c208a055f2e9cc50176e
SHA512 47ea760bb704b99edd5e7f06890fedeb313d7560266a32affc2ff2c736c5ad61c97f8d209c6d1f37c5f66316c67ef49a3cdd8e9d9116e7317f314ebfcabcb298
SSDEEP 192:nGksAPrXacrWM0x5EZEySuZhYz4Kkcc0rYjImkevKEVuV0G+FPD2uHf+V8:nGsP/WNYEsYecyseVtHfv
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\3562cc0b-5877-4ffd-9461-81bee41bb565\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\3562cc0b-5877-4ffd-9461-81bee41bb565\index-dir\the-real-index
Size 9KB
SHA256 eae6d1171ae147fb90556ad51eb81b68873bede9513807aae877a99495bc9d6f
MD5 ab5cb0428c008140e761f3fcb3ace4df
SHA1 c4d439f31ae8c6afb73d711dff45a58a5fa9093c
SHA512 ec1495c5a484b3496f520b3079d42d8460a9e96f77519faf1c2c7bd7ff87f1b9cef72ff4e33804aeafa62575429420bade7197da14851d8e7e1160dc622a21ad
SSDEEP 96:HOmKZ5KX/mkrQnvN5++JZ99UEvSml7IFhbmN5VCx2YL:ZKuQZJZ99UTI5O2YL
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\3562cc0b-5877-4ffd-9461-81bee41bb565\index-dir\the-real-index
Size 9KB
SHA256 69159d06d2dca84d39d91a07bf4c4850609bbada2888190efbc19f8fed5141b3
MD5 c188fa9f6efc8ab108d2b5ac1fdcd085
SHA1 bc044e2838764a0b223b67b707910ae37a140b38
SHA512 2061e3e781f4f8a81d615856bc33cbde9f05143e1f82892c4c50a88f9dff6fda6e2f6775db05aae403014f73a1abf93b435be04f0e19e61574cb4d87614c28e4
SSDEEP 96:Q6y9Mt0QToF57ltH64o9DFXtklZy5wnpbXUybmDx1+:Q6vtCLo9DFb5+mF0
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\3562cc0b-5877-4ffd-9461-81bee41bb565\index-dir\the-real-index
Size 9KB
SHA256 202890597a9e9473d1d01fb866a9b223626ff92492360fbd0c44f514333d83c0
MD5 69cc23db469b7e3021a9adc8492cd890
SHA1 20634b8ff22be26f4331c168be8379d8fbc37530
SHA512 f293999a3df2c1a93345496d1b39bb038e7c1cd096203d39b5ff92278105fa97998f9daee63770da45044ad4a9b186100ff3e1aa46fb30206b8887e90955944c
SSDEEP 96:I6y9Mt0QToF57ltH64o9DFXtklZy5wnpbXUybmDx1M:I6vtCLo9DFb5+mF+
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index~RFe58bb8b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\3562cc0b-5877-4ffd-9461-81bee41bb565\index-dir\the-real-index~RFe58bb8b.TMP
Size 48B
SHA256 ec2f15bd7a8a2321aa4822f9f075525f11bb84dd9b55ecc111225ee5f6d9c807
MD5 c4553b41d4222364c2240109ca04d6df
SHA1 a274cc36eb14c69db653651f304dd8192977f8c2
SHA512 0d4a72e7d8ca1a441a3d3d97cc78ce7abf9f6df5dc7cd95a0a91bcf3d6ac872abcca00906f0604f2a950654d701c449e18c3e1d5c3aea5c9ed2664e1ddcc313a
MD5 SHA1 SHA512

Submit Download

13a53d0cd21190b0_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\13a53d0cd21190b0_0
Size 64KB
SHA256 c8907a11a491d1b1a4633f9c238db535767a9eaa952ba4be87cd3426e3eca937
MD5 e748558292ff944abff6f584529773f7
SHA1 bc2c07cd3399fa0fc69252e353a3690dd72e6426
SHA512 688d7ae52680da062dbad59c98009aa7442cfd8e0d9a644b583316aed9b2991564dd23fe565b31aafc6756fc3e5fec9da9363f4ac56153595dbf7e4e1eff32b5
SSDEEP 768:M6T4cK2yQ6eO1P2WgcdxazvszXIgBB1ARna76Ae/FqsSwYxRrqhlr3NqPc:Q1Q6eO4+IUzXXsjvi1alrck
MD5 SHA1 SHA512 SSDEEP

Submit Download

3524c27a4e565348_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\3524c27a4e565348_0
Size 986B
SHA256 511eab94cf4dc13d36c6a32e75470a994e14fe7d0fcb160c607d36e0678c9440
MD5 7a7d0a214844c72e7f5cae3472ede21d
SHA1 7db7d9023696cc2a9c0ad89634c458688a86bdcc
SHA512 079d41ea2b1f960cf83aa8c1d7ed15e8111657e9a3fee13078237eaa360d12e7dc76870fb939633175291ad3c0266f58e0502c304b5416edb422b41b23035896
MD5 SHA1 SHA512

Submit Download

7f15473f198aae9e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\7f15473f198aae9e_0
Size 137KB
SHA256 cdfbb927176994ec398983b9342e63aca7c93efcb271df63369875fcd01d5e30
MD5 606d92776d5ad20aec080c103ba20e74
SHA1 bda33549199d74db22a7c4a1775cd171ed0c183f
SHA512 9af6dd387ab9d2b782b5450528d092ab5d5370284bc8aed955a2541a382394f7adc3dd09a5f531836cb0894728da166ed0ab163279be991a80e0de9666b88361
SSDEEP 1536:TW3M14X1jDx480MHyQL3YLZHZp+snJhcssuovxz2RsK:+Xxq8mwmJs9S
MD5 SHA1 SHA512 SSDEEP

Submit Download

8f04ff4e512fcdca_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\8f04ff4e512fcdca_0
Size 310KB
SHA256 21659fd4ce2209aed34aa9cc8c8ca8e693b38035611668d1c23fe717fe099ec7
MD5 842c52bcfc42d625a5d5eb5232403f80
SHA1 3848a5a1b034e2382cafc8f15ee1d69ec10b81bc
SHA512 986469b3f61650ab467240c2359237943316820df9f39d31c913f0864f5aec10c286fd76e771bfb9e2c38c763cb609e085f1ebc04f2bec14e02fdc6c3183cec0
SSDEEP 6144:ukMe/HUtjAy9pQFJSEH7mrqSiCaLCA5O9io/fAi7BPqk1b/2i:ur00t9QFJSRrzd1F
MD5 SHA1 SHA512 SSDEEP

Submit Download

9395b8c7644fc480_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\9395b8c7644fc480_1
Size 943B
SHA256 835baeacf2bd97030a68e3d5205eeca6f70db622bc26ff475b5c8b582c2b72c3
MD5 d4a5b7a372588f15f8c91788de56ac5e
SHA1 8d2088e8b8c6736ebc8d56d75a4391c8433b645c
SHA512 c8c7b99640f57e4b04f14e7174464f1059ad899b4e92b89fff1ff92afb297762f83556e26f135e9fc09926321fbe6e7054d0f1933aad902ff970516e12b87b0d
MD5 SHA1 SHA512

Submit Download

c2c53bdd406b82fe_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\c2c53bdd406b82fe_0
Size 1KB
SHA256 eed1c54fd2bae396519b45a7cc17c2611197858bd8ba7de67b346d1589f84ed0
MD5 72e9090b8d77e3690f9303b5124b3507
SHA1 738c24b739257ad524f129f7a4a5762e193006f3
SHA512 e853b345c86e2e52fcf22db013342c1a8cd511afdc0fc5a00f4cc3dca16d32ba04167a07973741989f5e36cf41719d2ea5cf43ada1f7c210f9fd030e41c8f10d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\index-dir\the-real-index
Size 744B
SHA256 f0d44c51de9c925f436606f9b5d9e942a9c0e1ead1ba24505124c8223ff735dd
MD5 912032d358426c80e60931bf294ec6aa
SHA1 7d4a2c71111a8d79681ab34c36fb0e64ca68fd42
SHA512 fe2cdf30fad71a400e2ac5befd518551166eaad10fd17bdb5fcf7455ccccc41918f0606098b3162099cf901f6cea0d98c505398fb82dbf9821a806d4c572c1d0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\index-dir\the-real-index
Size 1KB
SHA256 e1037ad3fa896563e29262f6902873cac6915e884184dc31b1c6863a0257fc69
MD5 cfa8bde5cccc931e12e1c4e4801d81e5
SHA1 ecf6c7fc6a27ec102e07c1d47c89ec1b50ddeb9c
SHA512 2c252e5c035656bd37add7ab55eb384edfd11f6bb0266be4a05fa7ec8308e8a6484ccda72626fe2e0f5a9996f0170b4c5e10003837702b1b32930337dae65e90
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\index-dir\the-real-index
Size 1KB
SHA256 fdf1c213760590c52a910a0f3749642d82e0377421cae8f700007f871f15fc96
MD5 8687b6b74fcabb30e1d9f6434d90ad2c
SHA1 2411e18d820b459612dfada45fa89888759b2657
SHA512 632681602cea42010ca8cd2058ae7b1ebd8e120b24e3365922156c58fe7e0ffdca46eb360df3a73c7f3fadf0ea3786d95aad029be8626b3e4c57e5914905436e
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe589824.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\index-dir\the-real-index~RFe589824.TMP
Size 48B
SHA256 3bf5d578e4726800b2621d9f036edadefecdbaea6d176e9d2afed8aa05a6caf0
MD5 52d920939f1cf6eb20965d37b5be6eb1
SHA1 d8ca3a67969dcdcaa77bd28799099ad44092514d
SHA512 43da6fef4996ff9b753047240fb30a4e9487743fb8280951c518cfd2ac42142f49b5f9d0f385553817b2f93d08c32b51cf27869df9bb5aeefa01b53da53a2525
MD5 SHA1 SHA512

Submit Download

todelete_233530f9420ced31_0_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\378449ff-8e3f-4b34-8b97-d8fac0bbc3c8\todelete_233530f9420ced31_0_1
Size 9KB
SHA256 42e6f2bcc03c5f13d581d7747191de4ddcc194048a6f192efb9eb1cd233858d0
MD5 fe957543b5396f66ad7ec333f2c21b8f
SHA1 af57a09f6b4e1f817f579b6dda09715d70b59d75
SHA512 f4fa2062fcd1f7f15c878240ae06bfa4395f9e508c8b1597f3cd0805458256bde14feaae8509aa06beadeb9a44abd442d2981e68fd933f818d6cc7d7ff4527e3
SSDEEP 192:CDdOqD0UFid2+9plqpCUrlH1CSYftd/cR1zUPSpfvR4jSOMEy/GBAEEhaKvRERI1:wzD0UFiQ+9plqpZlcSit9cvzUPSP4mO6
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\43a56847-dbbc-4179-afc6-6a3d7672d968\index-dir\the-real-index
Size 576B
SHA256 9d5641747b9ffaecd9e668100efdc11f1ceb57fda23981979aa32edfe5f65913
MD5 5da3a83737220e230f2d826c4ca03c64
SHA1 91bf4627358dd802c12bc6497dcb1ea40c472a25
SHA512 866594cfd78a43c3dc8740061a783f5879ddba2c0c5635ab00748aed521677f477b9ad81a23c8949bb75119e57d317377a9be1e0879ab21ff214d76b8bddf6f5
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe587625.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\43a56847-dbbc-4179-afc6-6a3d7672d968\index-dir\the-real-index~RFe587625.TMP
Size 48B
SHA256 27dd494eaad44914f4be818cace0e11cc873c0d6dddf40b2b0bd5432636a40df
MD5 1acf2fc10e36a0426b02a6c14db5a178
SHA1 47ef2421c1c152f06e906d519636f6044c2f35a7
SHA512 4fc8c513c4001a504e151d0cdd34bef0d04c85c5777dc5809b702d0a730d130166186e7b16e56b4d8a3287fab24030f27c55626b1a8bb398f9ea8faf836ea39d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\4d4d8940-b2df-4e4d-9d4a-cedb21e1674c\index-dir\the-real-index
Size 96B
SHA256 3cc777d604ec2b4b99debe2dbcd48c8bf14260869c591b51f4f1c2ed7bc3920f
MD5 f78ba338c074193a819ab7a5a2c7393c
SHA1 6f1a8e7a5d76cbfcd60e94c70184dbc74e1dbc7e
SHA512 5d7fc8253b5ccbe0980d1fbe0b9d9fd3210230b4fda8363d640b6068aabf8d636b4efa59a79722518c4e55edf59aad96d6f2bc769a8699bb28e70a58d3795944
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57db7b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\4d4d8940-b2df-4e4d-9d4a-cedb21e1674c\index-dir\the-real-index~RFe57db7b.TMP
Size 48B
SHA256 b96756850fe87ff08292e442b10835c964b3bcbcc6b1c5604762033e8bc79752
MD5 c662887d8d785510ace69111f33c3e90
SHA1 8d2e6557dd45d1893aa29ec0b87fb9b3afc98458
SHA512 48ae0b128b5991b14661c697e71b1836d27caec6abc080908df3a1675971ffcd2cf9f444de862c9b33d847956ad50ae0ac2df16b1e751a0de24ac4e6162d4f93
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 156B
SHA256 2b7933dbc4597e633cd61842ccd6de9fee197aac18e1b184e0114d4c8a75ec3b
MD5 777b39ee42a6ea8e01be4f4d9220ffe6
SHA1 8f26b399e4a7de723ecc0ad5a9034910bafdda64
SHA512 1fdf3ee70d938ebd5653be423ab7ea732245d36530defe30145628ac940bf2d4da3cd6d2cbac981eb477ab21ca79fd05c310b9d6093b9f57410d2f3707feda87
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 224B
SHA256 3f324bc075e63b690e6d10d29c85f02b3541351949e4190c9c67db8225c45f5f
MD5 1a03f4d1f4c16a2c50d3123206b0ec75
SHA1 398a8f5051a25173c503e338fa48c783c55c9201
SHA512 eed2a427fb0b0aa7c5b22158c5c370432afbc8980327323138593c66916c9218b97abdc9b91b0e04b4742d64cc310c7a470450332ccab2d039bbb566db22c934
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 280B
SHA256 d2a5fcb131da96f36c7d45de518a5f87dbe3fadfc98a2bb56cc663176ffa5b51
MD5 8767a0c0333a9389af0a5d1c56f4a1c3
SHA1 a5c24607e4a83225d6da47a4e71ee904ace549c3
SHA512 0b2abe20c16439101644fbd1f9e3fea26f011378240f5fb7d87ea605a7424600cf92b568c285fe562078134b7d22e3dbac3610d22f4e08b5acdeed9811ea65b8
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 279B
SHA256 b873f48c9115cb7b6b1def59740bf7e8521c723e16f8ccb46b5977e6d76d5b88
MD5 7f9793cce48d7125b2511e3e1f5b5865
SHA1 874ff284a92c92645794453ed8d729d2fab896ba
SHA512 b5a601b461df7fb8029064a14e5f66fee86e7234bfeafc133bbb8f0f9353deee6515e796c342948b43a9254194a0783086b50f8442e093481264bff767d93e07
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 279B
SHA256 88a8cd674e2924301064036dea79eb9a89855b8563be5fb3f565f450c58ec5a0
MD5 d6c3102757b8b1194795bdab1b1c1d56
SHA1 ff307d30e90ccc30b55a9fa1e2ed22b13ec4d842
SHA512 b95b7fc2780552f6a89a5ce1270dbc001253c28982e7421ba993e5a37d10d200b612d331a0a3afe26f3fca3bcce9b2d1cd0a1d05eeae26cd540690ed8992aca2
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 279B
SHA256 12b54d6c536db8ef54091320b568301b07691155cd717f7f2b3ad4c474c92d6b
MD5 34f824e76408a2aeddd18a7f2d198af8
SHA1 135bdd727ff379631c9ce8ca55f0578a10660dfd
SHA512 7f1595baaa9ffb8116e60b6d9530bd523b8c9e937c11712ca0efa341a4aab10ab455bd95f0538ed8e507ba3830e064f502dc2f13c5cc5a97a448acaea3a5852e
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt
Size 279B
SHA256 6410d6c741c945701c66be833c3e54fdcd6cdc281bae274522d9ecad80b03705
MD5 a91e26f574f77c2a2b89abe668f3d880
SHA1 5e6e3616a15658c6ead4af2ffbccd646cca56a5e
SHA512 7bda7411f2419d691c60f3e73a4200c1992f3da6a64994dee51fb56b44f4e0ccb3d2da57c276a725f6a8de0a23744323748517a835ff5b14bb934e41fff357cf
MD5 SHA1 SHA512

Submit Download

index.txt~RFe5783b7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\ba00623a413aef1be0c65618db85f0b8176e803d\index.txt~RFe5783b7.TMP
Size 99B
SHA256 a9de9a2dfd73ee2fa129bce90f0cad5829e46e041ec83cd96ae811650331cb1d
MD5 3c6ba9114a8be31fa5290b6f6c2523c0
SHA1 6b290c0c72304edfab39bfd44d030b11f8001e74
SHA512 af422af0e6e5e5699fc945debea4dd13eff44ddf52208f79522d6a8b4833822c157de429bede5e5b93b4393554cc6d79d94bedfd4ae6617de39f7228143924d5
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 89fdd6e62850837d6b27bd65e1bba148176c6096cc6b313100dd688a4c8449c7
MD5 6325fb32de0d6472e096027812658b2c
SHA1 bbc7fb03220650ba30f01a1a237ca81b494cd6b5
SHA512 702f2e6bc94ba8843530387cd78cd575fbeb9982c18eadd6e33a958333394383c6ad0630ed512b645134ae9f864ce65961e9725b3e65bccc91ba1610a0f77da0
MD5 SHA1 SHA512

Submit Download

the-real-index~RFe57ced9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57ced9.TMP
Size 48B
SHA256 475121d76c73b6972c8b1589506a096fff5ca1756f0a8b7c57d8473f2f91efa4
MD5 863287fb796fb9523dd629e1e785d994
SHA1 0112fb525cc10113edddb0b498348d279d21bf73
SHA512 3ed47c66f815ad511e1f8e02c20a7b5e7aaf074d2fbcd6c6dc2f4e6a807b16722b9246b7948aae6ca938e761c28b2a96091cb7b2044a868ffa5c22441c65bd70
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 8404b18b2b55e37eaf976bf33db019e2c0bc65ec32835e7738f2e81dcaab7ed6
MD5 2297a1b0cf204a24903aa2bed11ce85b
SHA1 97a97b87c5338c24519c45b467da8d617a223a07
SHA512 01d56bc2b4f13e31515df05f7f997623bf1481297307dd99be1e3f3ba721115d3508f93a31a478091bb291bce841786d5ce53d451bd3e314eccd9cdf07895918
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 323B
SHA256 569db2a9ba5cfbad0e1896f5b49aafcebb2efd76d85b67d500c7a9ba314466c3
MD5 d5634146d8cfbacc63a80a31395cf8a3
SHA1 0afbd1fdc4cf2b92b18b286de17749386bfee262
SHA512 04bbd549f86d85d32c0ae5c1b2d657a3371e042f895a343081257812998150d51c3547b6de1a9b531139a430407fe73f407be022b3f4c86a85e82c5291ff80b0
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 0e453c554f21982738358818531ff7586c40e404d2d6aa486a05510b9c3265c2
MD5 c186519418a12da4bf7e95adcf625ee6
SHA1 c79f325b305a73d51bd3c4679d5927d69eba7321
SHA512 c7072c1064a700a400fbbdacc8f7f68a3adecc63006fec3fe6254f7dfa559afe2ebbc30a85e93592c28e7532c1c7093e23402a9ec5734aba2be1700087a929a7
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 372B
SHA256 ef19729359c6e47f389a7a3885b9faa84c652f40e63036df6b79b4d0a47bfdc0
MD5 b83fb3ce39e5ea08bbaa0eaa741da76d
SHA1 eabdffd56b644e8f3aa5f3074c132de8c0305137
SHA512 8788fec1124a6c49775544437f86e926dfdcc82793c9e9b30480ea332735ba3488939038ba85168cc4816208c481fce8b88060ff9fc6f755dd2212d42a241bd4
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 784413d87d058d8236c2bfef258a130c371f48f816827452c1914f31a8aaae99
MD5 7e33ee0cf534a83b42cf2e87b75bca19
SHA1 aaf27f8a82dccc4ddc53c0fe8a1790f414ba1246
SHA512 efae19518b9ee17e07634d4712987f19a9fc7b609c7d1283b560b13f6a6d02b1518832dd49185196c3f64ba6f1d960685a227f4a54d27bcc6bdc2fbae5ccfac1
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 01bf6f6dc23921a47f8de73943716063e9a184b4e9b65acaa2971d8fa9b4ea6e
MD5 5fa0b0e9d91601ce8266529b27107653
SHA1 8b098cac843551235b28a8456e8ad74ca41e0a51
SHA512 1e99ef9f808bc8573575fc35e1ac869b853bbbba0677e52b8dcd2c034b0cfdfecf2a6ff47433cae113079a75ff2a873b71add210fefd961faddcffb6140a8803
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57e791.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e791.TMP
Size 372B
SHA256 7384b93ebf7796115d6aeac67bb18094d0ce371565122f9116286af955816919
MD5 1f48d2a0cb1eb76350c97134e0e269e8
SHA1 d92366804080247a89c574b3439594e052b4e52b
SHA512 994741a5df6d52562975a6174a900cb8a56cde01196b515d973e2bc38aa641effd9d3bbf6c60d3fb803db9fe05fe6ee68a089718df2044387e0f0fcb6f012951
MD5 SHA1 SHA512

Submit Download

Visited Links

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links
Size 128KB
SHA256 5454d8981c2fe8121b3883e8bc4958678e1150b9c841b7b611cf942c52549f83
MD5 010a9a585cfb54564c18e7d34aa66df8
SHA1 4cb17a3ee5b3c84a6ea6cbe383187de3daf75294
SHA512 014ceefabf4b68aac26e9bd60854d0bbf882e2c145d6345238e1e23f08c215dd5206f68a67932c9aa880714f5ff63e6155ec6cf8eb14a6f324ec696042be55ba
SSDEEP 3:ImtV3+AHO/C3/8ztwtlAkrKFzhutN/lfWq83qR/llZUlt:IiVuAHO/+8SGpFliVlO5AR8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 116KB
SHA256 15bc0d804f5455acb391a4281e0e029f3fd18ff33f2611f2e61bd52eb8a73a9c
MD5 ba091ee0a51d9701ca28bd448191dddf
SHA1 fb03c3dab07ce09ab4749286e6185c344f8c53e5
SHA512 80954e56cabba87961db3becc9e0180b0a991625aca8b7854ed3b40d082f558a528f60c259c2967e493d344e5e34f800da86badf7699614335fb1bc92a425509
SSDEEP 192:yTPNbUJ6IH9xhomnGCTjHbRjCLqtzKWJaWumYhVumQ6W:kPWJ6a9xpnQLqtzKWJnGVumQn
MD5 SHA1 SHA512 SSDEEP

Submit Download

b4f4ba8b-9ee5-4a5b-909c-2a0d15de07aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4f4ba8b-9ee5-4a5b-909c-2a0d15de07aa.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
MD5 aefd77f47fb84fae5ea194496b44c67a
SHA1 dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA512 b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 26d067dbb5e448b16f93a1bb22a2541beb7134b1b3e39903346d10b96022b6b8
MD5 589c49f8a8e18ec6998a7a30b4958ebc
SHA1 cd4e0e2a5cb1fd5099ff88daf4f48bdba566332e
SHA512 e73566a037838d1f7db7e9b728eba07db08e079de471baca7c8f863c7af7beb36221e9ff77e0a898ce86d4ef4c36f83fb3af9c35e342061b7a5442ca3b9024d2
MD5 SHA1 SHA512

Submit Download

fb0c3dd7-4f76-4d6e-a2f3-8113874859aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb0c3dd7-4f76-4d6e-a2f3-8113874859aa.tmp
Size 6KB
SHA256 f44be5b92015a3a298cb5cb0e7cdc39054d0ce0e8c3e401763872c3107c28bdb
MD5 cb0629ed110794e1be076033df4e2b48
SHA1 8f43c725417084b31fe2689be850a0d94e2e6ddb
SHA512 bf86ab37abada22311556723cff74f11757a3411f62490d3edadc8305fc9beab52feaf478259d571482df18ff290d921412fd4740c75cc9e89c2adb04edcf57a
SSDEEP 96:nGkzUV810UgbwpvWMoiVmdeH2Fqus+UWQyV+VDCziEwb:nGkzDTIGWMX9f+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_0
Size 44KB
SHA256 f5466afd5d262a61b0a056581dd08fab99708848880534b2c1916c33b11bf859
MD5 1fc4e1b71031959ec9f89b2489abfc24
SHA1 5225a21ed5538e5112039f3dbe70432cdd4025d7
SHA512 9313d7db919cacad1a2abca85f39053c8b468ff5e5d7d05b359cc77ee659791d07b541c4e42ce4de3901d5326412737a17dd1dea150beb1fce3d8765c45cf980
SSDEEP 96:IHxRoRVl2p5T63hV3ZtZ7iD8S1b5XPZZNG6V8G7HOZ91:+oHGT2l/eZLXP9V8G7K9
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1
Size 264KB
SHA256 fb8aa480e53181e64631ebebaa61760e3741aa33175ab4306c1a2baec777ba52
MD5 d5141a1c5b5d5d41d9fd3117778d9508
SHA1 8a279786123d2b2b23dba012067a9f99aa14f484
SHA512 982dc8d6afc18a565a3b75fad83e91f1eccb4cad070b4cfe20f075b14128cda8dfc0c1b78b80b6fe0f30a58e36056d3a01a14e0f809db441db2732af53564c5c
SSDEEP 1536:YiLwgk6tGinii8uWCu2NXukH/WwxY3uH:
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_3
Size 4.0MB
SHA256 6e266a14836b087d382b6eec9ec27ecaea4e94a330974241821e91500a89608d
MD5 6a2b736a93bf765255c6769376981d85
SHA1 8855bc1a8d0dc659bb848319607f2242b258cb5f
SHA512 f6bc92dfeb1572664a9023cee34267649ae86137ca07ef15c502aefb27ac8c8f6dd1cc9a1d0ab125f617840f55d6e459304727551af70e4dedfb36f20a54f5e2
SSDEEP 3072:yubtXV6uGA1uMcWFHu3ouOuV+qr7HkuurALlilBkE0KxpN5THplFHnIZ0xczNAWR:tdWkOHFxHWoq4cL5QTikMa9AjP
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000011
Size 22KB
SHA256 4564be03e04002c5f6eaeaea0aff16c5d0bbdad45359aef64f4c199cda8b195e
MD5 1ac9e744574f723e217fb139ef1e86a9
SHA1 4194dce485bd10f2a030d2499da5c796dd12630f
SHA512 b8515fb4b9470a7ce678331bbd59f44da47b627f87ea5a30d92ec1c6d583f1607539cd9318a5bccf0a0c6c2bd2637992e0519bd37acdf876f7a11ed184fb5109
SSDEEP 192:NY5VVWBObOIXjv7nenqWXF14yEQ0yJq8lnRe8/kLog15n6ZbPPoSYp9gZY7Aemaq:NY0VIpWCqJq8l7kLpnqJYpCTem
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000012
Size 16KB
SHA256 fe3c09558dcf944e7440b47114cb2f812f22ea972e87f570c1c23165f851b61b
MD5 17e965b44957a8d118aa90239875ca6d
SHA1 d350627653b5259ae7f13d0b36345717bb7d1b81
SHA512 39c7fa018660bcd300264305728fb627fb6326319645d09245aaa8dcddde4b5d50c1bca5073eabfcfc54b6f39dc66ac07d1ad04980b53068ec50b34d65b93f1b
SSDEEP 192:iCqIV7I0QOrpI/q/j82c20E2aU9lsVfLdArZa9byjY1yAXai/2:L9IoVEgyjo
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000013
Size 17KB
SHA256 6388415a307a208b0a43b817ccd9e5fcdda9b6939ecd20ef4c0eda1aa3a0e49e
MD5 fc97b88a7ce0b008366cd0260b0321dc
SHA1 4eae02aecb04fa15f0bb62036151fa016e64f7a9
SHA512 889a0db0eb5ad4de4279b620783964bfda8edc6b137059d1ec1da9282716fe930f8c4ebfadea7cd5247a997f8d4d2990f7b972a17106de491365e3c2d2138175
SSDEEP 192:8v7IVdLfOLLIojy32RnoWXF1eyEQ0AJqgMwm96pKR0AU:78IvW4oJvMwm96pKJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000014
Size 16KB
SHA256 3db5d0be739b7d023748786f77d8e83facfded75dfef18b190b15f706b75bbde
MD5 097b81f8f47ee3dfdecb3b7a858f9b17
SHA1 eab17970a985c0b8f29434fef764ef444fe83f32
SHA512 d1016b60bbd990d9771714111f43b808b93320f080cec4572363890a709e0e2b5b18012c6a5853c4d9388577713241904a05865dd69d910299b4d4d6dfb63a03
SSDEEP 192:tRJjnhqIV7IxLNuBouOsracoIeUq/hys6aVH13y+Q0e3VTuzWFjtGgDFzKvcJ+X:tdBoQacoIFs6C94VTuzWFYgD
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000015

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000015
Size 17KB
SHA256 62c3e9ee7c36278922faa04824cffa010b7f09dcb6d024c45e77f1c8272a495d
MD5 b8046a942b00491bcbb12f80a2a214a0
SHA1 6ee5633f06e6be76e12cd1bc8202e7a0f2288893
SHA512 cac97a36ab57615318251763105a9a1ee7399f9574f0ff3f2cfdaf8ea0bdfb3c8c449bfbc8358a159a5ec39a3e79e345890b887d52dc5bf59a93c60e821a0e70
SSDEEP 192:JTNnrBUNIVNI6cjjOS6gYSI0H515m7s6aVH1yy+Q0FmX0XtIk/7KzYMvHUMvcBU:K2gYSI1s6C2oX0Xyk/7BMv0Z
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000016

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000016
Size 20KB
SHA256 45870d39eb491375c12251d35194e916ace795b1a67e02841e1bbcb14f1a0e44
MD5 e8e1f8273c10625d8b5e1541f8cab8fd
SHA1 18d7a3b3362fc592407e5b174a8fb60a128ce544
SHA512 ca77d40ec247d16bc50302f8b13c79b37ab1fcf81c1f8ab50f2fc5430d4fabc74f5845c781bd11bb55840184e6765c2f18b28af72e1f7800fe0bb0b1f3f23b24
SSDEEP 384:t8IQdW4vhaKyKw1Uko2+ZKKIvisYkpKvbpEdRYuGvZevA:t89W4vhanMeWkpKDpEdRYuGvZevA
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000017
Size 20KB
SHA256 dad5ddc6868717a6c955e0c7627f0f93adca70d5d20733c1a98324269fa19f85
MD5 a4e164f6a15386763f5a9915b9b2abc8
SHA1 8d499d52070f47a4084008fcb8874fb148994d4d
SHA512 9ae0dc6c7638553dc8b7c99f0f0b5671901409b50c0cd7666b556a08cb979b4334cee2b10bc826a3d7ce435a84536a0e81d2fbc79104e29588c5b506da97aa0b
SSDEEP 384:t8IQdW4/7+KyKw1Uko2+ZKKIvisYkpKKjRE1xAO+vB+nI:t89W4/7+nMeWkpK+RE1xAO+vB+nI
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000018
Size 19KB
SHA256 2d06f610c22647a412b7fa7c23b65da8334ce2b61e7883f91cb8f4009d8399cd
MD5 0baa1e177d67eb34e504ea95a8954c62
SHA1 806d970044988739179583a992d9faebc5d96abd
SHA512 f577fca639eba51d1803fe43eee336619864562f63a08ba67b2869e6c08fb02a5fbc44ef51fde8b948e93ce50d0ea1581d9c0ef3dfe41fb5b5c9bc54656cddbc
SSDEEP 192:SnCIVdLfOLLIr24B+olhoWXF1eyEQ0HhkDRKyKw1Uko2+ZKKIviwkpKRtel6zzAZ:q8IeW4vhaKyKw1Uko2+ZKKIviwkpK+
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000019

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000019
Size 19KB
SHA256 577f842824da7be899ab4cca5906ed3466c6b6f5dff14c3e078fd9d70a6f7ddd
MD5 e3ce979e426e4a349a51baa9515ef750
SHA1 f01511e40be6a2d1f2a912cd82fd47023b3c2961
SHA512 4e1aab4f264f022765242a9bcc1e2c7b063d8bad5b343230ccb706c59f0bb553da41dea739330515271fefe80da41d5c29ae5ef4e88c552554c2ee8489be7c08
SSDEEP 192:SnCIVdLfOLLIr24B+olhoWXF1eyEQ0n7TwRKyKw1Uko2+ZKKIviwkpKRHxedqrDG:q8IeW4/7+KyKw1Uko2+ZKKIviwkpKdU
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001a
Size 18KB
SHA256 6a455720692413962a0d3c0acc8c1d383bab1f92f7998c03ee92bebc01b2b911
MD5 d7a02f507155c5fa9d3a5ba3d3e1eb6a
SHA1 5b01ed0593ab8dec76fc2c68e2857ebb1d179181
SHA512 9e62f0514d08457ef38d39f3964d467dc2539855cd91f19c312d1898fd83d5cd456571cd7a38671408198565a085384a70ae1c569b68d09f02c446c261170f8f
SSDEEP 192:YhnCIVdLfOLLIU24B+olhoWXF1eyEQ0HhkDRKyKw1Uko2+ZKKIv+kpKRBet6zzAz:+8I7W4vhaKyKw1Uko2+ZKKIv+kpKK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001b
Size 18KB
SHA256 0a7334b721fcc557403675946601f2bea0bde6c899d51bed37ecfd24c2cd7593
MD5 fa801907cf4c9ec7c23b5d1206e874e7
SHA1 b78b19864d74c66828b8f54bdd1c805ae956bdd1
SHA512 58b1c47663a59f4422fae55bf1e5fbee84fac5e6687aaa4198191ec0f5dfa9fa2f6f458cd53eae99e78963baf1c92bb780175015bc57781e7bbe4c89b3778079
SSDEEP 192:YhnCIVdLfOLLIU24B+olhoWXF1eyEQ0n7TwRKyKw1Uko2+ZKKIv+kpKRZeFqrDQD:+8I7W4/7+KyKw1Uko2+ZKKIv+kpKG
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001c
Size 16KB
SHA256 d987cf80bc7f6991ad4a9191c060974bc464398cb20ff39fd709c9ea4a3082d0
MD5 ee2f789c38df7f3071b47d08d1255910
SHA1 5f83428a1f2a02faee5291f91dfbfaae9b051281
SHA512 7c6e009c2f945cf83f2415bc0118a3c818fb26632f30293a6b4bb44a90392fd24e2fa0ebfc23a0aa7a678135eebd649baea5a36a264d5841bcf0e4d289cb8647
SSDEEP 192:ezoIVdLfOLLIS2B4jqkMqWXF1eyEQ0HhkDRKyKw1Uko2+ZWkpKRSDibN9Zish99w:g8ISW4vhaKyKw1Uko2+ZWkpKkm
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001d
Size 16KB
SHA256 1bca092cce2accb6b8fae794656dea16defd589ace2f066d11a9399bd7479bba
MD5 297235c429cf33077aeb5d58cb8e43ab
SHA1 6dceec335ed41690c9bcaa74222036d93121242f
SHA512 4c7d33a2c52b426ae33522d536d1917404f44a721c1a5af62b39fe2dbf283f2f9cd59bba1ba8cf40fabd1206ef465f11bf5c2a7778754b7282f82213698dd1b3
SSDEEP 192:ezoIVdLfOLLIS2B4jqkMqWXF1eyEQ0n7TwRKyKw1Uko2+ZWkpKRHiLdtpyEhttpO:g8ISW4/7+KyKw1Uko2+ZWkpK8
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001e
Size 31KB
SHA256 f8bd05774df8f324683471354366e3160cacce57fb7b8aecf061722ec75f6532
MD5 2f1ec27c2803176aa1f7cb1dfe10ad06
SHA1 5b93f0a2a9322f1b34f1a63b356e3acdc836c99d
SHA512 f8139ae2e0375bf05bc94c8631dd980bae5be9714ea78730d9e7f0c3c2438ea4d2fae17601c04649bef2c95a684062cea826efe0e08336ea2a8a35aa420c39ab
SSDEEP 768:fV6WCSnrCV5eufygoj5tOv8N/dAdUXqUZ1VdkpC:96BSrCV5eufygoj5tOv8N/dAGXqUZ1VZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00001f
Size 19KB
SHA256 ad78e3585c8ca04d3cdaf44c8eae4b16325c72c08385445d9015052732aca099
MD5 224859ff4912ea771c591c6c0d6b8c76
SHA1 bca46136f55b29816ec41e0a72f6925a865c2c2e
SHA512 d74648fc75b852c78292392214c7b3471fd3cd0d320adea1f7ff50dca716b44137f39f4e6ff0cc42267661f5380535adf06d1ad592b0cce6c05d8a9b463cde9e
SSDEEP 384:tYeVIgWCf6nrZ+ZCRKsttQTzJtkNsFztSgN0lpd3LkpCNo:LVnWCSnrC2+n8KjvC/5kpCK
MD5 SHA1 SHA512 SSDEEP

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 11B
SHA256 ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa
MD5 838a7b32aefb618130392bc7d006aa2e
SHA1 5159e0f18c9e68f0e75e2239875aa994847b8290
SHA512 9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 212145cfe84fb25879c3bff0db80d84dd36d9bf74ab145a320815f53420189ab
MD5 d9a519e0300c63ecbabb8c6c3b05b168
SHA1 606b974a65ce50d2a4d6ee9e4663328fa6a0c4c3
SHA512 2b489d15a932540a8c675ec2ac792041feea68b4033d2a745b62a91a574b92dc17db0b1377ad88b1a59994c8f69e15c91f442f568c05f9b261229d0218da61b3
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupFPe2RUJ/d6Yrru8z8ZJlZo:A9iIxuERzA83h09RZxYB4wYrPz8tZo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 0ff597939d8bc60353d22570d51af70cb0a036ca0b47dd951bd148af00f57a1f
MD5 4d8fd92a3ac6e87caf2e5f7d8a3b56f5
SHA1 0be997d0dc71e39b6f660cc69135056ba383b9ac
SHA512 a46d16bf4bbe0af5c0f1734e8a08dd20ee507544c863620c6c7b90aff125d1184d878ff2388e061c2d6e2a95409a436be325b9e22424c6cd3ed61fb842517a5f
SSDEEP 192:GoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupFbl2RUJth3H6j6YNru8z8o:C9iIxuERzA83h09RZxYK422YNPz8tZo
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 dd2b0f7257c9bcd3a18c8cae7fc06e29a0e263485421c9b5dfa995611540755c
MD5 e9ee6d8308b60a79bc0d909f2f07c27a
SHA1 04bcfd1a870e94021ac83737e00554883324e407
SHA512 4253d9c0f23c853eeb6a0c3a4f71a36637ff439ace79d684a192c4868ced696664830fba6b440f0451eaef549ce049f043a42ef2c4161d45316d6c9535990dbe
SSDEEP 192:VoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuphhtl2RUMYA3H6jrIMru8zp:Z9iIxuERzA83h09RZxYuRyXIMPz8sv
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 76576432410013758b7d6b9759787e632a46d32e55a567bacfe25ce77e87bcc1
MD5 15ae433e73f668fc36c9ecd766d00f1c
SHA1 77de7efdac7004c13fcae73b26e0a6b65e91d10a
SHA512 d351426ec35c635c241cbb0f475e28912047be1c262e2e118f6f1ae6c42458c9ec03a3ffcb0d985fbe5e86ef550f9c6398a6c0892ced115c95f597a440e759d0
SSDEEP 192:RoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupMhl2RUNjYB6j4yru8z8ZJY:N9iIxuERzA83h09RZxY3SjX8yPz8Ne
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 5045014a49b74a2ce83aa9d086cec8afbf5ffd06fa9f6c47587a9821d3e8d4da
MD5 47add262e599333fef639e52f6c70193
SHA1 d6340c589f385b5b7439b85176607e17758d4103
SHA512 499952e7f85c11ccaf1e703e46df4e835c683eb41008c144e5850a285b27d17d3a570d990450a43abd4a1e52097e9b96fb763b7f4304d8a8912f0b4949032be6
SSDEEP 192:noCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupFbl2RUJth3H6j6YNru8z8o:/9iIxuERzA83h09RZxYK422YNPz8tZo
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Unconfirmed 802743.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 802743.crdownload
Size 5.7MB
SHA256 2db1d62cfc39ba8b4eea961b361f5d03118e4a33a8a285c9debd013edb014c88
MD5 bd429f3eba4f53f8ea3f7b44665c8ca9
SHA1 af3245cb04729575ec37dc4415b1b602617a9476
SHA512 6a1ec8a9c24a9becf3519c2961f9c63c4749c59fe57ec44cd2106dc6bbc03ded551b20d7bc726bba6f9d431aa4da0bd4597f5ca70c8ef38788666f545ffb1390
SSDEEP 98304:H1DvTJFV9QkIirQGfITR7hgZEY3kWIIlI87BED9ScrBw2sDYVVfAUM/aaJyAQMfw:HJrJFk4rZf87hE93kWITkBE5SqRbGU+u
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1004-1451-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1453-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1454-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1455-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1456-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1457-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1446-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1452-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1447-0x0000025410810000-0x0000025410811000-memory.dmp

Download

memory/1004-1445-0x0000025410810000-0x0000025410811000-memory.dmp

Download