hxxp://investedbetter

Analysis

max time kernel
228s
max time network
227s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
21-12-2024 15:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://investedbetter

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133792675962846628"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Suspicious behavior: EnumeratesProcesses 16 IoCs

pid	Process
4624	chrome.exe
4624	chrome.exe
1332	msedge.exe
1332	msedge.exe
2316	msedge.exe
2316	msedge.exe
5180	identity_helper.exe
5180	identity_helper.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5772	chrome.exe
5880	msedge.exe
5880	msedge.exe
5880	msedge.exe
5880	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 44 IoCs

pid	Process
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe
Token: SeShutdownPrivilege	4624	chrome.exe
Token: SeCreatePagefilePrivilege	4624	chrome.exe

Suspicious use of FindShellTrayWindow 51 IoCs

pid	Process
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
4624	chrome.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4624 wrote to memory of 840	4624	chrome.exe	83
PID 4624 wrote to memory of 840	4624	chrome.exe	83
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2016	4624	chrome.exe	84
PID 4624 wrote to memory of 2172	4624	chrome.exe	85
PID 4624 wrote to memory of 2172	4624	chrome.exe	85
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86
PID 4624 wrote to memory of 3160	4624	chrome.exe	86

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --disable-background-networking --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://investedbetter
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=123.0.6312.123 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff837e6cc40,0x7ff837e6cc4c,0x7ff837e6cc58
  2⤵
  PID:840
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1908,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  PID:2016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=2116,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  PID:2172
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-appcompat-clear --field-trial-handle=2228,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=2324 /prefetch:8
  2⤵
  PID:3160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3028,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3056 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3040,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4056,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4636,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4384,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=4776,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-appcompat-clear --field-trial-handle=4476,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=3628 /prefetch:8
  2⤵
  PID:2764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --field-trial-handle=5060,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3844,i,13296754661465053008,7210557465781580404,262144 --variations-seed-version=20241006-180150.222000 --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5772

C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\123.0.6312.123\elevation_service.exe"
1⤵
PID:3016

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:1436

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x12c,0x130,0x134,0x108,0x138,0x7ff824d646f8,0x7ff824d64708,0x7ff824d64718
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2132 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:5200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4252 /prefetch:1
  2⤵
  PID:5208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5192 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:5608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3716 /prefetch:1
  2⤵
  PID:5848
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  PID:6060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5688 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:5188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:5564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:5572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:6052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5892 /prefetch:1
  2⤵
  PID:5536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:5592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:6064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4904 /prefetch:8
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:5768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1320 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1728 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6728 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2680 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,14751954511340904176,6755269988867570244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:6012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4328

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7712f141-7d13-4e9b-975a-a651fbca3a00.tmp

Filesize
9KB

MD5
4cf908bc4425f0f2249c44e8ec9ac7ff

SHA1
2c7064a595400fb01d032d587fc4c046cb6b6782

SHA256
3b7910ebdd989e118b8f64c5f2a318d974f8c270ec5143cec26e301e474d46dd

SHA512
ed942086128afad551fba923da2e86f3fcfc34c308e7c9b3fcfc4f345e85cb55ee3011f4279cb1fc97436a0a5382682d4778cec245ddef9358d1ea1202ba918a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
000cdc3fe2145973b95bbe0906823807

SHA1
635fcf70dc97dcc938be21c719fa4f654ba7fb1a

SHA256
52bcef3e7b810ecc31ab2617622cd44ab56a7b36a3db7e303e65620909da3646

SHA512
f394e3380122a90f346e6dcbe6da5cf57feffd930f74f8264c0f75ae72e47faa2a95f3d1693f05d1348b11bb9d294283558675b4edc3149031f9207270ab538b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000005

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
88a3efa315d279b4eb4a4471ddaec4f8

SHA1
4c18a0e487ca2e6996e36c14e2e85ef9b9be47e4

SHA256
3b4f13d686e8024697af59b5760ac8d27284a057e3ca95115125f2567982f904

SHA512
bb5ba96eb367e62e866f90f6e19ec2436ad440139bc1bbddc9ea08d75ded176ae4f23764f3ca471b3d1275335831993f464ff4ed266a2b40fa8d2212fd6a69dd

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
6d36c559642b63f7ab82114d4ea6b776

SHA1
c5322bcb13f43192d95ca98dfbc3d06f0ee6fc1e

SHA256
4bc2d8a5a6392aaeca3805319b13f04dbb6a4d8f1067d1c4780043de7666f684

SHA512
7c0085466ed1e08584decd5b23b090a4bf91753331326f405a8aac0eaa6c394de74502f067d260fb01a33916e6f116b8d0b0f86663b32c5072ce64e20fbdd551

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
b2c928f2f9462ccd4b43f704b3ad77d6

SHA1
c3169c30554e7de1d1e365646cdaa70755e36e04

SHA256
9dd867ec649dba7319ade4ed9880b09cf7e79eb6f4a940f4f1b0a5f0c07dbf93

SHA512
29b3fdf7561103dde5dc479c01ea6b31e44bd663fb4bd6cebd80cb4a2d796aaf1e80d4417ba6fcc9d8b48f8fadc35cdae2c03d573f9bda9487d546caf33f7734

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity

Filesize
356B

MD5
657b60493ce746dea0b9c6e9ea9cb206

SHA1
ec8f0cd9927675efac99b941136dc87cdf14dbea

SHA256
6d17c2b1a9e9fadddd3e3d9d230ab284083b42033dc0d6ef80039a3365c8f720

SHA512
659feafa56998f10968c50e045ce0e1eaed385aa31feb7497a30175833d0a4175f215af9c540a48d131c53f70eb6316083205fecd3cf46ad72279259ed4f8406

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f46d6bc73328bb882058f9df2b3487f7

SHA1
295a0037e55b10eff88dcf07d2720fe852619647

SHA256
e6d94cd381930e506dec2aa2e40f75ebb280e6d81a00d0b3cf9dd9092f9f073b

SHA512
fbebed9c957a6bf1aa70ed9c90514849aeef8adff24f0258c53b76e9c49d10ac5967d40f003c26b116370f0518d8a4719a8a71933abd81a39bf1b5f9437b0114

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
95d551330fcc3f9a0d5d1c30355de351

SHA1
f7a3d40cbc1360f3ba46dca4e9140485aae45829

SHA256
73ad80c4f593e893845500f7d1c2f2ae144412a78d8da4e2bae92ca596c65bf8

SHA512
196229cdf762a4fdd0014bf488993dc151b00ac1b1e5073bb043f851e17bd9b1c74a1ce1fb5a0b6369c7880bd5b625ce66e0f1d55692202b42f47df554ac0cb8

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
431d522e71b25353481a8b1ca8172d70

SHA1
2152c2b2e0dd595bd0db1e9e824009bf28143a29

SHA256
5b191ee2f99c9c187886829616b140424970c7356a4f9b2af1bf2506aef7a912

SHA512
78d8f400cae67c70a3470ab9a4663825e73be76070dfa0f0ae58f5333724bef4441278a07dd01b3e03751951784c86b7028c263e75daa7d7bd2774b5fd3ce5d5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
a74e5d8e7545f8836e9d4a0cb63052dc

SHA1
941d398468799bf0f1449ff55519e9a78319bb65

SHA256
0bdafa118d771cb79e3a3b53aa4717ff7b8beee2140c65dcfc98bb7061859508

SHA512
454298579b9c7128f1ef933d0d44963423244138917bb0aed425309f9c3e31e08191109cd977eb25ee85e45320e62e80b0634b12a4bbcd78b5ba309899fde4d7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
26e7d751f7f9849ada448f9e48c05fec

SHA1
d2a7d378e46ba44db00a93f5c2f1a66040cf78a8

SHA256
5fa170e62e4add1a6c2f67d1858100cb91748a196dda2bb0cc4db585108df9b4

SHA512
f2bbf2a4467d2ed94509bed67512f9b4969c52c18126550310d9a618daf051d73e76f288a4e33e0f55145b9db365113ae959d1c81b218d388b6d1ed66fdf4cad

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
f18278c3f24dc1c0cf7a140f9a2046bb

SHA1
a95b117d4dd519199a310d83b0f242df36f94d5d

SHA256
50fb8304777518cb9ca171aff8707555d9b4155e83c158bbdfe6dacf24881bbc

SHA512
e2060be16480c2b5ce73d562b85bc2c9fa325c637b25115ba100a02ed3d8f8f9746227fa759ce6fe69c26aefe62129b649c2bb1b4f0e78fcae06818c4f471fbe

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
c3376e8a4c2f8cdf76be7c8b6695ac88

SHA1
ebbb8df1264b4179e0a1902884857f106fa304d4

SHA256
ffbe6d19d09b85f399cbe2c6f9e7a2e2a7e6201e92c605f91bb0b64460f4c7b7

SHA512
0f2869ffff9121d287dc3dbe217cd792ead306954db68412e1a2f4603f330e3e600daf5e863ee418620dbd60f5a3cf6eaaffc6dd16dc083d9f9670da86b3b6c5

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
0c60f850150473706facbcebf4ab7cbe

SHA1
4e9a95f566a436c29c942f524ef5fd8427738f2a

SHA256
00a06975e1bfbf361aeb206fcfd7d24f416a7422153b26f7b393df58d5859892

SHA512
710f29c438db7996a858169440e882a03859d6802fa40dda5a8cff91cbb08197d1b9791a7dc773e127d871526f43afb32eaa633a254d8761d24a39d9769c1697

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
231053f0f075841ff9c91b3fa9f47709

SHA1
c6c3cc06a70d9e4f4c1f8df6250e9f017b1d4fbd

SHA256
b7fe8974213be5b68c82ac65712a2c7aa3f5310eabd3187182667f03e21b7e3f

SHA512
0b6b1111b0c86f7cc7e022a107da4ba3c17aa68c7902ac4d02d908dae6bc0cea2046646c1d6decd17fd541531f413ca15b27f15950b6c8936b04c62728e03d1c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
8af2a8a9a915cdeecdfce6f210c00a1b

SHA1
c5b2b64548ccd13886fbf08558f4547f34927e13

SHA256
ba208f8941a7b61fb9e4cfaaad14983de80a7a437b5e7c31e788e83f8d46e79e

SHA512
026695fb4b1eb04c40fc27bb1528c51472c567d74e8c12789a63946a7535ae19c594bef3ea6b797f98c5954c8fe80c80d19063942d848b892e4952471cc6ecc9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
d6530a59c5e7d8706d5c038a38d4b60e

SHA1
ee882a491eb2b4aa783f670a35aeb3fea4f85af9

SHA256
00e6c9e7d77aee606c8d2cb91f6d4cc25af08c57859e197c5c01a2178fda2e71

SHA512
6f61b455ee15baa1a07b73eb3fb7a7056550c3f1726303773bcd30395ea942ebbc682f3f5862bc053006471f7f6ca40da7df96d828d26bed809da2e56e1c4fca

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
23fab1bec0c2c2c9a847862de1fb3a20

SHA1
637198e8bd354e0ae5d5469bf9e24541eb4243a8

SHA256
dce5ce114ec0ea93d04a4d015637d9249983bd3ea3bfa1986e35dd919f7c218f

SHA512
94652ebdbd5145efb3d348f2ed1a991f7c204dade9b2c45aedea7eab2f3ebf42de89da12ffdfe3836ae3bf34a63ada6712029f64057d057ef854f1f2e9ad4f58

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
e48686bba9d4d32a4a6a93d6e8185fe0

SHA1
c8a184da80e55745d3b9b8cb515df078f3f0f640

SHA256
f079597aba72837fc7cd51add7133e3ab45cbdcdc74fa948af370f1aeaa6b9f5

SHA512
00f55ef793b2039b96f4f73c888f5511d1af3685c609c1984c7d95f40bb137953dc164759b45f611287ecd556d6691d4148e7a411230f8d735c603ed2c16f13e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
9KB

MD5
dd27514daa94a7367b9752266e82e300

SHA1
67e072379d61586e369c2e7511dbd771d294d5d6

SHA256
fbe390b0f51e7ce842c7bf89a68b8a57654cacc44fd1778a1ac796d1a7f1b384

SHA512
d32ffbcf074002a7440012b01d8072d634590508c69d47b81300796d6393e633f698ff40c2c1cb35f67ff2f6b427bb4881b70e777b73204b366c5f384991e98c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
850d2753554eaa67ddc8c23ca87da83d

SHA1
3440f49786a306971496650b660235592cd5e04b

SHA256
61198ecc9a38ba41b3ef6377b389d2c144e990d4df54060aa49afbcbf84818a1

SHA512
bf0bc1cee3408862a40e2501a96524700e2cb72ff3144ababc7c05e8e679a4eb0201b0b72a83e8c8ca82469996d0da0f9a4d7b5f761d5dd1ec5ee57cce8b4b9f

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
116KB

MD5
5055c59b98332f5bf1086ec18c53c7d5

SHA1
d869dd10b551d9d633ee709e9885fe98e68a9d73

SHA256
ebbeb320c31bcbac61d31a2291b952170bc91473dbe0453a9a762a4013bd3261

SHA512
a9a9dcef27b9a598da609286fe0c81b023769488562e0b62af6e347a77141ba53672fd20ab57c34e5d1094c24feb32a9f7aaa5e9f53027ee397bab7ef3bf16cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
47KB

MD5
0d89f546ebdd5c3eaa275ff1f898174a

SHA1
339ab928a1a5699b3b0c74087baa3ea08ecd59f5

SHA256
939eb90252495d3af66d9ec34c799a5f1b0fc10422a150cf57fc0cd302865a3e

SHA512
26edc1659325b1c5cf6e3f3cd9a38cd696f67c4a7c2d91a5839e8dcbb64c4f8e9ce3222e0f69d860d088c4be01b69da676bdc4517de141f8b551774909c30690

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
62KB

MD5
c813a1b87f1651d642cdcad5fca7a7d8

SHA1
0e6628997674a7dfbeb321b59a6e829d0c2f4478

SHA256
df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

SHA512
af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
19KB

MD5
1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5

SHA1
6dd8803e59949c985d6a9df2f26c833041a5178c

SHA256
af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725

SHA512
b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
63KB

MD5
226541550a51911c375216f718493f65

SHA1
f6e608468401f9384cabdef45ca19e2afacc84bd

SHA256
caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5

SHA512
2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
26KB

MD5
5dea626a3a08cc0f2676427e427eb467

SHA1
ad21ac31d0bbdee76eb909484277421630ea2dbd

SHA256
b19581c0e86b74b904a2b3a418040957a12e9b5ae6a8de07787d8bb0e4324ed6

SHA512
118016178abe2c714636232edc1e289a37442cc12914b5e067396803aa321ceaec3bcfd4684def47a95274bb0efd72ca6b2d7bc27bb93467984b84bc57931fcc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
22KB

MD5
cd5858eda3fbcfb4f09f89af68f1dd04

SHA1
614a4825946ee91fb6a3028ffdee7138470acf21

SHA256
8371b100cd6ef7df04edea1c268777780ea1606db2579cdd6b7ac82bcdde4d0c

SHA512
71bdfbb60e9c5ab55ab65e97c40e8bc586b2539103cb70b84838e4f92374871fd860cc41e66ad989ed7722eae2d43fbdd6a46d02be158d841030832a40e28efb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
43KB

MD5
bfae1cc2fc93bfffdaad3119b48f1b5b

SHA1
bb449d96170aebe132e33a183eb76eb515c921f7

SHA256
58b57585072e1295ea212f888e0f30379c13835cfa72cb8dedcde1850e141d75

SHA512
6f2c43f338ba07c65767ae36dd8c933d8572fdd26941ba65730f271edbbc2870dff5ecf3eeeae798a376b3f3519b0ffb3c3c09713ec3e8a1ecb5ad1d522b798e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
32KB

MD5
c35d34510f17378ddeee4fc10dba1d4e

SHA1
96cf79daa2d76939f4dae2858284d256a11ff2c9

SHA256
2d19fd7eeac38851c9f5b8077a05d3f7639009de5821843e9b5b33ceadb0df12

SHA512
a136dc9223c289fe863caf66f5500fd2761af3353b2097d56d868c50005acf4c693f10cb3fb2de3c6acdcf8143dca2a7fc8cf6171ae33861b23381d8306b6608

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
23KB

MD5
8a73481d84fefcfbd02b0af5ee953cfe

SHA1
94ad7385bdb8fc198487831d7e81079c6a7f6594

SHA256
0229fd4c950cc9734c4ae73c812d3b4fd779513f3f93a9d968d2857182aa04da

SHA512
7ba39f12155db3fb4bf63cf8a4c239719b5644e6b8addfbc679f4d61931b56460260e4e7ee73f960b4ef2fd437e0a2bdccceb3c62f1f2750f838a71b56f236eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
105KB

MD5
87a40eb7c52bf8f777aaed39910e6d01

SHA1
81881ac9973dabb11b5b1999f29e14095b70f243

SHA256
522ae2c8db49f21632b0f941ef5ed0f84508402abd959ef11487db4856e27203

SHA512
3966f47ae0a894d598d2ef8a0e9b25805f46a58fa9da07fe79a7aa5e34e7010d0c71c931691c74cffd1d3b6fd715e4fb98a8ebec3c735bf44f4f9c71682d440b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
102KB

MD5
ea0df10608f2905951688da54cd60a56

SHA1
a247c53df08f9a18919162157b4c663449993880

SHA256
673370454d9140270098246d2a894c5ccedbe58872ae23743719c9edf4281f67

SHA512
578b508a6ddc5cc9322f21c30a1f0e98620bdd1f9bf04a8cf1571eaf6f70dc76254f6d93847ff3aabaebd9bccf828a83d64a491907d3dc1142af3b660a570918

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
131KB

MD5
b70d9c30ffb6b1d6597054b35f18efcf

SHA1
bc23b87ca150c2ba12b0b80490399273de240635

SHA256
00652bf0e6b40fbbe7938ecaba9c8c0a1a57072e2cc5ed1a558fc664bb29a6b8

SHA512
263cd21925cb7e4f017f11bf4c84a18d29f218ea6281f08a2ed4108ab389343e43e123279901041cb02609d91cad3d19be8353fe369ffa472bb20d1c100ba1e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
97KB

MD5
04ba12d13605966225a5a214c16f09dd

SHA1
2d391b07dae946841b4ac4f7a4af35e2789889c2

SHA256
b369f28804c832f384e677788f40aa1ccb7b43a875f86257851dea90154e7169

SHA512
4c9a27d95945ade12bc819434599f22d11d3a15e4e695e960cd56c359b56502cfe24005ea3cd6740a0822966c6485604b21bfab99ef45fda7b8052d2623e25b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
60KB

MD5
64fa5954c534d47c162e7855f8ca8f5d

SHA1
4b01f58fd07b72e3af80779144f0d3990632e62a

SHA256
5956b153c63469f778b53280ccd35624c33625f69e95cf01c25d4f1a4d1ea349

SHA512
e7def3552526a152db7b19858e7ca5795b31bae277ae541f5dc0a4f967e185b8dfd5de46c6b2b67823e0b2751794e27a8af6fcd222a89e2f0d56384dba71f9ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024

Filesize
27KB

MD5
bc7321f62fec1792b4b4b06eb70b55ed

SHA1
1ec07a8dea6ba3e7cfbcfa03fd41e4fbcab88d80

SHA256
4568f3217ad7eca8b87555678b82e4fe003aa5df2c4dd7cd27f469961b3bf303

SHA512
6fb01025e6d815f26047d4f2c0eee18a992ed550b73b4d23733b2d00c70827e1407828986c2fe13f2f08a991dc45e555177199c7f226ac5aed5323bf5436fdd3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0143edd150d6fe42_0

Filesize
2KB

MD5
a050f0fd00974f98e4d6a1873b74acbc

SHA1
3611a60c181e02d3fdbb8e4b9e5aa85980282b61

SHA256
05035bf3cc30d4956c67eb896dc3e2914c5e3d8ba9da9d9eb314681298122cad

SHA512
4121b2555a3e98f2104fdf8c2c34a1d74398b2bcf196fddd0bbf5d05f182edaca1cc051d8a3edd0b1ab81c5be55df049a7edf91cfbe37db3c783f706050ef9e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0720badf6795a0b6_0

Filesize
3KB

MD5
2711308ab6cd528d3c6c6f8aa197a917

SHA1
8747f9c7229e7ac74a5d770ac7a2321efb4f6761

SHA256
e9acb2bc1cb78a1865ba079a74a753a34d7961f984f03a02ae162865b2fa1b85

SHA512
608b19cff1e6dfe30344d2a55c773ea23cbfaae33c15928d4fe43bd65228cbb0684c1c959af464f2a35f60879a87cb8c4ef5aeddb2703db563d932f2080a70f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\0bbe00d9bf7b798e_0

Filesize
5KB

MD5
6ee6c4f948a2405d014e8a8f9c049a82

SHA1
4efc1b5c720dd7a6018ef5c4e195e5579266cac4

SHA256
81b6833ad3e21a8fd0b37382b90a8c13dcdcc0d0682146da28f0e12f5e2bec52

SHA512
d564757542774d4ce8d1dffa53ec49eb50d36a0e17425432c1d7170ae0b245246cdaaf7bc89c4813c8a3549a46a9359616ccb7852c618c6dfad5ef72f3700d52

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\14ff8116b518ca2d_0

Filesize
2KB

MD5
0cf4f1b7891b2de6208c6c995533e121

SHA1
bd447352b8c8e28bdbc41e3b3eb77323502f866f

SHA256
3444f2e09fbe5a81bce4041a1395e2483a1a1fb7224b9f3725b807cd9d575715

SHA512
ed14345c18ae3bcb89f67514c624211ed4d681be06e15e0f80ab3ada1079785c2ed8d9193b9eb66d7cf0e901bfe88e34f8de9a299c436b3dd2d9e69c98a604cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\25c90b4fb1c6ef85_0

Filesize
1KB

MD5
68b452abbd4b7bad7d2f0549fb3f5141

SHA1
11dfd09826ae148f6e159b51797a7b577e505df5

SHA256
bd637d9358275a319d6d45bed0ef2dc472d8350d23ae341e2e400c0cd40a0d0d

SHA512
9d2f178d31fcc8cd87f658e65a6a5f83627cf3d32add27b77187b8ea7d59ce63820ba1570a32042a6fcccbc3f2331a76465e83fa0845767c566438b43d88ef3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f4680e8f8f8a14f_0

Filesize
13KB

MD5
d1dabb74e0eab228bbdfb0caf219c961

SHA1
de12b9b246ddadfdb76a0b720fd1545442fee169

SHA256
bfab109c6d1d65d3c14077e3105e36654b5f73ba444651ba7fcd1850eddb75fc

SHA512
5cd7f1973e496439906ac3d1bb92d452ed754974a64b0e3bb033271f37dc83bc492e04061d3d5f32458cab9f03de4866fca224a33b38557470897bc99891a80d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\37afe38eb817b647_0

Filesize
38KB

MD5
1a04fc72f385eeaedb03a680c13c2e62

SHA1
78e9f8e386bc7bd5ca6770bc2ee7d72dd1ed0e71

SHA256
f81e98f938e7f0e49305805033e07e7c324aeab9dd53ece9422339f6d1f14081

SHA512
ff77941815c0e5fc5466133664ea65f2fc96ce6851700b31a06c0e10aa84ef9f20169686a184a712123965a5197d45314e935cfbf31c1c81357e3f9abff0e914

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3a4259a0181983ba_0

Filesize
22KB

MD5
947c9c78b49b4fdff86847d0b697b8d1

SHA1
4329547dd89965f7754d747a61346860797f5fc3

SHA256
1c5d7cd9f53b57a041458d529fcd83a3d62d473b531d2dabf1e991e71f6c6c86

SHA512
d57b9c2eca63508621d480d42c47915a102ba1fd39a1f452114eee2e781e48f92e1f074e1d55541bd5a029dd977ade09d012bc03afa0c5ea162bd9547e8fa6ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3f139f229e6f0497_0

Filesize
9KB

MD5
3256b0ac967b2ae13242b0dd70010325

SHA1
c33dbdaf5188d18a6a02bee13b53abaa186d3c37

SHA256
b7750d72a421215855f29b7064e12ccd4bedf1740374a3f27333ac81b41ccb2e

SHA512
f563b7fb9a5a264cb3a652e5d1833a4fe3094ad25a486026d944128fd74cb9d928fd0baa6b2a6d692efa54f80afb5a9e097731473958ca9eb4facc5088523829

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\45a16ff6d0d9ab5f_0

Filesize
1KB

MD5
3a5d172026c3bd0edf570f31ad02b720

SHA1
f4d1cc75d4db0719f1ddafced612bfbbacd35c58

SHA256
565d0d955f51e2b5fd745925847397a8c3bac50f8f45dd9906418df6d953720a

SHA512
da4b8a9004f5483d1e1ce682ba31217882be7e9a8a049f83aa5bfbc3e3b5f9f7e53f5b1c576f6a92e758133ba05fe2acda33aa07bb1abe0f2abf94cdf3a2a64c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\4e9b18b0f66a7183_0

Filesize
1KB

MD5
43c21672bb9e1f5e136bf2cfd5768409

SHA1
274152dc27124f4080f290f93ac23698e924da19

SHA256
b172d16a6156a1301fbeaf33e87147fbf2d2589b1cc7de751c29a1b2de09deef

SHA512
27fc9dbfcabb8734361a38b3d9db417d058144fa3ad40daed93a8a6c247a1e9144cc6d65519478f106e3181d9659306181556790874cf2a21bb46d8b9fc51f8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\53ac5abc87e80789_0

Filesize
3KB

MD5
51239b1c9c58fa384634efb9e7e919da

SHA1
78665bb5d6c390da79e133c6ae95b91b1543dda8

SHA256
67682916d4cbcd6b93eccdb561f97b21d22466b72c340d6a92e27865ba58ebea

SHA512
d9f8fdd55f785d17964577bc2877e1f690a1023f538d728aebb1a513325c146d373b1c149ad3bb84b15fe107ebdec253ecc275e661d14f0277d76cff65ff5e98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\5dd1e579c9681f95_0

Filesize
2KB

MD5
61ca36ce26847e4f0e848d24c2ce3e0f

SHA1
56f9663e536d4e31084958ec3f7bdfea1b9227d4

SHA256
a75e5baa0a3189560470b2b7f8ff94e82b33b0efdf7fb2486e3a0d7f5464ec88

SHA512
46470be6a911ae71ea909599166baa05228a6dcb62aaeaf48c2ecf459b282a170aca7af4908ccd175676e2df57d5c65c7dfcb7d11ac21cf99be12a24f4836b09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\61a0b4d20ae0e222_0

Filesize
14KB

MD5
eba9c045f1d1de48ca5e849d9923aab4

SHA1
74b264ea674b4a1a272f21c29f2ee6a10e7adb1a

SHA256
a92b0fdc023a451d1eb593a4227d96cfa9300869f9ce168779c8f5e562f63cf3

SHA512
827f0b5683afee42dd5e3fa218e0b836e44590e441865f0f8181ed40ce5251669eb3607d2895f4d96fbaeab3a29c01704a3ebc6b2b14c5053b89814d0c400e82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\690522f4186477b3_0

Filesize
289KB

MD5
a4ba322ad571e740762a8ba8bbf564dc

SHA1
6821a4a4f51c0c63e90d517256af035f16633ec2

SHA256
b999bc2fa30496f4db0e4d8df42b139fedb5d0907cb57a0ee3b47743b156980f

SHA512
66cb1c68a9dd9ca8431bb1270101749a4a4a8e0fe18008e566213d3cdf55ffce3f67ba438a6a2a339520816aa59b16e2f97ce396e4ceb9e4128a7ec03afef9af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\6b1c3d6d62495ca9_0

Filesize
4KB

MD5
5f52d41cf0a2dbef825d43277c168e27

SHA1
c85be69edbadfcfae267d182a151b61d741ac842

SHA256
1b8c0b0b18448c4aeb58248d4fd1f3dd0d1feca0f9efdbe476edb543b4346399

SHA512
98fcd73d4f2789404a00f2a8c66ce50014d5ec7772f1a7f63da79508e0b4c393c9c7919764bd5ef9b96eb95fb1a0ccab20d68571e9218958c5a7c317d9fe0b8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\71d68e68ea4089fe_0

Filesize
5KB

MD5
923dc6946e5e294b2441954d227159fc

SHA1
af2afd670b8cf0a6b969d531656ce427bb6baaa2

SHA256
2ab642cf11190afb16e86f033586b856cc297b2e531abf448545b246ca619007

SHA512
87bb3daf5f6d43607ef5ee10bba27cfead93694f2e03ab417de3f51d305b6a98caff67017cc19253e44573bfe0045774eaa721744011efa5e4091a170d73b500

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\766094f4b47e839c_0

Filesize
11KB

MD5
dca1c1f9441750833f7b2d6b712c2f77

SHA1
aa0c24764b375b1e39b5a05d89415e02c78ea7d6

SHA256
119b4eaeab16388d31fdc01df4154b71db42221375d71ef6f7755fb11326b2dc

SHA512
1b9ad83aed71c0cecb5a0b550856f17097a5963f0e0f92b74872442dc17947a36d805f9e5f3963cb8ec50d090b035446d875672eebf63f2dc3250b0021329906

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\90d7d7591a1b39bb_0

Filesize
262B

MD5
19e7eb14a8f0a1fce6b6f058a4878c54

SHA1
4343900849ddd45055eecf5aeafabeb8fe61ebea

SHA256
36fc1b8e3d5d962132dfc3950191be4fce7b548a976448d6425e99f3a40f2dab

SHA512
799894e4f091de4e2ecbed89a666b225b8ff377845169105b20a81ac3b61b789c5271f9af64656377673a8a0a6c95ae9c5db0918fb27f073de94ea071318b765

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9dbb949d27873cbc_0

Filesize
2KB

MD5
1cef3b8085f1da3295a04bbb6b5aed76

SHA1
7ded84df532da5c99f9b2a4256a8f07f0ef243ae

SHA256
a2f35e8dcb1e67de796280d92245e71c5fecfe362b37708c5dcae873db7ce71c

SHA512
31e94b7d4661f9a443ccff9bc36d9f2c53ff13502bbf85d858d9d9b5f27e837aacc8cb6e3f38f738cffce1b33629d1cd1463e9b63a11cb642676709642160e8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\af2cfcaf6d9b18bc_0

Filesize
5KB

MD5
20c4bc15c03128fe4e76602a3b522946

SHA1
d5f242d8868a5f0ccc51b31a9d4db5be16b325fb

SHA256
70a7b230498a25f80b6dab62f14390ddf07b377e8bb4c26947523f513ca4942d

SHA512
cd251213b839c7cf881340bf6aab972e68a619926ac514787ef64334324c2719046722b12d6a95e49f5128825bab710131c143698b4c4c4483e75e6c72513a92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b1d693ac0f52716b_0

Filesize
9KB

MD5
db0b8b077c2e37280574107871a7bfab

SHA1
169f32436b1e1865ed8bb00af273f2b37f09d13e

SHA256
8ffcda090720e1a4512bb7717a234b5dc9895f105cc0ab2a6aa1a5006436800b

SHA512
96678618a3ce8a25b32e63b15e0ace0824ba22a0176e5104f8ca3b14f9c5d33cb30bdd32d2219a6342f70e7fec09542b69ab0643cfd40473757bb3d22ae6bf66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b3e82669a81c981d_0

Filesize
2KB

MD5
e562ab8a7c5ad20195583a24b2b7971b

SHA1
a57581af7682746c000e48835cc1514255c8d90e

SHA256
929b420693e7d2ffe69b29000b34d824257a43d9bafc656eb81f630fa94310c2

SHA512
e87872a0833ff0bad321b7161e2164bbf74eae678cc759c88a0791c6413bf65a231f20e9744dd20afc351098a5a9d0f00a9760eae634ad841465cc20d58bc850

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b76cf3dbd2f24c52_0

Filesize
1KB

MD5
002b1b7a3568776e201d18fca13586c1

SHA1
12b98b4b726b385f4286d72db809cb46b954b60f

SHA256
1f15d33c8321c0dbbe9fd44c29241af5e54d0384e83ed97d66d6c75c70947671

SHA512
c21fb15e9cdf39a12403598b076401b71fbe5a45bc2a97e0dc5bdd60094b6baf684c4c6f3a04a3d7515dd4c0a35d0f0375c7e08984497f6929a389adb833098c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\be6d12311ce2b399_0

Filesize
2KB

MD5
4de2e5c8b31cc5c8393f475e5d9b8bab

SHA1
d9985fada4297ea17e18c95f118e65ea463f35b3

SHA256
f30709090f6202e56319ba63517a74000b65e397fe857f3b440d849c99dccccb

SHA512
430d14484f718652be8943ec7f3f80456e81bc747f979f41b20490094c9d6649fdcd35740bbab1fccdc4c56542b0f4d4f9302f5da5209ccc0fd248f1274162a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bfa0eb97d24cbbea_0

Filesize
175KB

MD5
e1766081fbcf6aa2a193339a4e99afe8

SHA1
18d4657fecbc47bc3727cdccd609baa2110860c3

SHA256
64b49e42efcae7241ae650d9604aa3e3801756ea2f59ddd9720d55552d09a113

SHA512
b6765bf72076c4e18ae2c728d6bf862dc5fb921f8636255acf8887137abc2e6804e7f283da310aa5663a94884257291c0d559d90822911eca8e5965535c905d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d79e0a2891fc014a_0

Filesize
262B

MD5
a8a4f2053fb3b395f2c877b520c13ae1

SHA1
88926ef9da56e36a203e531ed65b890c39f4f211

SHA256
76d0024554cd21e6a0d40e46f5ecee8597b78d4d5b287bdf60acb077d4595d31

SHA512
38749cd726800ef11e2f53328e12350a19d511ade4a5b26e99311a3156d932c028ca28fe2b1b8f4990f7d092ec8ff44d53dbbbc6214d159cebaae7300c858d11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e239929a95f56ab5_0

Filesize
2KB

MD5
0bd1e794b2bc9fdeaa5e0416d12dba0b

SHA1
c1708e85a5eccd199f206907986755052396dfd7

SHA256
cb6cd749a96e8a03b6832926cd7feba0585dacc5f2755194f4fe3b37afb2ac6e

SHA512
f50166312efe3499df5b6a383db69eb5a99ef1586c611cc7e5ded6d2280f77fd528008b81c46fd9edda516975471f2098362ac4e70915dd2faf159d29f9ee9b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\e9c7e700cc3e33cf_0

Filesize
47KB

MD5
97d43f80b9e36c154ba4f6077ed831ca

SHA1
d3ba8a2e4cb1061fbfdce48a3a32e53c74c89a15

SHA256
a22d7e0634865ab6cfef0d96e435acee3b73c35706de5a163f4eed21448f914e

SHA512
935d58ed43e9601f4a59c873661a55c460e0d82de76410314f63f7fcf45fa71d95561e389af42e69b4d18426061046742caff91a8b4a2550fe03003e3cf1616e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\ebf8493d76b2bd33_0

Filesize
4KB

MD5
d828539557c36ff91f9d213401f91fe9

SHA1
e6ef1c1127f1f86edaee04c71490698a58267582

SHA256
1b4d3f454f9dbdc9ec1226e52be99dfd9c8a6d97a94668bf945cb20f1d25a59c

SHA512
ed47d14c896a6ae11a7a0f47e44bbfbd053c45989caec308fcde3ee94397798934039fd61fda8fdde92ee984956f3c32a502d686faa2d6a0b779f8927faf0324

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\f2e4bbad99a372cc_0

Filesize
2KB

MD5
15802d901f35151fa55642c82ac4b01c

SHA1
29ef7ae899dc13aad5855758b40f0f0c40f6554a

SHA256
e964da12f292812fc373958a839d577085571b3439b229d543941f0d12a595cd

SHA512
da6ca44205430f9eae9d6e1d6fa1f269c5aacae35f7c8a54a00e46d0d29e4b76b1a04b26459244498d4a7e3b549880c2c5fc25ee14b47f6a50ef28f3d88da347

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
fdc6f798b89649b1f6818d3d0be29d5c

SHA1
2c529d154121c6152d3888d54904e0302e359c20

SHA256
f7e3ae51ddbf1cb9e7de3f8fc05335116c67d220e6908d8d04a60290ade05a14

SHA512
e6316ee6dd65bd9657e6ea995669d57a8f8aa527ea6b866cee8038ec128b9b6c771a2e229579ff87739d3da769d823cd6d2ca4381881d661c15ca2476d31c406

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
78c989ea08ef5d9b80e7c27c608bee3b

SHA1
2d1f6284e21e7e5f8d1b326c3efd9545eb977490

SHA256
4817039d6fad4d1e951388624cc6948e0efb43338b06ea2afb15739e25c0ae13

SHA512
e413ccb904f50633fe4bf3259248a14de251b64926e6d0ecff7a876ccaa9bcd61cf7bb1cb7d57df289804cb6a2e3560175b956d6edf25f4b2242c7a1ca77baa9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
25246ae6dece0fee2629c1d7bd85f257

SHA1
069987b41b90fc6206404a3ae5d1476a46106436

SHA256
07be46ad7b88476074084226f3ffd88b1e610ef965b10d4f94d975d54691d376

SHA512
45df166f3c4135e7f031955563b14c7f48a7d77684ee6715e0b77ddda46e3273c2f48c68b7090a03b84b2ac26cc4d3e012f48983d4cf648fa2cd5a1a6c6b75d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6ff1dbfe9e159047e696cbae58d51357

SHA1
792f55089378c16a0c4a010c086034123b8f823f

SHA256
32be2759a704ca4aa189eeb46f8268a5cc2538f9aee7e43a9a0b21b46d97bad6

SHA512
dfe200e16a59f4b9b628e44b53ade9ca5264ae6124582cb938bff78c02a6b4383969e913ef3d598e9c734393634a3d00f650dc07d5b12d8344ad5787731cf107

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
44add1bfe808f9d0d5d0bdb5e29b4c06

SHA1
5b2c00331eaca172dde402fe876710030afb902b

SHA256
fd1a5a2e2a1a0fed05b360e061b79c8c4a1d1347f63d2b005ea3ceb3be53c4c8

SHA512
6eb5bc3961e1dddbfd0be05ac2718a049836b9ce9bf543a5f53f6783fedc4ce4a6dd854697f4aa52c0bd6ac0ee4a85905526447bcd8cbd7fd1e8ecacb7de6f73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5a84110c7f82ebf6c14385895b0c0008

SHA1
263e4d64ae56562984fc00fd1183be1022957eaa

SHA256
c7df955b68e57b46e65b0d0727bcb732fafeaaba2caf768d528b7b2add3d2c0b

SHA512
a824773b45231400ff2c8c43c5f008a250ce0bf07f37cdb745970c36384d9118c9ac39efc33dc49d683c1f8c7eda4dec5f05b2a0148c589b4956b9833d4fc57c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
d33ccec8845bdd4249cca1355baadb69

SHA1
d6cec5d5d264e7cabd7f3ecedbd120be1257b279

SHA256
b5f57e1f1c40599228dc5577f7318099db8f69d1a44125cf991f8e59accffeba

SHA512
bbcc5ddd960eb8611e55e30a375512b377870f6ac8286bb2c430ab5318d6094184d137bbeefe57bff6675fe02bf2d5a24ed22698e72cfe8ab4c71d69ad037ee8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a0066c43db0121f32800ec6efa5df6c0

SHA1
1dd2680f463333e96e546b52f0beb9532ded7af1

SHA256
cd1fb8bd802cfd20569a933a77da13256feec9aa8369bccb2067566cfa7ed1c0

SHA512
64a5e1228cbb89938bd593c64f5042803740d72d9b77fbed003d195c7ec4dccfd4e999563d9595edde9b76d5b13f1ad4822f5e561924e1368b1630694bee94bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
92d17b680f66530750924c9cd70e4a9f

SHA1
44dfda7364c851fb7ed79624f6e947e1ade14c42

SHA256
677a0d3761225bcdf8264b34f9dca2738dba42caf7abcf5a10011ba62f5a5dfa

SHA512
d4e9b6216d0ea9a722d0272c723fc42b391284d5a2012cc378a8ae094c9d2cb0e34447ae8218e4d18bf96dd86a84a26d95e8d1998586e4124cdf45f488747b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
1b3c18797dc8fbd7afad4fec805cc147

SHA1
38e4db528e0eff70a6cefd97bc9fda90fd8553c0

SHA256
e71000e61f2a3f48e75ad793d54bfe92533cf10b66c6449705790de27c0cc62b

SHA512
613b2cce416430c66dd6cae478ea4e35ca6de3e8d988f677cdd58c890ad2fc6de73169b98d914371ae95f9fbf38eb0b247209328dd837d863198cc5cf38d44d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1639850291b1f6dc78f0602acdf50802

SHA1
0593f54b2d17679aee44cf723ae7d01e168a0e1e

SHA256
ab5b54d435f89ce4378eec27eea7872fd6a82ea65a12e822bb5efd59b2e5775c

SHA512
b39a2b1297c6c64493801da1433c4c06f7d2e85aa21946990bf84f528978b1e0d5baac7eb489e718d26e539f0502ea984086646d6dcb376524bba9e975d9127c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8415ccb2a7765f08d23f9356df0f1814

SHA1
0c2811993dd0a4a4a8b2ea7f8c36be726eadee4a

SHA256
79bac7a4b178af959eee3799c5ea5f256b11d2706aff718f97a3e9f557698bcc

SHA512
c6f3bff17cec505d16a037f91e3aa5f53f927537f7cc3219788ade452a6b58821c9a79cf193e30d6ea30cae0f9f1b637b97a1a969d1bb68227009810f81d7361

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
41a5f155c62451034bfad25cafeb4d40

SHA1
6a367f6ad6c49bf8a9109b890b18afbf2fab6b15

SHA256
f322aac4b14b9eeb24c192c38e69990967b270a56625217b914ca05c809c48f0

SHA512
56a11bf776b8fa686d81a92f887fddbc62c80bf1ba31d9431efb5d92555752376319963ca90241bbea73fab6f39bb1e3843546f2371b94f6da73c0e114159947

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
974dcceb9c69c1c75a84b0f85935f440

SHA1
71166484e2db052eb82b33722f153f1d1989a0d7

SHA256
201fc85cedcac5f22cc60ece31dccc8efc5fd24beabd583523f76c93b2125c25

SHA512
ef82a62f4651b358a0f8b206b3ee54dec92c0225912cb1ab793512accaa41f7585640ceb85f4938c38c710195c9499fdb1e0236d8febcdec4104568e1ea8acfa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe585d00.TMP

Filesize
48B

MD5
1b37296827e4bc525a24dd50ce559716

SHA1
eb5b0adaca33c70520fab08f9b4dce7be1dd1544

SHA256
0aa3f99c90b3d33137b21c5fb836d9f503ed9591aba38523fd084787990f652b

SHA512
129c2abf1e04e8c6660433aea7912d8f9766e6d2d51cef08bddd04d7bc959cbde8f860f649786f9a8a10dd395aa5fd145be814682210f78c292c240f173e9355

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
479e21a9a32d2b8f59192fc602378ef1

SHA1
124e0903e43e044b22b6071f3dfe8c97ea983637

SHA256
98fc7d677b4141e8bb5ea5c9dc8e5f0ee73056412fe961c93755bc13395bc2e6

SHA512
41d0df8ff93a06d75a5f53bde8eebd503814fab92163e1ab0ea96a4e962d70c8ddb955a405d1ee214a8c3aaed9b646c961e4c5e89423b1deb859515d4035770d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
407db3ae874d5023f398b8856aadea57

SHA1
b188086b101d89695c105d9bac4b4d1a0228514c

SHA256
797ff40864970982f64546eff9c7c0eca5ddbbdcec66cf255fc734e4f85b544c

SHA512
5868595c8a8558d168d8104648460f64f2ff9ffd91b8c9d6489e691c16651dde9d8c8174a573a67a463e837dba866c777aca94f269cc88d2ac238991ef4c7d3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
de19df23584214ccb3460a05837580c9

SHA1
600cca2b0874018625a699d503a69fe7ab257a69

SHA256
1937d47a12959e81d72a76ff6eb88a37adf03cb44393fc9b98e447cbcc245328

SHA512
b42c892be29a870987cfbc8b24084de6692a0d6be3c98ac7aa1d3887187e6456928efdccedb9c89355d5c49e21b5efb6ba153c3bd9c8bb132f4d68c216f4debc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
9084b20c77caa21f1199d4ef81826cd0

SHA1
ab8f160231fefa00f44e5940553bc681d15fa243

SHA256
4cd147cdca5dbf78a4eb9c4e01ae05aec03c58c6b1455ee9e923c3c1250cfb79

SHA512
35bae210e35b56e5a20bdbbb0e8cdd9c9c4e0c0bef7c78bb4cf0153036f898160df8f68544e39fa12ca739071e9263dd289902efc35f002369ef0e41422e9bef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
eda012186eabdfc1db8a7617e92bf883

SHA1
696d5b647cf9a25fcb0e5622a6b4e38dae349e21

SHA256
df4f8bdce7c34a9762844809f46e2a3fd5e35e9f911df5014b4c84722589392b

SHA512
23e3365783d4f8dc1912f945ea5d1559391e725a659a056c613d634aeda7fa1e52e89ad04b766e8079a64d2fb7f7c791d947acf32cd74d6e546bac5373bcf071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1f187ed736377d7eb29ef5244f2ce0a9

SHA1
6800c902c7a4a5b7d0adb27323be7da4785563bb

SHA256
eadf1e1732aae39b02388836e4880b08158678adcab41941e66873d62a939712

SHA512
cf4d4bfc624084d22b7e8d31e6576e03a2ae880a2ad3f7d75e924dd0b378aac91b61274301009edeaa31a33d5691e4570b9dabdc56786ae6df15bf635403cfe1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
62a1f3a143c169835266b8984524e4b6

SHA1
cbfa73dcd8555912c4cbdda76f9fa02c31fcff9b

SHA256
2614ff0c7dab2dc9e6c01b1b0de74dec7b66afcebbcdd870b235f291a8b18511

SHA512
c18ecc42fc653bd8d3e6e742a663b44d95342de41970de08d9dd8b5712aa26a33d458bf8baf3dbccff8f6e8fa5f1b16cc292c846465ed10b50ceedd1436a7de3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6af7f6e059c29c264ba3ca1c0e6007b3

SHA1
f2f8bf7289dc7fac8f0e23cfc77ce4d897b3b227

SHA256
c487b539826e6aeda0e229464e5807e4111ceb6580dfcc7745910db886a8cc5b

SHA512
a928ea3eed6e8b20cc3dfc6d0e9c973c7fa1ab3eb0c4374ad5d98a4bf69f018b158f8f1831bf81c716632d35251a9c59189c64637c132ea1e11c53b3c85edc63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582e5e.TMP

Filesize
704B

MD5
d112b158607ec6dcec62a7d7492e182a

SHA1
b267cb53078c2623b0a2a92be80ddd5dc91ef2d2

SHA256
f66892cd0cef42451342ad7e9bd12d86524a4ee3dd8b38037bff4423a5d23a1c

SHA512
44db336ed32d9c43e26421382d6d37e6485c01a21e8de6108a32b9003788f0f516ea2b827ff30f61c78885e489988c219a4d260a983d09b7e6aafe081a628911

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fd00496be653ac20481bf7c087ceafea

SHA1
02c78aaf7bc7dd93fcd6243fcb249a282556a63d

SHA256
939c77c16be9447b26b98e4b6855946b2e2551dcd9f91363a128b6aa8ff04661

SHA512
ad1b09bd083b7c274d4e4335913bc1547cce2220ad1f1f43e1f041309b4204b7d12490e7c40f7f16c335aa14c71a050befcb162c37311f3b0ff17a611d31d8a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1097faedda06afb4dadf014068cfe3ad

SHA1
a054212614b265c550ac7b4105ae82c91674fdea

SHA256
77dccf7685de4bb728e6ec8d667fb6cc7bd00e6cca6fb88e54d5c5ec747e6754

SHA512
a811a67d9c5e5468ed3040b06166b6af52549f011ed958f386d9998398c7cb2bdcade58553a9a8bce3074dc47188824758e6ac12a76eb1b424a49955a2cd1601

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
86c43e9f09525d583b10dba0bd53bf73

SHA1
0aa5bd16ccba96c3966c0a1eefdfb57f9af1c1b8

SHA256
97abd35ea1a9e5f520b2ed65d952fbd7e95279c521cee4596a38c2bff7363d31

SHA512
3bb3e2c0fcb6a8abab78293d16620d2decd3de1cb70cec6571eb88290f41307c2e6b691aa0ca8f2f730c0a9cb51e71aee3b7204bfd5fbf68a6f595fd90e105be

Download Submit