hxxp://google[.]com

Resubmissions

10/10/2024, 18:33

241010-w6895swbln 3

10/10/2024, 18:29

10/10/2024, 17:38

10/10/2024, 17:35

10/10/2024, 17:34

10/10/2024, 17:32

10/10/2024, 14:13

10/10/2024, 13:34

Analysis

max time kernel
1776s
max time network
1685s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
10/10/2024, 14:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://google.com

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3587106988-279496464-3440778474-1000\{AB014D77-73A3-402E-A128-D7C586093892}	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
952	msedge.exe
952	msedge.exe
2592	msedge.exe
2592	msedge.exe
3012	msedge.exe
3012	msedge.exe
1624	identity_helper.exe
1624	identity_helper.exe
4900	msedge.exe
4900	msedge.exe
3220	msedge.exe
3220	msedge.exe
3220	msedge.exe
3220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 30 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3084	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3084	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe
2592	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2592 wrote to memory of 4620	2592	msedge.exe	80
PID 2592 wrote to memory of 4620	2592	msedge.exe	80
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 2320	2592	msedge.exe	81
PID 2592 wrote to memory of 952	2592	msedge.exe	82
PID 2592 wrote to memory of 952	2592	msedge.exe	82
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83
PID 2592 wrote to memory of 3068	2592	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://google.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffa3c4a3cb8,0x7ffa3c4a3cc8,0x7ffa3c4a3cd8
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2392 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2868 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2920 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3260 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3140 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3932 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=6492 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2916 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=6040 /prefetch:8
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5240 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=6696 /prefetch:8
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7136 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2584 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1260 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1916,17865325396154541461,4433412976503121259,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7204 /prefetch:1
  2⤵
  PID:2024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4980

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004E4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3632

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:1268

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2808

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

Filesize
230B

MD5
0914daa30a32ff24b9f55788a9f4dc0f

SHA1
f3484a2cada3df46242e15bf8dfc51faeb65779f

SHA256
298dd510fd48f037f44e295d89e44e5ac6fed35db7db9d750c0e45c1ca7527cb

SHA512
abc97e75dda1cd37fcc8492d4de3e8177daf849ce3b2ab1364c9e8d9899a3815896537930eb3d15dcffa790445337f1a4c699a86fbac0d4f6e10208105ae5797

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fdee96b970080ef7f5bfa5964075575e

SHA1
2c821998dc2674d291bfa83a4df46814f0c29ab4

SHA256
a241023f360b300e56b2b0e1205b651e1244b222e1f55245ca2d06d3162a62f0

SHA512
20875c3002323f5a9b1b71917d6bd4e4c718c9ca325c90335bd475ddcb25eac94cb3f29795fa6476d6d6e757622b8b0577f008eec2c739c2eec71d2e8b372cff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
46e6ad711a84b5dc7b30b75297d64875

SHA1
8ca343bfab1e2c04e67b9b16b8e06ba463b4f485

SHA256
77b51492a40a511e57e7a7ecf76715a2fd46533c0f0d0d5a758f0224e201c77f

SHA512
8472710b638b0aeee4678f41ed2dff72b39b929b2802716c0c9f96db24c63096b94c9969575e4698f16e412f82668b5c9b5cb747e8a2219429dbb476a31d297e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
62KB

MD5
c3c0eb5e044497577bec91b5970f6d30

SHA1
d833f81cf21f68d43ba64a6c28892945adc317a6

SHA256
eb48be34490ec9c4f9402b882166cd82cd317b51b2a49aae75cdf9ee035035eb

SHA512
83d3545a4ed9eed2d25f98c4c9f100ae0ac5e4bc8828dccadee38553b7633bb63222132df8ec09d32eb37d960accb76e7aab5719fc08cc0a4ef07b053f30cf38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
67KB

MD5
929b1f88aa0b766609e4ca5b9770dc24

SHA1
c1f16f77e4f4aecc80dadd25ea15ed10936cc901

SHA256
965eaf004d31e79f7849b404d0b8827323f9fe75b05fe73b1226ccc4deea4074

SHA512
fe8d6b94d537ee9cae30de946886bf7893d3755c37dd1662baf1f61e04f47fa66e070210c990c4a956bde70380b7ce11c05ad39f9cbd3ea55b129bb1f573fa07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
63KB

MD5
710d7637cc7e21b62fd3efe6aba1fd27

SHA1
8645d6b137064c7b38e10c736724e17787db6cf3

SHA256
c0997474b99524325dfedb5c020436e7ea9f9c9a1a759ed6daf7bdd4890bdc2b

SHA512
19aa77bed3c441228789cf8f931ca6194cc8d4bc7bb85d892faf5eaeda67d22c8c3b066f8ceda8169177da95a1fe111bd3436ceeaf4c784bd2bf96617f4d0c44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

Filesize
232KB

MD5
6577c82dd65d45a088f9060d76a714a1

SHA1
4bd0c292df4f9551ea10a020ac55d470c8252220

SHA256
3c9b24fd448618a05b10b6a9b73f40a229cea5d0dc932f08e821789a5bc2f4dd

SHA512
3669958a11fc11ecdf1f0c7651390c27597b8eec1865391d0c1d12a8e45ca0b0ef9fc5d1239bfa8d16de69b216a10b4d95271e3ede8e032b8ae2e2b7718d2c02

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

Filesize
22KB

MD5
778ca3ed38e51e5d4967cd21efbdd007

SHA1
06e62821512a5b73931e237e35501f7722f0dbf4

SHA256
b7e1bfadb8d9c061f17a7234df012df7842ab1aa8fb6f9579fa3f0a3b4a75bc0

SHA512
5f6f02099ca8079305fb7e7f43ae4344d522271fe30379c0854d6a81b7d8adf408a50a4b799b5f52e6ed162ba6ce7fe97e24a2b9719df780e75683d3aa103d09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

Filesize
1.5MB

MD5
fbe8b98f98385ba4675626e92ce7782e

SHA1
ceaff44bf82e4fe483178dae9a473570fa5d9a7e

SHA256
a0222970cc6a58464227ed88a06d07091f19bd5c17333665761e382adba50e1b

SHA512
2bc9bb068b589b3e4efffd022dfe666079fc78c1cdf71c737f822d4b1857271530ff3d4b48883d939c90e5a8fd74e44309fdebb01c80c0ed80595e131849f07a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

Filesize
93KB

MD5
4bb2d605a625cb3bfccec7a7a4806fd4

SHA1
95344b9584f6a4ada28188e747e7acdb5570734b

SHA256
3c9e51e266a0f8f14a65f7548d42e2e80bc1c10654ab79df836cc3bad019d11e

SHA512
e3427e15df20d7aac3fe063b601d2ddc8a38e003022f1e96e98d82f5c95f9785ace0f0d12d7b842f905b9f91fa2afa28f59cd9ac1614a94ae7709243cbea0535

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

Filesize
18KB

MD5
8eff0b8045fd1959e117f85654ae7770

SHA1
227fee13ceb7c410b5c0bb8000258b6643cb6255

SHA256
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

SHA512
2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000049

Filesize
18KB

MD5
115c2d84727b41da5e9b4394887a8c40

SHA1
44f495a7f32620e51acca2e78f7e0615cb305781

SHA256
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

SHA512
00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004b

Filesize
20KB

MD5
3684c7775bc328aedb86315ec6891439

SHA1
cfbff177f45afdf36026595ba0abd3bb59f86a43

SHA256
e8d182897c2ec12664cd8e86b31ed441f775479b41a7f1ba39278d32e29fed87

SHA512
2f5f00b2018c4632260b7b26ed4d524dcdcc02f66c3e561a3ccef3a023c042ffefc3028329b4c58b59c4186936d51514b892bed0da00a410502b81bc95b6230f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004c

Filesize
47KB

MD5
56a44607861eed852e6334bab70443c3

SHA1
1fae354a2e2bfb95bb5f8b71901ed3bd5ebc7339

SHA256
4c28f57be6ecf8568c9d2c1509ecc2cc194a2961e2d2638a70842f0315e5a0fb

SHA512
b190d47b8cfd9c482f445afaa9e9e2e112a3ba83110a897da024de476ebf41e14801d29daaceed26f1be12a398d50f7ee9ef558f0f2e706daf894cf93a9c0f83

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004d

Filesize
609KB

MD5
34dd54ec579a217b1aa4e481ebef6933

SHA1
7b758da946526a731bac042a7097c6ba75cc698d

SHA256
90e3ffdb856ece743ce5639cb817d62d3b7ef3c70da77d04d052b1d6ce59c6f7

SHA512
cc1a36f84cd2c46f810afbbd7892662b7de1e267fbe8e8b4c5ed8f94473ac266611689f8aef44c24ee2ba065a9f9f45da299db572fc6ae74c9e221f05283d06e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

Filesize
32KB

MD5
9ea23759503201ade07e15974b5356a6

SHA1
416c7309f8533735e4241260e95fc9c29793bffb

SHA256
651051e001db3fef0cb97fc2a26528527c03a7754d2974a49b780bb093360149

SHA512
73c1038988bf60501135cb292ee70b5ccf1b69fcb43b3f2ae5a13c03b2c4a971f150ff3c1e5a7858710c695cde1835f2d6b7cddeafee4d681aa4686a27bf0a63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004f

Filesize
32KB

MD5
4b8bdccb091e9975d1e6ccb365f4f7e0

SHA1
32a804789d0bd3130e4b847f679d6696041c607f

SHA256
d874790a56f3189368e5c59ac4fa890eb5db3f3c2d67cdb437b79e2f19074461

SHA512
758a6732e18fb0cc405f72166062df908a74cb64cc3dccc17ca126161adde6a02b3baac52150c3f7a9bbb7ffd4a29612e87f09849c224744fa2a5a0a48f6712e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000057

Filesize
24KB

MD5
eeee2380f8ca50694ce6e523dc69093c

SHA1
c0bfe60b352c660cfd9d6eb6bf6b4e603daed917

SHA256
850aacc25fafbe3ddb95adf43e936da94fff9f5b3f7a7903f5a2f6749f4489b4

SHA512
be0287e8eac24ef0cecffde1dda6ca78f1f8f27e822370ba47eb1e3c8452912671fecf72207f4986523f017e9edc359a3360aa2600202120f8cc3d341921cb47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000059

Filesize
19KB

MD5
f13c25a91386eefaa91cc21a45d51753

SHA1
06d09cb6e48314270e866351123434f4a6312b0c

SHA256
6cbd6c61e9d087f0b0d8ccc6514d6a87a26f69e17e456573ee6ff75eccdfc97d

SHA512
efd2147235c5414a3b52f885f2faacbee2763feabc7018b921c2f9fc0677059ed510ee1653fc512fde8d28b6cb563ed4c04bdea47cae6535c7be698628af433d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005c

Filesize
22KB

MD5
4810683520199981272d37197a164069

SHA1
bbb9634a5afca9aa6e59c3b0a17a32a682921ee9

SHA256
f9f7d89de716f2af281c1f83ad24f01ac9224fcc19c69c9cd0f567a33c734966

SHA512
6cea75de62d6d80a4bb6d1594d65ac5631c675bf8946f4ec1e0695ca6462b48af84c3ba717d09192047d16b6adb4f44e4935ad36645a17e5b27231e2aa69eaf1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00005e

Filesize
19KB

MD5
b15e6022d558fc09a9595f2ca43f5a83

SHA1
6d85179c0437b27d1d26dbe40d9394c827e35af6

SHA256
2020573febe8bc1d896557df77d988eafac9bb67e733d1fe39a979be9033f9c7

SHA512
bd8b02198408bee2ce9b752912b007c08fe2b5ecbb4059c696cafe492f9534ce1177029671ced42dab49163a188279086aa2060c1b974a5f510dd6a9c5f16b74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
51994ee3e9af6a32a2bc4a49d9f395e7

SHA1
a57bc98f69b73bfd9ce9d1ec06311a990c601289

SHA256
225b82069e80ad53fb23bd754232cb3ecaaa18caf0319fff2c56a612d7f59834

SHA512
6fa00a79bd4d945530072abe43c50de64c68213106bbf62432ca5cdf8147c597680a298c428ba9d36df8f31bfbcb63f4033402b4aa15c5d92f8513c1d33bd122

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
0e809fa3add1ab907eac609cb0267cc4

SHA1
5acfbfebead244f3181165a7301cf1b924c2ee15

SHA256
eda4c372144bcca3431dee2cf22c47981c53e7e5f28f90e0a059260ace6cecf0

SHA512
8b750cc90c8d1a8c0572274af5d9ed3ef942f2894117c0350f5391f4d530ff0c951c421147b806112f08ea5fa83dad0f3d5e444fa679e005575e44509ae19883

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
44411ba3810aaffb3583c8776214f05a

SHA1
15423463e3823af6b7efa1a0f83fdd66ba66e24b

SHA256
86fc78c2640c28bf0defd32a3ca18e83029888f15996228efd51fae84d67688e

SHA512
38fbb53350c12b29716d491fb00dbe2791a17bcd86451f70e42c823c35d3a1322e3b223fee7647be60d2e98105d9ee68480aa8837b19b8d6563e514c90d66442

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
553f232e3dae1c2262419de79bf27323

SHA1
3f6d72bbf20a9a336d363c50840696ecaddcae83

SHA256
424087de4c5b2d85842ba554abdf03f61f911c9e571884e05cdc467318f6331f

SHA512
13853dfe79091ca46ff14412183a417098e5348ee6cb92955f977a1594e8e8451d9ffc2b5723511d58a06446536f48a34e53817e0ff64b9a2ad8f63e00c67262

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
9d99716cb09dd6f59e78268877d64847

SHA1
467d5757b9974fdfdaccbd7fed0d441f32bac65b

SHA256
413ba1199225b92095304802ba52070b61fecafde85ed16a29c7c4664091610c

SHA512
93973443845e6eb7965492793d186fb09f2b1825bf775d6fb37384e983eb70148b7da44110e4f4b20cfa8c08733333f7a690adc3cb0d60b23cb79f7eaf7c3160

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
0428d469bf2ea683c520410710de5003

SHA1
2bcc668f8f4b7be6dce4b327e868987e514f8140

SHA256
969d8b413c068618c63483d68865350d9a8ee8c0c2b9062eab1f1763bdc59977

SHA512
9059ae6df19ed54e894068b36b77c352d8a835b380b7907dd38011c20b5d98b546c3fdfe82af3aa219163a07e15a262aadad139ba040ec7a4d86145c454eb8c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
52d7f8b472612f4f8eec596625166534

SHA1
9652350b35d514e869f764b97d1c7cba11eea48b

SHA256
be428de708b275a77882897fa7ec1028c1ccf342b5d281e58fa7a90190e91b2a

SHA512
76b392be795b6231816744f304d9d64cf6469c24be163659fd76dbb8cd320b121cbdc5fbe4f1fed5221dc90e79536692ad024fd7ca97564e0e1ce217dc1538dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
5867be19fb050407bbf2bd1768ccfadf

SHA1
ca6adf248908f3d58969dfc2d43b5ef79986edb8

SHA256
b19d75799f84a91e434bef890a56930eb093ac28c6ea2d974811befbba0921e6

SHA512
51ce6a8faf7d4d35e2b7f283f00b29a99faad5e05c4ff622941498a70880ca0e870b992e33481b3f1baa82c7b0ba3c986cc3a847d4c7ed30247709c5dbb6bcac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
7KB

MD5
2dab43a8c643a1e3095f0fdedd45561d

SHA1
97b1a198d7f778af5e96c31f4dfb53f0f7d3e755

SHA256
687f5377dc92e3e576a2ef8d850f79e64407edd0c5f59927c7f6d4345a016358

SHA512
8c2711013476fc4a27754cf872cc53668b7b6ef8472f4aaec76a391e156cf7e368dc03986118be8f40b342dc029faf7142ee4c4242d4b4eb41c41313d3edb99e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
10KB

MD5
8b45066bc9900d5eb5da07835b1497ea

SHA1
c65afb92ac6fe9e81df47e817ff6c0436c7fbeed

SHA256
6b6d10d423329036c8d2d96ea58313c80cbf80668bea8434f43aea0412ace8ed

SHA512
61eb1c5fc6b12c257ea529a478e8e10c33af6e50e683af300cc517f114891e47dcb5c5071b239abed355bd92160ff0f8ac3a8d3dd2d7ea0da930d25d0d02c87f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
10KB

MD5
301704f52213f4d07d4459e9c48f9d19

SHA1
d9194a9a613a8b525c2ba8d64fc77167f6d123ec

SHA256
efaa5f0e34384f277d62c48f721c546ee1c9b77b844bc2f8fa9752acc90b16f7

SHA512
ca224c406a67ff5fe0681e2ecf20f06d60e8a3467dc396a54c8116a712b913544312b2287b76fdaf513bb2b351e64b35689d1db59b22069a997017f6cb02183c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
633ef54a5c9278388de737bfb491bd26

SHA1
69af8b78fa212e9609f163d5c7688a865e68df75

SHA256
a62780994fef70f4dedfa15ea8245889242a4e7b677ded29bd3b9cd2db2c62d7

SHA512
640553d8912bfdc720b88e9051de1d6971b182dbf09f3a07df1a3fad4697e9824498b802c3e2eb85e19dbe87b1145a2d5213f273a55c8e49ed7a53ead438442b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
e26f48b684a470cc506c651c58953692

SHA1
f50c21f1c3dfed98ec974f9ae333c80cc6fab670

SHA256
598fd52c465398dea6fb59238992d0e6fd75913f20bf96d56a06d9085e95432a

SHA512
69354922828c9565721619c8924880019574e9f11093c9eff9f18d7e1d6a22bfc179bae90e345a1aecc307fd17e97d6152f550ef1680a3dbb7c8ae7d91bbf730

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
77b65fc08890d80494ebbf3c390d657d

SHA1
87747d6b3fb2ce1b8c26f699c322e08f25363637

SHA256
9f1be2428ace9298238fe40e9cb8b844d4af391819b3b62a6b2d17e295ebca68

SHA512
f882cbb36b5286d351bb52b72c47e3dd885c90c6c97efa2efa07b2f285156242c05bdce4d01d192db723e4fbfb4c18565c79917d42f02cf8ae44142877d1f275

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
70c1fe6850ca563304c163c2374ed67e

SHA1
a5f491543f72b518f08127094fa752571c733153

SHA256
ac4c01cd67686df069ae33cb8113c5681c364dfa6a0353f11f6eeb5088ec86e8

SHA512
559b37ea006265e8a47076bbc891ff55bcd103bd92a590321744b7b243e69ff2e4b9b678bbd8048a8883235e0216a245f3f0c18813c10f54fb0ec044115c86a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8c8f1c471de80f762d2841e5cea137c1

SHA1
2521bcd3e2a4bfdbef497b0bab2c1a293b13cafa

SHA256
ecfe31a28a960271ae3f485a363ead458239e4706367b10217fa5c3fc09e9aa9

SHA512
55cfac9bafd1be435de0da8bffaa1bdcbe82b8d5a02614b7a38f9af806c072ba44e8752c1c073adfef71e8eba8df16ca4c3f79667450132013edc1b88dc9ecd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
59a99fb0592704af03b1586e59f7aa3a

SHA1
ed4b0ee8a8734f947e0bfebde8fd88ad2ca64f4d

SHA256
4015dbcff774f047aa3cd2cb766edd1afced1558b242d7c183ebefb774a28d0f

SHA512
c8e969a3a227a0ccaa2e2b0c29471745c5e6fa47cf8db2bf58d51cd4b5d9279f9280452e23a1df8dd146b2c72a6a525b2e777bc753292861501679d7d07bd3ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
83c875b97752dde9784272a159a1590d

SHA1
059b21561898d824c144f24943f6b0bb0a6e9434

SHA256
6a3adb74b95ddc0e20012a4913cab5ba7ad673cd6d5a0613627319d5baae957c

SHA512
80c55b71e5ab9a9423ccde56522513146178b685e36730d12aab350fb29da4457c4a0c1473a42559edd138b9d66dcf1df70ac3d091188574998c18f05566d332

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
197bdd3bd66634bd09c6c6fb84c2f46f

SHA1
a77590e2977fa372017783f2364a32f6143ab905

SHA256
d268928184d5a239ed74853f149736b88f5cc2239d3155c921aa8146aa376103

SHA512
a67c4d945332027dfdf0a11468351a53e8643c7882354bafe119f2e5293ea777542179692c985baec9b4e5372dde542b026e658927fb1d88053ea32f357141e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
2581941d062d566753303e9b3cc4070b

SHA1
dc2f87a3578efbed7bbdb93eb1efa8205db387ea

SHA256
ce6c2105dfdc79c0066722c2935f7fe741bd47f443c0eeaa3187f638b637a3f6

SHA512
63296125f774fc597a74898cc089732d79f0a65a117461aaa58f993f3432b118993cda0243388930b1a5e6fa6fbad9d19423e8c0a1133fd4131908c802856249

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\94f35a7b-ec15-4483-872a-ee896da2d9d9\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cbb11076-77fa-4b86-b27d-e55db6075071\index-dir\the-real-index

Filesize
2KB

MD5
496d9fe5aabab7ed55c1eaaeac91eb93

SHA1
f258720dc4b5c16c631a92e6e772204df91415d8

SHA256
da85016868d5143eb68f12ac445dacb0c19080048e22ad953e79be5cc794b70f

SHA512
573a8c8cec80f12e02e28b13882121229ffd8a65a906c7b377c07cba31111bfa96925ed8bf04ae35389f2e2a0f7d95b37ace0d6d533c1ad78fc5b46e7f573eaa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cbb11076-77fa-4b86-b27d-e55db6075071\index-dir\the-real-index

Filesize
2KB

MD5
fdc6890eaaa3f011646ceadb4aeeccab

SHA1
7a1b5819689f3ebca0dfab4c20b5e1b2d253c555

SHA256
f6de864093fc2540e8ec1be760feb86f6059216c27df7a42017a2710487b8cf9

SHA512
41a0305e16497fcc19d62073d988a27bd548e645d6917f39c8ecb3c7268760ad1e5b57c27cadb536aa8124634847c0e3a070c903396c550d3902bfbe93aeaa28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cbb11076-77fa-4b86-b27d-e55db6075071\index-dir\the-real-index

Filesize
2KB

MD5
4aabaa6159c1cd8ae4e5b8a9b59d7730

SHA1
bb6adafc946ecb8172effe98810d91a5a373fabe

SHA256
38543e22d15f2a1cf47830ca722bec6d1c00118206803e421d0964b47d20092e

SHA512
67788cda502cf45f308299fa96f8efbff914b61514a1764fddb7fbdb8a262b7961d2d4a3c362c5a1cf402f95ab169bbf5a43f265ddd28e8a14c5bdacc44eeeac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cbb11076-77fa-4b86-b27d-e55db6075071\index-dir\the-real-index

Filesize
2KB

MD5
4f10929acf25c272bb9ec8e3f8bc2695

SHA1
b2146ce71ed7c6853020b7ab828d6932a95516c8

SHA256
44abaa302a44d96e5e6026e32e990a98f24b5ad69b72b5ab03ff323f9ac9798b

SHA512
5de43cdc624185b957f1e8fcb0a01388f15063a2ef5738ba6a27aa0e74ed3cf86e8c3224fbf45ba24a863242d50b2a5563b4e1f20003387636b37e5ec828ff2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\cbb11076-77fa-4b86-b27d-e55db6075071\index-dir\the-real-index~RFe58feae.TMP

Filesize
48B

MD5
1eb4479e0a36b36885ba2073355cee9a

SHA1
4bf95f973cc57a8a87d9bfe3bd005ddcdc11d6b8

SHA256
956a99fa996cb1b8688960110a9810cea42afc4a9d2b18911b739b3b098dd9e5

SHA512
ec0312c7896cb386fa002b7db6e9246b86c138bc7ce16cebfee797b4827e8c03dbf6bdbccc9914186847e8a357ac7e7bd558b7dc5c343912e33023cd99ca5455

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
146B

MD5
2456191f4e0ee1d0ff4b81bb95ebe549

SHA1
d3078aca069373f52898bc5f7b67ed58b4c772bb

SHA256
755ec515f658c977010eac9f203b5e34710a76ed69946afa852655132ca1fe08

SHA512
14e9ea5148be19c90fd6bb27c50c6abaabf6f4848785612a94b3f68ca514dbd49fb15f1fb4ae23dffe8884022bdeb47fcbf7a39c7b8a7a40670633493e3b5f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
148B

MD5
d900a7a500407a0f897b6ea2d550f3c3

SHA1
d66d77457ae793b4a33cfb899604eb5412acdaea

SHA256
917b50b9e5b6abba64b23a6f26497db2c8c1efa7990aa78e952d6930ee537285

SHA512
232d556512c451b9beca2962ae001885bd3e1a71c2183db4e746899fe7e45c7a82fd86f29d637f1a72c31d2b2359a528e029d210c1f759c567dc79c72af499a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
148B

MD5
1a545f4703598058d2754827dc75160a

SHA1
91bc2bf24301fca74d7550cc9c6692ed55537813

SHA256
4c11611913f9489ebb273b004bc8a28a3490dbf6c483318cad9fdaccbd30da99

SHA512
e17424a6335cb958fad7843b40bd0ce9e33548d03357901bc7e0f6be77447548cb084925a44d28dbedcc391154dd9a9d35ffb2df1328ae4f7b5f8f0fe474dd68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
6f634494c2c79786719cb6297f40e1ed

SHA1
07da3dc192c5095b795c42aa1ac89255e50829fa

SHA256
a96629ec7ed579e4dc551b4e55f7b772eb52c2adc031b8a9dd096e363cc14715

SHA512
5461510b6825fe6254afb5e2781999e7a7088f3695658fb902daf12b9a62bf065be0e5ae4df7da0d0a1f6cc1f2b5562ceb7035608c02fbf9a586aee4f3f0e2fc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
82B

MD5
8b4d2c5022ceef1d607fd2aa4a76851d

SHA1
1b18861dffdb38c868269928e5142e4d709e6c36

SHA256
6dcb3be8d5f260290879d33d40f889ea767adad97ba11e92c08e633d09dc73ef

SHA512
beeb0d520ad59bab6e0d518f9ad8b4961128ebee092c120f724d4c6420c451c30011c89d564e944882b623d77e48bd0ed25879e98ed6545eb6206d16a3467301

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
484d2fb3f50312b5aa2ac79354748d29

SHA1
a484711e0da4072cf7b33d29f798a7a7a9284bf1

SHA256
570375bc98d501e41f606b50eea86dd822ddc544500d2832b6acc7553e328ce5

SHA512
e8aa792116471279c02f6b982a9d41450f053ec3f8962d47f328a931c067ee571b756efad5f695750774aea1b3cb58455eefb0897d81c6d7f9ee6b66310af230

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
43f623415ed4ea74d61bfe274628077f

SHA1
cbf3281d74ce1c6d3b9fbe26011d2642e26c361e

SHA256
97b9fab7a86a054b1327c8b40c6e78ffa00989239d692f2753280a8d0741a038

SHA512
9cc46e0d260cfe9a839d7c20966bbcfacb2398c5a1c63c3f3c8ec3ff44ff1407e936d871c115b6a86b74c9dc17d7bca2f303b0e6c7866eda1a1e07fae39637e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
ae19771a349c6cd2e59f38dd67903d38

SHA1
19d6e8c726c4593afe743e6a516df3cee7221e49

SHA256
c719c28789fa6d97be905a382f8608dedff239e7c0511ede3a988467ab20cfda

SHA512
744361566838370e16cc5bc0b3ac8d28338603ecbc9fb336e1b45cfed4fb41934d336db468f026d9b13c65e7c4bb1b46a3f2d4a1b1e990213ca73798854f3ab1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58aa54.TMP

Filesize
89B

MD5
50578a020b1b25b71a52d33b836b7023

SHA1
56453993b48d450f47a1e8c401f42583c98df3e5

SHA256
2ffbac834f41570e940b93976dde38fb2316f9839812c90a0d34e3b68edf9b5b

SHA512
dd5b357454aeebbba11a2e69dd54959f847bef98d5a796e95a70e62da1f23f1f28d0fe3cfa930853917abc1e30e0bfc36fa340f331d1532cf395599e85fdf12d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9199304e5e34643c083df7ef7d65e37008b6c6dd\index.txt

Filesize
87B

MD5
e618317f8bde8da49ebb1ab33802750b

SHA1
7c06d3ded88eb7e401cef024a9b3a29aa200d9d0

SHA256
819b874b531b60818ee02618b3b6478af28e9237a366ddb69cb49c73aacbcd17

SHA512
7364f7257a04d553f685dde0e0c6b4a20da727f610cc96e83fdfc7fde42e2af3684b50897a8f0cd42a47e02bd2ae72b0283420aff6b3039f222b3bf9e24b13aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\9199304e5e34643c083df7ef7d65e37008b6c6dd\index.txt

Filesize
80B

MD5
399671c700b294ef39204f346a78a9c2

SHA1
1eeaae890bae9adc46ab3f7f8631b8a54c7da107

SHA256
8c26ede1166257433bd44b0ac232e3d9ae0b303920a1820a4aa00f244b515c7a

SHA512
bd22f461561c619889bc2203dbf1a5c53aeef4c9545198e47910490f86f1d206ac383e3f8444cfeb50103e30131c22010a128988f4cda78be14695d174e662fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
00b67441a3c2619b27a06d563c0f91b0

SHA1
3e531a1eb5318fdf672b3d2164ff6801fbcf6821

SHA256
fe0c9accbd3803bc42d8f74341a34a5f3b23af393767b9b869c495c92f1434b4

SHA512
f3e0f3ce706bf699b5ca2e374acc12920069173f6653342fc7df6699beeaf1c90bcf4106fa8c2357b5022c86275fb96fa997767ce019ed43a2fe6dc633df2821

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
48B

MD5
008135e9f926d594740fd768a8bfa9fb

SHA1
13a32698ddcb43f1f81afb97f187d697fd4bedb5

SHA256
91808f9c82e6bf7adec0e2ae41a45f1fdea69b7728e39f6bb92c8a30582673bf

SHA512
55af9f704019f43798608796c693b7d09a25351cde2764ddd1f5a285aabed939b799b0e0921b1cd42e5681ce2724536ca1a29a412a42dda24926c6bb456a6989

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58f9cc.TMP

Filesize
48B

MD5
89550f10c94d68a178bfc6c3834b6854

SHA1
ea24cc8e086a9fd1c5fdd7f8c6777fd5d591f1f5

SHA256
c0aa0d83bdb83f6018b5ea427530dc07069e0b24f188102c8bd3840885d16df8

SHA512
9c64b131e1cf496f9cc9a11df0143ca77646e0e2f4a1746c0e6762e2ad43c6f6e6cf60783869513ad3681ef87891b495ba7b6ed7670f9a520c232b82678da88b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d7771667ef74d6a455c09d840f05cf2c

SHA1
3e2153ed954dd74d6eac3d919981bc7fcfe64fcb

SHA256
907bdbf17d9715c5186eddd91e5db7a30af31b70233c34a21a1d309ec7dd369e

SHA512
41d18c429f7b36d3c0d20c2c12d47bd291c765deb5bdb071926ac8116b1918d19de83dcdafcf8fa4bd07836a8282ed7b6a78cdd7a73f121ad4fbd4830b1455b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
9ddcc71e2c6bbffcca2211ba9676a890

SHA1
43fafccb4879eca6212762a2d1166f8c96175d8c

SHA256
2767df1a285135b4e5df6b86039744ce103e8c2a9e9edd04abc53adf0cd2887b

SHA512
213f7623c818909f3397f87185f67486793e747efed064d2ecdb754d87907a920c19d3acb6f662a22f693ebf4eee47b418630fbd85252120e768074b020adb11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
718e21c7d2ca58c14ce26cddf8b0479b

SHA1
d6430ce13cff3861c57a9b975b84f5f51ff5af2b

SHA256
a3e33bb05a258a5dfb15e5cca60a102413990d64ad5a632f4d6077fe9f455b1b

SHA512
004cfd45c63f723a03707d63d0d9cca7e0bb363ff72768501bf86ca26b33023843240ea51324fb61cace4488477e78a0e74ddfc8d5d2b54c6f363677177ea351

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ac4803faa55edb8a66e2a8942345accd

SHA1
fb9c693a7bcc1dfa8ab9d9e2eb99eced18bd6f01

SHA256
d656ccc36f135be4df44cf949116db07cf7cf6d738cf8d425f3ed0f09f1a61ea

SHA512
801f171beed6c5244fc9e7bae01f8512e749f50703fed199408af47f8bf17fc61f5dd98d24a05024ca58bddd68c555fa785b38207b9bcccae91d9b15366981b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
4a94717e356147fe72825daec3a90a14

SHA1
9ba8a7dfd88c527ea85d9210cf16ac64293cd3b0

SHA256
95339119e30630acf89f443104ec4279dc342fbda1b3b392b2f66795d7abe029

SHA512
37708d3e461d8debbeac435e18f6659225db0ba15ca18d56674b1666312bc19c0540f7b1f11b27f19129cee69821507ba6b3e7020f86ea5bff6dd0b0eae1dc1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
5517e9977d387d1b5ca9d3d78113b436

SHA1
13eca82f8f37567af676fc9d838373bcb122dde8

SHA256
3f5091891dbe8bcde723ebc76dfbd728b346d4a87b62b1b9b0318a2f32d8d4b6

SHA512
eb1a509d5d098e615b693fb6349bf083cb5d5d986bac0e8bb135361d861df5317cd0153e61942fb4f97af3279ea1441eff4aaa72b969e32b234c3cbf15749b59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b2ee721ecb3b01e4e258b67334ffe155

SHA1
2c3c541096c32c8a6cd5e84aca8ed69dcc89cb62

SHA256
ccd42419b3998ace4598d82b6d7535e9e91f7f3d0a925cb5cacaedd0daf1c204

SHA512
9588cc471d5f894c126d42120b62e4b79954eab48fef3bf50c97d7bab3892eed009ae01e7a590b4cdb613c5abcb0361f4dd4478f2a63dd0d8eddda40ff664b99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
b80ebf476afb0c0db317a52328db1e64

SHA1
5effbf8bcb0a6cc2793258c061e20fe187cf542a

SHA256
46957c297618943d692c5fed10fadcb885b004edf30679b679983d42ad40806d

SHA512
9071f901de34422fb32ce031dbca8e39bca5026485c1eec50cda81520059f170f2456d4c89b33b6f92294d228d8be9c6b964b82a5106947f3c11211a824b1176

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
b3e904146356443447a79b72ff9372f5

SHA1
29f601c70c3be83b71d5d2f9fd18f38acb21e72d

SHA256
2ca960114e99e2b1fbbe51d7d1b246df401fb889e615d66ea3cc7075608c4228

SHA512
ed1182234339e0b431e3ce7638275d2d44fba0093e7eed15a2268f2f17f894de9b2e16d889704e7a33f5cc357ea38384827454c8abe9e9dd7f6f7aba8be3a471

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5803b4.TMP

Filesize
702B

MD5
21ae48b72a6001b013882b37a3859fcd

SHA1
9de07787b2621de436525a759f8c33ef30220983

SHA256
7c2ebbd65c066c6ce416ee688f5a49ba94586e5da8d491675278efbc1e546072

SHA512
1312531f5d664ca634dfd549a7e21ce1ce3a28f0e02a3c2e18572af30cbeea4351f13c242104f4e95c0260cd457e466a9a117767e5de2f9bf069af67fdbadacb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a9592f8c25b1e93a73cb90557f448e89

SHA1
25178bc3e33a69cf6814cb1694cfb24c71712af0

SHA256
5e651ade4b8b9fa3436d3771257cfa3daca677b01bb0a5964cfb073e9695f854

SHA512
09a0bcfd22471b283885f77c9dc027c810b4dd0c029312b35546d192ce72eea4a1c9489d14222e4790069e2f18fd8a3ad355b333dcb255c4df73c83d94bc2187

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
66d3717cffc862daae689816489baf9c

SHA1
a3ab8518ae0fa43aa61735ee0e3a9a840a123190

SHA256
476934b5d843f881d0b96e83fd0a589913faf88674e797721e32771e77507838

SHA512
b79efeb2f31f37d5d2e954940aaedbc55b08e2ea57b18b050dd60bc8b6bcb6b0a0985ecd942cf8f8a18f477137c1b407cd975ac7d9ccba4bb1166f71533a67b3

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
96c5022658112a6aed44d5afddbaaddf

SHA1
77819d93eddf43f962544010fde31d60860f2e57

SHA256
c9a1546124d40059c025c764d89dbd64a01bfb883a557fb058a021e1dcdd919f

SHA512
ef6d7e13d915a00647f6535aae428d181e4bc702130247bb1cd6f2a38dd3e1cbff778f33e248a26cbe29bb85b9a43e76011f541075bbc2a2cac1dce71c0a400b

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
14KB

MD5
e4ec796aca98f0ec3cc4524b388e14af

SHA1
079985494c65d13de607ade5b48c82fa64b4c0f6

SHA256
6618dcd4a97c3599d6f2bedece697aa9ebd9a83dc5b866ea566ca1917ed5d461

SHA512
3871071f42968e227fc5f1d12c3664987628320b0fe0ce73f9cfadb311260a164d1d2913a9491be0e71175d28f2a66618b0c5922b789233810f274247013a841

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
14KB

MD5
731511ea32190bac5578668a190dc372

SHA1
3c307ca8687c1e32f6c798179e08d3f3d0ea9211

SHA256
266207683f7aaee452e57150c5656fd8a775cda6dc3d6079547c7fae2addb423

SHA512
9e62c3cbe6d6ab2d26682d1340f06980ee0eab7b14b140310bc3bc74d87dfda564a5fb3a5f53c004dfc1e510686423743cfd7f2c32555c311188bd5ccf1b0bc2

Download Submit