Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    146s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240802-de
  • resource tags

    arch:x64arch:x86image:win10v2004-20240802-delocale:de-deos:windows10-2004-x64systemwindows
  • submitted
    27/09/2024, 06:15

General

  • Target

    https://links.clickup.com/u/click?_t=c24ba18b0d184a68becd65689a02ad77&_m=592030e47e5847d4ba882a2794ac0fd7&_e=U1rmpygrIEc7H1EMvr5VjAeDTS5xcg1U8AjxzaXCuXoI9o4L-nX-wb0RYY2n03XuGG4HcNFVFhrJLRa3F00iioAIWw8ysz2OQgtKO1sgVQTXXJbrpRWNH2FoNi_2ckur67MUuu0dHW-SY7GPmhdZHI1DiGWCwz1EQ3bM3b_eIXAvyv-WkGn6DWzQN0eQgaztGAt793UCtkX2wJv2597ki8YNOurz0swAwWz-cfgAw6q-jCXZz3A7jKwjWuA7v6nl19uto0MYFKs-QlPfYkzkjTv_vplFsLJLW-lrFh87nG68SkXY_e5gNmpd2M9YoLYtsOpalFTjHc1GaL7MndRtuwCcWJPWsv2xKlw9L-PQxklCtUSMELpyjiXAaN1Wz033V5wzREpqfdgeJl7eUedkXgd_YUukW7UhQswysVGnrmDA0F_8qRgHphA2s_s5fYX2roFTlRfDu-03DVDp48uzd40Tn0kcy2HEkBn-AfIl9iWyL3TwXJw8uIJcrD_5Bs0ZpV_-l2AbrSx4S72vFytCecVH75RKpFtrKdWO_9QullVnklyXMR4rB2RSkQO2bGqgW6LG7xelOzE-qM95yEqwq_fsREbRskGCMJkU_QK4eIizw0Gphr1pnPXIBxhxjhMIkOKgZ3JrGPy9D2G9dugDu-07dFAv5zTH2o1UNoMl_on8ksVY0Cm8T8Sh1fppT8x4JnB9aUMVB287m1pwjMv1YTb0Nr7_6ZwpMQ0AxuRrBEmmGkma8G3Cw3UNPGtBl9RDUuCo1ZnZbQCLVgQIe5BLVQ%3D%3D

Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://links.clickup.com/u/click?_t=c24ba18b0d184a68becd65689a02ad77&_m=592030e47e5847d4ba882a2794ac0fd7&_e=U1rmpygrIEc7H1EMvr5VjAeDTS5xcg1U8AjxzaXCuXoI9o4L-nX-wb0RYY2n03XuGG4HcNFVFhrJLRa3F00iioAIWw8ysz2OQgtKO1sgVQTXXJbrpRWNH2FoNi_2ckur67MUuu0dHW-SY7GPmhdZHI1DiGWCwz1EQ3bM3b_eIXAvyv-WkGn6DWzQN0eQgaztGAt793UCtkX2wJv2597ki8YNOurz0swAwWz-cfgAw6q-jCXZz3A7jKwjWuA7v6nl19uto0MYFKs-QlPfYkzkjTv_vplFsLJLW-lrFh87nG68SkXY_e5gNmpd2M9YoLYtsOpalFTjHc1GaL7MndRtuwCcWJPWsv2xKlw9L-PQxklCtUSMELpyjiXAaN1Wz033V5wzREpqfdgeJl7eUedkXgd_YUukW7UhQswysVGnrmDA0F_8qRgHphA2s_s5fYX2roFTlRfDu-03DVDp48uzd40Tn0kcy2HEkBn-AfIl9iWyL3TwXJw8uIJcrD_5Bs0ZpV_-l2AbrSx4S72vFytCecVH75RKpFtrKdWO_9QullVnklyXMR4rB2RSkQO2bGqgW6LG7xelOzE-qM95yEqwq_fsREbRskGCMJkU_QK4eIizw0Gphr1pnPXIBxhxjhMIkOKgZ3JrGPy9D2G9dugDu-07dFAv5zTH2o1UNoMl_on8ksVY0Cm8T8Sh1fppT8x4JnB9aUMVB287m1pwjMv1YTb0Nr7_6ZwpMQ0AxuRrBEmmGkma8G3Cw3UNPGtBl9RDUuCo1ZnZbQCLVgQIe5BLVQ%3D%3D
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:244
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbd3d946f8,0x7ffbd3d94708,0x7ffbd3d94718
      2⤵
        PID:628
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
        2⤵
          PID:3956
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3176
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
          2⤵
            PID:3620
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
            2⤵
              PID:1756
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
              2⤵
                PID:4844
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
                2⤵
                  PID:3844
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
                  2⤵
                    PID:4408
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
                    2⤵
                      PID:2780
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
                      2⤵
                        PID:4224
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:3524
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
                        2⤵
                          PID:4396
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
                          2⤵
                            PID:2904
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
                            2⤵
                              PID:872
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --lang=de --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
                              2⤵
                                PID:1100
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,16732177111990584882,18248931469854897769,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
                                2⤵
                                • Suspicious behavior: EnumeratesProcesses
                                PID:5556
                            • C:\Windows\System32\CompPkgSrv.exe
                              C:\Windows\System32\CompPkgSrv.exe -Embedding
                              1⤵
                                PID:3980
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:4428

                                Network

                                MITRE ATT&CK Enterprise v15

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                  Filesize

                                  152B

                                  MD5

                                  53bc70ecb115bdbabe67620c416fe9b3

                                  SHA1

                                  af66ec51a13a59639eaf54d62ff3b4f092bb2fc1

                                  SHA256

                                  b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771

                                  SHA512

                                  cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                  Filesize

                                  152B

                                  MD5

                                  e765f3d75e6b0e4a7119c8b14d47d8da

                                  SHA1

                                  cc9f7c7826c2e1a129e7d98884926076c3714fc0

                                  SHA256

                                  986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89

                                  SHA512

                                  a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

                                  Filesize

                                  214KB

                                  MD5

                                  7366b41d5f8d897da1387e957899662a

                                  SHA1

                                  c104da04a309cb34378f16256aa1a232632bd7df

                                  SHA256

                                  3d6e3751e0a7e5d1a59b894e9140c0f80543ffb70f43061ecb1eaef284b47d4e

                                  SHA512

                                  9503177592adf7abf9956f76fc92dbade880776b92f959c0e4a19a316481d540513b2115e6e42dbdb7436587acc2dbc09e2795f5b7aaeecc43c2160c4e2ea993

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                  Filesize

                                  2KB

                                  MD5

                                  350ac2dde9db01254d455cf104e8c648

                                  SHA1

                                  6c344c6ca6faa6d46c663f8127eb5cc6bf7de050

                                  SHA256

                                  580a1afd0065884c48c5f067978a3dca7df3f0532af1a7a5c81aea77968da6a2

                                  SHA512

                                  cb1baad951c8c2fcb07b3dc225e2a5bc74f628c62701b935687a8899be159e85533e44d13d67f6041c2bc565c13fe249579c1e6917b6d21be06cb62f9a90fffb

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                  Filesize

                                  4KB

                                  MD5

                                  0fde5c7984a0cf6351f1f603456f6950

                                  SHA1

                                  8a4502174fbbe40d1e1a1a4c43a084a5c03676ad

                                  SHA256

                                  17683756395c5a1703c099776dd3fc93baf65f86fd2c43e9a4633500a225b527

                                  SHA512

                                  39b40bd6ae0ec9e8ae5491544e0144f9fa52d838773cdcd474e5df8f66684bef1d6453e68e1e9efcb354155da8e8ff2130cc8c39edd2cc37cdcbf8aa57595912

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                  Filesize

                                  5KB

                                  MD5

                                  23de79c4860b8d27c502de85441f7780

                                  SHA1

                                  a4d793c2387adb491605e87787f5921d53dfd1fd

                                  SHA256

                                  19efa51b5721a16e5010daeddeb99062a6b99e24a43c9ea18ea7fe639370c023

                                  SHA512

                                  4d3efeb8f0cd9bde0d67ca1e43dc629bac75040a2ca01e74fba8144bb7ecd970c4e0fa68a0c32b4274382265e38733645d3cfbf695670b741f9bf2043cca7a40

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                  Filesize

                                  8KB

                                  MD5

                                  c4469799b9a8a4c7f16ef2ea4ba0b4cf

                                  SHA1

                                  7eb04d4ae6b45000887e0840db6e796a479867b9

                                  SHA256

                                  f96b870dbc799041b16ba31c79fe6bbe6bf603d0ab2148eb2cd6a03d525938f4

                                  SHA512

                                  29ae932d16d2b291abda22c266b4bbd0fb4b569b3b1c0e7d58443d1a1c93de7035038be47da49336ce11fde8f13b1251e0d0e23e96a2b81e56c5bb361fc60afd

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                  Filesize

                                  9KB

                                  MD5

                                  03434359597dd81964f927cd7f43fc14

                                  SHA1

                                  21122ba9b82fce0d0f02855fdb98033aadb5f3a0

                                  SHA256

                                  4a0dd792b58f93186be6fafb9a0bc0022d4c20bd2d1ccb628f235d7a7d94c5d6

                                  SHA512

                                  3afe15a73a05166a269b493de185eae677e5a42441204066b8fd321f817452c1acaf29439ac366b4e3939efe66b06656fc451c91c3a2608163f0ebce75699953

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\1725f002-98eb-45a2-a565-1eacd97e70a5\c63b6e30eb76d52a_0

                                  Filesize

                                  437KB

                                  MD5

                                  f5ce77b08160212f9c1c14c6a8d1f30f

                                  SHA1

                                  8fd690c64531712a0bff5bb710ec06c12c660199

                                  SHA256

                                  d8a07016c52bc215f415ee53493b2940ea3b0715096e433fa94dcb432aa0638b

                                  SHA512

                                  05b02af150ef452e9bcc91ca35c98044416b6a33249d45f8f146aa1e2965622074a0c825f4a0011e8749eae2d3fcc149a71bfa9aed6e1b86b356e071fb668543

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\1725f002-98eb-45a2-a565-1eacd97e70a5\index-dir\the-real-index

                                  Filesize

                                  144B

                                  MD5

                                  76fb6b4a08777b04fc6a019762535c8c

                                  SHA1

                                  6aa9b83b94f2a5c925608edb5a38e0ddd7c6e303

                                  SHA256

                                  0c4378b7fa60c125ad4193d0686abf7ec224d72d115ee0b08d6c6a1baee4dc8f

                                  SHA512

                                  bba8fb3109b28215dea549c93d89578f4dca557e7e10c980c8b5c4e97ec029b9c91b260e9b03a5eca16a2c72735b4f41192b61d11b689f446c91ee1989ff4e2e

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\1725f002-98eb-45a2-a565-1eacd97e70a5\index-dir\the-real-index~RFe5861b3.TMP

                                  Filesize

                                  48B

                                  MD5

                                  44b3f10cd7da1e4988c3791a15d77395

                                  SHA1

                                  f7c7cd22af484c5f0c97f0568238d473cef539a7

                                  SHA256

                                  ea63d04843104885e25d03e29b29be9c28b6885b1e885a0f59eec2a6f439a703

                                  SHA512

                                  b0b42c86b91e40c2be2ea0fcd799b76d453388ed1f2870cb9daefe7be0d0b76b77df980dd10edfb074a5b1ebea805a04f77e73a9dced91db94c6dd2c06345193

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\403e670a-79b3-4a0f-abc5-a46f96bdc0d3\index-dir\the-real-index

                                  Filesize

                                  14KB

                                  MD5

                                  ab454d7156dd4fe378f5875a56d02f5a

                                  SHA1

                                  107d8f2b36534e250ab53c7f86742edc9da37737

                                  SHA256

                                  87cfd4832535365b3fdff830dc535d5fa51cefaacdbba39f6023072ea41f7546

                                  SHA512

                                  6b53687ce34c8721ebdd839aaf5986efd98c904b3b06020e9bd42ca17bc9530c7d32c7afbd3b809fc0fa107efcefe20fcb37a0440dcd5933048953af06ac1b54

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\af25b857-f2af-49b8-bfd1-dec62ad9ca0c\index

                                  Filesize

                                  24B

                                  MD5

                                  54cb446f628b2ea4a5bce5769910512e

                                  SHA1

                                  c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                  SHA256

                                  fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                  SHA512

                                  8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\af25b857-f2af-49b8-bfd1-dec62ad9ca0c\index-dir\the-real-index

                                  Filesize

                                  72B

                                  MD5

                                  1b10f8d321193c92f7fc0a82bdd1a630

                                  SHA1

                                  9c604d72c6ccdfc6ccd444c26494d02cbda957cb

                                  SHA256

                                  c83d236e1172a2a0e8df32ad233892465ed754206b9fc1b6822bc3442489a600

                                  SHA512

                                  d005b0ae0486c0dd81826908aa2da61f6c8e8396cb965adeb3d7f80ec35a08ec8135a9edf7b96270d42956404611aec2ebffeed0a3c6c5db76e1775fbe5a2314

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\af25b857-f2af-49b8-bfd1-dec62ad9ca0c\index-dir\the-real-index

                                  Filesize

                                  48B

                                  MD5

                                  0d9beb7fd8d0e66180482ba864432d2d

                                  SHA1

                                  2546e7cbb3a65915811d2e7440a48cc2a4ee058b

                                  SHA256

                                  295ae2ec3dd6edc977e91927dcd3c07ce2fa8ac3a938fbd70fba5ce55cce27b1

                                  SHA512

                                  5836ecc7a0e3e12838129fb4d3ab14105ba9a2482441f71540d6ef0c512ba5db1d9cd8a561ef52e86f7f8e80534a06ab381d4e75cd73747795448380722bef35

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  99B

                                  MD5

                                  2e0d35c5b107a84c160b634bfe93e69f

                                  SHA1

                                  0d908e52ad841df3c5dee46974f581392c65449b

                                  SHA256

                                  43757c696b086a078420d2ae0f5eda1937bd9f847ab2e583386299f08dd15d95

                                  SHA512

                                  15aa8902b9e8c15cf959fe0ce8275856d85984c93a160e1b5137998bab605184f44a8f2ec1d8e32eb84cffc3f3f38e00e8070bd46bd6cdebcc0bc66f3e04b337

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  164B

                                  MD5

                                  7721fb8b461ebbe1110d9f51a941a8a4

                                  SHA1

                                  b658bd0b599ba8aec61452c6c349d8e8da6d07b1

                                  SHA256

                                  c1045548ec77cb339e2672ae22b0229b786ab27b104ef276d7c24b7d64842403

                                  SHA512

                                  c2ef5856dc820e8d42b336fe1e8eb3860c69fbdade265db06f9c23c4a7d0e480034fcd4f7b45df2c0382773743ae4e073b24178229c141acbeabefe6680cc9b3

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  278B

                                  MD5

                                  ada042b1269ca51624ebc8a49e45f89e

                                  SHA1

                                  a8edc179f5b6152ff5375172b8e8086a06513acd

                                  SHA256

                                  0b11570ffae62f360e61d6b2678a4fb4f0f8304265cc87fd891c3ccfa52d6c57

                                  SHA512

                                  8bbe16a70b8635859217a22bfd4c8096c9948c134a1178bfa938706460367d2e49f51d7f6d0e2c928051795a5503d796baa02cd94356d69c3896535de6506d28

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  392B

                                  MD5

                                  9fff94da04112df423d60f5788918e0c

                                  SHA1

                                  8e18405e1b3081020ab52332dbddcfa6e0981f2a

                                  SHA256

                                  f6203996adb9624db8642965f7e22aac64b497876b8a66c3f8d15d0015ca2f9c

                                  SHA512

                                  1ed5b8b633531d594dd275790877f3048c7457a8dccdd94db2f8b75fedc761a64182d0a05b2b17f4a73a0f659f3f4edb84584a664d5428ddb17262c90ced6975

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  624B

                                  MD5

                                  c157a3034c92e1e8c57bb9a8ddb67242

                                  SHA1

                                  0c8af1301d3bc9c0909759635fa5c04d805a07de

                                  SHA256

                                  0dbee49cb691a9f430e4d94daf75cda6933eb34108e7e4767c80f0b57699a1ff

                                  SHA512

                                  d4559f3ce73f74fe0dd2a4deb2b82515c28b42e4a849178c1eaf40bb076f043030da31b24263467b413ecaead5479f21e9b81db1ac431e1b9e14d0f5f5fe0145

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  507B

                                  MD5

                                  81f51da1e97a1308b3ae84280d9b43bd

                                  SHA1

                                  4a3094b244e5e1bb0114becf0ecc376bd116ec1e

                                  SHA256

                                  39f8f7b1795dfb8ace01b447ae4d394092fdd049021cb0c7105a88ee3353ca0b

                                  SHA512

                                  ca03d0a7c56fec8a6f7041b21a53a9bb23088d69ad9f96247b13dd6d142d9b37dba5d26bf109f953ba4034bfded806bfbe9dfc7f1c402ad408147ce089bb55c5

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  621B

                                  MD5

                                  9ee6e8bf007277c1b64de549ba838d48

                                  SHA1

                                  c90dcc5b5a86281165b22363d80a324d37599563

                                  SHA256

                                  1e42eeda8e299b14e79c37b22c94ed92944a729323830ec13db7c392c73b57a6

                                  SHA512

                                  93a2eeb6bc9ba3340bd2fea042204d38c51b87fb7464e037794f916d42d9db89dd252f74ac7c28b61ee1b46e61b2f41e30103f5c33a7552bf2c77791ab848d19

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\06e0c1037b627040b1fca982cf0cb9ee2a0a713e\index.txt

                                  Filesize

                                  92B

                                  MD5

                                  b0ed46bcfa65297ab6ccf266d04257ea

                                  SHA1

                                  80d67e4bc9392d453637c7925c73476189341f6b

                                  SHA256

                                  391eccb86fd23b2cbe50e989395739bcacd5b1105e504de7ca544449e36029a3

                                  SHA512

                                  4f1c625bbdbc24b5e1f1766dee6cc9586f68defd0c775468f2078a76e47f100f9667d3fb4069cb8608d0af56f2a05067dedcafb1adbc23f5db2e415987c3bb63

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                  Filesize

                                  72B

                                  MD5

                                  860631b441a526ed2fc4d81a3e9e2221

                                  SHA1

                                  356f4e5c8d571949cadeab23b31b16b049444246

                                  SHA256

                                  4a751ef21f93aa6bae58bfe84d8ba283eb315f1773cdf239fc2e4683c24ab429

                                  SHA512

                                  02cb3df98c9ef81be3a86dbbdbbfb0a3199a94059124b1fd6b0c8661eafaff9d7f2118dfb1af8e61b40c0334f9572ec1ef6d317566d696d86059136ff9ccd510

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5845de.TMP

                                  Filesize

                                  48B

                                  MD5

                                  33b095498839f7f805274e8448a8c7e4

                                  SHA1

                                  273d59d5d3a6ee0cc64f6ad5ac94b0ad926e25d5

                                  SHA256

                                  bf98995f6067ef6fe5b7699b9d0dec03e797d228adf180af91aaa1721c15fe63

                                  SHA512

                                  ea0b277e0ae355fc82785e4364a7bfee371609e184806df4bd2b662e0f3f390f057b8fa0342693b3d33dc9e3c4d58b1a81306b0ec9c0f089057f0789a9c5fec9

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  cad9c3461e26c1067a2c9414aeec118f

                                  SHA1

                                  c081af594b3c5a1d3229320f6baffc81ccfeb2cf

                                  SHA256

                                  6a003356673f8c43782d67ec6100cc3db0bbf31e30911f95c491587641f1333a

                                  SHA512

                                  5d65fcd6b3f4550cc98654301258f30b34860cff189f36f0ea968aa5ac5ee017f4b4e274ddff94dc04b2a376760690d886df30e5916b44fd4e281d4d35dfd92e

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  76e5ce3d0b86ccd9001306cd5b5774ec

                                  SHA1

                                  2b097126978c7890a99d5d7750d008d18d499186

                                  SHA256

                                  de9e1d3b23aeca38dc2b25157b870b7dfcab01f0e23878a78c0d6647abd83f53

                                  SHA512

                                  a54e4af8dd73b9e4edf93c59e67f6c2fd56fd843b70954706847bb89ff3111251415c4915c3b6448f8f484d3a7683790cf11ea9f0b9cea9f2d6c1bf6bbfe0dfd

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  3d260d2a14a313b4add3917e9133677e

                                  SHA1

                                  fd16cbb9a1af9612368d7bd4b597dd2ed2818ad6

                                  SHA256

                                  e4ddaffb9057c52b9f47c6dbddffa703a135ada972b0d54f0b984edcd6a21782

                                  SHA512

                                  b6dbae924cdfa5d2eed6c700db201cd790375efd98ad00e3837fe4d2490cc5a058ea5bf61984366dca210fe4f577ff741cbac060476b853f7a9f2e244277692b

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  4de9c592e65ae2f8f2b9aac69cb317f2

                                  SHA1

                                  7d437a6b4f57101bf286974f4f0ec4ebc85528fe

                                  SHA256

                                  33bc2cf8150d9c767c67cf670f70f3a11a6a1dae19bdeb7af691173115f2b1a1

                                  SHA512

                                  747e8ccf406dcf1a50298a9bbfc0390ef096feb5f237635af2c5825caa16f1cab1c0aed9124cfe1562b5113a21b5e2315abb923976e934a5cc5daf881c0bbcc6

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  f1d04291d16d4d76453715613f475317

                                  SHA1

                                  cdd2b359bf1d9408c243c2b214d14bb0fdabb8b5

                                  SHA256

                                  fd236bc15a0794a37812836fc120d7263fefc2991f7cdf9c2092da590d320a72

                                  SHA512

                                  6870a24ea3b652b83d196fe36697ae562c440e448000bd05741e40aa40cfe4a783cb9b036728f29b7586aa021309824f6e8a602954f35ad6676e5a534a841621

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  25f48128749d58594cec07856a5d7ce8

                                  SHA1

                                  42f4df58f6fdb076ee7c733a82af09af50ad7fc4

                                  SHA256

                                  a949369c0d951037bb220e0a4c304fe0b73ed074ea1f9e59f73b6dbbb6aab688

                                  SHA512

                                  96ac24ce53d1612a8e2efaba2e77743dda9ee39a3eb73da687044a2d2158f1fb1aaf23d00ad7717a19352c83e03d019b4b89e154e096316da984c327a0cbb68c

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  c1034624ba3d37a763fe2fb11e25a4c4

                                  SHA1

                                  e88517a8448a7f0630d9b5fa8a4359297ce2fc78

                                  SHA256

                                  b8292940a1bdd6996f9d80749f4dc314e9a22c0541b034327adebf0abd78ecf2

                                  SHA512

                                  5c0fae422f33f32fa62a0d45812af0ee76fd57545fa2f0830fa4984c6762f0371a109cfb1a90653958200259404ef933eb8fb78b42079f09141fb959443ae0a6

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  26e6265899963ab0c240231ad35b5cc7

                                  SHA1

                                  48ad4f0acd49c05989ccaa72d0002c778eb5488f

                                  SHA256

                                  3a7d39e2d0a2e4f3fe336f67bf778bd37944a0c1411bf84dce1c0080d20028fe

                                  SHA512

                                  c8677713de25c372575910d3a83cfed17c487a9954310f2da45c18cf312f0d5bc980d3496b2f610fea8447daef6b4ee55a9943f0d5284fd1632ee9a1368492db

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                  Filesize

                                  1KB

                                  MD5

                                  6b3d3bad81bf08c2b5f714b491183e8d

                                  SHA1

                                  54064c1ca64066459bc23e40678beaaa2c5ed3d5

                                  SHA256

                                  a7f90d30554f51f65fff0bfa1e1786c3d196ccd520a5f103545a1dca787a5e67

                                  SHA512

                                  d45a0ab15147b08d6bdecb108aa70a7c25ed2d2b857f2d018eb99ae980a8fe68b1f2154d260a85f2cfcb7360e8ddc2d909b31d4a90d85211708e6d4c1930bb4e

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581ece.TMP

                                  Filesize

                                  1KB

                                  MD5

                                  f9ee925bb900d684332631b17f2c9d0b

                                  SHA1

                                  64d00e4adce4282278a275a552119fd2252dadc4

                                  SHA256

                                  41fdbcd1f6e83882c0b972b137998064bc3c31608dd9e5eb3290cac1bb5b7d07

                                  SHA512

                                  43c82d1fb22807b965c5244eb55168b9af28d5370df8ad5e218069f789b8980f33ae9681b677b694787d0adb1af76a53c49f6db3201ff49a219b5209cdc499ce

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                  Filesize

                                  16B

                                  MD5

                                  46295cac801e5d4857d09837238a6394

                                  SHA1

                                  44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                  SHA256

                                  0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                  SHA512

                                  8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                  Filesize

                                  16B

                                  MD5

                                  206702161f94c5cd39fadd03f4014d98

                                  SHA1

                                  bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                  SHA256

                                  1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                  SHA512

                                  0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e58b662e-be62-4ba0-bdf0-5b6644ceb738.tmp

                                  Filesize

                                  8KB

                                  MD5

                                  8ffdc5a903bc5d9b31ac29695cb3a22b

                                  SHA1

                                  260cad9a8cadcd6c81eead9a9f9d4f5088270a89

                                  SHA256

                                  31133ff6a9010882e107e4e46ef13b3e0a1252ffc234a961f446a50b40c1986a

                                  SHA512

                                  f050b12f66890fa1981d71b444dc566b07388884f16a48c60017b31c093120cdff53b7f6e58bba04906504081d035128d0c744b1046879d82dacfffcc0620592

                                • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                  Filesize

                                  10KB

                                  MD5

                                  16b77c32d4fc891251b45093a31c7833

                                  SHA1

                                  43418fa711ec090a538a018bab03f26303eea0c0

                                  SHA256

                                  b00e8c2b5f40a75525ac4b0a43c910d28412ec3dcaf648b92304c30704de25be

                                  SHA512

                                  fdd47fc004ab3b72fce3bd78c66cce9b01b46ed932c7e03dd899a873b378fb19c4a5c90b1c8d8cefcb5411113aa71edf22e0945a7f9eb8f980c2f0e130875ccf

                                • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                                  Filesize

                                  2B

                                  MD5

                                  f3b25701fe362ec84616a93a45ce9998

                                  SHA1

                                  d62636d8caec13f04e28442a0a6fa1afeb024bbb

                                  SHA256

                                  b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                                  SHA512

                                  98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84