hxxp://bing[.]com

Analysis

max time kernel
403s
max time network
406s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
15/09/2024, 08:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://bing.com

Score

8^/10

discovery motw persistence phishing

Malware Config

Signatures

Downloads MZ/PE file

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000\Control Panel\International\Geo\Nation	steamwebhelper.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000\Control Panel\International\Geo\Nation	steamwebhelper.exe

Executes dropped EXE 14 IoCs

pid	Process
5592	SteamSetup.exe
6664	steamservice.exe
5644	steam.exe
19508	steam.exe
19688	steamwebhelper.exe
19728	steamwebhelper.exe
19868	steamwebhelper.exe
19988	steamwebhelper.exe
20216	gldriverquery64.exe
20280	steamwebhelper.exe
20332	steamwebhelper.exe
20612	gldriverquery.exe
20672	vulkandriverquery64.exe
20744	vulkandriverquery.exe

Loads dropped DLL 49 IoCs

pid	Process
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19728	steamwebhelper.exe
19728	steamwebhelper.exe
19728	steamwebhelper.exe
19508	steam.exe
19508	steam.exe
19868	steamwebhelper.exe
19868	steamwebhelper.exe
19868	steamwebhelper.exe
19868	steamwebhelper.exe
19868	steamwebhelper.exe
19868	steamwebhelper.exe
19868	steamwebhelper.exe
19988	steamwebhelper.exe
19988	steamwebhelper.exe
19988	steamwebhelper.exe
19508	steam.exe
20280	steamwebhelper.exe
20280	steamwebhelper.exe
20280	steamwebhelper.exe
20332	steamwebhelper.exe
20332	steamwebhelper.exe
20332	steamwebhelper.exe
20332	steamwebhelper.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent"	SteamSetup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Mark of the Web detected: This indicates that the page was originally saved or cloned. 1 IoCs

phishing motw

flow	ioc
357	https://storage.googleapis.com/script.aniview.com/ssync/62f53b2c7850d0786f227f64/ssync.html

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps4_l2_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_dpad_down_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\layout\gamespage_details_friends_list.layout_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\tabStdLeft.tga_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_110_social_0100.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\controller_config_controller_x360.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\game_details_header_green.tga_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_sl_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_lstick_touch_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_030_inv_0304.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_030_inv_0315.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\layout\gamespage_details_subheaderright.layout_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\xbox_360_korean.txt_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\xbox_rt_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\icon_button_forward_over_sm.tga_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\public\steambootstrapper_english.txt_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\vgui_hungarian.txt_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\xbox_button_logo_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\xbox_p4_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sd_l2_half_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_l4_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_up.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_rstick.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_latam.txt.gz_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0306.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_010_wpn_0110.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\btnOvrOffTop.tga_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_rtrackpad_ring.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_norwegian.txt.gz_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\vgui_german.txt_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\steamui_postlogon_swedish.txt_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_lstick_up_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_button_circle.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_r2_half_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\hp_m1_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_mouse_l_click_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_l2_soft_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_button_create_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_buttons_w_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_button_home.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0080.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_dpad_swipe.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_lstick_touch_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_090_media_0301.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps_color_button_square.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_rtrackpad_right_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\osx_close_down_new.tga_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps4_r2.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_button_aux_lg.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\windowscompat.res_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\css\broadcastapp.css_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\cropped_controller_config_controller.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_ltrackpad_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_lstick_down_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_spanish.txt.gz_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_dpad_up.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_sr_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\overlay_danish.txt_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\cmnd_screenshot.svg_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_l_touch_md.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\xbox360_button_select_sm.png_	steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_profanity_swedish.txt.gz_	steam.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SteamSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steamservice.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steam.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steam.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	gldriverquery.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vulkandriverquery.exe

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	steam.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steam.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	steam.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steam.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steamwebhelper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	steamwebhelper.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steam.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 27 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\ = "URL:steam protocol"	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\DefaultIcon\ = "steam.exe"	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\Shell	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe"	steamservice.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam	steamservice.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon	steamservice.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\URL Protocol	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\Shell\Open	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\steam\DefaultIcon	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Moniker = "cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\ = "URL:steam protocol"	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\URL Protocol	steamservice.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 163344.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4780	msedge.exe
4780	msedge.exe
3952	identity_helper.exe
3952	identity_helper.exe
5232	msedge.exe
5232	msedge.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
5592	SteamSetup.exe
6812	msedge.exe
6812	msedge.exe
6812	msedge.exe
6812	msedge.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe
19508	steam.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
19508	steam.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe

Suspicious use of AdjustPrivilegeToken 44 IoCs

description	pid	Process
Token: SeSecurityPrivilege	6664	steamservice.exe
Token: SeSecurityPrivilege	6664	steamservice.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe
Token: SeShutdownPrivilege	19688	steamwebhelper.exe
Token: SeCreatePagefilePrivilege	19688	steamwebhelper.exe

Suspicious use of FindShellTrayWindow 63 IoCs

pid	Process
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe

Suspicious use of SendNotifyMessage 49 IoCs

pid	Process
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
19688	steamwebhelper.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe
4780	msedge.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
5592	SteamSetup.exe
6664	steamservice.exe
19508	steam.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4780 wrote to memory of 3588	4780	msedge.exe	83
PID 4780 wrote to memory of 3588	4780	msedge.exe	83
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4796	4780	msedge.exe	84
PID 4780 wrote to memory of 4800	4780	msedge.exe	85
PID 4780 wrote to memory of 4800	4780	msedge.exe	85
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86
PID 4780 wrote to memory of 1260	4780	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bing.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff83a3746f8,0x7ff83a374708,0x7ff83a374718
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1308 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6808 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6936 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7060 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7288 /prefetch:1
  2⤵
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7412 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:5576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7920 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8148 /prefetch:1
  2⤵
  PID:5728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8500 /prefetch:1
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7768 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8448 /prefetch:1
  2⤵
  PID:6068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7476 /prefetch:1
  2⤵
  PID:5676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7784 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9068 /prefetch:1
  2⤵
  PID:6240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7100 /prefetch:1
  2⤵
  PID:6880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8300 /prefetch:1
  2⤵
  PID:6928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8352 /prefetch:1
  2⤵
  PID:7080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6632 /prefetch:1
  2⤵
  PID:6184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7496 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7528 /prefetch:1
  2⤵
  PID:6024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6968 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8252 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7332 /prefetch:1
  2⤵
  PID:5736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8256 /prefetch:1
  2⤵
  PID:6476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6920 /prefetch:1
  2⤵
  PID:5924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8976 /prefetch:1
  2⤵
  PID:6492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8668 /prefetch:1
  2⤵
  PID:5428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:6532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=63 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7740 /prefetch:1
  2⤵
  PID:6036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=64 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9196 /prefetch:1
  2⤵
  PID:6584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7824 /prefetch:1
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=66 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:6784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6944 /prefetch:1
  2⤵
  PID:6848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9276 /prefetch:1
  2⤵
  PID:6896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7392 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:6100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=72 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8140 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=73 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8560 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=74 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=76 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7232 /prefetch:1
  2⤵
  PID:7044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:7052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=8688 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7428 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5232
- C:\Users\Admin\Downloads\SteamSetup.exe
  "C:\Users\Admin\Downloads\SteamSetup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:5592
- - C:\Program Files (x86)\Steam\bin\steamservice.exe
    "C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of SetWindowsHookEx
    PID:6664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7660 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=81 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1332 /prefetch:1
  2⤵
  PID:19528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=82 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8172 /prefetch:1
  2⤵
  PID:21244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=83 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:6284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=84 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6908 /prefetch:1
  2⤵
  PID:8708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=85 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:7940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=86 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=87 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7032 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=88 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6780 /prefetch:1
  2⤵
  PID:7124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=89 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6388 /prefetch:1
  2⤵
  PID:7132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=90 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:7100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=91 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=92 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8392 /prefetch:1
  2⤵
  PID:7112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=93 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:7176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=94 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6736 /prefetch:1
  2⤵
  PID:6268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=95 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=96 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7600 /prefetch:1
  2⤵
  PID:7180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=97 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:7188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=98 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7720 /prefetch:1
  2⤵
  PID:7196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=99 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9552 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=100 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8980 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=101 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9980 /prefetch:1
  2⤵
  PID:6720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=102 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10236 /prefetch:1
  2⤵
  PID:5784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=103 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10388 /prefetch:1
  2⤵
  PID:6668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=104 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11164 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=105 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11280 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=106 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11412 /prefetch:1
  2⤵
  PID:18796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=107 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11424 /prefetch:1
  2⤵
  PID:9212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=108 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11636 /prefetch:1
  2⤵
  PID:9260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=109 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11808 /prefetch:1
  2⤵
  PID:11576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=110 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11952 /prefetch:1
  2⤵
  PID:9272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=111 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12080 /prefetch:1
  2⤵
  PID:11572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=112 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12228 /prefetch:1
  2⤵
  PID:9288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=113 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11380 /prefetch:1
  2⤵
  PID:11568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=114 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12384 /prefetch:1
  2⤵
  PID:11560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=115 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12236 /prefetch:1
  2⤵
  PID:9400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=116 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11940 /prefetch:1
  2⤵
  PID:9992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=117 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12996 /prefetch:1
  2⤵
  PID:10000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7268 /prefetch:8
  2⤵
  PID:6412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=119 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:11736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=120 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:11864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=121 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:12140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=122 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10396 /prefetch:1
  2⤵
  PID:12216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=123 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=11200 /prefetch:1
  2⤵
  PID:12224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=124 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1980 /prefetch:1
  2⤵
  PID:13636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=125 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7460 /prefetch:1
  2⤵
  PID:13716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=126 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12908 /prefetch:1
  2⤵
  PID:14112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=127 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:14228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=128 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7072 /prefetch:1
  2⤵
  PID:14388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=7180 /prefetch:8
  2⤵
  PID:14624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=130 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9740 /prefetch:1
  2⤵
  PID:14816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=131 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=12104 /prefetch:1
  2⤵
  PID:15064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=132 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10304 /prefetch:1
  2⤵
  PID:15712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=133 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3952 /prefetch:1
  2⤵
  PID:15620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=134 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:16068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=135 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=10344 /prefetch:1
  2⤵
  PID:16144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=136 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:16532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=137 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:16872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=138 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8508 /prefetch:1
  2⤵
  PID:17392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=139 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:17420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=140 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=9944 /prefetch:1
  2⤵
  PID:17508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=141 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8868 /prefetch:1
  2⤵
  PID:18032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=142 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7764 /prefetch:1
  2⤵
  PID:18096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=143 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7880 /prefetch:1
  2⤵
  PID:19288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15800745292485381507,1365704641797080097,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=144 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:19372

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1552

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1560

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6792

C:\Program Files (x86)\Steam\steam.exe
"C:\Program Files (x86)\Steam\steam.exe"
1⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
PID:5644
- C:\Program Files (x86)\Steam\steam.exe
  "C:\Program Files (x86)\Steam\steam.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of SetWindowsHookEx
  PID:19508
- - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
    "C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" "-lang=en_US" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=19508" "-buildid=1726256783" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-userdatadir=C:\Users\Admin\AppData\Local\Steam\cefdata" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling --enable-direct-write "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=SpareRendererForSitePerProcess,DcheckIsFatal"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks processor information in registry
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    PID:19688
  - - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      "C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=crashpad-handler /prefetch:7 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1726256783 --initial-client-data=0x378,0x37c,0x380,0x354,0x384,0x7ff828e8ee38,0x7ff828e8ee48,0x7ff828e8ee58
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:19728
  - - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      "C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=gpu-process --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726256783 --steamid=0 --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=1624 --field-trial-handle=1760,i,12105645605451635453,4339503994223127301,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:19868
  - - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      "C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726256783 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2224 --field-trial-handle=1760,i,12105645605451635453,4339503994223127301,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:19988
  - - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      "C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --user-agent-product="Valve Steam Client" --lang=en-US --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726256783 --steamid=0 --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --mojo-platform-channel-handle=2544 --field-trial-handle=1760,i,12105645605451635453,4339503994223127301,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:20280
  - - C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
      "C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe" --type=renderer --user-agent-product="Valve Steam Client" --user-data-dir="C:\Users\Admin\AppData\Local\Steam\cefdata" --buildid=1726256783 --steamid=0 --first-renderer-process --log-file="C:\Program Files (x86)\Steam\logs\cef_log.txt" --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3016 --field-trial-handle=1760,i,12105645605451635453,4339503994223127301,131072 --enable-features=PlatformHEVCDecoderSupport --disable-features=BackForwardCache,DcheckIsFatal,SpareRendererForSitePerProcess,WinUseBrowserSpellChecker /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:20332
- - C:\Program Files (x86)\Steam\bin\gldriverquery64.exe
    .\bin\gldriverquery64.exe
    3⤵
    - Executes dropped EXE
    PID:20216
- - C:\Program Files (x86)\Steam\bin\gldriverquery.exe
    .\bin\gldriverquery.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:20612
- - C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe
    .\bin\vulkandriverquery64.exe
    3⤵
    - Executes dropped EXE
    PID:20672
- - C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe
    .\bin\vulkandriverquery.exe
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:20744

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x504 0x518
1⤵
PID:20140

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\Steam\Steam.exe

Filesize
3.3MB

MD5
2aebfdcf91cd440ec7008c5a3a2f00d8

SHA1
50adf8ce77b0829f0cfffbcead578bf52e4a5baa

SHA256
fdf63690f3ae49e53fd4a1fd04beda5adb7a61fb3f14970e40bf8ed1e6fdec14

SHA512
12cf664ee0a1d801db0114137c20c91a733eb1d9d5fdc226ed16ebdb611735296403bb5855b25b0d171e6b35ed00a78abae2110bf650d7be9f93d870e41a1d3a

Download Submit
C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_

Filesize
15KB

MD5
577b7286c7b05cecde9bea0a0d39740e

SHA1
144d97afe83738177a2dbe43994f14ec11e44b53

SHA256
983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824

SHA512
8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0

Download Submit
C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_

Filesize
20KB

MD5
00bf35778a90f9dfa68ce0d1a032d9b5

SHA1
de6a3d102de9a186e1585be14b49390dcb9605d6

SHA256
cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2

SHA512
342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041

Download Submit
C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_

Filesize
23B

MD5
836dd6b25a8902af48cd52738b675e4b

SHA1
449347c06a872bedf311046bca8d316bfba3830b

SHA256
6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64

SHA512
6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\DABA17F5E36CBE65640DD2FE24F104E7

Filesize
1KB

MD5
c6150925cfea5941ddc7ff2a0a506692

SHA1
9e99a48a9960b14926bb7f3b02e22da2b0ab7280

SHA256
28689b30e4c306aab53b027b29e36ad6dd1dcf4b953994482ca84bdc1ecac996

SHA512
b3bd41385d72148e03f453e76a45fcd2111a22eff3c7f1e78e41f6744735444e058144ed68af88654ee62b0f117949f35739daad6ad765b8cde1cff92ed2d00c

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\DABA17F5E36CBE65640DD2FE24F104E7

Filesize
276B

MD5
5e43795cbfd098ab1509aaf4ee925d73

SHA1
9c590e7915a5c37a69ace116be034c6f141d339e

SHA256
778f49c5f159d73609c49392016c99a6861b4c3947b5e19701631e331bc48d5d

SHA512
6a8a24a3a290a5d3b17ad0bbe75ccc9c5a797720bbc7b6f5927ecc5e52f18727a9d132fbb950758e34f1bb148fb6ed8bc179d87cf96d50e4c60c0d14c6ad71e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\718e508f-2be1-44ae-a598-15876779a4c8.tmp

Filesize
17KB

MD5
5a0fc7438da11c9f3c0cea065612b69b

SHA1
9f6e307bef1402bcf9f165dc88c453e5801fba58

SHA256
98e8a848b41240499bdc863739f6841d846a68ac7914ce3da17075205322b230

SHA512
74358abca8cf308f184e7c86f5ba7164a080c2913882486b71413d1a4386d770159ae3eb56479995f0adbf580e83b5f3eab91470340b37274a153cd5a2e81bc1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
67KB

MD5
929b1f88aa0b766609e4ca5b9770dc24

SHA1
c1f16f77e4f4aecc80dadd25ea15ed10936cc901

SHA256
965eaf004d31e79f7849b404d0b8827323f9fe75b05fe73b1226ccc4deea4074

SHA512
fe8d6b94d537ee9cae30de946886bf7893d3755c37dd1662baf1f61e04f47fa66e070210c990c4a956bde70380b7ce11c05ad39f9cbd3ea55b129bb1f573fa07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
41KB

MD5
58756d99d2376dcfbede6057dd25a745

SHA1
76f81b96664cd8863210bb03cc75012eaae96320

SHA256
f5d0da7b010b28a7fe2c314724a966c44068a8c8fa7e9a495e1284aa501067fa

SHA512
476e35c3da0cf223e773c2d26403c12f8c8d034273cca9e3c4cba9359f8506159c2a5267793c8bd9982b636191ddda62e9119593f5599053894c7027a58acc10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
27KB

MD5
da9335cc11a14227b61d8663d09ec33f

SHA1
8ff0398d03e930beaf80697ff8d28a0e47c0bd50

SHA256
f0b14d3cce2f618df61a2134588d44964ec9b35fbfc7d9388e3facf9e3d41933

SHA512
ea18ce7caa4c59069a1546ce390bee4f9f713fef8bebb6046a43d7344eec3c0944bb9bde2386ccf0b997cebc5dca12fd7243bb1ed4eb9acf30987ef12a9a7716

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
19KB

MD5
921f595d41484712c42ecca8e58f977d

SHA1
91b5f7d1f4b4753f2c546675a151658d3725a3e8

SHA256
e6cebfd4a93724b0fa77359add2535ad0e3212755328420944614d9927769c4e

SHA512
a24356c835f2d7c6fb09a2a95081d539999e1b1dea77331e9d15c269a6efb4990783f1c4112e94cb9f5bc737df7e57131692d4a551d61aa991f9ad2e5f2a2968

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
17KB

MD5
67e30bbc30fa4e58ef6c33781b4e835c

SHA1
18125beb2b3f1a747f39ed999ff0edd5a52980ee

SHA256
1572e2beb45d2de9d63a7e7fe03c307d175b2b232bad2e763623dceb747729ba

SHA512
271d4a65d25b0a5d2ff2fe8f3925fc165d9b4345893abfd919061d78ffc5ffe8890ded35e41274ad8b860f06264b027cfea6030ec9411a4e03bc6d7cb4d4d228

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
32KB

MD5
55ceed9cf423fed08cc66215347ddc15

SHA1
347b7059f53ada47292a75822c0ef76742d5150d

SHA256
de3418efed9bdfb80cfaae91902b519e42f38f1c99ccdd8af16c858facd1bd3e

SHA512
15331c652b4e42fd5112698397da68b1b800baf07b4d717f5574179c617c2f70766899d977f606e6a480ac10db92f4c4456507644116f5ddd6a5f966885bb286

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
136KB

MD5
cd2502f068fce864d6c252df6eac8980

SHA1
4a62eee46e8ea47be636710a6929030855b74a5f

SHA256
271bc0518bc3210e4edbd524a85eac80cc019baf080b402ae10aaad6a7458d4e

SHA512
b4fcffe13da9651c90609c628068deba6e358820ff3ed979e364e4869a50471e55a621414c7c875420986317c0535f9f2c4b223b1efd7a5126999c2ddd71f16a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
20KB

MD5
1dc907050e4e3669154f855f84e5d12a

SHA1
a68ed1cb87250e147236dba82095f019fa84af76

SHA256
b1d3797a24164fb59fa342800c6178311a982c5c6428ea11b22ca1bed8fcacc7

SHA512
f851942b9572f2556bdf8208ce9251a8a39a589adc054a6d4a27fb5578f83826acecd3eab2f39c3682c50ec4aa1612e6f2a470eded299757043a887fe6505393

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
26KB

MD5
3d522516d5ff9338556594ab208cc020

SHA1
de20c4b22112d09a4c460b012fa54eb47567416c

SHA256
4c1216fc078bfd106fb056ecfe4ec5c8410db441338eca9dce8a14ce89368bf9

SHA512
1f6c882e54f0b8566466073496b5bcf56f03ee165b4c8afbe203ab4d02bd4ffb6e7df3f77b23c558a8646047f0eab881f0a6f81164f3481619eba7970bb40127

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
149KB

MD5
b4c5c35ef3f393b7da5f5637df9abf3f

SHA1
1fcfafbc45fb7a2298f83415f39d14f41c141445

SHA256
9085bf124f0fea85189d23c84b0a8d76479a408f53cebad3890a5a044d335b70

SHA512
8ba958961ee6dba1c75b5cd7e4f0b7f16bb29a003d0d7db0966c020d4703b211a54fa69205bff9a255f4c73b92bf1bc23e8f2664fab89e5c7233269f7de4fe1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
135KB

MD5
00cfcd111ee7d2fb9c99d2716ca647c6

SHA1
d24d32113898b40bdd7067760814c220ef0a53fd

SHA256
913559562fce8f55ab9566f2979bbaba60a1c1d8c4bbac8f0620dbd75ca7241e

SHA512
199d26d8666726745c3ead598bc60a69a2917dacded0d79167e90c8fc0e149156982a20f78b06d999e60f6eb99456f297283a30ad68ef7a82ec8d871a1f5696f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001d

Filesize
83KB

MD5
73016bb8013275202afa5db2ba762e70

SHA1
dc07c7100059605eff4da8ae998e1910f6a9c28c

SHA256
1fa44112d1db16643444dcb71ddb3ab0d6a36a0190707e9593a2b66af6ee2c95

SHA512
42a9ade110e6d8b5897e78e3f4c55828a2735f6c0c57f337a86828b2eda162bb5bbe50116841a079ec998ad3b87562736cf051adc03570ad4a888db43cee8ce5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
83KB

MD5
3c4301aec81cc9577b05986d1707faec

SHA1
bd051b0bc636bc73d167bf67607aec94a2401377

SHA256
b1645052b67062a02d2bbc97ed4cc10673c1cc86ea73ef43abab6439772ca241

SHA512
bbced5a9eba0d6ae2a2c5ff6cb48686c6eb0b32486d692af862790668d796dc747bdf5612e5f1a0d6e3f1f6926c16ee86134f41fede0941d1a2d56cb52afd56f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
212KB

MD5
08ec57068db9971e917b9046f90d0e49

SHA1
28b80d73a861f88735d89e301fa98f2ae502e94b

SHA256
7a68efe41e5d8408eed6e9d91a7b7b965a3062e4e28eeffeefb8cdba6391f4d1

SHA512
b154142173145122bc49ddd7f9530149100f6f3c5fd2f2e7503b13f7b160147b8b876344f6faae5e8616208c51311633df4c578802ac5d34c005bb154e9057cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

Filesize
24KB

MD5
c594a826934b9505d591d0f7a7df80b7

SHA1
c04b8637e686f71f3fc46a29a86346ba9b04ae18

SHA256
e664eef3d68ac6336a28be033165d4780e8a5ab28f0d90df1b148ef86babb610

SHA512
04a1dfdb8ee2f5fefa101d5e3ff36e87659fd774e96aa8c5941d3353ccc268a125822cf01533c74839e5f1c54725da9cc437d3d69b88e5bf3f99caccd4d75961

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000032

Filesize
64KB

MD5
c86e1b32988ffbc37474c5ea5457a62e

SHA1
3b337c4d43ff0b4ff79f9bbcecff8143839c6cfe

SHA256
d94398ba2ed0b438809ec4203c64c002b4a0d960fbd34ab144b78fe7a49323fd

SHA512
58ac67c26bca36a29799d49ed95980a15b1e279282e425ce13620cbe93a8cff74e1c520b896f8e9545a6b7eb8266394547949d88ad96bcf2a879da65521e7f16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000034

Filesize
62KB

MD5
6b04ab52540bdc8a646d6e42255a6c4b

SHA1
4cdfc59b5b62dafa3b20d23a165716b5218aa646

SHA256
33353d2328ea91f6abf5fb5c5f3899853dcc724a993b9086cab92d880da99f4d

SHA512
4f3b417c77c65936486388b618a7c047c84fb2e2dd8a470f7fe4ffec1ad6699d02fa9c1bbd551414eef0f2e6747a9ee59ca87198b20f9f4a9a01394ae69fa730

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000035

Filesize
31KB

MD5
c03ff64e7985603de96e7f84ec7dd438

SHA1
dfc067c6cb07b81281561fdfe995aca09c18d0e9

SHA256
0db8e9f0a185bd5dd2ec4259db0a0e89363afa953069f5238a0537671de6f526

SHA512
bb0fd94c5a8944a99f792f336bb8a840f23f6f0f1cb9661b156511a9984f0bb6c96baf05b7c1cf0efb83f43a224ecea52740432e3cfc85e0799428765eefb692

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000042

Filesize
18KB

MD5
8eff0b8045fd1959e117f85654ae7770

SHA1
227fee13ceb7c410b5c0bb8000258b6643cb6255

SHA256
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

SHA512
2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a2

Filesize
20KB

MD5
6aa917de50c7137a4307e56bd4c95b0c

SHA1
44170176835113a803e6ea945bcbbaa7c18750e1

SHA256
bca95c77a49f82781f24bce24c8f9705996e88347422e06abb0a5d22ed2c3651

SHA512
e8ff7c5f601c277b8da8dd8f7cfdbc989ac73a0bb043a4ee3a219b7d81df7b4b48287a13cb6c57685ddf4100c462bf333ea8eefe7b6dc73dbbeba6283b0503ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a3

Filesize
29KB

MD5
005d8428ad6238c14098bc404cb96674

SHA1
b17e163abaf6ba5b396b00ef4fd664ce42991376

SHA256
b1ff4df00af54d16e11bc9d7de0b8664496b4d45a8ea3b25e5727383eacc6a53

SHA512
cadf4dacae01c9cdb83776274600c773b34276637dc10698d39c610b77e55acf56e70f97c17e1ac779c2ab6a804b8b881a16b2b3db9a03ddab5821bbfe86f8c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000a7

Filesize
18KB

MD5
115c2d84727b41da5e9b4394887a8c40

SHA1
44f495a7f32620e51acca2e78f7e0615cb305781

SHA256
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

SHA512
00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c0

Filesize
1.7MB

MD5
29a0d4f99b2ad92bc67d276c0c43d603

SHA1
0308b646b70fa915c6fb1bc7df5212940c7a938e

SHA256
874788b45dfc043289ba05387e83f27b4a046004a88a4c5ee7c073187ff65b9d

SHA512
6ba31c8a9294f3d6e21639d9c87b2fa45b902367f8760a0be79b3ff8a8cb466470fef5c98b47cea77c7c16463a3b593a8bedaf2492853289fc9efac168f74ff9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ce

Filesize
79KB

MD5
56bd3d0938f583a202d068e799eb70c4

SHA1
92f5fefdfb8bb40ffd520ca8b9f58581a58fa5bb

SHA256
8e93da0f745eb1ec0be8c7159e48077bc93563d176df73b67c6cd441276298da

SHA512
fbe2022f03c62bd89faac45892378709f86ddabeb71dcccf49899334ddd3a2a2f6009caae4e857837dbcf9b14f2f8dd0b2a9ed081f13f938128501f4b73b18a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000d1

Filesize
57KB

MD5
8555657a73b1980473ce0887a2250b5f

SHA1
70816655cdd058aea3a4f2358db65fcf76d291bb

SHA256
a8efbcda248f73ca4e939ae858eb2aab8983388ce68b75ed695c960ee45e465a

SHA512
354bf500d5889c7a74d86e2747adf8d77dcfd7354ba2e6f63f3aed12d25bc3752135611041ac2cd0e0602b9841334f1d4ce165a7a3bdf91843442c88e2b85e22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000f9

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00010d

Filesize
26KB

MD5
b5695ac3da5b8674b3eec88c65d5c8f5

SHA1
44f269dccdc9833f8ca4799010d4c23e44b68ca4

SHA256
bf703aa8791502d22c613a429d4078bcfec38d15191a0eb62ec71cc0922f799f

SHA512
e6133a1b161022b760eea4ed03b091729d7d3e36a6a6f976394c612ff1ef72b83fd9f5d90401052cf50c50d040702dcad312c9523f619767f4bd01d5435aa8b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000132

Filesize
20KB

MD5
e75193ca3aba23f5c7e1180967813eca

SHA1
ad32741fef2a28f1959c6848f2f73721fc170f0e

SHA256
d2b84cff596d6011c89a9488f942d042f6df50724abfc5f2f9879b27f72fc555

SHA512
132f35f94245a49c7354c8c088a237393f91243c2c3ad49ab86810db6adfca2e752499fb50f1c2174608fa17322483d53c280bd2220f37d8b5e5e77aed639b1f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000135

Filesize
20KB

MD5
ddecb50cf7f3cf6e0ebe9b3374ea2f6c

SHA1
dba013bcbc2aaadd3089cfcf720c42348a48817d

SHA256
9cea35a9fbde3b0328bc0e72f696919f707112dc8a15c3032becce86c48153c6

SHA512
38ca3a3421504ed4d5a6a9488fc2d686d99c0755970b713742ed2b24d8d0c3c971580d16669f187f1d3db428f2804ba8a463dd3c6ddca7cf6128cc97c9082648

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00017c

Filesize
47KB

MD5
015c126a3520c9a8f6a27979d0266e96

SHA1
2acf956561d44434a6d84204670cf849d3215d5f

SHA256
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

SHA512
02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\02735674612cbc52_0

Filesize
3KB

MD5
09b524cf24c504f33347e62fb716008d

SHA1
b4c71ca28b8d521b82e84c7f11c2ca7b841da11b

SHA256
d3b49cc2802a0f4bcd20b096f52009f79fe0d2a6769c2773a684646767b752b1

SHA512
4112caf1e9bc501f3d795a5f406a5bc1ff9fd17c42768db1f3926e68bd7eb1f72c597cd844f108b4e651ffe671abfecaecf79925eef54635241bf555f5edbc1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\03eef0e77feb64d4_0

Filesize
6KB

MD5
1d849edecb188297269c3242cbe2ffd8

SHA1
003321c1e8085ad74e427242b679151d2da74284

SHA256
0ac399731b870e7eb2da01798ea1459e51cd91642521c9de61a3072cd6683108

SHA512
102246a30c5413d5dc97c7520675997962af7fccef606a1d544b7d66c24fa406c3a76b749ed8f2b42498c4bb4471711b1d2d8d2e088d4a6b5af65670f9bbbb5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\06450eb6a7b09545_0

Filesize
2KB

MD5
c78072cd7edd6c4fdaadc9bc96b5adf5

SHA1
43da44d60e9626431e89c676ca6e47f4d98315b1

SHA256
49caa5f29383c7310f706797298c85e27d4a298c13a7ed9c1716db1dd2ae5caf

SHA512
132a0b33f87b1235adcb57936c4f9300c030bafe55a406e23d50c4a11d4b4fe77b2fe5902863ddf841d336883106698ee3001d2a7b7ca43631953802d5cdda64

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

Filesize
5KB

MD5
bef05ad22528f72edd3fe6386295e224

SHA1
7051bb3de916d2e8513ffa0930934723c7cff5ab

SHA256
7f1b231537f36a3a207bc8c569e5aa8be7d7b77c64702a1e24b2663d162fe529

SHA512
ed341a1a82ef1afc9d440a09b1488f597da1f67a27ad1c6cc8b19d027a0ad13d8dc02507305d4a8542ea3cba508cbd87da32cd5d5c9ed07c9563f6078d94b741

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10889463483a5cb8_0

Filesize
6KB

MD5
96d6d8b6cefd0021f129ef521a624574

SHA1
b08a92edff3baf3d8c82a901ac13a0548fe3d6df

SHA256
a087b149d5b125142604f6e1e82c7adaeeb6c8faca2b8bd79bfd82a14a1ab318

SHA512
26d44e01e150e7c554b16d1d28a0001aa3b1ffdb11a7e90c700ab3ef938c899fcb1f06202664afd6130045644386b620e9dbd586b4bca7a19615db50826702a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\12087cce3c4fb9b4_0

Filesize
17KB

MD5
8a94559721fe224fcc336bd3e93fd296

SHA1
b8965a2b801c33ec9f292a588bf4c748b2eac72b

SHA256
91558c4bfc2f9edde18b6483dfda8a6e92513fe16847175a24581e6cb7abc147

SHA512
e23ef03d7466b7ee7e03020b0e32299d8f90dc501a981fa7fc23cc3a046549590cec9cc2b9b96caa3cdefbe35c36878b81ca1f09f6aa1969c4872542853a5ae1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\132bf349d66eddc8_0

Filesize
22KB

MD5
59a0e6eab024e66e6765bc5d756319d1

SHA1
0a66e38dc0a74b83b2929b5895db2ca9e3e4d405

SHA256
ffcbf4386b185299a6980ca5188d9fabb638e060743554ae78b52761ab556702

SHA512
143599d3bde3694b0154ffb134f9bdb5a022d5a583332a09e5afc44e8ac7f7deb5f3f9caf1e136a65aa1d5754c574b49c586b891a8d26aa4c3803f09b4aa08a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

Filesize
2KB

MD5
b8a2a371d5aa3b988a7107a514d80eee

SHA1
e0f69b51464811836a7db5d704ce8426429cb247

SHA256
ef505009cbc48d49c9527d12deccedd5cf2782b57fafee00d80122a7ebbc9558

SHA512
c8ac79c67171a8d2bbe9385e77e9f2e6dacbc425905b379496d30c81575daa13051a0850ef5aa0e303ebb8780af1868a44895d02a19caf72bcf6f1ef80613aa0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1927a26afb9a8b4a_0

Filesize
3KB

MD5
ca1906246a51d3e88a8139b9b6266ea3

SHA1
6b5c35f5acc36f0470ba24f3a38486ed8dd48d47

SHA256
8204518a186776ee2711baec73e59b8cbb84157bda7274c589e58b4dac5a212b

SHA512
3891f28505bb8a6ea9d888940fbfd8e7b04b9ccc0d748345f4d7eac60c09ca47d62921a851450a8e60d6950d6865f7696727e801b591f20b18e3930ec6c07304

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

Filesize
3KB

MD5
1917b2ce8b2025f5ffec3f49b5d67338

SHA1
5a43ed7a08eb70e29ed2ddff79133836208fd60a

SHA256
523f090cf94c60df17ae639249cd53799dcd7f5f92ebff0a39f1171f4642c772

SHA512
7a427030c3265396acbc6f39037911e599916c48b2ba8c83db24e60a678bd15937825fcc319d4b76d6c961471f9f1209930870180b4ed907e242b150ff7ef5ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f02c4494b1a18ff_0

Filesize
2KB

MD5
d956fdd59680c91582f552a58e649d4e

SHA1
4ba4d6ac1fc23b42ef78bd0b256e71299206da24

SHA256
3dd448df0bfed55beee126fc9671d63560b1eeabb1393cebc87b037060bd14a0

SHA512
856c0c3ab23c1fe69b2f5b214c86d1b717bacbf71fe169c9935b746695494f33ec3b54c6ee23555ae25716c3be6e8b7b00e57ff75543635403c03f80fbe6c6e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fd2be14abb3904c_0

Filesize
1KB

MD5
872f33411c37e52b30ad0c9773a16194

SHA1
fb73f47a165bd1dd3b541e59840d9ddc8336dad0

SHA256
8a92febb1e40014899d38b2b70e70a548e11c9866eed16a0b83673d872884a71

SHA512
8d7cde4a792e77d93209dd17578921cfc67d9b03d7c7a8b6d2b4c160dad2d79a0c20f024ad21301c4271074dba2e9a19cadd982c1b7ade13a9d22418d756ab38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
43b6f42d34f2127a38ce400d9d2fa186

SHA1
0c0217db6073279d79eb23710af0520e4747d057

SHA256
8fd7f2d5a8eb63103672e2910eac3fd4d9625228314a1c63cdd71df44899df4a

SHA512
6f2fbdc38e0fdba3028547b51d317415ac6a80d1f0fefa2dd23f66c8a65ec55a08269f5d0350b7cc2ce5afbc909608d74a27b053fbe5f5a9268dedaa8f1c337d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\476831ba582729ec_0

Filesize
3KB

MD5
25a0c429cc9a80cf1dfd9d0995de621d

SHA1
394864c4c66d1222b928095c04b3405c76c31a63

SHA256
c4dd9d76881fef395c1e57f2f67671876b91ace6d31f90d5be01f2acb5fd895d

SHA512
0de03eb623a828f5189b1c4058eb6ee9ae7cd1c3a1f9bd036fcc7ea82bd85ecc88c20bef3146ed34930185d13112cca195863a341d6de76008a5e7e824439aed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\48b1105b4c2874b5_0

Filesize
3KB

MD5
c118709649d10eb5dcb9c34288625ca4

SHA1
1f031a51ba76ae1f022a9299c30a172117f37e5c

SHA256
e2fb83750c55f24f8a031004d70b8f258c76eb19c9eb286e5806ad84bedbc003

SHA512
a8911875884a6de616356d39a4c34af904c019e149742cf4dacb5e7c59a8bb1787e394533d21bd218dbfb43c087c618bf254e5ffb6121910505dc325e1c45ae0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\493b96205c1ec74d_0

Filesize
262B

MD5
3ccbcdf9ecd504e38b17065f6a998e4c

SHA1
7e1e4f3924d27506840917852cf4582de18d182e

SHA256
27b71e8b6aa1d58904f9b510f5289413c10a8e88e4123532af6e7738e6cf5187

SHA512
d117b1a401096e3d50b26aa267bd8a2fe8c49b34d14a2348d857cae2868b7b4a6dfd107d06ca525bb5c8f1e00afc4378011b3cbd41f34b71951b2cccca13612e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5049bf849fa8f538_0

Filesize
77KB

MD5
7856ac5a45004e8ce97cb5265ad3f7e0

SHA1
2645ca3b4f6f0c36fd0c05b3a481b5ba7894fbcf

SHA256
07a95dbb5ff1d292e2ddb5bcae45977dbdcf941a20e7821c88cc6f308e3ed3dd

SHA512
99f83dcee860508fbc6530a7536bce403cbd40d9d436e40449180843c0466dfa8647438ffdeeb7392ee03f9f2f03aebd0fb7208da052b84ca719fff930774770

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\534ab76442c26020_0

Filesize
19KB

MD5
035e22b0a431165b336f9fe92c8356ae

SHA1
1b38f97ddb91d4938273c89b4f78c30b846aa5a9

SHA256
ed17033a4609f33d584647086f30ac44aa4a73601eb467037e72ef85f04ca8ea

SHA512
fec92c79c9ee47a8378cf47880ed2797508f81cc95bd7452c5ab92656cfec5beba11e628446879a16c0558594726fe472ec5a0f1d6c6744e46ff63cf87b58bf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

Filesize
3KB

MD5
3e43d7f72f6699874378bec4939fda42

SHA1
046b4039930abb16da8d1a008b0938c571506889

SHA256
7c38f5bd7e51931f2470795abff02a2038a0dcc2aea3c1100ed018b9d3c8116f

SHA512
a24b567e3d7e949cafe2576aba856ddbb96594a9b190cf930e5a47986ad2b24d85b5b3f773ca202901b99932a6aa5a7dc6d7b67016a6909279f2aea6aa9e4ee1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\54c70e8d154012bd_0

Filesize
35KB

MD5
30b3d029c9cbbf80c2fca564b64deb62

SHA1
123112e4ea4765a219d90b2c889a1b4dc3899397

SHA256
88f6b7cae72a3903f9fe58b41b98fec9913742b7ae9d53356169f99e18f35acf

SHA512
09845443e2ebb188102d45297be89d596edddbe304dc54551e9b2879c270f98bc6e4393445e8094f738ac1a22a26dc32b7a3545e1c212db0dd90138f39f2cf59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5801d3329fb36c59_0

Filesize
2KB

MD5
2c39d368af696e7ee03ab44fe461011b

SHA1
2a7f875e3e0aac40c2e9c81bb39583175efd07c1

SHA256
bc829003d37efc2dde638f79cff552bfe2e4579d85f0f2152ce57ef6df182e3d

SHA512
b7ee9b406767ed8a18d165a60f779d94b4c54b7f7ac90657047e1f48db2dfac0ecfc421fcbb31f419b8d13fa944c75b5367892d7fe5ff151c2dae5b516433979

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5a994fe24b451732_0

Filesize
14KB

MD5
08b91de3ff88581c37c512011c1bb282

SHA1
68fb89e69bc8472ea75b0600e271ed64d30019f5

SHA256
06d09a03bd09671deaa53cffa372a7258914b4c5d6cb3615c48aa424386fb4aa

SHA512
08e2bdf5726a855b284d4a6416c8c670b072c43afe802bf2b1a2b781f18a66340d811b6448abd14b770e0d6599527fc647efef6473479e6e80c4534bca0405b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5d0c04f9998369cd_0

Filesize
26KB

MD5
4765f6c57e13f55f495eab23477d4819

SHA1
5028b6e4b4ea2a9255c0ffd4570c81cf757afe1a

SHA256
5c94f8b35299975545a1f268146959642abc62cd4bd07a4add05c89f88a86cac

SHA512
a9f2df517c2e64b46c46b594e06e23398a7d49eee0af3f3e9cfa29f5bda12ae2922c14069a091d3e4e0fbcc5b5e2f8f2f79911b52e5e7758c5905355afcb243b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\628a1d8509e4721f_0

Filesize
289KB

MD5
50e6d978b2dc7cf5c5c3d6e01e5507ff

SHA1
26e9d32ae2615cdcb811e830a147c25a5ec0d5b5

SHA256
ff92350ff3f6f35e7a791945e38b8c9cf13147d99e70f1e3d22cdb3a2a89daa8

SHA512
34f99a359d5fb30bf210f4838cf51fcbe5d4cd091d078beec6ae960438c818731ec05e3cf91fd584e7ea63569dd796efec04d7139f33b713c6421c9cda3c8931

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\635e64b37935c888_0

Filesize
1KB

MD5
7b9f1f38e5434bdd47caa43dfd8b370f

SHA1
7f4f40f33792b8445ab09501ed8db4a934cca438

SHA256
f1022dcfb43ad85764464199e629a4518ffc386c7d011fa96d4788f595c1f096

SHA512
57c1281910b5b0dd0c04d8d6994a68a96808236dc9609f069cdc8b445ccb5e1aec9ec3b785563bb732a4e366f6a4e3f41ba436396d106234f86d1af6cd901848

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\63bab61298dfac24_0

Filesize
28KB

MD5
da85cd3ddec00f3d92e3a1a3c9bb7198

SHA1
b60a6a8c50c434e617c91355294040ac29730cfe

SHA256
5585b26b38e388e3691ba8fba250b76adfc6fbbdf9bcb88e63c12bc7ee65faa1

SHA512
ab7d9706ca17ccb7637886d36ccabbf7484a6ac453180063ca4f157acbe61bedaef2f74bedd59f527cef77dcf20367b07922ef642a675017d631e63f6dc677e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6aa9a2943612cce1_0

Filesize
3KB

MD5
137c52a1a7c82ec877fbdc3d55618ec1

SHA1
8c66ca1727146de9765e78d211bd46cd0e9447fa

SHA256
d7eb806be7f2e0a755db94fd7475f56ae53e40aaa99f2b20bc2cd992476d71e6

SHA512
a17a524e57fd53075e4b1f8b51bbfd385eae732ee423ee27ca05da2d4bc8de0262bd76763363635a033983a9ce05f0740271349f76721917369446db51093086

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6d3b0ad57bdf7db9_0

Filesize
1KB

MD5
728b239a2f649d31f6c439046ca6f1ba

SHA1
ebc9a964c76d22d3854194d9b465bb5b48198538

SHA256
65e3e4bdb3d04623adc69b7d4ab5718b55de12610f9fa2b95f8b6cff0dd12bbf

SHA512
2c27506195958bf62aa46a20492f73dbc2dd2faba6ea491ee63c8b7a419bcf3df4de375fc7042763ac365a9633975ead72a860bd4139137636d3b36a99a5ba68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\718aba49c9504085_0

Filesize
2KB

MD5
d84f1e97c4a2db980cb41bfd6796d0a9

SHA1
39865196a42358fc7178fc3de5412bd3afdafed8

SHA256
e86e082d8e0ccaa8608d239d75fd158075e429aa2b9f95c34129d4335efe17c4

SHA512
102cc3cb5adf66c5c9957877f5653a0368e6d4cb05475a589fb7cfa1798dbd881dad9f20622ac2d96722df9ab720c8cab050513ba9f0cc788f31ad7b2aa5796d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\74b88724f60b0383_0

Filesize
2KB

MD5
444129f844e484766ec824bdf7a6fd17

SHA1
8b284e26520bf9aa7e7e2e943ecc0477de878206

SHA256
7171a65f970ef953ab59518c52add8fbdd3fb88c8d06eafc609b79d781962ef7

SHA512
8a802ee91d5b04cd62f694602555eeaa612c246557026ffdcac8874226ade708828fd230786791980010920bd67be5f5b933113b9da0182256c121193bb5127b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7a66a1246c4f29f4_0

Filesize
12KB

MD5
c9de400ed8868c1823f103135e7a9269

SHA1
9d338c1529c3786a8eb8beda485199088b7afc6d

SHA256
2ac827b95e04b9a1126b4bffac86faf21825ddf3b4ae969258ed04ff40440244

SHA512
9d529b70c644dbc3726d4ca52d245136cf57d0db3a8fe2c0a6957cdf5cb107be34a8f2cb13a38e24a8461fac305ccce994ccd87abfad141578b2b6e5b63bc40a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7cf9843337c39c04_0

Filesize
1KB

MD5
ebcbd5cfbc34e3ec498aecf2f44cebc2

SHA1
6e8426791033d5b4dd80ce701df251f6d4793df0

SHA256
6d613c9fba6dc6d95d87f4447d9fd93baa3d204d22759b1d104c614959b77a77

SHA512
166af1faffe3ce40ad8d16cf47bad0c7160ef3c9abdedb157cefdf71ec4060b3a7aa82bf6713419f3a82175a212ddaf798d9c9c560b05e547d3a9bfdf2ef3524

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7e23bcf4dbf5c221_0

Filesize
42KB

MD5
6975b3b012a0b6df155f5d794252efa2

SHA1
30bf8755da42e9b13aff667b7001c121560d983f

SHA256
c40fddc9581566a1addd449357b85671df4b45695abab4e6e187185bae6cf92d

SHA512
f167474da2302cc553f36689bcb9840ee772de5bc30b72c95acf9e4c0987ba53acf4736508f93865aa9ef3a34f803f4321eef5f01235b32380190ba829e832ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\80520c6bc56e3d47_0

Filesize
5KB

MD5
d0e7b999cd2d633d388f57cc835949fe

SHA1
43e7c52050ee80e492e84efb3c23743c063db87e

SHA256
42e28d0c32cd73962dc0236af9144c48cbcf847b033e03527af1310cc9ec0b32

SHA512
dbc6c28d11c1367965306833e00ee2246e5a56f4d5166c31bcf95f3d2e6e8a28d1484a532d9093728984b72ffce9fd79f1bb30bfa3fbaa2618da899f826cd8c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\81764cdb356c9506_0

Filesize
9KB

MD5
7f4ce53867b790f6101e7cd690cec30b

SHA1
40afd5c206771b3137074024d240e402df12c074

SHA256
e9fec7987591af60ff998c49d46c38c9b42a2c4fe70d80bfee655689c0251226

SHA512
f4b150529bf0243217cad5f2c3601a9596623ed6876d5de9a0b1f9cbc7c3427b80ea7ad0c4b23e8870363c343dc52d216f49de42b3166dacfdc72a69da796e52

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\83d6d3a772bbc707_0

Filesize
6KB

MD5
dd37c809312225be3c8b8a9b7768c884

SHA1
d3c097883bd02be13d4651de947622fa2f0ad45d

SHA256
7f8233fe2ddd4c33be7da445a98ce605820a41caee85b2aca19e5000c8b696f2

SHA512
b64ad7e359017ac31aa0dfa5f8205af4005e3ca3cd0ced1266270b42cc7fe38e2b5f42f6346fec82a04ab735844265c4ac27162310e328147db766eb9887597c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\87bfea9426cb2ef3_0

Filesize
5KB

MD5
e6be1473a6d918f67307ef5945276844

SHA1
5ef2d5ae41439a6d58a58a0d91250493b5d12048

SHA256
80d51c3b082c1853dcb0de60927402c7020c103e022e59cdac9617280f6e595c

SHA512
1508d0a7551ebe32fa5bbaff587667885d241a2b675b94adad2266eba6bb8d6941934f207913f3d27881e61e47e8c83abe79299958b4d4af8f8db83544e98679

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8908012b8e4a5af1_0

Filesize
11KB

MD5
d759be8f3713f04f3c4b95030126e438

SHA1
52813b0beab70eafaf9c06ef09e3e50f4503e971

SHA256
b3c54fba460be18ffb351035fb4be679649ea2377eadd92f1b1b8c61f341dfca

SHA512
0de15753e02bb7e6f414aeb273290126b37fdc6e472159c60a6916842f44ae2e0edcabd2f0cba7c574179a2e42340379ddd6142b68ad626e487f8f81934b4f6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8e5987d08f7b6e11_0

Filesize
1KB

MD5
b177cdc3515e8075430202f403bf59ac

SHA1
dd3bca846c98e273a6fbdaafd07de44f787b5ca7

SHA256
c19ddb67cb81e5ac3b7cff647709568b44c6f4c639b498546e6e8df8e6e6544a

SHA512
d02830e5b1eb306bb1dab51e7559cc6a6249b8f7e3e9c059b0ca578b8dbc57ed5cf8ce76c87b9add196f3309b3381a9de949a828c6013641d647f33fcb95798e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ec4b11de0b23393_0

Filesize
4KB

MD5
62cdf5425070d660d83c26d03c2832a8

SHA1
ea9701d43669b1acde2493c798f5895679272b67

SHA256
cbe42e33636d33e3bdadc91ebbf237f14d24a9e7d95e37438346a115cd820ecb

SHA512
9db926bd5eb9cce41db609405cfd5b607ef0b9ac88c855d34e46ef32082f799f0679130bfa0975219f5d6742e0d79d0b3f0a4295786a321868f5cf4513ce2674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8ee73a31bd0cce7d_0

Filesize
20KB

MD5
4fc63317acefa6fbf79c468adcd6e0af

SHA1
f2b31d8d0d3e232851faa4b6d5a33408753aa01a

SHA256
66fd679f3bea6dbb9c172ea2e36a51a04080feefabc793887bfb0946c97e61ff

SHA512
a9a4da978ff5a0060df98abd29c6376b7463a8b2ec7eae51af9e744938b09f4f6b48a6b2b274ca2f6ac735a05375f6042b441300108ba02001450a43e9609f84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9412c8b664751f90_0

Filesize
2KB

MD5
04821d6980364af0d1ed28e251c68818

SHA1
7fa9d530250e87d9f0faf450c0fa2fc0bbcaada4

SHA256
1322d6a725c9a411c35a57b95b563a9d1a1994fb7f7cced4d8a731b0779f3a6d

SHA512
75fb284fb1576fe990697775d6e6bf07b8ad6bae0cff0a114db64e85ba87ffefc579f9389c5a1aac402fccbcdcb953d79a8ecb68079cfdc07eece02cc31885b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9dbb949d27873cbc_0

Filesize
3KB

MD5
d78323a1186ed1f5fbc0477f09849635

SHA1
3738dda97d83a1983448d5a4b21657c4ffcf326e

SHA256
b1c29446efd4496227a0137e340d65fbc8d9903bbf3c96477a16fd7af289bb7e

SHA512
ae2946ab9112795bada457c96586a5890f3abc87e4cc93c40c004ecbe830f1c6f29a3451ce9215fa42d0820c4630165e5115ed4b07b6bf964429660b8cf11c47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a09f6271ad0c4092_0

Filesize
47KB

MD5
c947d37c41fdba7cde5718c11558fe55

SHA1
373bb38632e16cdf64c6dcbcecba632ea42ba9c4

SHA256
ca3effeed2bb786cc929c638f4ee4a028805fbd9af5a3fd548968c63d36815b0

SHA512
33d01a39c7c1afe1be96de1bb6e525d0d601f24d47c2454f50810c80fe42ecf8675d13e6b33442200923a1dba81c18d905020e7406ecb6f2e2cc8228fb31f887

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a267b7c21d8b8c9c_0

Filesize
13KB

MD5
2f89a383929e76eda101dc23a0b75d41

SHA1
12f4d12e322c507f9241777999791cbfea9b7551

SHA256
2cf5e3d10cf63136ddcf81d2d833f2786591b4080d0141245d5275af80ae010d

SHA512
f09ae6d360a5918ecb4d9bd71dfd15a488982335effca817c1c157764f18485dae5519ac1b554f768c1f3254e0a011f42eaecd6467b1037f7fed94dc28c6ad89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\a6537dab24e365f9_0

Filesize
5KB

MD5
0c7712bf6958644d4420f5b87b59234c

SHA1
dc3555087f768858f5663b669b732d011734cce6

SHA256
57f4f522ba67f74ff25322f8a15acf7b2f648dbf1da144bf5872ab6356fc1121

SHA512
f98baf936a55b71b599deffb2c9946905d06f2ddc8fd540c266c8735b3cdf0ca26642858fce82241379d36ab304b9f17c703c77f701e229008b4ab78ad1e0fed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa4ba7faba93e196_0

Filesize
2KB

MD5
d6c17746e4e880973ef6cddd60eb0399

SHA1
87da8d6bcc33181b3b1334c13db0438c19d6e94d

SHA256
54e63bce2f31095d5c136092f68101df55df0378da7d8c59e3bb5d436d12eacf

SHA512
72c5cef830d7f65df829d78cd5927f3ba754d3604e73939055fc3b0bfc53e1e37acd031dce09906ff3965560364a57833df5a0853533d36c30ab56c622828991

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\aa5fe3b36e22e31b_0

Filesize
3KB

MD5
bc6cc7905655e47797cf09406c1f2ed8

SHA1
87c7dc7cf53ddc4e8c66c8294effe921b3e0c6fd

SHA256
408c60a91e618bd6128a34c340f572e56232f1d58e7627532bcc3ea7f35b10fd

SHA512
3eeb9b88bfc8c314e8bcfd52886695862d665028dcc8d71c5ea63c21c80b250fd209dd6648817026429299a9bfb5b2d0f85bf9826fc26d29fbe9764b4cbcfb99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ac0d1673b2c5d73d_0

Filesize
10KB

MD5
962b7b14a2cf22cbd108a3c53731f408

SHA1
886e8937e07375723335b795df4e6ad4ae054ce4

SHA256
7527849d619f1b2a553eb7c4da0c4e080c63d8f0851483a89ba7a1cdcdcc44b2

SHA512
db5ee9265432c12b82c0cb37d4c372c81e267342e8f0da8247b3e08ce6251687ea2225e8fb2da7504c4aced8d7a29d7757d1dfdb8ca71290d326ee7f0bb163ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfd9b5c29c5c8524_0

Filesize
1KB

MD5
b419efaa738e58fdf4a25c1a672f5222

SHA1
9c3deb5a757843850d738a5b97569e33b4f53d3a

SHA256
794bdc8daa8d07f418c408e95d3b5b8167349a95b0c8b657d287fd8cbd1148fa

SHA512
b07dd1dda60096fc4339aae26437841dd85fdd5daf69844caefe63b428b8fa2804aa49de7ce806e50146339a516d165d9089a350a0e729526837c6c54684fab2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c28ca9baabbadb00_0

Filesize
2KB

MD5
0bd3c6927b9944696efbd501596df412

SHA1
ada8dd229f9b3b8ed44740706391f10f9f17d5da

SHA256
57777e52b2e936a753affd33356cf2b9e8487da9a4da46fa4a397f7cfd948b40

SHA512
48a8630272e6b56c2e0febb0c9648b6354215c08679677ffceffef3c36b3df30301754172e2c1e2d7bc97cfc12d841619f3f66c2c4847e4cd8b928d78191e9ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ca5bb3c84b908d6e_0

Filesize
2KB

MD5
d9b8314d8675aa295b286afb8ca68735

SHA1
70aae4924fca8acaef2333b21cd0c4363d63b377

SHA256
334cc8698678685d8efea14874a3d0104151a03b22ef08a4c0966b7159eebbdf

SHA512
af87bd32ce6c176618864a6d650ce00a2d1ae02837622dcaf1ed331ca326e001ecaebbdc9a7e1bae0529667ba1b3478ed913a6d82828a69d2533bbc5db6990c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d3dbb3008455b523_0

Filesize
262B

MD5
7310445235f7b62d1799c9f94a1e1cba

SHA1
8cfd8bbad7a9bdde074f3c882e3f8abdd452b7a3

SHA256
dd05c7c9c93be74859cc1ff1ab68261b29bc94f11f0c23cd767c82ed58007439

SHA512
9d4b6b81d0374a8f36cb68551f57a4ce537e7c31de15431073b853b02db41e7a881356aa4ed65d9dd02ce56e43d4ae4a80136968df6e88d79ba518a394e3a118

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d70d31d6c2d1d210_0

Filesize
175KB

MD5
27ef56cee9574686600cafca137d95f2

SHA1
e4fd01660a1d80d725c0ae24011b616dd867c54d

SHA256
234de760a2ec4cc2f3ff26f805b1f9ab840144101ede39326db7f9f73eb7f629

SHA512
d8d90c8973cd8ba1173cf041d7cba847793a85bf2d6120d0ea5abbe4026c0467ba39fffe38aaae900a1e11825da4367e0932815815d3f8bcb5f09abe1e88fa05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d7a29efad91a1117_0

Filesize
262B

MD5
fd9798601ddbd7477cc303e1b9aa335e

SHA1
e75ebf8be29162ec13fe1bed2e44e90a1ae548c6

SHA256
dac1da9d5f10746fc0b5fbcfa0dcfd5409b5e832a81db88160228828c0dc2e6f

SHA512
1c7f19bb1558b07c4bc2ed98bc35c8d9e52a2f36e506b9f42027f60260fb80ca351eff991c16b21c9af3d365601bfa12f630eed707dabdf30d4d13c53eebd10c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\daea348421cbc209_0

Filesize
3KB

MD5
a3af87b2db81b97b19e563922704787a

SHA1
0bebd7f15503e980fb881b0ffdc3d3e345bd0410

SHA256
f297914f9349283de4b2178adb9a62243d3dd1ddfd411a2ee06b4151ca71ef05

SHA512
77165c197c765542f8993acfdd70cde643c12d5c7fff66915609de0feae81f858e4edc55d967e8171bbebd640d0f1889165e60ce46f7595c4e8b886cc52624a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\dfe07f2c15075c28_0

Filesize
33KB

MD5
d86fd9f1e35fedc378db3fcb9ab79bed

SHA1
aec5131de07fa6e4f0855b15aa389f235f3f011f

SHA256
f7689e89135d405ee9447e938ff42c616668c76e02f6b8df398ab1a15fa43938

SHA512
e0fe00325401c1573a7cd68cdd9f386b2bc92348ed0bb7b1a2b92df77d6d7ce5874c416a1586fc274df76ac0d65fd9963bd08ee9fd9d4f547671b9cce6fbb545

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e504183595893c5c_0

Filesize
4KB

MD5
d1d8b59daab2c848a370a9d22f5f4a37

SHA1
c9b3c9051feaccf335d92a86cbf909df66479dcc

SHA256
3ee4774b872accf4accab58c5c7dbc8697776690c36e3e9a3ee1b0fb1784ff97

SHA512
87c058a5141986641a8afc1c059ec8d5136a37cbb6604838d6619fa4f4ae01c6894a8d00aafa9f746e0277402808269fc44576b8cc82ed42d11a17257cdf136c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e55f0a6d1b533c66_0

Filesize
2KB

MD5
525aec2812e65eea878c3a8daa92febd

SHA1
a763c99d6f6c10c3dae426f65d9294b20e293933

SHA256
cca967b28b7aae9c207e2bd005b1905108bef04d724882bf323945cab189c004

SHA512
158b4da921479936639adbd6a11d1f890009dd9f263c45168160426301e231ed5c8481714f7d75e9726ea1eba0f396301308ff85dce59252a11af88f624f1a07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\edb3b6840a8ddc0a_0

Filesize
7KB

MD5
14070e5d765ed59ea290e2f391396569

SHA1
91304be3535493c7fa80d35c3c9256a7ad994494

SHA256
aba9fba56d2500be6a52711b45e5f935f2c84c87b4052f50e8245bc92b54636f

SHA512
7d10579e5496a32c1fc8e61886dee1c4b712add8f2b035d5ba87b3af33698c011148e3a0c05468c89afc7368b0272991c773f001ecab420efea6e9e9d4f3e1bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

Filesize
2KB

MD5
2eb77c175f92fae93aeae71b327ee046

SHA1
9ff5abaed49988b3c0500e84bfdff0bb1ebf74da

SHA256
fccb855ade5714cd2db342e3d15257053a80af24a8fba21b6e0f9f51c594a04a

SHA512
19c7784071ac9ab36a67888d2b0ba6b1280940a81bd1db507e9a39e4f91beec90faa88142a16c282ee7ba5311b53da042df656332a0a416eebe472a98f2187d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f89251fac2b69325_0

Filesize
3KB

MD5
e4e9b783a5130a293f4a71f6ded70aec

SHA1
68179dc48995ac6f6693b59658e17cc2264c6306

SHA256
8fd431729acce92051c8309b181ef53d73cad7c0866c24cc21213e11fbd2cd1c

SHA512
5d8b6b4199ed3bb64c7d472514a11ab5d548f1e78a6e622e86a54b1f90ffb19e49816283a6f3521870ee2b9af434f543048625d88eefd3d9aca8a55468de46d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
11KB

MD5
69e11200956b3aac008d5682e4fe4024

SHA1
1ca3c1a17a71ec3870a63faa410c785f99492469

SHA256
99177c68ed9b33fcecb172ca0b751ec158c3ac04ad39e0c8dc08440bcb45c47a

SHA512
260001dfcf575bb6ffb1fcd39b4e247e171bc3d8f15916d8ca915967248eeeeebc8917de9b6ea64e82f8c3d21231c602b01d04127ad864516205cf90ca23a91f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
1af58eaf91b5e5f0d952a7c60d6218e7

SHA1
8bb28fb827b37fa96250538fbf519f3b4956c054

SHA256
4de9804cc8fdbe5496e3e5013c3e95f4c8be9a3f7caaad40825b4818d866db95

SHA512
dcd2c8fe3524f96d2b9324de94781e37ba28a5c1c05b700a0693322930af7007e2fff4e97e531b5a1f2b5f6c6fd13f68f214801b9cc4b9fbc9e9c960bc44b3d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
11KB

MD5
362863584ae6b112beef389ace754539

SHA1
112dc18244ea4131cc23c9dc515e374a6ded7cc6

SHA256
7c89d51a3bd57793f60ada6bbc18f9e08dcd76c94cbb96b3da72d3c87b95e90e

SHA512
4544809838c74b0c3245442918782ca36818743a8392987d0ce601222490e59e7d7050149a25db8d469572b91d62a0908356e5b32b56842796b6202a3c433ae4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgePushStorageWithConnectTokenAndKey\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old

Filesize
391B

MD5
9477f70203fff0f3123f0f5e97127799

SHA1
4216949d1fd02876bd0b811048d793418e3bddfe

SHA256
eae3fabff90fab8692f2f2c68dbfd325cd055e8421f1105632e4eae497a2a525

SHA512
961978661fde5b902c9d1ee9405403011ff6ee0d2b30e9c0dbeccd7b39def4a614de04794fcfc89ff624942291fa878efd1eaab8efc5bbfc8437b7b65ccb0d7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\LOG.old~RFe59b740.TMP

Filesize
351B

MD5
c61c660193d0d07aa3ce363e39bd4e9a

SHA1
bf8b231e8558b8b6de61f3f044f1e425299095e6

SHA256
8ee19ecfe3fe423fd1119e28bfe0880512969c996741446e7152338bb2ca7921

SHA512
fc95045129051a1368ada95c8b56e1c4fb4c0ce246bee1dc66e20ecf998b7dde48a8ff76d24766069928cbf8cdbf91053a688a3d10b4a569c450b5885bfe6ad2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.softonic.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
14KB

MD5
f16be42b091254dd6e5a7445bed28c7f

SHA1
e948648f930d94abbc0576645a33ab73a2361b35

SHA256
0fd3e13a52f24a86c521b89df58c4f640446fe01d65a706b9f75528a5cc5b36f

SHA512
9cc344d2db278bc7f9114facfcf640e561aa939407d3181b2c9c934d7219019d962ddd364168ec7779bd45583b37e4909a2f0dd68b4b8baf2ee768e28ccbfd5d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
23KB

MD5
969d0deb38122bba159a8f0cacb22417

SHA1
5a2ec2bd13982834598fe23b0f88f22ff870166a

SHA256
2858c762ac36f236bfa30f80c605085f5cfe4d4785608af7e82475512f88a27c

SHA512
c3bceaffd5b9d0116f17f50209798a97a66dd10a1dbc5fe1f998988bc1026f885b371b13c5cfcb56e10cd465ca8baaf00e1e8e46cde2c656c8e1d3d74f6caeb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
26KB

MD5
9c75fa53ae531e59063e71d89d95e0fc

SHA1
3f0b0283c919ca3ad989aae5210687d31b140434

SHA256
36109b61ac2b849a40c58211cac3ef2b9831c9fca2b79ba9611599cd0d509b25

SHA512
ff95dc9696730e35553039a8693cca356d2d49681aa52ce89e30e2215bb8f56ea019ff83a14b68d568f4416d1ef07d0c9072d23e55d9e85e9a6717337b179652

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
27KB

MD5
5d269239fffd5928e26fa2860899bdef

SHA1
f8427cd3537409b26dfb902600164421f4c5cb0c

SHA256
496ce520fa848d370a0ab63fb8f6e2d891f4791b4a5af3a073c8e3d2816897a7

SHA512
ad552ac139819be736743376ec87c2a93acff7152ff89afac0163690d1c6b15dafee43d0638c8493a174f810f75831e3fa748c4f2d5bffa97cc43056ef9c2d9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
28KB

MD5
79a1215813026517ac309ab880205fa7

SHA1
ef46f5f0ec8bbe2bc8a94f1bbcf1aff76c5e1a13

SHA256
415d8fdf579764f1ede533bca3118fc834de95bdd512fdbe5745623abcc5281d

SHA512
ac960bc870e76878601adcab6e926666d25a96057e83cbf987cf9d7a43a752e14e63b69b9a256a50c64ba7ca557ede6732ec4140af25ba41fb7efb33d27bc947

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Platform Notifications\000001.dbtmp

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
0b0cb5a6aa2b4cbef34f51477df5176e

SHA1
0c5392c9359c2e2f71cdf7b297c7caf34554175f

SHA256
0ca6064467bcccb957271c74641e5bca6fe786e689370a28b377e51bf0ec2062

SHA512
d17cf7f333bf394426b1d209b2a333c2eaaa91b6961ff29de4655f4398fcce9f89d4278eaac8c6e411a617cbd497a521e9f6ab2e77e58967ec42e15c4116a614

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
a9bec2f3285396bcf3355492267c2068

SHA1
8d9606e20cadf0ae91ce75aa8e69916efd8b9731

SHA256
45b14dac3d73cfcab0474c0b70de666d3c0978e408dc3ffdfe32a8ca4bdccde5

SHA512
df0bfd0370d3cb91ee6c063202847b05a7824677d8c38fb1c35c968de6537bf63a3b63d45566ab45df497c4593b566a692eb83801b31fcdf933f92628e139753

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
27KB

MD5
08a36e75249bf4d3ee74493f562d0096

SHA1
a78f4f861f492e0de53d49c6117ec1e4bc4ccb96

SHA256
264fd726caaceb47a38df9e5715ff9eae8db803b2ee7409961505dead02c1a23

SHA512
2f11732839c9a6295781924e79d5820be6df3dd5142bdbcfde38a4d6ac5e0dc085cd2fb264692d4df974a15b489a6bdb096e4bdb79e55077b6472b66da153ddb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
057ef988ad0327ed345a368dc9f46e8a

SHA1
1009b42d68731804bc0b7624b516be1987a1d56a

SHA256
b788bb292d4a84e9f6c623b28ff6bb6d1a125786d7a326357e6d8ac3c393cfdf

SHA512
fc3bfc89a823f2785876b0bbbf85e5af297cbc9acae1f4889259b98c7de39bf7708aedad32f17e80cb60a4e5666503559653b1dcd13f08a8b3ba5157e680b2ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7811fa3b144024d0ca6a2a7de8c380e7

SHA1
0fcc460aa6283eeb888d78ef32f276e8a88d8d87

SHA256
cddf886961f2bb0b8c6461a2704449f873c2870d1fb54aae708736650fcbf969

SHA512
3c8abdf19f9a7d8a10285e17b4079309cf641c1eb3949444c19a1478c12ce568f1eec50acd96820658b8e0f9d3f8a17b68fd0aee20f238fa38b09ca427fb43bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
f84f0df6c3d08642f28ebce48d0e99eb

SHA1
f40757c02e3ccbc2e5aea6e11332d72ad9a5d8d0

SHA256
e9f0a1806ed551ea2ff9cbacd0d37421543ed2e07b951301a70af4a386d330e4

SHA512
3068841fefe49972faa894e8de91cb35f7e67860acf212cdcceb6ae468d655df0fdfdf268a0a65e9e589b2cfb769698efa863097a56e8d25b8072570116b9be2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
ca144e7770dbb7df481b700626b0f2ec

SHA1
129bbe03517ea45d216e77ed6b31afcbd887b8e1

SHA256
52d5660e87d0bfd4e7c8a0ee75a61c17a6fe95b640e4c163c91c57e869bda500

SHA512
cd3e6971d8ccfa57ef2d3c421fe5ce1e8a1e1b24f08136d219f18e0df0a923292f0c71b51f4e0f7a54a1b4416bf3f1936d0f11c699eca014dfcb2835f294f4d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
19KB

MD5
57e4cacd9d5770920f130ae0421a771a

SHA1
7b02c7c0a7c6d0012ce49b3d8ec6275488a38ab2

SHA256
a609979e27d50123e99b44d03d29a442fbd41a07fe64fd267a61ee8255630ceb

SHA512
07dad9ae77cbf9ba6a39b3670dbd9781788271ded2f6c2f76580219d3be77c38ff2fda7238fa11991c98f11f4932c3580f39db9a0ef6d01f576592f01ea27eef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
28KB

MD5
f3890875af48aaa29f91cf8d5a0d02a4

SHA1
debaf867783f75370409e19acadad756771b83ef

SHA256
51a06624dfa8e2747e1a88867f1967001610ed7df75b24c3793342f2753c8a88

SHA512
1b2650e3e068958120150e115a152602809dfe659170244d430bb043ea3e1355685846ee4055dee9d1865caa816f3202b571be42559d764e9b5cfd7ee75b9042

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
29KB

MD5
6ab687651fb42fa5bbc4b40028e42846

SHA1
2c6a924ba6f038ec6d4a753e48aac1adac57062c

SHA256
7d14ad8700938980874e7cafe733c5f01dd32af0554c06fe128bda7b5a4b6f0f

SHA512
e65918d25c2b28dc6234d39d53b6e41bc4a4fd309076069933b44e91492bab0c9b7c272c185e6dfda06ed7bf709cbeb69c9e32ac65a66bf196d0db88e84984fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
8736db4027b8ea76d728172d641260d1

SHA1
b89d8c7d3cb59043954edb65627af3236adf4f4d

SHA256
7010c8bb842472a37f2c3a0383b81f1d6e3bcf666ee8e091d186ad31d9d254db

SHA512
aa1aeef2127e75ef669fc1f680e3c53b7179bd22a75a7ee424f3f7fe10de8bce309e7c9c22bb31c546d04fab351444661e4dee4eb5d879a712068b92bf3e1e28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
29KB

MD5
7bf7d7a3592619ed8c1d14696833c285

SHA1
2037f05e7384494b9f7dcf0f234b81ca3d6817ca

SHA256
225a5ef8c4eb9d5627d7d56789ffac7c671ce936b5813fd791cfb620a6c8e0d1

SHA512
38d88a6439d4e5edcfc8847b3bbfe6ad4321357d88668548c264cc25b50895dc3c512997f0941964481a256f19cda824a07c5b481df1672fa75be63be9b3deef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
27KB

MD5
5d0f3b05c2fcf75c162f6a381c9cf94c

SHA1
19c0099c952afa6c5ececff9f766dedb6eba4941

SHA256
651b3e6c2e69684663d4b2c51cd8d7661192133cd019c56da35eece246a7e5af

SHA512
4ce429e32071022cd85be26ee836a36b532c89eac25d4293a8c144d5a0363e0171d21970c7caf4d50445acb01c43584404c33caf1f39d22887ce1ccce673fcbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
29KB

MD5
94f245a91f1e0c22d608e17afa21e49f

SHA1
abb8fe5c208a542c5592935b4febd7a466b82e20

SHA256
2821a837e99b7d2454c328b89786cdeeb073a5a6a1eb87044c318d62a4f0a8d6

SHA512
295833abc7b6e9c48a47a587f63453add7e83f4f13a378c8b035e402ca252e91a2c13226ac5c0fd9fdf8e13ad561ee3e66e1028aa35df1a212d2119ab6552365

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
28KB

MD5
70fd08468ccac7401f2e0571ae6737e4

SHA1
f8f6705f569b347c51d5092b1008b1d804b3cfde

SHA256
acae5c1b0c64a2db995f247184dee6a0d10b71a9ab6ab77bb06c1484dc6f1418

SHA512
6d6f99e65cb2546c4bc0e6197b58df81bcd6a3cf87b73a6cede285a4d4a5cc976cd965064d0cc6b786a8f54e3ee8ee6b6cc7c18c085e96cefdfae1552bfe6faa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
29KB

MD5
0185b735cd53da0845b6cc461848fd0c

SHA1
b160ab1a8f789159757e6514976cdb58ce757016

SHA256
12d8dd3a8c59817b2fb2abe66302afc6d5d5c67b3592aa05c248ee01b3ed9f45

SHA512
c24bb5125df3231561d91c75017dbba37346b36cd7d6a58b2d38a034616be6b80cddf24431f674414ebd185d45daba727584184467bc5ae0b94bee1ac0f5c941

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
08d8b1c3e4107ace3aea8c4783b003e2

SHA1
264cf5f039860dbb8a1558244641e546bc904bc2

SHA256
2cb2693fe11a78df9faf13f37ad43499af67b6e4a3e5c0db9dd292f419fa4fdc

SHA512
ed3b2fbf1fc42d9b66ac11a268b33ecb89e4f56800b99e4a3ecd74e9e26392021836b70d34a003b9b8e1c8a92ef4dce776e49344ad9c93a02f3db20d245918f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
27KB

MD5
497955451369b8f72c4517c7ff3f2f0c

SHA1
e3fa63d00e0910f0ad2c53c0b7d3599abce870e0

SHA256
5c19100a73ba6cd13f09d75d983de58ca33cd67948486ed86bed8ef4622c89ab

SHA512
1c8e149b37731945e0786e2bb988e0064346a167d52fa5a16440ead7d4a5c2fde7511a953c1575aa68e69eca4c9f5b8b56594b504028a1b0af4daccd8cbaf129

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
29KB

MD5
996bb9438f1f66c2769a1dae06d8d210

SHA1
dc481149b866377c34710480b349832994339f8d

SHA256
d2ce3eb397ce7b40783d3d1118b8715dd3b883738ffef5d4d4607b58e8e5a07f

SHA512
274f0cdf2c4f370d4f5f4c6928967588b058800abf1f8387bfe2eeb6c279f269821e194a5986c8637bc0ae23f8c5fb1a7cee1f5bee0e9c8c5954f8a6d0800e58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
29KB

MD5
fed0a4642a1be6bd5aa1ec976d200562

SHA1
f09ff511c721d20e96533f982b9e8399745996d5

SHA256
5966bf329100a22e0a615e2f9508bcea5899df2820a8fd375cb4dced43ffbaba

SHA512
b6d7df69eeeed84209c03e51c0e8be45c2596e55b49165798eab7cb7a4ae3240a176621dc0f112d381654c2543aec23d5203e4a1c5c473ba83473a0a4ec86343

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
b5574f6e5b049e4732c82f53318f6357

SHA1
bb585cf4d272a8edd0638a37d78b540c5655e2fe

SHA256
1f20e3dd32170df2c4de04fc685fef13cfe2b30d42e01a020a10a59c404e2e10

SHA512
3e7a6098c921903f3067938d796ce518953603cf475236f74b9ae77565f06a523c776cf762a59cf7c04f8a2a49e116d95084c27b22e4a8470016d8bfc2b2b56d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
27KB

MD5
879a55c690e6ff12c4f178f5c4a803fc

SHA1
db3cc36335ea57da4bb7f4362873eb7dd9fd4b1c

SHA256
a019eaf59a2247df5483e6671bd36eaecb47bebdc9f968db75f97d17bc6432d4

SHA512
1fd4c27e640f7d95d6560b090958fc52de16f59db72ec750997633a1a39bb19fccafbb5404db259ddeb690de8df61873c1c26a5eeb7251aa8daeeeb5805d7925

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
27KB

MD5
13fdafd5d1d04a74f3db82c25ff3c343

SHA1
e454d12e4cbf8e15bad9619cd4cc2761cbaf03cd

SHA256
643380cb5c27969b8e78bfcac4846e71a7dabea555a49dcedd1305ad929ad716

SHA512
5a2b005f73caf8cbc34661a24155135758a417c907ca6d61b52cedcd11c0c659ab01f2a7866cc616b7cfd3cc6a3cef85937973d56a59ba5c4ecba4356a1d8e15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72833509840b35748ec9b7e2cbd34c93603ab162\895dda21-7814-46f5-83d2-80e6874f011c\index-dir\the-real-index

Filesize
72B

MD5
7db4414df406706f4e57e7edb75b68ab

SHA1
2a61d658542f404a546ccaa43f73153df357abed

SHA256
708b72de9ca1db3efd7cbdacb80b3d0fa8b014316deff2cbd2cd487043e814e1

SHA512
1d247f7b643f8746e20170c3939acf64dee3914436b8605c0207685b19b4fdfabe0fe6826110c232e43e2337e6083b380b08b525157dd2f68b37f0ada055236a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72833509840b35748ec9b7e2cbd34c93603ab162\895dda21-7814-46f5-83d2-80e6874f011c\index-dir\the-real-index~RFe5cd9ae.TMP

Filesize
48B

MD5
0fa0b2e8a4d21c6079e18edad95aafec

SHA1
73cfa037aa947f028c85b4843b6b5879f3044ccf

SHA256
e82441ac12f0eebb1b8a1cfda3560a0d8d38483b68cf576ac531466d99229ced

SHA512
1d4872d645db2068d8bb45232e2d031d88a40871d04235f07f583599654defbec6646da533f515833ca2403825c04dae9d1beb2744f3eb569fbfc9fe82dc1732

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72833509840b35748ec9b7e2cbd34c93603ab162\index.txt

Filesize
91B

MD5
5ea86c1917bd80acaf954a4a77494241

SHA1
df4cb84f5297121aef901a9a8fa0683ba38fd78e

SHA256
909831455570bb86145f8da9370c50c34ef09d7db36897330995d937eb6b8118

SHA512
3e4468c2bafb2c65a6c16b2e40421a28863924eebcd102eb1118955c3df52206fff5488123577b9ff2828be993c230bae37ee3e347c448eda110125f08cf7188

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72833509840b35748ec9b7e2cbd34c93603ab162\index.txt

Filesize
85B

MD5
6f50da910168ca778ea29206e307314a

SHA1
4b8347540ed589a7a04892306277c552a2734f7a

SHA256
9e448780d2f1f2bae6050704c09e85389d04f0479eb23d59ee970e2fd04bf246

SHA512
afc81379d0e137301b11875e3832609296f8ee201df5a2901c19e98827678604c775a6e4549d08ae13d7aefeff44a68e3a5a16298351f4bf42b32b182705d011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
168B

MD5
f0dd899d549c723abcb7d7636b37118d

SHA1
c0750781bd8cb355036bad3277c6ecfefbd8a5d4

SHA256
ec94688278a5bc0b037ade4f3cdeec49284df57599ff1e9fc48903ebe9e082f6

SHA512
4f94947bbe6133bc7b3f38ecb8096d24918096c479e5a407ca867d63b810762570016a19c90f08dc1b24e7094668ef02a35785297d6c8b4e483e7aa7a5113163

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
9b9a34ca17968340887093e6d54a6dee

SHA1
f4f7e243a283f916ccba6520bdb4e7bdfccb3803

SHA256
d1769017437f36e2f89b9ff42f8ba4c3a9aa9e95d6d83b7252e8bf7e91149a6b

SHA512
2a88f87249cec972e2ffb98509059e6364c25811c1e22df7c71cae504f82e56e01632ec315a9fbed963288ec0c35e38c10ff2032870599ade1606c214b342c28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
144B

MD5
29864d8895d30e426e2b5fc9cbe3eb48

SHA1
244ca3b004ae68503b8bcaf55406a5d15fe6cda2

SHA256
327c35f3a6d121ce80ad58efddd9cda47fa755a54c27e65ede0198e142f63eee

SHA512
bf1c5503bb8a1cdfe321349d8cc5a78ac7d627a52f6b0f2bd2bdce90cac4b83ceda3b64a913801e9a17240429ab37ef14001ab5aeb6b964d9f5045b5cb3daed7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590565.TMP

Filesize
48B

MD5
f0765806f9bea5fa97688fa3d5a7cced

SHA1
7b204bb0f19f07f23e3f0c4ac885158f01d793e0

SHA256
f507e49795f30b111ad37c6839543930b1dc76e58a9f8aad596bcecb37744d7d

SHA512
34f114c1e10472f35c3dbc3aa315dc0cca2ac0eb0764701a8f5ebdc31a96e393b460fe19292e917f6913cda16b1082bab139f45dc4914a4324508c12d18c0d6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
2d007c8b97769a8721c27e71283510d0

SHA1
0d637384316949050a626b414519e69d27dfd6b2

SHA256
ba3f9f4962622c229fda9132e8c4ffc9bde1d27c385e080c0b5ad5736f2a3413

SHA512
97043c79c598456c989d1b0738eacf9845816a943742f7002f336f8e9a7b06acd4d21f18a981bd43b3c02b6eeaf51e0f3ab5c6534aeefc0f46ff2733043c456b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
7KB

MD5
9496a6823a479b1ea2d4563305979371

SHA1
737e3848bfcd2a6cb4a2c96b933f5beee40756cf

SHA256
776d4f558b33fcc1d3e66795e6f42c31a169bb8fb1102cc021059100d23c9075

SHA512
36863a98ee47898257b1e058c7b243e670f72b89d3fc2ad8ab01fe69765cefdfb612847663d278eafa3c4cf3e3c2682254ce00a6bab48ea41343186594c6d8da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
f5dab5eb7a41c8b2965bf8df240952a4

SHA1
ae8eb7ad8025f5b8b8f215b6357d4a2f3f6f8040

SHA256
23c8c86fd815810a63a2778829ae8c4818a4db483bc266c9a5840bbf759d5eba

SHA512
6fabfc6a08204bf822d2fad6567ed0ab881671ab6353baa64d45e661fce7dc84392fd26f5a75a2e0f77bb3266e09048688b6c575286b90616035203019f24aa1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
14KB

MD5
4d9e9b110a918ea74f5e2090ba03bd5a

SHA1
1727b21fd31c1cf302f99bc8b922831adc2af17a

SHA256
6899cbb8e12d16232c50da1d2a3ef277315f5118c90f16c001c64c6940e0dd69

SHA512
e29a6793ecc873daa1f6ba1ec596e1dd7c1fabbad3161bc7eff232427285b6779741430f6dd38d6d2cb67a15abba59f0fd5a7613d79c7aa56f815ad743c3fda5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
14KB

MD5
a0880fb2700dbc096686c9322948d923

SHA1
ecda8b2305cfbf7ea444e820f908d767d6f2cb8c

SHA256
061795f81568b168857c783e81bb67f4a8a7b33a8fd5ab210a6a122bd02a9455

SHA512
14d00a99e2cc29e45a43f8247ec6371c8bfd025e9573793603d7f7ee1f1493f9a182c1a94af51e4382370711ef711e16eaaf92a0399d90ba745294decc86870a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
cdacae7274210a6bb69da4859639f593

SHA1
d783ff0808b3491e2af98ef031f5f23576557b7c

SHA256
fe571f74ce964ef818ce62d1fc9d3790cadfba46b5ed198a91a8a98eb69ae163

SHA512
181cf7548c4fc04b0c14b9a3aa793e3d973220c505a349c02e7c2eb5df961a244944da66cc05d53710a0f44ee4c6190356b2f68fa915a3dd00e714934af25016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
5766b07d46d6afc642007eeaf98f5b08

SHA1
81bd85123cbae35708a6e5a37e582eba2fb8bcda

SHA256
9652defb33028e172a6187ea1ba61c78e6f2027b1398f22a4d9eabdb4ce1a84c

SHA512
5ce561479611112fb3008af9a83d633a1cf7e2f2ae3d4f4cc6a9f353c95a7704c534d379714c767d05e36e87e1fd507ae4c5e068157edb5714f6cfd7f106dc53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
10KB

MD5
7f517bd2484e06b1d573f28033ff535a

SHA1
469f7450498727ddf420dca8f251ba019c868be7

SHA256
a51420a810a679fa6ce2d39b2fa0073556b422e1ed4550d9f74eb609c158889d

SHA512
0f2fb818a1da1bf9ac75fd12e31828d780931af0aeb5b92773642fa8ea2064dac511804154c24237dd9fc6d1e49104f6c93b809ad640cc007e772951f5077e9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
13KB

MD5
454b6d9c7154c8a2c0c52bd133241abc

SHA1
f46e55ad385a59281ce2621d90affbddc6541f74

SHA256
e5453afa0b1190d067da749f7881e739670593dd86691f611a7a5ae4d2cb1def

SHA512
bd145f2ba4b0332405b9ae8a11c67d4cffd23fd9239a6232fbfa662163a4789f0e787c9f6107a69883ddd01fb896bd3b8b754c16f568ff35ea9a7755a11803c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
13KB

MD5
5fb1bbc7f0885eda0234b36638f9018d

SHA1
e965ea3ed105eb6c70079aa41a5fcdaf277bf72c

SHA256
c5ed9f4cda52dd1dd48a4e646be1f928d1d7d52d69f57f3840480d1f33055ced

SHA512
8179f03fbfad6f37eb369bf4406525c02aaf875d7e245c0cf779ada947818cce5325aa033933bba2e26d41038403e4f2e373b467a4674dc19e83078023257492

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
14KB

MD5
275ca3b7ec2845fc674ef341fd9f0e27

SHA1
a2a6d722f9f5aa3d6ad3391065880e090776789b

SHA256
1d418606bc5f304d39c7f46df4d8683784093d6485aec8a348a64be4048872b3

SHA512
d5abf8080d8b4b644ee72d1497eb7f6fa1cd7f67e07220ae96d4924ad503a92d62f5f29818137eec6aab4aaba78efea4ed511aca443094ba13c98e5de082b16a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
2f311959d782c653c6806cf8b82f7aa3

SHA1
32b6eb3f415bb36c7189eea7ec03d50c5a13e6c0

SHA256
e6b4b6e15b6b98d6a358d626bb4f6a257867d7c7cd81fbdab866d668fe399d27

SHA512
f86fbacf7c1cbb9235927adedb5a7e2d21a1fe2cc5836955785d88437974fa1f254819f163c61086a1980796493afeaecbd7db5e1606a9ffa15b480deed97585

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
15KB

MD5
a6280b69feac659c6b4b8ed9fab9d7ed

SHA1
b99cb2969a8939b16266529f010ca7039a8d4942

SHA256
11d87886c9dd54be7ae4899bd3c212c050af2eeb081445b9142e66541035c044

SHA512
91cd381678390cea0fce39a93c2883760fc89a3cd7d6a75a1c51044bba45f9aeba79413d1a0aa30e063c6be191332ab9edd1bf9cf7ab13dcfa304a29b6d8e7cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
0e22a5e90f1a43272c59a68f85da2d1d

SHA1
c9ae6a14dc469bd0b28a875b473c202a2d1d28fa

SHA256
8bf1763fb11615ec89c60502f3527e834b4fd92599979c48cc86f021d4e6c92e

SHA512
62eb899e060db91284dce1f76f826e26c55e6b71a6061b5a07a323752604748a5babf57d213d6b73eae26bbaea6c70081a4dabb9de8ac332baa9b9477782b4ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
11KB

MD5
a7227bf8139078208c10c2582c2ed57a

SHA1
9f252a4514c5c052c6b9408a7ec4605c61130b7c

SHA256
c7e551db6374dcc93cd04fd9907a703243d5cb37b943d596181411e7bea0435c

SHA512
912f8fe60218703bb44d1829a548669535274dd6ac2cf53999bf6bf27cce3be89a92f214c0ffbfa4e8ad30d6a008b4fc2a1551195c8b1a6cac309c48ee0f1ef1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f155.TMP

Filesize
538B

MD5
72fafaae151827f9d55d125ab3578848

SHA1
47955fc808416af172c9a2a08812602fedf06a0a

SHA256
475e6a054dd67f4eddfa04af127b614c30ff974b6426f44f11d4b99b67198417

SHA512
9c56960f0115b4b0856cb0af06666d7fe1baae9239a1ed97462c9ceeb79ae9e039cc4e252df17a29b400d5f3a48c100e84e8a76033d1def080c709aae9df51f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000021

Filesize
17KB

MD5
aab2532f8363e63359dbf0c31981f57f

SHA1
a21523eb85636a0455977ffe525260a1a8568043

SHA256
a6abef5f074c67b1f9fbee679151a4c705b71f054c98f720dfabdc65786d5d13

SHA512
7b3c4ce6574b36bf0d4e05bba1063798b525744fdb37b28ad6fc78456ef7d704677795ae4dd0d0eda0954d15b3776395fa931abf82dd4b64583c360dd9916f64

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_000024

Filesize
19KB

MD5
f0a49bb6f4df4a05803f59fe0137c781

SHA1
f5cc866a81569ea0cafc31f0aa8d307ccb6a39ab

SHA256
5cdc9e0803fcc464154be6c212e5325b1a7e57cf8dbaaf9db47db1fec2663234

SHA512
cd27ca7d592920b402d8f90c4f6a15731bf8faa644ba3eb82183baabcc2b6a653be332161f5d9bd34228d379ecbb27e392e009cdf63835be3a1f2c06204ce42a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
8f114eadfe1b045d7eaebb912ff954e2

SHA1
3025eda9ba66a907bac4a7fd23f43a3dc9c3e358

SHA256
c69776acb37ba1d5715be83b9aa486b3c3fe991c522b05cb3e1bc28189c8a1d5

SHA512
b4fce1127d5c6d4c709bc7633e21da9b6ddb2016eb7425bf1d4d5258e27d4e398f49f95ec37dc543e74760582467f5d6963c319e6b6474aacd3c2ca76f48ddec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
d32f244bcf5c1b22260cfee22390a223

SHA1
8e09709639bf7df9d7e1d8ab3d1e97eb358e7fb7

SHA256
325bf9a9c2957673f17847ea5f77b6107d1146ee53f93a8a59595a8ee48dcd87

SHA512
9417c19fc85d17c38aee5e5761a4a7416b9b18e7b4342b5dfcf4b7a39bdca4230c86373412fc9abd9a6a6aede9b6e8c26d14cd83cb8ba0b5e83a06e29351b583

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
3dec33ca618404323bb803fdf9c87eb9

SHA1
ae0da726a83de5738db9b99365ebc118f2256d18

SHA256
0fac4a59fad0e928e3c21e9efefa92644fa04c0e0f470e5cfbacdd8c7a442ff4

SHA512
7bd224d3be01fa71eb02df441dfc1a07e36af7d320ca844cdc9f0d40fa116439ae4df1da26d7c7c6cdfd787ef05b0a786002ae1ba509cc05f994ae881646b486

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\Code Cache\js\index-dir\the-real-index~RFe5a0cd2.TMP

Filesize
48B

MD5
69454124f917a99265ab4cc554ad2f95

SHA1
32c7d2932a632e38b1d4c9c4c69c010477b9f852

SHA256
1b18cca64538c04e77f1386e7614e9597aa7708d8462c9993e91a17543a4ce22

SHA512
29949c7dfda072ef0243bb9642916c112d442a312fbf393603c90aaccf5a0fe3b012d5aa32d6e87266e4a345251e92f3289ccb9c641c159d946bafeb5ab388bd

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\DawnCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State

Filesize
300B

MD5
e808a3fd9b3e6f6d46d643e20225dd5a

SHA1
08b9a154604e725979cfab5691c1bb91ae4df1ef

SHA256
4089b5d81d47997c5f73a4d41873c1b02b0d2f4841d737b9ffa0d76047340059

SHA512
409da62e9efade92c18728941e84cd77bba042272762a445dcf72c2135dc31b91677d4e64d6e8ffb8c16a8bce4d6878a4a5c922fab17ba917a76281b7c7b95ff

Download Submit
C:\Users\Admin\AppData\Local\Steam\htmlcache\Network\Network Persistent State~RFe5a0ce2.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa1D54.tmp\StdUtils.dll

Filesize
99KB

MD5
98a4efba4e4b566dc3d93d2d9bfcab58

SHA1
8c54ae9fcec30b2beea8b6af4ead0a76d634a536

SHA256
e2ad7736209d62909a356248fce8e554093339b18ef3e6a989a3c278f177ad48

SHA512
2dbc9a71e666ebf782607d3ca108fd47aa6bce1d0ac2a19183cc5187dd342307b64cb88906369784518922a54ac20f408d5a58f77c0ed410e2ccf98e4e9e39a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa1D54.tmp\System.dll

Filesize
11KB

MD5
a4dd044bcd94e9b3370ccf095b31f896

SHA1
17c78201323ab2095bc53184aa8267c9187d5173

SHA256
2e226715419a5882e2e14278940ee8ef0aa648a3ef7af5b3dc252674111962bc

SHA512
87335a43b9ca13e1300c7c23e702e87c669e2bcf4f6065f0c684fc53165e9c1f091cc4d79a3eca3910f0518d3b647120ac0be1a68eaade2e75eaa64adfc92c5a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa1D54.tmp\modern-wizard.bmp

Filesize
150KB

MD5
3614a4be6b610f1daf6c801574f161fe

SHA1
6edee98c0084a94caa1fe0124b4c19f42b4e7de6

SHA256
16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b

SHA512
06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa1D54.tmp\nsDialogs.dll

Filesize
9KB

MD5
0d45588070cf728359055f776af16ec4

SHA1
c4375ceb2883dee74632e81addbfa4e8b0c6d84a

SHA256
067c77d51df034b4a614f83803140fbf4cd2f8684b88ea8c8acdf163edad085a

SHA512
751ebf4c43f100b41f799d0fbf8db118ea8751df029c1f4c4b0daeb0fef200ddf2e41c1c9c55c2dc94f2c841cf6acb7df355e98a2e5877a7797f0f1d41a7e415

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa1D54.tmp\nsExec.dll

Filesize
6KB

MD5
c5b9fe538654a5a259cf64c2455c5426

SHA1
db45505fa041af025de53a0580758f3694b9444a

SHA256
7b51372117960e84d6f5eb3a26810cc044ff02283b3d656a0a456b0ab5cb8ea7

SHA512
f0f8a5570c01b16e54f47502e867ffbaf162b44a847c0ffc8062d20e9492114229de5d9d2a836da256fd3f9fb493536bdbf148d5308695b16c0e98d20d8926aa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsa1D54.tmp\nsProcess.dll

Filesize
4KB

MD5
f0438a894f3a7e01a4aae8d1b5dd0289

SHA1
b058e3fcfb7b550041da16bf10d8837024c38bf6

SHA256
30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

SHA512
f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
669dece0fd7cda11e5e068e685e8bbe5

SHA1
7757551468d9390b197d515ef66f82494520cfbc

SHA256
d4b64dc6eb72b84e5727ddd2b4248e5e34824aea53fcba5fe24d8a9c2512a8d2

SHA512
2bb66caa1567a1ac69971503ebe110aee3b0ee93b30b261473af54f866396bb2f3213b3611d652eca2a49fce0c06676b170c18c1943c8ee63d26929db06999c9

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
7d4425e07cf06407d12bc6c09cda4b9e

SHA1
9506b57710580ff7f96f50c928a2ac37f6ebed76

SHA256
f04b7b147c08e3f4b34fc03f9b046ff82685453ddc5098d4798ca03986a20dda

SHA512
de32c98f6d036002e0cc793caead1c2799865481a6188f52577a9d1dcc0658f789c40d843f4ee3dc0244d088c4d46538a88a691cfac3b42946ae311b6cb5d865

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
b89b796c232e9d834dd7185b40019193

SHA1
7a1095b0192c7d1f01d9785804e7bc805a845c8d

SHA256
8fda55c8357a93cc8ea87894505638b21779d79eabff7501b92971b24b157f16

SHA512
d9920cc215266c341fadc18d31f81f36de3924feef1ce33837f6f6b1d2f0643404b70f521b14b58827ef28cb01268b4f5f565a9dbf7fb45d66febb271ef346b7

Download Submit
memory/5644-13845-0x00000000008F0000-0x0000000000C97000-memory.dmp

Filesize
3.7MB

Download
memory/19508-13974-0x000000006FE60000-0x000000007124B000-memory.dmp

Filesize
19.9MB

Download
memory/19508-13950-0x000000006FE60000-0x000000007124B000-memory.dmp

Filesize
19.9MB

Download
memory/20280-13965-0x0000018DEA810000-0x0000018DEA87B000-memory.dmp

Filesize
428KB

Download
memory/20280-13964-0x0000018DEA8B0000-0x0000018DEA97D000-memory.dmp

Filesize
820KB

Download
memory/20280-13879-0x00007FF847320000-0x00007FF847321000-memory.dmp

Filesize
4KB

Download
memory/20280-13880-0x00007FF847CD0000-0x00007FF847CD1000-memory.dmp

Filesize
4KB

Download
memory/20332-13967-0x000001FA94470000-0x000001FA944DB000-memory.dmp

Filesize
428KB

Download
memory/20332-13966-0x000001FA94370000-0x000001FA9443D000-memory.dmp

Filesize
820KB

Download