Malware Analysis Report

2025-01-18 23:44

Sample ID 241106-vn35qstglg
Target sample
SHA256 8b930727a57ad38fa6ca4499f8f296eee962647272d5d3f8e025275593c00e5b
Tags
steam discovery phishing
score
5/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Enterprise Matrix V15

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
5/10

SHA256

8b930727a57ad38fa6ca4499f8f296eee962647272d5d3f8e025275593c00e5b

Threat Level: Likely benign

The file sample was found to be: Likely benign.

Malicious Activity Summary

steam discovery phishing

Detected potential entity reuse from brand STEAM.

Browser Information Discovery

Enumerates system info in registry

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

MITRE ATT&CK

Analysis: static1

Detonation Overview

Reported

2024-11-06 17:09

Signatures

N/A

Analysis: behavioral1

Detonation Overview

Submitted

2024-11-06 17:09

Reported

2024-11-06 17:29

Platform

win11-20241007-en

Max time kernel

1158s

Max time network

1162s

Command Line

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html

Signatures

Detected potential entity reuse from brand STEAM.

phishing steam

Browser Information Discovery

discovery

Enumerates system info in registry

Description Indicator Process Target
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of FindShellTrayWindow

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of SendNotifyMessage

Description Indicator Process Target
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A
N/A N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe N/A

Suspicious use of WriteProcessMemory

Description Indicator Process Target
PID 4520 wrote to memory of 956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 956 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 724 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 760 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 760 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
PID 4520 wrote to memory of 4628 N/A C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

Processes

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffcb9773cb8,0x7ffcb9773cc8,0x7ffcb9773cd8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1920 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Windows\System32\CompPkgSrv.exe

C:\Windows\System32\CompPkgSrv.exe -Embedding

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5592 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 /prefetch:8

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5188 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3340 /prefetch:2

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6336 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3852 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7116 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6984 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6752 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6412 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7060 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7052 /prefetch:1

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe

"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1904,863260768332820458,4004829073210931829,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6276 /prefetch:1

C:\Windows\System32\rundll32.exe

C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Network

Country Destination Domain Proto
US 8.8.8.8:53 store.akamai.steamstatic.com udp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.23:443 cdn.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
GB 2.19.117.22:443 store.akamai.steamstatic.com tcp
US 8.8.8.8:53 shared.akamai.steamstatic.com udp
GB 2.19.117.23:443 cdn.akamai.steamstatic.com tcp
GB 2.19.117.27:443 shared.akamai.steamstatic.com tcp
GB 2.19.117.27:443 shared.akamai.steamstatic.com tcp
GB 2.19.117.27:443 shared.akamai.steamstatic.com tcp
GB 2.19.117.27:443 shared.akamai.steamstatic.com tcp
GB 2.19.117.27:443 shared.akamai.steamstatic.com tcp
GB 2.19.117.27:443 shared.akamai.steamstatic.com tcp
GB 23.44.65.46:443 store.steampowered.com tcp
GB 23.44.65.46:443 store.steampowered.com tcp
GB 23.44.65.46:443 store.steampowered.com tcp
GB 23.44.65.46:443 store.steampowered.com tcp
GB 23.44.65.46:443 store.steampowered.com tcp
N/A 224.0.0.251:5353 udp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
US 172.64.145.151:443 cdn.cloudflare.steamstatic.com tcp
GB 104.83.1.150:443 community.steam-api.com tcp
GB 104.83.1.150:443 community.steam-api.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 104.83.1.150:443 community.steam-api.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 104.82.234.109:443 help.steampowered.com tcp
GB 92.123.128.145:443 www.bing.com tcp
GB 92.123.128.145:443 www.bing.com tcp
US 104.26.10.88:80 csgoskins.gg tcp
US 104.26.10.88:80 csgoskins.gg tcp
US 104.26.10.88:443 csgoskins.gg tcp
US 104.26.10.88:443 csgoskins.gg tcp
US 104.26.10.88:443 csgoskins.gg tcp
FR 99.86.91.36:443 cdn.trustpilot.net tcp
FR 99.86.91.36:443 cdn.trustpilot.net tcp
FR 99.86.91.36:443 cdn.trustpilot.net tcp
FR 99.86.91.36:443 cdn.trustpilot.net tcp
FR 99.86.91.36:443 cdn.trustpilot.net tcp
US 35.190.80.1:443 a.nel.cloudflare.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
US 104.26.0.78:443 csfloat.com tcp
US 8.8.8.8:53 js.stripe.com udp
US 8.8.8.8:53 78.0.26.104.in-addr.arpa udp
FR 13.249.9.61:443 js.stripe.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 142.250.180.4:443 www.google.com tcp
GB 142.250.187.226:443 googleads.g.doubleclick.net tcp
GB 142.250.180.4:443 www.google.com udp
US 8.8.8.8:53 4.180.250.142.in-addr.arpa udp
US 8.8.8.8:53 226.187.250.142.in-addr.arpa udp
BE 66.102.1.157:443 stats.g.doubleclick.net tcp
US 216.239.34.36:443 region1.analytics.google.com tcp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 216.58.204.67:443 www.google.co.uk tcp
GB 216.58.204.67:443 www.google.co.uk tcp
US 216.239.34.36:443 region1.analytics.google.com udp
GB 142.250.187.226:443 googleads.g.doubleclick.net udp
GB 216.58.204.67:443 www.google.co.uk udp
FR 3.165.136.61:443 m.stripe.network tcp
US 52.13.200.38:443 m.stripe.com tcp
US 52.13.200.38:443 m.stripe.com tcp
GB 92.123.128.179:443 www.bing.com tcp
US 35.190.80.1:443 a.nel.cloudflare.com udp
GB 2.18.66.88:443 tcp
GB 92.123.128.132:443 r.bing.com tcp
GB 92.123.128.132:443 r.bing.com tcp
GB 92.123.128.132:443 r.bing.com tcp
GB 92.123.128.132:443 r.bing.com tcp
GB 92.123.128.132:443 r.bing.com tcp
GB 92.123.128.132:443 r.bing.com tcp
US 20.189.173.9:443 browser.pipe.aria.microsoft.com tcp

Files

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 051a939f60dced99602add88b5b71f58
SHA1 a71acd61be911ff6ff7e5a9e5965597c8c7c0765
SHA256 2cff121889a0a77f49cdc4564bdd1320cf588c9dcd36012dbc3669cf73015d10
SHA512 a9c72ed43b895089a9e036aba6da96213fedd2f05f0a69ae8d1fa07851ac8263e58af86c7103ce4b4f9cfe92f9c9d0a46085c066a54ce825ef53505fdb988d1f

\??\pipe\LOCAL\crashpad_4520_IHYHJELAJGZZFJPR

MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512 cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

MD5 003b92b33b2eb97e6c1a0929121829b8
SHA1 6f18e96c7a2e07fb5a80acb3c9916748fd48827a
SHA256 8001f251d5932a62bfe17b0ba3686ce255ecf9adb95a06ecb954faa096be3e54
SHA512 18005c6c07475e6dd1ec310fe511353381cf0f15d086cf20dc6ed8825c872944185c767f80306e56fec9380804933aa37a8f12c720398b4b3b42cb216b41cf77

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d00dd870ddce04fe3575d8b919f83e3b
SHA1 4076a1c3827875fba06cdaf5cfd8fd5e829d82c7
SHA256 3a8e2f653df0e9d4933eeb3e2e1185c2f75cd253947e651ffa688f60cda5a139
SHA512 766143d758042f13f68cd2d99f449f6fc8f7beb510463cad87e2eec0f3a6b87a0928dd3488b6dc2f29f476b39115557eba0ba758ffd0931005bf3c37749bdfae

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 635e520b2c065fe9cb49c65aa19be2e1
SHA1 d7418dd638eddfa22909ce6a1d17baeb68bfdcf9
SHA256 3e0f84d510a612bfd86cfcc2fb635d0061c6185d2221b1a7288dafddbaf0aaa8
SHA512 a835c7967b858318837635663fdf394a8351314b400a73e129de2f25ac52591bac9b384e0b0d8c56b3c4f26cc88626f1fddf7b21a0a1a4b975f3b7519530f651

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 057b032c070c74ecb31b39d8268dde6f
SHA1 6a8e6bb95d8ca3db97379a0aea7e0751ad94bd9b
SHA256 7f3c88433c4374bd78dc4e88901c8593685b6e46404c93ea0ff0608d2b6348ad
SHA512 5aa56de073962306c3be525d94a25f45933e52610805d139cba59c689eebbb33f020d291f76c255e850d02676e402f2997e8bc57426625bbc0656b8c13b8f241

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 65df2daf987afd8fe8da5b13bac514ff
SHA1 f4e88169263cbd9c2451460fe09faf473aa818cb
SHA256 207045fa978a4fa01dc51c276a5d6c7a9de15fc9531f96cbf14f79cc9cef3fbc
SHA512 203bc926f1f08dcfabeb669ff1da32847d56e18f98dc0a5eb7f06b0db5d446dac9afa3dc8811cbd8b62bb26a4ca887488577ed91477c7121e30f10897e31748e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 92699ce86bc8b64d1be7a744da54e4dc
SHA1 a82917616cf86006c09925dc51445d0e522fcbd9
SHA256 6947d3c0ffe13d73175f2bc3d22c8bfe9683149a4c91a1393bfe46d22eff7d44
SHA512 97afedaba4f7dc68885ba933717c52083846c33452ef13bb8b19027e53bd04ec8d0916eebdfabbaf2dda4b0aa62c925d3a5d95a56e6b7e253b71b457a125a19c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57c498.TMP

MD5 99d59a67b2251c1c7a427617591d5065
SHA1 3ab1f050fc4c103681ada2be584dc13a25459c2d
SHA256 76740a25ddd0ed6ff377a9bcf9205612c5fc9ab8c1e6b9441149723b5a7e8140
SHA512 e11511c3bbc694a879fbc2e75b0a64df794a88fb93ea3f6ec5c3c56866f56d2d22e8126d59d89b5391a14600c48b5d7eb0f06050e79f7bcc92ea3cb3a4732e1b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 0ab611c8dcb88cc43c92c076d64e999f
SHA1 dfab9e7440c0a9a7cf4c41f29d3f08ce15c76922
SHA256 f26d8c2f6cb3725cb6aa5e5ac341b70693c317abca25e1e72c49a10ace637095
SHA512 494347b9ac8a66a2c769c1e456f303f397e24eb470cf8f244ae2e7331bb4d652571c1bb3409e9806ab20045c8d20cb3de1da2212f349742d37c1f28114e09746

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 c4fa33266d928f96e5d5e8906910f437
SHA1 179ce0b28f9073738eb7b60b53f6c4ed856e4c7b
SHA256 1152d1694359cfbc5d29d6ea9ca508efd8b5ed3f48cd8178e632da024aaf7b9f
SHA512 7a4df9175fe007976bf7a6579d95a5b4aa6e78b1cecace2ccd7049d7eee80817ccbc893e16e4ef153fcd3723d32eccb5e1fb1f27459ff86f11f105d1fce45da7

C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 0166d166c579a5d326bc1dde9264db50
SHA1 f20e46ba9cda2c9f54893cf01c2d21e82bb9a690
SHA256 9dfe3811f5f67fdae3f99cc586f4c9dc0200a6c455692d6db07c54e39e82077d
SHA512 07bab4230b9063d87d18ac6dd21900e293d7199a81804bbf40b078d0d4f8a78dd22d7af1356c577b52e6c6a6fb3a820763cc563f184761c2fd7227c72ec1a3a3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000067

MD5 ef94e26e09fd6962f86f29c1c30f7447
SHA1 c574353d60b5973522a96fe726b0d26092167386
SHA256 2c3a7f1d3f5524c76c35942871974ee222eb012c65ec7f19d83c392f87b50847
SHA512 77abdad3b1f76fdd8eaa4cb3b2dcb9e5e0c00f46f25b52420e24129c4b178b34103329de52c15b130c3dec214c77e25eecbd2294855c1b3ca39936c8c94a5b26

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006c

MD5 57613e143ff3dae10f282e84a066de28
SHA1 88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
SHA512 94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00006b

MD5 2d64caa5ecbf5e42cbb766ca4d85e90e
SHA1 147420abceb4a7fd7e486dddcfe68cda7ebb3a18
SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
SHA512 c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c5fe59831fd9616229fe396d3c795fa3
SHA1 7834bdde6b94579aa555fbf9aaf4f4c7f64abf76
SHA256 bb15415fecd163505d6b5d623572a6d64825a770822739ba00932153f96ff3ba
SHA512 1c9d1d06c5d5f5c8fc29b6ce45cd2a83098962c7186fae3ee8ff11fc2fb1f10bcf6621b13f11f3d089e1a972a52a35776243b417175ac3e3c28b44fb86991bbb

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 3b8865f500de8135c3b1947dbbc008b9
SHA1 42932c335fcb39391233855664353f3b6d66e68f
SHA256 c83031bbc5746b8be303d9c4721ac50c013d37b3b5914b2992ea49e56f44a47b
SHA512 96d0984679efa5646ef721784589c93151f47d5d2e837e6f0370fc049d36eb3d5247b3745a450ca6e89fccef8cb3cbcbcee9b77d8138218abfc398a595b11c53

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 f56d0256b99f136b85403cd179662c2b
SHA1 5797bad1c146642a5aee06c6dff7719d5495492c
SHA256 554db6163ef798c2e0b789f57474bc3d7de11372e95684761a85c0914b81e14e
SHA512 de67c7054bd600a1fbf9fe3648016feab31473c13ca59c96fdee8f8f327a2761632f622877ef3f7d5c173ed83bee1ae9c040c2c400ba0b0f23566bcb5ff7a134

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 9a1963f1571de28a6f8d24ae053c9f03
SHA1 3679b354889892d5781a00206385295ee4ee17ed
SHA256 3bd7ac45b0b20b7fa94d075c30f6d85247781155495d3281e8bc9c1585d8f3c6
SHA512 2f5d77f71d46c590b0595d236cb3d9c3cd8a133bb61749e1fe111bd5321c6792b1d51c5a6c9a74a577ef4b0cba3d238de2f9c65eae693d9673d0ac0072521a30

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000061

MD5 8508cd24626ed96d121a023891a4291f
SHA1 ff469779ed730e727915460bb4f1683dced10fa5
SHA256 9efa0bdda468cf2aa2a4e5fb56fe0eaff5270cb24f9d7cfaaa4d0328a59a095f
SHA512 654181b60756a2ce9c19dcbc71b6d7b9794056348cb47ab2dc17c01bc8a9f98d7a1a544fdae3d9d2d57e79f61bf8b481b3c2c9f54260ba1b16009be4c0393ff0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 ffb3d7b169414a9dcb919e94799af45c
SHA1 4c4613431e76f94c5d368479b1a15cd78b87fabf
SHA256 5485d884d13d3e534b3b29fad9c88b0f05b418a71d573d2e9f1aba2071496964
SHA512 49f71434ea6b09c22a26e6ff918774f10b83ece8482df272258013e1d0805d2675fe3c8a24fd830f69ec32a21263486b6b777b9b1b7cada4ff27d98e91f431d7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d8af3c80239cc926d3238929c7d9663c
SHA1 dca91f47eeda607483e3c8e821377175d8c42ec1
SHA256 eca8f5fb61adbd404c4fa6c90a32ac616e76932dab80e6c1e4bc422c64eed245
SHA512 891c3fddab597662f6d527829ff58e1dc025c02ba160b139cdfcf1877e63ce2fc2dd5a992a55fcdcdf60671c5bda95fe0d628ddf9cd419d9cc51a3eab7026979

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 7c00386947c1ffa7b948d8a8b43ad4ff
SHA1 d938fc6d4b25095b751d5e693f2441947bc6b790
SHA256 f4a77ecc19c49ecedbf141ed11ab0939aa63c6fbe0d95ce9290926f95293907b
SHA512 bf3cfb44592113fe86bf29cc69949712cc18e49fd69b7bc0dacaa1f48e47684bc1e594b8cd025b02640ef143365df180ee496c481620fa2a9ba1a012b90213df

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 10c656a9a3fd247b34223f03256b06e3
SHA1 d9cb10e5727a65e236f3b3f1e1688f91801cefd8
SHA256 3117a5b109079a0f1950d7068bb0e42f24349db9c8ce642516f4a72e00aa3813
SHA512 7f9b6a2b4b213f519b6d86ab1da510f73a74e0acb37c794055c78d08d30de68db274524c4dc981d6363b5ee205e2c2875a9f8fafd57d6304ac3b212d3c9e9595

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9ca832dc3cb7183f7c2212362f7a7cc0
SHA1 12fcc28555b97105b36392d2fe6c0e0d456f7b71
SHA256 288cbf9fce8124b583d95e82b95cde61be5efc47f5b84caf1c347a7b1cdd27bc
SHA512 96ba1e8fc22d27c5c21f65838dfd1debde89ffdf08ebe7de27aee2517d0cdd23dd38744390f06a0022b1fe96d5ae3869d5b8866b27514d0e40d011a2bd410f9e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000073

MD5 ff4a254514b2013944fac1d9b91684ec
SHA1 6eb7ff117d35a68c58aa8f929cf41dd96f6d0bb7
SHA256 da768b1f4c906d567d10341aef6aafbd2964607bda6b67aae3511dcabbd6d12b
SHA512 4cec517ef13051ab93f0b5bf177beb25c6f4422a9b16fc999b7e8c96636fbd74aabc7f1c42083fe063e918c3ccc21e24b8d3ba8a22dd304afbebecd1b3377eb3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 60995fa269acceeada95f0a4be451d0a
SHA1 10507b6c4fc95a21f3a2bdb9c825174ae5591241
SHA256 cb4df5d991ba9b1d79f2b9df43732e855193b74034ac8c9bfe18dae857a2a3c5
SHA512 4feeab989513b24b3f9415795af05b52f694192e37c75b60ce37b5bf65b0fedec80ebeaf57c26dbd612bb89bff4dd4f85b74d53af675ba970793caaec4c1b2ef

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 85e9a0ab3dfb9116e738e4864256e9ca
SHA1 d7d8538e74df88f8420421f54f259a753adc5fe3
SHA256 7ef7d7256d20de28cb78da143e96232bc01ac8075cfd8947165c1b2c2c0006d6
SHA512 0742e88177bd463d088a94f8c3cc8fb1ae9756bd69c6c1e0cb88c35025ee40aff2dd1461b79ded3929a698ee1f108c6ae431cb20b586c43c3fa1e89a4c7bc9b2

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 177a356bbdc7d5974debb2595fcdaac8
SHA1 770e4252345e0a85d7eea4a7827269a7addf344b
SHA256 d714ff97385eba666807f15469e852af4f3c9e70794e9b0254f68f48e2d55e80
SHA512 f5cb2bd2ce31e4cfc055f6b2c1b7951ef3c9e6225ea13bf6543988f900bacc40b02915a5cf040c3fe59f780bbd4d1ba08ab1f261e02249c32c4e6c0039e298f6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 e976e00d2fbd67b31e0413c94aa4cadb
SHA1 562a81d4fffd469ba5bfd0f1b6ceffbb7679b920
SHA256 683f29bee989b6c7f00ede04a6ea7134ad5d12861cac33263ac7fdaccfb01ab8
SHA512 3d01fa748add7edaaa32bf42585bb1154c2c465d3d04914ec1cdf6a910750c64626376e0ebea96c66b2d5202b4805d33ce329b572d90cbd7d4ed718b3663d381

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 d144780d918ef363c690c920b6cc3883
SHA1 c85df0f3c42c9aa4637c8ead2b0d5c3b3adcbd1a
SHA256 7c85d31bc14ea7fde8663b8cf5b1c657523a48f9c9557b41c7dce2840816d769
SHA512 b95dfea52c050cafd09a77cb43126abad7623c53407c45017e4a9089be1741d580072a97ab3bb4e468627be504f9749636e34445a3704eabb3da5e405c87824e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 cbc6e829fbccaea76513c402d68685cf
SHA1 b313bffe97c7a974b0b3824e304ecd51406bd654
SHA256 a3484be7002da1c07d3331397529571c90a3d094d6455ae43a05bbee1726b4a5
SHA512 ebcd776f7791e4f281d1b74e84a332a3cbf7af88a6b994cf52ee55400ae0f5f0433c9053201c5d18bada1a9a42cff2c1330ae9c375b655dad8776303303fdfa9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 72c148ba47a4d7f09af108cf7733978f
SHA1 44abe27a4bf1e7c0ecc9f62987669aeca2a3ae8c
SHA256 0eb35ff017e3ebbf0321fac49577cd54b9628148128c58750e28d47c6546105a
SHA512 aecb7448175efb180c512b3df650c653fcf35d3c8e22f4e40a82e0b399757c85436e3673a288342de7e30860e5eac19673a9ba74a7380ba1ffc92667439420da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000097

MD5 8cb391bcc3272fc55482fbd45e72cbaa
SHA1 fc649c9c86a9b21c1403d123ac71e579309e6cc9
SHA256 364aa3b0d150040122f7fb8573b40e8801c4c42830fcf82a1d418a58f9e39943
SHA512 c67b17e16e910b9611052a2b9da24a58b9d040fed68d97af166fa7cfba73a851e736b2e56c2db775b58616beefca5207f5d23f8be62af088479cc3bde98bbef5

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 97467a559a46f9c452d5fb16e8980622
SHA1 0c25f9f69406ad067c6021ae5fcf12c9abb3ffb4
SHA256 c5c2009f477256c5c48c665bd965d8dec31bf0ea1913d14d6c009a9308f17e21
SHA512 bd7e8647d35393b34920042abfda052eae69aee8d5294205619b31446a18934e2c2f10625495afa44ff140d169d79dfe652379611793f852be96d87201abdba9

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 21bb148bc63ef2f73da8d4953f2bf545
SHA1 eaa9604c3a72e4c1f145db2792c28874bd37b49a
SHA256 d95d4f9edcef955d5874e69faaa41dde4ee939dda4b92b6a5765dc73aac90592
SHA512 a8a0bd1d0d01e664e77000cd912ba039fd295479ecc9920596ca3d6ac3f0eef415dbf96b66027a41a696b211d71f1d6f2be431e76f35def1564b7bf88a97c48b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 9fe00532311d8954d5eadd77bdccc4c8
SHA1 a83238df6e62864306944c05e59e6fe74fe9606a
SHA256 40bad0a16550670f6dc9de088e9ff3412753d31b4101c837d23db46d142cb7a0
SHA512 abbe82eb65bdbc60255b4487d810bd82cdd789b3e3c83867a581c5ae2ee08a92dd59ccc33c287391f6b3be3cb9b725397b618bc066fde27871bdc5d455aa0bc8

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 a174a73cfdcbfb6899ff7c06e47edaeb
SHA1 398daf242e6afc120fe23135a7c02b8c2d842c6a
SHA256 1901d484d661e1c9d61f0606ddcdc9d2ce9691deeca3a71580c0c24fe7da341f
SHA512 1da287167bb491dec5be96a5d32450c13e7224ccca8750e9fd2857c6052bf9d45c2f2ff6d66b1c77bcb63e2aa4eed8aef4d3f5b6718115583403f95be40e1f45

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 e6748247bb07a72232614fb0ac265b89
SHA1 f35103a4e0a435aa5c825ddef5fa349edb769280
SHA256 d160df5055323b41f808e5e2e812fcadc8ef0861632c8d2026ea342c28b69704
SHA512 4f3e91b7eec523db3d1b8b35ceaa4018d32ce00881568a64b9e2d88d011ea3315d5140dffe0edbaabf535182f303a9b10c21b23973f44b54b30fad012c1735ad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\f_00000a

MD5 8235f98068f731038d8520df4727c625
SHA1 6ef1e3ca36d59de490e593ec195b632e8e09565d
SHA256 98280dcf81e7ed7a29b2d383c12027481bf771aa6358012ee5ffcc8b3af21e38
SHA512 d75d4b688898ee9c9ee07f7be6e9dafd0154518ac54042270666969dd15dbc3b7c8cf92997c510f42f20a5ad8270d5324dd8f2ef91666a9d6d0450d60bacfd83

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 49ce3910ef2cb60d69dd71abb0bea013
SHA1 22c24ff34d6f30baec88515255ba98c0f2095ac3
SHA256 be1072b31dfcbf1d4093779b711c796d9702f683a61c6aac16ec61754f3542d2
SHA512 a087fcd9cbb3e3b10442fe19bcd893b7fd6f774fa70f718709343b5ceaf2733df1f0fce3a48231f6ab55a7533a8aea592bfbb92921dfd865c1402c15b6f8333c

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\index.txt

MD5 ac22497e44a0989aa98630a3a7c7450f
SHA1 425a43c3cdbf6e605ba3b12df88aed6d8116756d
SHA256 2f609b569ea3ecb32208a71c5cfc595e52a7225a03f96c7c6efb679719eda675
SHA512 2001fe64f0254bca79b3a499ed43671c61ea4a3c0ed2522c3f519dabc436cc996876254a1f88276ec2e23afa5736f014be7abc0e208234b5860daf18a40766c3

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\index.txt

MD5 758de740825911234826ef789c0d77c7
SHA1 da9cc707fb038b0df789dd339f81098e335a568f
SHA256 eb4732e3a157a1205552d62b4924ac079dd2805709e57fe532e3e4412b2bb3b5
SHA512 796306de6bfc0426fc6f5b2e4c5dd565200d8115fee73267bab46d7cfd875646d211920608a398bd7a300de6bd5b663d248a25baf7f32b8e0b35b0926e20adb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\8c1de067-fd90-4193-8517-7e5f5c2aeb89\index

MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\index.txt

MD5 05c5ed1f66ea86acbb892c5eb3a76f40
SHA1 66cc4801c638b2d205b244b27040b25b12f926a2
SHA256 faf3b246736ccb2ad70396dabec069b510a119e47837eab304776439de67d5e9
SHA512 dac86479e71e0e52a75112fcab6a4fbc285835111c815478bbd1e21089b671c03e69f37ef06b5633f78069be5dfa55e482a956143d1564961c2ab6ad173877af

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\index.txt

MD5 5d5a8b8ae80592df2b93e17f3b0964ec
SHA1 43b0ce1f17a57e8beda495701d3fc1ae38b3cd3c
SHA256 13bcb98df6b0ee361358e0a6ee5afc828bb25c6e0abfdfb0ef99fbc2bdd4774b
SHA512 1aa31befbeb7f1023998ce3f12700d3057883f9993f7e82887b6b7fedbded659b11cfbc55e9c39c882783d530eb46c6cc064d00735a3ce1e491fca24c8f802e0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\index.txt

MD5 dc21e49885b1da8d11d418b5e6b6aaaa
SHA1 40291bb960f745c09f54e75c228c3d0db6782cd1
SHA256 9088bdde95e59c496efc32b9f9ac4a86f68d3a0d2e75bf3b6e424ef843a95abb
SHA512 348276cf4f6b7b6cdd77030aafb1bddd54ea85f80cf05434c56207b0d5526a9f4e456675052e57af703ca6cc5a85bafeec63ffc8ea63bb32716b34fda68bb0da

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 c1e8c0aa896ff0bc605c012cf636ff79
SHA1 c3da9fce6eefc9307beb2851259144148bb7971d
SHA256 3c2d6e5d783db118b1d5befc8ba03a17bb0cd36663297caeb875eb49e5f91e29
SHA512 a18ccf9299dea3638fe6d34b0711d12e3af81a2cafd4e1da4213d65afa277f146b55451a5d942b920035b50a7be48f060734b35cee2f480c352560a9168823dc

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\d15fa5c6-fc58-46ac-ad90-d99d63be4e57\fd5f4a6ef4151e16_0

MD5 a3b7d29bd58840f425b625371834802b
SHA1 6eb4a6fe90c5d08a132a23d682c7e08a05d4d4ad
SHA256 f2e7d473d56b42a9905b124b1f1effcdc0e7611db5d56075f9039efaa5dd49cf
SHA512 f26971083b6359fd8469ed1cc01e0e59d331e12f6b2b004af4b204c86df51a4f50d609ad795176c3b7b6eeb3dc8eb5ad417c40b58d41a8c9ed2cf60a6cb01ace

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 426236df59b0b4d6aacde20f9970d959
SHA1 9c181d2337e1053ba507e5fdbc9f4327d7441112
SHA256 8f31b6adc58ffd66b56828783e05bb1bb932cd76ce50c426e62dc335f229d69a
SHA512 592a2186ff934e8bdd4c69657a156f210b56d2c3885e8d2accbca8de82fe77c452609e8090fe83216dbd854398b10f7c6bb44b2f7146ea3b059ae0098f495152

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 4caab0e83f9c521681b504b98ae709f4
SHA1 e639c57f46e9895286babe584dba640c7ab67cee
SHA256 13b82090cf3799a590edcadb80c4dd9038d08f432638b0b50ecde42a26da6de4
SHA512 26e27f7de3da2b9bdf7e9cc1c904acc823697308dee79da36a4e778d66ebf3c8d1c23aff11dee870ea3af43c26fbe92eff0f9d0d4df9e6024c57cb2cbe81bfd7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 e72d67cccadbbe97a15f891477d19cee
SHA1 9c1661c5a119d34f7f7f9920a64405e37db2e69f
SHA256 1799f890119e2c1d8ceb0ad76ccc278cfc088911638f2e475708141285aedb24
SHA512 a7021923898ee405b119fe8570888e52e9ffe56b59896e280a4018cd780f4b20a70d3bb2bc4694a7286d917c5b9d4d3a0197ffa75e70b2d53bee54f9c577d555

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ce3d0.TMP

MD5 897d47ee51759f5431779f101b694484
SHA1 c828ce0bf1e77e3482c0be84e7699849040d52b7
SHA256 02ab72d5c216da6d004d2e30d61111d405152a2690e32781776a56f576bdf7e4
SHA512 d23a7a9d17d978af22a848c8ec3b34c9abb2bf6037f4cd11f3e904468ec729dc7d60a8b08f76f9e3f3ecf6ed12b43f8c25980a2c727fde6ab63babb580dd3439

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

MD5 a538dc048083df931c1c0dd923145bfd
SHA1 72f16e1b15e1db470154641a2e12be49d40ac7d7
SHA256 8d4dfa760fc3f1a5abc8c8d123473c99046c9ae7751572170c4be8df18f78d48
SHA512 a490814e86eae102c07ce8c3978002db963fdf6759f08322b17cdb18d3a6be5f89662ff8ddd36601c9c97d34962ca44169e3bca44e716dc5cb27c358bfdfd849

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

MD5 bec7e1e5fa26b51c9bf961f70b344a74
SHA1 ad6f5a1aaef2b833f9fa0a0fdd6a0214f0b7f227
SHA256 2cd43ed947b31f0dcc20439d8db6a81f66c6ea9833fc6a00e6026f9214e0ff70
SHA512 808fab6161e879a37890dee894b2c1611054b9d4d6c94dfb6289997b42ee2cce6747b893eef73f3aba84e8c134acecd946198437dda89e7389ce51ff0ac7fed1

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\8c1de067-fd90-4193-8517-7e5f5c2aeb89\index-dir\the-real-index

MD5 cf1318e436d43fbaf590b758cf98ca7e
SHA1 501b81ce8fb62425d3cf6ecddf9268689e0b3904
SHA256 7bfa4cd652f83b1d2fd5a4ec9c0ca65644802d15459497a81ceae33cf8170b5e
SHA512 b09f6d9fef5a0633297b424db124ad0cbbf2599708abebe2da2d2648735d2198462510ddc1cbb2b776c28d78fb43817166fd0f9d4113f7a50d6b6b31acde5c51

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\8c1de067-fd90-4193-8517-7e5f5c2aeb89\index-dir\the-real-index~RFe5cfd15.TMP

MD5 f14b884ad371ecf595cc67ba6da71b07
SHA1 2203d0bda6d05aa9fb4607389dcbb09b3c3c63fc
SHA256 0dcdb4c60c28878eb5086bfc1af4395d4936a4dd64e59aabbd693d15584322e4
SHA512 90bb3e725d7206c713d90d753d68c80800045c807f3eca5b5cf6f52e8fd814a10430304b7cb1b5bf1e519533b29f8097f8dcf77144038728e9168b9156dd9cb4

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

MD5 d6301acccac199eb075842555f28c4cc
SHA1 5006775e7279ca23ccb7ec78d64add993a281c98
SHA256 dac2a2232ded0a75f05aa2d4b490cc1f1281a20774ef25160b895a5d73341cc5
SHA512 2a921e2396e8c0b1f1bc6b712a86beae0078b5166c3de4e13baf41d963a2f39d9ad6672506507e877b2a2ede4edb7fa47a0bb2ceb4ecf8b3459cf3dfa320a726

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\d15fa5c6-fc58-46ac-ad90-d99d63be4e57\index-dir\the-real-index

MD5 17016277a0868b7223020090a6a65a92
SHA1 a6100d5a80f684c9f898f13416ad3904af4a26ab
SHA256 4316ee3f3efa9e06122bbef2dda042c3ab12e22cc0213d55e4063640bb2805df
SHA512 fdbd75da7c8c6cfa5292bc8dd6842a1147e4ca34deebf21ae8a84d9f6d1ab675cd8628ef3b117c01532617e796d698a43951b2d117da81608795b4d74e4e31c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\d15fa5c6-fc58-46ac-ad90-d99d63be4e57\index-dir\the-real-index~RFe5d1d5e.TMP

MD5 a7e44488ed6efcc35bdc58d8a0668032
SHA1 072d8a8c21c5069dd177d9373e34c16354ac8f18
SHA256 3480f951047070159a7a8b3ae96377236882c5404838906109c0c10792fb752b
SHA512 a42936b3cf61be49fb8f362ca688de8e74507dbf22a9f264b27005e811863b581f69cc94c37920f63997f87e1c093bda829c496bec3dda17e0db798e7d7798c7

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\f4219965-f89c-4859-8209-92f2839e8ea2\index-dir\the-real-index

MD5 ebc57ce00c682f9882ce3902455ccd9b
SHA1 006d5985c2968913f5327728a1b29a220054dd2c
SHA256 a9136d4cc370e8085627ba8bdda037dd2f19da61266f2023bded786018ba203c
SHA512 aa56cea621eabd0701d20a636dd7ad437eb745a2174a4e9748d206a21e8d27eed512ef5d2e6959c8123dde5fc618261aaceace285111eddfc87d81bef073e57e

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\f4219965-f89c-4859-8209-92f2839e8ea2\index-dir\the-real-index~RFe5d379d.TMP

MD5 75d3db15c057cd06d1a69f51d45cae78
SHA1 104485c55880ba274d41fb6e57d03ac385028373
SHA256 a16d62d7fc05d0d3029d71c29c0089bf4b82d8cee43a1af9067067175333e86a
SHA512 0d8ec0518f1f19ccab7853a2719cc4d6a3e7865e585fafe9cca7f312cff58330ae4a049c8507f2befd0e8256889507f5de4681a3d8963b2d801932dfc1a160d0

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\85ba260ff6192e0392ee5b204fe16fa6bcba0758\index.txt

MD5 22a85680aa4d9bdae2b740d43a5547e2
SHA1 0495464e036a953b2cac5319dfe39619662a21b1
SHA256 94b4065bb620c478d6ac64cbab64de82d28712bc7019830a85d268b3c1ca9f75
SHA512 2ce26f05dc0e69083aae9195b7a9d3e1a14aaa038b0065700d157190922b9fb01ebdee5d75733a2d7af4474b63ae8806a0d408704a18306814e9c958de04cf8f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 fa3d33b72fb9374cd5998669093b41a1
SHA1 4b02295cef30dc23fff09ffff3325ca3d62bcbfa
SHA256 556564672ed563fa4f07613b6dc2ee017e804fc677e70e970a226279c34502a8
SHA512 4f4ca1859758fd8a40ceaaa020129a52925bc57e30c7066e97223d6b274e33cad5122a4d691db5cdd303cdeccfa059c497e3b053d92fd679815bbe1803441cad

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 d265d3d58b6ceb5131ce44ae7755e501
SHA1 01dffd3ab6ec7ecefee8de08243599dc7e0ce9ef
SHA256 84d3cc329828469ab10afd99667e0aa11a2f22e456cdaf4a233bfbf5bc6f8206
SHA512 ee00bcc6b52d70fc5144d0e0bd9aca4b063418efdb61cbbe1e27ea0fc6e19e46bf2bada96a2973fd5cba7fdd89997ffcb084caeceaa9dd7b0d693c9bc29bef55

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

MD5 303817224c677cbd056e567d15eee78a
SHA1 a5e3a6578fd105bedac0ea1a14ae8244b1ce83f7
SHA256 cbed921d1445d7c2ba1599ff91dcdc2e3eeb966f2039d2701a900d21242d6e6e
SHA512 6985e086db44b7863774a75df3442ec3394118c75522c0cc45d19825954db52a362c07f9f1eeb615dab6c1d4140faab7800a35331b4433896045bf5c16f267b6

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

MD5 65cac608ee78d81146a9916b3c9e695c
SHA1 2b9b2e1e85c0cd874b2c8926004323d335fe1c7c
SHA256 e25c43e37f1c3d3b06ddccaff8b2e0fed1416755c7de931181f99b8b097d27b0
SHA512 d3aa58c2604a7e8d4c8b59069bb9dfe05321c2bc1e680e73365c02c9b8deb7ca2140f6a248e6d920ce8a61f02f1d7448b09546df72745e54369face24fc88d7f

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

MD5 a1fc9bdf6790e9183380d8f31c6eb06a
SHA1 4f6ce6e66dc08dc1377884ac8b291174339064ce
SHA256 4c0b7c7770d7bd467be0e81c621aff79a8ad29aa3502fc540da584486db66391
SHA512 85e2253666b6816bbf38275a68482edbd7b757ed6418d791f1186179459f9a194549eacdec80d1533187e085d9fa218ccf616728e626dbdfe4b036caf0dc4e83