hxxps://dashboard[.]rowifi[.]xyz/account

Analysis

max time kernel
295s
max time network
297s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2025 20:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://dashboard.rowifi.xyz/account

Score

7^/10

microsoft discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: usersOID0003bffe8ee81dc30000000000000000@84df9e7fe9f640afb435aaaaaaaaaaaa
phishing

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
20	discord.com
21	discord.com
351	discord.com

Detected potential entity reuse from brand MICROSOFT.
phishing microsoft
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 8 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3227495264-2217614367-4027411560-1000\{15926A23-94EB-44B7-BBC4-0C541F59916A}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Moniker = "cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-993994543-2095643028-780254397-2751782349-1045596949-3142982554-3368930949\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-3227495264-2217614367-4027411560-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.cdmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
1772	msedge.exe
1772	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
4104	identity_helper.exe
4104	identity_helper.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
2032	msedge.exe
5104	msedge.exe
5104	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 38 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe
2820	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2820 wrote to memory of 4560	2820	msedge.exe	82
PID 2820 wrote to memory of 4560	2820	msedge.exe	82
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 664	2820	msedge.exe	83
PID 2820 wrote to memory of 1772	2820	msedge.exe	84
PID 2820 wrote to memory of 1772	2820	msedge.exe	84
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85
PID 2820 wrote to memory of 2800	2820	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://dashboard.rowifi.xyz/account
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffded8446f8,0x7ffded844708,0x7ffded844718
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4596 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4036 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2760 /prefetch:1
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1700 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2272 /prefetch:1
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6248 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=media.mojom.MediaFoundationService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=mf_cdm --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5096 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=7000 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6352 /prefetch:1
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7196 /prefetch:1
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7488 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=42 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=43 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8148 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7408 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7604 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12424877235113192829,6652204677009120763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7244 /prefetch:1
  2⤵
  PID:752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1964

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2348

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
62KB

MD5
c813a1b87f1651d642cdcad5fca7a7d8

SHA1
0e6628997674a7dfbeb321b59a6e829d0c2f4478

SHA256
df670e09f278fea1d0684afdcd0392a83d7041585ba5996f7b527974d7d98ec3

SHA512
af0d024ba1faafbd6f950c67977ed126827180a47cea9758ee51a95d13436f753eb5a7aa12a9090048a70328f6e779634c612aebde89b06740ffd770751e1c5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
19KB

MD5
1bd4ae71ef8e69ad4b5ffd8dc7d2dcb5

SHA1
6dd8803e59949c985d6a9df2f26c833041a5178c

SHA256
af18b3681e8e2a1e8dc34c2aa60530dc8d8a9258c4d562cbe20c898d5de98725

SHA512
b3ff083b669aca75549396250e05344ba2f1c021468589f2bd6f1b977b7f11df00f958bbbd22f07708b5d30d0260f39d8de57e75382b3ab8e78a2c41ef428863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
45KB

MD5
2ca67d9f2114ab3aa3da598bfac6a255

SHA1
6c41c18db2b548dfc08b257c131f6172382ec903

SHA256
211233c953415e5c95b76381ef51adff252de3e068861ec64d2d992862d90043

SHA512
d61f7633437bf9b0bf89fb7e3427e4f643005455bb8dbbfd6208934f2a8189ada966c71bed9aafa5e4313a8597822a60782170d26eb044c5229f15183a641f08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000023

Filesize
32KB

MD5
2e287eb418940084b921590c6e672c9e

SHA1
1fc75a9daa054ef88aaea181f3a9b4cba2b6b6e1

SHA256
6c2c58daae76131a00d1bfee20852f372cf594be7f4a8848acc42f8bf72c1bbd

SHA512
a77f69571b0f04f4a2354d9e18e41ef86f22274eaed20c02215b632bfef09c6543a83591e9db3f2b4036a9684bff666eb6a7b253ba18893500e9cd541ab752a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003a

Filesize
16KB

MD5
12e3dac858061d088023b2bd48e2fa96

SHA1
e08ce1a144eceae0c3c2ea7a9d6fbc5658f24ce5

SHA256
90cdaf487716184e4034000935c605d1633926d348116d198f355a98b8c6cd21

SHA512
c5030c55a855e7a9e20e22f4c70bf1e0f3c558a9b7d501cfab6992ac2656ae5e41b050ccac541efa55f9603e0d349b247eb4912ee169d44044271789c719cd01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000043

Filesize
162KB

MD5
287772e593494a85380c80360c80e6e5

SHA1
e624927ec7a8f1f9d99b4777378bfce027d7d71d

SHA256
5c84a843e929ce3d88b26ea6c67c5ec7b64b9c4b1d328874378a40a448123860

SHA512
49abf34ed6786a05fcaecfe402246745168e80b9516c00ef4a6632e42e201702aa459598591fb0d17ca15c805f44278f0ee2742a37a4fda4f042e59282aef014

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000044

Filesize
114KB

MD5
43eadbd7f5721c2c3ffea466367802f8

SHA1
b7df16f00addd754cdacc801636b35b01ef56fe7

SHA256
b9a57e6c30e180d42d5643e5f5dddba8bcc9a1da20eec106b830d12829af6b7b

SHA512
3b7a1206a43955c88e30a4a25e528e79b56eda176ceecda595b6d7288fc029825ade02549f04e6c1072805a1146600997af0a2d0a29e0d55ecdbdb340c077c50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000045

Filesize
64KB

MD5
2bce88899973bc1d779cb98602c77222

SHA1
c81a836fc6b13acc3326bcb5947b1afa24ae9aa7

SHA256
c836cf11c10eebb5f1ddcc7636f3d09e436ffcf1f656e12663372f33ccd51cbb

SHA512
0d21e536c9f8eb89ec56f427e2e3ae0b397b34d45db703501c1989b674ee65e753956c09733923cd13fcf40d49d1269c121b1706053e6474868758b6ed1a5818

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000046

Filesize
629KB

MD5
d1e9d5b6d8c8cf9bb27ca91525955832

SHA1
a14da318e07f34675c0624530498de208327f421

SHA256
30d986387f7ef7e9634c3ff815100afa1459b76a030efa1e4608933aff1ba79f

SHA512
23ea87fb1d8a1e0027b46e267594721b655f7bfe286885f0162f32784339f32897efe39bfe70db53c9fc4eb4d48176e3836d5e9527772302f92d3d56a6d76e03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000047

Filesize
486KB

MD5
c728628b364608670bdd2fb700f63776

SHA1
8d3474015c5c987608180f3e4b58b588721d2cdc

SHA256
b2f9755aece8b11200f96f0fa4a41d3e2258e0b466bbfcea66453a15b6a1cb30

SHA512
2471d3c638fbc68e79a14a6d0d750c1a4c9eaaa651f8e4d62c77f98e00d91cf6f3d9fe65d310c485e522793766286142271059c2064916751c1b8d81ceee2f1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000088

Filesize
71KB

MD5
a09ddf538110d37d82e09a1932b08349

SHA1
6f88562774f23a1eab09d1bf6be1cc7febc81d25

SHA256
680d047083c17fc5db66f9e3cc5871bb49d6e8fce839c5446bdf4fa9f57b6b23

SHA512
02896ef9d468519bdabc460eaebcc3c5a99b057c4da5234ca094f33cc479eda7dd8974db514d80e61cab8f6d6423f04a6658f264b6dd2e7687233426ccfed210

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b6

Filesize
74KB

MD5
4c0135449b407b8eddc907a845713744

SHA1
13d4c6d31e6360edef56204cc99ea2c6f3bc9f5b

SHA256
265a3e70442b299d9d16c7312360147e82424d5897722e15302106ccd32b1f56

SHA512
0700629b8d18498386712a49f7e3397a4d84e228608e339fd1547087060eda38f95ad47e72b986c5fc99f3512e71a7a35319edf329a2fe2944c7cfe153121a06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
5918626c2c5196ee802c7bef2b9abb72

SHA1
99b0ef35ce5690e71730c507fa4168cb1c329e13

SHA256
28abfcfe6d195968e98a7ab512361403a594d88afefa1236c567436541d39204

SHA512
fdf673d6801400529626638241049056cd50adb4dde72ef78d94b7233229d97bc935b4e547e01e030e0fe38a4e2290914c8f0f578b2733573ef6e52770da75b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
11KB

MD5
d328be7ce690230f8ef978469fcfc6f9

SHA1
6212a764e1a0c01eb740db408e8c8f29f21c61b8

SHA256
9724ccb3897cfdb74abab9ac71bd10b30e3fb5f284d12f039bd2286bbff51667

SHA512
49d72f1fc90a5fd98f5282338359f79d7b381d161313705eec31eda3698313fa1b31c9de7700bf6f55e1bccd645e291982ef74b1899229919b9a0a0db3d879bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
4f171e3c8fd81705940c5d325a02667b

SHA1
8878d3be399f422cf41ce9e111cf0457a62fa451

SHA256
51b3a4b0f820aa189eb8d42146fd97162ee40d42f45c6e7f9ce4224291b67509

SHA512
21355a70101af2f3f66d4cccf0dbc84ee95e4ee804b24abc34303ba53db06b1f19ecba9e251e71875cb406212b1ca698ba9d249d3ef372f2cd3bc8eedd90d9dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_acdn.adnxs-simple.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_acdn.adnxs-simple.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c17b5a45a017f3e2d82d028405a818d2

SHA1
76fb47b3635c041e29caafcc7264bd375d2cda61

SHA256
de792b5e09666d805e8b8b7468fd19fb60d04d8886bc41a7017cd47de0872d74

SHA512
fa5a2209dc94204ec935a01eacf3b8f7804b5ab65cd929b01516b70e21d834bcde67c3a59bed1773e9e2531eb8754d38a3a48aa04d4b2f70cd00a71b75ca1235

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f2fc3a7357dd5cc2adfcc0e4cb9be67a

SHA1
e45aaf56b1ec59b62238959b49961ddacba671c6

SHA256
15348ec719cb0fd0e2d3d66e9e50f1a8648954fd923ca9c211c74ce37264ecac

SHA512
f77137cc9b65ea6c5ea04b218b946b0de41ccb6f74885a3414682b40f9abf70275cd96b5b1be1c06bb267630bedfd373bac73e0cb8813dd510a5122c4ce7ffe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
408e695d1f353f227a2adc48c29dceaf

SHA1
bcb8b6c899cf7f85e1cc473bb33982d133574fb4

SHA256
792a218d679b7df37b2b0905b4ca3c98c2981693998c205bd0f4dddce275cf62

SHA512
f5f8106789fb34b39bf91a0a74d713e41f11dd00b6d28116abda4c757f05492dd27fb923f64bf75d55b406bdba5c050c30e094ccf4ee0237275931a92f04a7f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
7KB

MD5
5d9d6716711c6a5544905c2225e04433

SHA1
cb48b070b09fa2b23c97dd4fe71bd10bb1e905a4

SHA256
ade2c8b4c75ca2264952bb630ab9e1602e677d49f878cc21c4b2771d46512055

SHA512
195e4ef073876edb290897a0458730ca297d31e0ba72bcabebe93fc7b5790013e08f7a115be1662613ffea8ac03fbf6f4a1d9bf6540c39499c9b8894e91cbabc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
995672877969db4d327ed994390e348f

SHA1
1594e01bd356809214b1f789d4cbcf0f9321902f

SHA256
f0f22edea001d5a4773d5fd1da2423c7dcf59ec6027621889d3dcb0f319881e3

SHA512
eae3b9dfaa1e3e8e22fce48a6d42b2f595ce1474010f44b3b18e73abb9b6cc303ab2d714ef2a654f65f4b9c2fd7e00fe918afe5d8733f93a684a14b6311aeafe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
16b109a819b08807052aa4e918faae27

SHA1
187d3660b30ba7b71ff1041eaf5ffe8eb6a0cce8

SHA256
74bbef4e8f39657c32c5055023788b607de5dee5c9d406d696bbc957ab68de2f

SHA512
88e882358d531380a1644cfa4e5b4240b4731da181f8dc91d7fd2635d32b9610ce8f937a51ae8c51d790181451a33eacb76d31e5560d990419861a1194716d1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
45d6b633c1207df375a6280562ad764d

SHA1
c53af14c42f9fddb34db14483fd2c90cce45f46c

SHA256
6548b01e627f012881f8beb9b80f94efb30f244d041949ba4e996507e559c4c1

SHA512
a1861e29fd9a76cc8fd164777c4ea398faf26ee1967672e8ad32b4e5e0fd987206a10ddc609381b2c8bb4d94eea901adc2b68e6947c7ee053d050ff47841500e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
502e0a99e3fbf5f2525a99cd0d3bbc12

SHA1
88e91d53d20aa4df17b2e14da26a5daacd9aa2c8

SHA256
e71c41631c7aaec612bc2ea4f17e35778019bca8dd9e46a31d5ef5f294633d0e

SHA512
3020c291a43f2e805e642f5a9aa876966c352fa56fff3d17e757278dc33c2d04bf1e3c0b8f47004fede0e9d2db04e7f1e6655653c858f340c068986d908539ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
12KB

MD5
720a58b803dfde1056171974bf01b191

SHA1
f495e202883e0e57ea25fbc2f0d0d397169a5b5d

SHA256
333087fdd3e6a8fe58a28ad6b1e9a3175aa2b0d2af4ec834acad581ff7883717

SHA512
b697cbbebba0cd99b01d96b5e9ddab789451571339ad4c538788657c451a0cda83e85766c27524f39067453e1db10ad2f3450018b16bb982bbfbd670b547b8be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
11KB

MD5
5715914740bc9e03548bd55c66dda5e6

SHA1
b1715ed3ad0aa8c9e4cb0904a80611cca1afd505

SHA256
3b2ba1ad6a03c10a51f2c496bc2ad17e7b0cce2d8dff6f03ba2f65680676cac1

SHA512
3aca531cc03428a4fa648ca26512870511ed89463e98e96f468294be8653bd8aca8d0f3919356549c7394333cacc6e0de0b55c8b94613102d66bfb0ef3ff0131

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
994366a1d091e8214c6370bcb3e3fbd3

SHA1
3b3635713b657319c9d2bf601d255e71a3cebc04

SHA256
8f086bc2f3141de86c6432f58b4506bca91d06dfe38dfbd9eecf7b9ef8c22f99

SHA512
309e69b7d6b465252869a667df03f46b4637a9721e61fb7c8a929c6fd8425c558e2bb2e766274bcc48976cf46e8435b16086762d58bcd7828c8ba4c0ceeaea0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
fdb9daea4f935b8a7a1943442809bcb4

SHA1
858298cd70a6c8047cf2628160d4b32c593f0c01

SHA256
847a87f5126f060e7aa8cdbc24650492a0c88aa2ed508240645663ac2c93afdd

SHA512
6d7641cacefebd7969679d18d51046967a3a5598fefa62c9407db575b4e1d8bb98b719ab6dbe9b637cafe9ea659871aaaf0fd15f05872dfe231075f090425b0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
104c99247160561ffa836597cbe31fe1

SHA1
effd9540a844aa772476d501a595fc326a29c305

SHA256
a93c5f70b7ea5c8ac70dba7bdb0fa8a9141205aaf9a94156bfd289a29bba5e1e

SHA512
229cc2616e4e4b34bb585567c76a2e7a27b001b0aecf475b9f00d652f46b6e70300473177ee04dc5105b977961567a3e236802e5221598783a0fa6cf56dbb1ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\080b4b98-f573-4776-954f-828eccaa3543\index-dir\the-real-index

Filesize
14KB

MD5
46ade92ea33995b3d4e43958965fe7ca

SHA1
9278073cab41172cfda40bc05e1e316db79decb4

SHA256
d3957b0b7e11c3ee6f791da804af30f2ac2ccc81f174fd6da92769f09103b07c

SHA512
c1f0fbac5963424f79be95f753a7445e5f79f695df71a68164fd40ea7d98b29205ad660b3d84e443b9346f9438b11b86a0a6ffd2e73fa1fbb53a0bcd8a3cd353

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\080b4b98-f573-4776-954f-828eccaa3543\index-dir\the-real-index~RFe5b1c3f.TMP

Filesize
48B

MD5
7209f58c15ee2dd6ea0914dcbf955061

SHA1
3816e7481602396da747802885683eaabc1c528c

SHA256
0b49fefc9c76a6dd82b687d1c67dd797c552ef5b6941ac5e696ff9e38a781390

SHA512
c84f19e80cea345609614d4d61f4115a7329da6119ddb112f32fbc57bb15c163a243f8ffceafcf086df16b908fc99324aa990c1d03d0919d3ddd3957a4d6bbd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\37b02afb-df55-4f66-8871-44bded7772f9\index-dir\the-real-index

Filesize
96B

MD5
98d2f24304c520b678d84d32df53c1ff

SHA1
d36253f3ac1c164d309d25620e2616dac94e2b3d

SHA256
829a255ff838a39d43298bd8e2a4b38c8e19cab1ce7a93ffba0e9ebb784182fe

SHA512
7b87981c72b1e8e4004fe40898cbf8afce2548517338fe2aab65e0a249c0188319839603d173d2d04d282dab4076f20fae2da9b58d2fb4e10f88f8b5ded53bf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\37b02afb-df55-4f66-8871-44bded7772f9\index-dir\the-real-index~RFe5aeb0d.TMP

Filesize
48B

MD5
7cf753598f10d6835f1e290dc88cbadd

SHA1
2176b8ce73bbadda7bda7bcc1ba0224e7ed1da67

SHA256
fcce60d0bf540a9cc9cae02cb9f3213595232df1ae7ebfbfea31ae1f6235b117

SHA512
2341b4069f94d2ed6118175ed9b439b76b71c636e90be0c39b9e3129da65529274970e40d3058fec98d02d3931e79970fcffd934d51e269a7ad97e7a9d5ed7e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\4d1cd3e7-1329-4124-8402-0ccfca3c5162\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\4d1cd3e7-1329-4124-8402-0ccfca3c5162\index-dir\the-real-index

Filesize
72B

MD5
fd5ecbdd96b486289f13dfb0de47d188

SHA1
062edd47d65ff2ee47f4c2d3270739749e7852ee

SHA256
8617cb68b989cb03d8f09ed8bea4abb8647edb57c711a040b882cfeaa1c1d802

SHA512
e437ebf0043000de3adfd049ca1f0d920901deee98e5ecd27798c48173ec77254943dd17109c59ec32ec417e75391d4aa6c5745c2e2959b704f61ace528d03bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\4d1cd3e7-1329-4124-8402-0ccfca3c5162\index-dir\the-real-index~RFe5b0f8d.TMP

Filesize
48B

MD5
a75be3dacb3b3a904f41b3d7068446ac

SHA1
f297e207d0b73aa9ed9f8884b0a5a0177c6754be

SHA256
f033e56e21062504cd7dbd9755fb47addd73cdef9293bac56601f3ffeb8e3ab8

SHA512
56a3a039f6af0bf3a7baca6d72700ee38460c74c35d161bc785a0bde93426eae6c32163b1974d60a7386fe0ea9ed01b3397e743a839717c84f4a2ca4de545ffe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\76f3bf11-4181-4eef-a496-5f1407fa642d\322ae1bdab361352_0

Filesize
11KB

MD5
f4d9af319cfd9f57a91aa805782f226f

SHA1
05f96acef22b74c70ea9071a41060f410febd9cc

SHA256
6706aa79533382a3282cc71085e2d115ca93452a46e56c2e3c01f653ed254718

SHA512
b1998290a394b9498821d97c8f5c34b9cc69674fb98ecc4ec47b611710c2ca570eda5ad971ab5541d2657851c64b58737673c60135b7479aafbd221396423e42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\76f3bf11-4181-4eef-a496-5f1407fa642d\index-dir\the-real-index

Filesize
72B

MD5
9d4a5f3dfd367defaa638a92e99a5364

SHA1
b71149780be25148555a11a6b8c9ffc1f5545526

SHA256
7f39df4e9e0c32294839d55ee87b5f0d6772a42f474283159660516cf4cf93df

SHA512
451fe94284952a0b52153ed52274c023265a1e272c08dc4fc1b62030e6fca7478a9dc7288f3951a9ab54764904439d5769d64ca0aeeb4e73bb22d97b1e5f73be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\76f3bf11-4181-4eef-a496-5f1407fa642d\index-dir\the-real-index~RFe5b2874.TMP

Filesize
48B

MD5
22038e111465416eb060d3a39263132b

SHA1
a06c2ea80e5b86a1c6d48a7b1d54060f06efa0ac

SHA256
3885561a2917e9f03197c278b5b65ce8de28a37b64294ce31113ea13c126a640

SHA512
73fdf1d7bef195d0ff503a2db503ef76997c30e54a25766cc8b028dfbb1d81caed3a63eb5187146a8a8d0fc19f26b2bd3cc4cecd94655fb6a17dc85550de670b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\7badeb7a-eded-4b24-a0ad-bda472e9dce2\index-dir\the-real-index

Filesize
72B

MD5
e9f4b1843c516c229d164300d1a33168

SHA1
9586026edf96ec3ee8c8dfece5c1bdc4856c0a5f

SHA256
d8d7deeebe7d2a773c242b4d2787719982b3879837397d75c7d294b660217019

SHA512
f94cf26c3568485c5b6f61545df1ed96cc32a12635513fbbcc2050c141b7a1b96ff33dc70821ddbc685b91107fb7d95dc1a0045dddb4122a70373e39bd019700

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\7badeb7a-eded-4b24-a0ad-bda472e9dce2\index-dir\the-real-index~RFe5b2855.TMP

Filesize
48B

MD5
c229e0b8eb0f33f01239cea5c1194e30

SHA1
8735eeff581bf36048bceb6378c4162d0efa2447

SHA256
70d5c56a23827b5d8d54758bdec15b7ed64123bfc9cb373c5ba29984611db589

SHA512
8f619d3a463be6716072293ddfcf4ee699d50d03d07ba0b82daba60b0686ac576552fad4285889dde4141dfc4cad223b731b35c097c8d5d782261f9cc7d17431

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
160B

MD5
92bc93214a93df6100bfbbf768da3271

SHA1
0cecb37df8b4c7c84759261885fc29ea9d34a2b7

SHA256
ab45034f8ddc6b331bc6fa65524e723dc1bdbf3dfd6c35cb1c7815b6bb371d58

SHA512
ab84fafb5051e107b82d36fad910dd33ffb74f58ac580529d264041ea132033796d7b0e7788194d703ded5173db50ffe3ff24f8a7d53991d03aa6a571f5b30db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
101B

MD5
1e069e5b5ae634e5ee03d1391b4ebcaa

SHA1
94e5da81c393c7fed99f58d12e7ccf4893203f8c

SHA256
d63054f8ae6d86cce506d1cc99a239b64a6ee6c9cb0431234b65da8e41f30398

SHA512
1a638434aca35929b333aee7e0294931a19cdc8aeefaf15f40e6a6f5f570426b05abe1797c2cd8a768f6bccf81221e86229987e48679d7b3da8e6b0e25aee39c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
161B

MD5
cb2357b01406ec68e846ee9f008edc46

SHA1
53ac57c34020cb19d34c365f4838fa89b0366e56

SHA256
b8f1e96264ca9bd10ab70cb33b4539055a831f6e12726867a1d85b90bba5e02a

SHA512
80c17ea2e7b6d3acff351e2ca7c1adf0c360983899e56ca40321e9abd6ee3a22500ee402ef0172bc8fc5528a781ca9e4d42bcc3ef1a690d04f32250b69ed7ea3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
302B

MD5
20ba2ec9ec8456cec5e827b51bef5b07

SHA1
b1bb942dce2e64e7978031dc6bfb2c0250dddebd

SHA256
4ff0478821dd436e698606af543519e363b90e2b1cd2abe4617089b8f2f88e60

SHA512
e6654feb7b293df6a00ce373935dc34dd1038fd411546f2d31e4e77fc8b9e368f6025c4b1cab4a587f00b1e285cd78dde805c403925ee11d25b108796fb3ed51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
367B

MD5
be98a44c1aac761313c0dd358755473e

SHA1
3ff143fe653f6338632d2460ab204590b3001146

SHA256
d93a85e7ac7e81bda1585d077df82eef50e09be5f8f1210b41a9d5ed6ba86eb4

SHA512
91fbcb00a38f3f0a85b764b08f38aaf50cec8568be6c303f2f66eb01863229bea672f0f306f7ff69ce41f099858af6658bf172478679b521694041d7b4c20493

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
94B

MD5
85abde755209ad39180af420f2a5a00e

SHA1
75d8804252da5bee1d65cc52f5fc72ebd6b5e152

SHA256
3e8996294d6d3605c4cdc3feb13c3dba59b8ecd81abdd7e72fa7ac06e8b4c235

SHA512
3d06e66370180709cd616537132c3d4f34307da5d734acd4f8d1945726bd009161b5500dc4ae08a994271838d670c81f51b8474888a45870cd53137f5c3a68f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
27B

MD5
97d5f65881dcf1370e0f450c74916071

SHA1
8356aa6595b01f1b3d60df82686d78c6b573c033

SHA256
3ac8ef666dc310ef3a2a6f90247aab7bcbdaf26b21147f7b06f1bd39bdf848cc

SHA512
7e5da137492e2d0f42cd6a7f1b36fdef012af3282eeaca25b3da50eeb5420b199fa65bcc6d3f67da371c31173a10ff06804a368872cbf4b63f9beb44a2d30f4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
242B

MD5
cd39833c1a75003c4919ea2e96194994

SHA1
8455df2f593598594c336d95877a723574dae99d

SHA256
e4ab8cb29400dd15ae502d17f7173dcb5991e3ff42038bcceb99eedfdb7d82f3

SHA512
3cef6d1bcb6292791c5bf9b0d5ed93da03153e568ffec1750d85cdb4c83e4938021265ae01f03eaaf9733fe44d47d138b9a47378becb11ba7440b7aaecfcadc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt

Filesize
362B

MD5
3faca7abc8f2a638827ab14328a8d1f6

SHA1
3f18ac31c35bd95fb90d42cacadac57e5919261f

SHA256
5bf2e97f38c11be9294f4e6bb58b6c71daac27fe076a916bcd656f00bdaf0698

SHA512
d83fc9a4cead4c3230090a506649ec487710a129146f27b860b9907c62b61b1e8f648dfd8cd72a3b7c27cde1d4e6eacf4b31bb66e0fe34a1fafaf113de34da91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\0f48a22277f64c442756e922770a3faedfa75bed\index.txt~RFe5a9caf.TMP

Filesize
93B

MD5
ad7696ec907ab9c8fae096bb71580553

SHA1
5857d78c6cba88188649aad4c9f565e1fc44a5aa

SHA256
580aaeee783b8b23a3c242e3e82d6186ce0360ec96a00ccc0e237e7292207b54

SHA512
c2b2d139ef58f43e670a658f3ac56ddbc04818f9f3423855c3d9a18002362da98a6abdf8b9838dbbbd5ee4853c69e27ef7d0db5d32a4890bd4792a3baca395da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\a7136f94-78fa-4218-8e2a-53de9f954e17\index-dir\the-real-index

Filesize
72B

MD5
0ed201fc6bd8daf7c7aea615a51da0bb

SHA1
8d46ee91f4ed3637c63c40f30acdcdecc3d7dc37

SHA256
8346aa200b540ad44ad16b5f23557c7c750772e296c6b69a092e57cbe9d5f295

SHA512
a15d66e7e1eed133ae7e49ac6dbaf3766acacea84105dc617357233fddb847a8dca815474455fc00a15520b9357c4d4293f2699bb984ad3f6dbecaf4540566fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\a7136f94-78fa-4218-8e2a-53de9f954e17\index-dir\the-real-index~RFe5b1077.TMP

Filesize
48B

MD5
a710bae28eba54131e47ef4a9d618a5d

SHA1
bbd83bf22ee7e92975812f1002ea3ec4cfb2b84b

SHA256
d4474f3c5d4593b102616fe7759a8520a8cd7ecd8f1962d0b4132f427d2d19ae

SHA512
c47855bd199477d9b2b0cd3506fb6921d1c987d61b9e83ffa08bee03f2ef6945c223ad8d4cac282039561386a1dc5fa49d0b4340c16a3329a1e5e3b5e6a8dd71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\index.txt

Filesize
97B

MD5
b3b26481f606a13eafe293e4d93b9c49

SHA1
bdb7a9a30856767ff3e9f08c147f6a6314577155

SHA256
d646b30b8dacf3a59c86f53a369fbfe044d3e84b0b56a6e4ad64ead3ef388ba0

SHA512
08fec6a125193922a6ae4e8327b14e097b52a531fb58b2c7ed1b62f5b7d9368bbc2e42fc11a97c057eec82df0a70c63a296aebf8946d5e230ca750ac3e262b10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\72978804e7724d1ec1769a0999d234ab4b7b3fc4\index.txt

Filesize
91B

MD5
96221ed482031ada19872a84fd755192

SHA1
237a42fdaead25d587259432238cb9e0c41d55f9

SHA256
e76127f3f768deb28fe28fbe3590c5e66f0955f2a40cd13b105b424de380499a

SHA512
e75de319e91ee8175778651f9001bae6f890558a592598b3a47f1a8862fbe231b16de8ccbcd9dcf243d3d93d929e830fd68065c72bf796d3b3ca8bb0c7bb6264

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
08af7dc02197c027af58141f0e0c9bb8

SHA1
1370e4535218561d80d62130a96ad5b2025f01c1

SHA256
2f3cbdf4d4648056ccf184c753932b8801e159cbcbc1455411ff6bd36f6f15e7

SHA512
a879346e133cffefaaf78bacae30a3adff7dd8cecbfdb2f695cfdba4e0f14f6417e33a5d472c19bf0296bacd4d235eb40e31abf7262127b71cde89d2ea0c2874

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5aeabf.TMP

Filesize
48B

MD5
f15035af8fdd603905760c27c96684ce

SHA1
8f55620cd0ec8eea31129730b8e054a048126f5c

SHA256
17655edd4fa5b708e5ab0553619cbd404813ef68a2791278e8f54560e6ce38b5

SHA512
cd3eeb66f0f95414218c77c9ac2db54d2fbf841f71dff626cac27cd29697844ba84658953d084017743cf61f6ab80898a71d21add2ae93139ed5558d6b989ebd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d0a5f1285b5c9a943ed7d2b564d14353

SHA1
14f90d2bc10408a64da3a7598bea1f0a2fd4c29d

SHA256
a00ec135d0f542e4154a4167e681a743a8ce4c5e30187e2f9ffe22d7567ad136

SHA512
a11750da0b0f42088d876547ed41bb735942e7b6e2a86243c3f56a3e365636684e6302563640dbae33e09983b271f85c32f4ab60b9be5d100be74b567f7413fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
d117649a8c25ede05b5d69bf8bbf0752

SHA1
81d989f76c19c163451f743033c97e168a64ac72

SHA256
dee199f88c1bfe9faed4ebdd6b8f4f3e4fb95f796630868f7b280b4fd7bccee0

SHA512
34dedb1e1c76fb0b9d1fb8f791f7963a505a6b3966b58554328429b95e951bb3304b5b7b72a9c64d529f5df951e44f1c3b0fbbc229a90dbeb7d0fa953b2227b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4c81fa942378d69abb66e7ad860b9b94

SHA1
264d671b4db6afbb3e3d41c664e99ae43642eb45

SHA256
b6574cfe1e7ddf3496500cf46c03c48f74bc229694a0aa5c5a9a6be3204ad498

SHA512
8dcbcc5a847077ac0885731e9537383ade5b9b807f0f6947c1cb3e0a01c26422fcd6a61cecbbf73d3a91511bf974f15966dbb7fb1e2b2b6b0863e844aa938295

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3a64814f7590087b7250453f535353b3

SHA1
c0871e273c484340f4b7cf31a6960cb5c5b92966

SHA256
c0446082ffc66faab6ec065855bf058622223db15616c2630a22f2af12fa3db1

SHA512
bcbf1f8ed127ef0079644849a38aa19eb6f220d4f5d5e8bcf654495ec1d1cf619baf69d894eda9ff9687d19a6255595f0f107004ec79cab7be36f9aef018f628

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
10c3de242865fc2c1963e74b34af8bca

SHA1
cdc81eee4e70c07e82eeb957438d78ec751f1d3f

SHA256
2585f5a17b87fb62b0530c63e8bed594edcc27a241c450b4dcaaf8d0aeff515a

SHA512
ac55da1e6f3baea9994e72525d188a0d06bc11720a35c79241009a03d6d2faca91b6dcb603cbd099af796039e70b933e57f62f3504b3341cfe9cff060cfc2a68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
34f6ac458340f2c0fc141aa58930e119

SHA1
71f486fe32129eab958a68247a3d6757070375a3

SHA256
fb43cb8939aef597ddd463e4980872be5c5f30f4b39a5e42f1bb1c1dc4448a08

SHA512
e55e5055ec6743dccbe58d901b13b583011d1cf0806eacdfbef4cf9c891a46fa9f0a30631a32ec8a6635d62c3f78311b115736bdb5f1c4efbc81fe6b2c7ad2bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6625e92cb193ea5ec7e499900950c3d4

SHA1
323482d29b81740a3fd5e319515202ec8e5f5363

SHA256
e6e4b28ecc070a552842b9f64588f9338e7b455ed6e25b32efc5cd8b518f366d

SHA512
9659875a131c01a866a0580b9989345e13b667954236c8dd6b9867853c31e89b84759d62233d1769db1a584bfbda5bc208508012e0f4dd9deced06c4ceb741f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
698532a6458b64d7a805b1bc2a67400e

SHA1
f3d7e78e5c06d9ea31a70369be3d90d299a90d62

SHA256
6a54071147f6d6c2fcb7e973f5bed3d8b2e7b3b426fdb7921e26984bb475dd6f

SHA512
98f689ee8ef65a649d00ca545cbc360d41f0df50272080c67968a40b6af074e31f8b3350ffcc5aef62d62bc0099c9664957aee475ae2125a6a5dadb85128aae2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
d83c55a9ee279c04d86b73ff471aa8fc

SHA1
d1dcf3b3c3a9fe1ba7b836ef330a2c8db0ad3387

SHA256
c3080160ce3622985612a7639c103485d800a2294cc7d93f0572330baa093ca0

SHA512
490e3e743af6c43f63983647f04010dc7195229e89e153b6ff2d692a98199417f6128c0bd643db1c5432bfb7cc213f26cad5930d73ac321c2d4d63e99881b52e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
f91f6a383269bffb16065a14a6f266e3

SHA1
fb784d19e1b4462f148aad63a64d7f9d59eb1e92

SHA256
1411f6f8292a5aad780026a7cd78bc2e39408a56e091381f8cccdaab00b96644

SHA512
d7a61aa8d0bd28c95aa0c832eff95fd7cac2018aaaa30b8f915549373aec892d111e2cd01a4da0ae79c023050fb85107fd284324a2a76423f42f0f2b7d962151

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
d15935381a699a3ba4b610158ae41fc3

SHA1
8a6f275f002c32407d6e2955d9bcf63e3926fa12

SHA256
ca13691e77e8d47176878e425c6cce95fae9756cd6ff0462fe2056d49495dd21

SHA512
616209f34b6a3332654a5657e7c5fed369ea525eb84481b62176edcc1263a6ba22d8564beaea4b98301479b771ca2512135696d863fa73166cf88ace93bde9ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
26acfd0b7f43ecf14d3a0970c27c7d03

SHA1
4c9bcf4043a7350c4969a1436e7911306345e406

SHA256
ee1c12b06329479c05fb303dd8e938bb33c79c8d7a893fb2faad763196cae180

SHA512
54235cc3ca3ce16b303d8f98c4704dc9c8cab76fc0c8459afd0aedf7de6c3c4beba1fabc8d845a0c94301c2d270ed791be4e3a71ac24d69f22e39b830c8b65f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
6KB

MD5
3cc520737d3274dceb55f1c13a7f6da1

SHA1
797dfaa430f25895b8b8aff29b43b265ab8fe969

SHA256
55f7eee33b5deee8798f213087fdc4619094843554e3496a1188edbe581f9b74

SHA512
a15919d019dbde85cac819475359d2d8fe7923aa86b29748a7fdc94ccf8e884e70ca6d2494e89946ccadbbed8aaf58c397030b54e6451aaf5590d3c9de319f51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
13e03069547555bcc7f3823f555a3cbc

SHA1
7b5172c9048c7febdbedbade1672db189218a229

SHA256
128c48df62eb3249f6c91ee22b996985e99e814e29ae78299bb653396164e0e6

SHA512
04045e3215a4efcfeb1213bd215d1835e5ffe9a0b718de6f43ab414ba379cffa3f5080785cbb03ce8e029ed9fd31dc2ac6816eb4d87e5b89e71aa287b858e58a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
a9f14fa899559cfe9c8aea6277d544da

SHA1
0154a7bc0da5bb58bfcdc55c94a451f353803f74

SHA256
5b6d3b1a22c04962c45e6f0793eb222f639e73bcad9402e1bc1108f04d3b4cad

SHA512
f970570c68a274e7f7036b3012fb9ffd861a05ccb8cebf57f426faf4676ce9112e2c0182f02a9aa0caf49d6478f098ad8b42225730699f5a1a8909bd6cd501db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7c6c045485d108ec8b339d630b79fee6

SHA1
587e5bc5418ef5a930477d709f7f751a9fd9c88a

SHA256
a7d7d7b5ae9a3e03324bc98eef21deb88e12e98949013ae936ec56fe490b6ac5

SHA512
0182f14fe33f4a979ae953bcce19620622f76ea65ed83bd6ec9e99fb74f9da26795734a98b94d912601dac82ea0136e0de00ad37271598d6aa5873830dafc3c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
d9836a2c72d6c3a8f5e3b1b440652055

SHA1
4a8f1025bec5799241b59eef37936d22a5a42b05

SHA256
e2f9b0683c1d10f310f77cd72e868d75fd972d605468050829a75bb1ad42138e

SHA512
a2a86e34c5cfb16978505366b7903b57ef2becc64523b15a694cae386aef0dc0c924c9248d2dc04b5e832f9432e68078659a80a7017d33e3b1afdd81ce156828

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58344a.TMP

Filesize
203B

MD5
491ccf5757984d277ec89f44fd62257b

SHA1
0a66e7207d3495f75a8d8fdd9402fe42b1b7f51b

SHA256
68eecf219573e451cc853173dc4cbf85583d03537c75f9229eec3240bba178ab

SHA512
20d337e7eb7ea1fa69ab6bf00e0d9e5942b47677b5fec265e38a917999683ed81e6fddaae9bf3314fbc174676b09a72a7d0d810195c4a1cd65fc3a4010f1d6a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5e464cd-9d39-4005-a453-66a146e45155.tmp

Filesize
8KB

MD5
bc8a4d0b424c560910a695283bebe24d

SHA1
7ce584c9dd54fb42e6d35b3b26baf7632f5f16a5

SHA256
e514b24ff4d55442d4feee0f52a13e8ededf9c59bb870d5d23dabc2ee9634d6d

SHA512
55b61d99c36a3b75c5744f0a2223342e17e72471fa02f5d92f965893efb8e07b2cb030e048fdfd9cba3b424b3752463fa880b806b9513f2d698cf76269c02d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
36f40671aedd89761428fb60852d567e

SHA1
4b397037c7b93e890ce90ea9b86309f022e771b3

SHA256
6106e4ef0b0ae49d360fd0150d45c8415197fe4701585bc3184ba42e2bc044ad

SHA512
a5109f71a8559489886b9f85ac739ba299c8568965572da3f490f3a5a38836cc958958927a01fbc53e693ee7ef3f563b8c33ff884120b99ecbbb98eee823e86a

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
8b05223a2996e9256dfd4c73353545c6

SHA1
0923f78bbba9a6246cbfc942728d09d86765cbce

SHA256
c3e07d34c98fdaa7e73d7f35ab52947ba0044fef6d8cb5f2c744cb5a759fe2aa

SHA512
c85f083a3ab97f86c863c6942138dc647f05b01b825a7eecaa515985a31759d2a312d658d41a37c11e63a2095713d756b5a1dd36c50ea3e940bf5dc9ba24ddeb

Download Submit