1df4978124b958a2b2ed9941820592443db912583de96e4a442c5f077c62ac04

Analysis

max time kernel
59s
max time network
76s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
23/03/2025, 19:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

R.E.P.O.v.0.1.2.co-op_02/REPO.exe
Size

651KB
MD5

37e2e7e012343ccef500133286fcbf27
SHA1

4b7e66039d04b14ddcfb580a6e6a395ea52222be
SHA256

1643ff9ed131adde7a22363f26d36308b4b4fb8f9ba61e5afce3b6803c5cb302
SHA512

418dcb69e506f42248c00459eb3fa5a576006fead83cb5372e5710a8e95265654c316bbb314e4b8afa69e393a7cdf01219b7e17095d1990ab418f0aed68c687e
SSDEEP

12288:c/744aOD8GVma8Vk2WbYq5qL7Lp4SKpRUzfBI4xa7iKXS:m9aO/Vma72z9KY7BID7iKi

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133872325906594834"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-869607583-2483572573-2297019986-1000\{310EDB62-01A3-48BC-9A03-690E6897FB63}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-869607583-2483572573-2297019986-1000\{3688FEF4-39A7-4E55-A9CA-E90308B2B13B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1900	REPO.exe
1900	REPO.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4972	msedge.exe
4972	msedge.exe
4972	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1900 wrote to memory of 1488	1900	REPO.exe	92
PID 1900 wrote to memory of 1488	1900	REPO.exe	92
PID 1488 wrote to memory of 4640	1488	cmd.exe	94
PID 1488 wrote to memory of 4640	1488	cmd.exe	94
PID 4640 wrote to memory of 4972	4640	msedge.exe	96
PID 4640 wrote to memory of 4972	4640	msedge.exe	96
PID 4972 wrote to memory of 4064	4972	msedge.exe	97
PID 4972 wrote to memory of 4064	4972	msedge.exe	97
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 2448	4972	msedge.exe	99
PID 4972 wrote to memory of 2448	4972	msedge.exe	99
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 4236	4972	msedge.exe	98
PID 4972 wrote to memory of 752	4972	msedge.exe	101
PID 4972 wrote to memory of 752	4972	msedge.exe	101
PID 4972 wrote to memory of 752	4972	msedge.exe	101

C:\Users\Admin\AppData\Local\Temp\R.E.P.O.v.0.1.2.co-op_02\REPO.exe
"C:\Users\Admin\AppData\Local\Temp\R.E.P.O.v.0.1.2.co-op_02\REPO.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1900
- C:\Windows\SYSTEM32\cmd.exe
  cmd.exe /c start "link" "http://freetp.org/6564-.html"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://freetp.org/6564-.html
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:4640
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://freetp.org/6564-.html
      4⤵
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      Suspicious use of WriteProcessMemory
      PID:4972
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd9a3cf208,0x7ffd9a3cf214,0x7ffd9a3cf220
        5⤵
        
        PID:4064
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2360,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
        5⤵
        
        PID:4236
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1924,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:3
        5⤵
        
        PID:2448
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2512,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=3160 /prefetch:8
        5⤵
        
        PID:752
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3492,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
        5⤵
        
        PID:760
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3500,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=3528 /prefetch:1
        5⤵
        
        PID:4548
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4204,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=4196 /prefetch:1
        5⤵
        
        PID:4500
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --extension-process --renderer-sub-type=extension --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --field-trial-handle=4224,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=4200 /prefetch:2
        5⤵
        
        PID:1988
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5128,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5140 /prefetch:8
        5⤵
        
        PID:1500
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5256,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5272 /prefetch:8
        5⤵
        
        PID:4996
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --field-trial-handle=5144,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5248 /prefetch:1
        5⤵
        
        PID:4580
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --field-trial-handle=5368,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:1
        5⤵
        
        PID:1596
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --field-trial-handle=3684,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
        5⤵
        
        PID:456
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --field-trial-handle=5532,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
        5⤵
        
        PID:4940
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5668,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8
        5⤵
        
        PID:1200
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5676,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5748 /prefetch:8
        5⤵
        
        PID:3364
    - - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6660,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
        5⤵
        
        PID:5732
    - - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6660,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=6412 /prefetch:8
        5⤵
        
        PID:5784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6828,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=6856 /prefetch:8
        5⤵
        
        PID:5160
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6836,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7016 /prefetch:8
        5⤵
        
        PID:5124
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7136,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:8
        5⤵
        
        PID:5312
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6312,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7236 /prefetch:8
        5⤵
        
        PID:5324
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6288,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7372 /prefetch:8
        5⤵
        
        PID:5396
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7504,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7512 /prefetch:8
        5⤵
        
        PID:5448
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7016,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7696 /prefetch:8
        5⤵
        
        PID:6076
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6928,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7664 /prefetch:8
        5⤵
        
        PID:6080
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --field-trial-handle=7896,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7844 /prefetch:1
        5⤵
        
        PID:5440
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --field-trial-handle=7916,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:1
        5⤵
        
        PID:5504
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --field-trial-handle=7720,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7716 /prefetch:1
        5⤵
        
        PID:5932
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --field-trial-handle=5032,i,5789020281198945129,1667518089369910598,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
        5⤵
        
        PID:5380
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        
        PID:5988
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x24c,0x7ffd9a3cf208,0x7ffd9a3cf214,0x7ffd9a3cf220
        6⤵
        
        PID:5352
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1896,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:3
        6⤵
        
        PID:5844
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2304,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=2300 /prefetch:2
        6⤵
        
        PID:5620
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2424,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=2908 /prefetch:8
        6⤵
        
        PID:6128
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4380,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=4392 /prefetch:8
        6⤵
        
        PID:3916
      - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4212,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
        6⤵
        
        PID:1960
      - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4212,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=4420 /prefetch:8
        6⤵
        
        PID:1712
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4596,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=4524 /prefetch:8
        6⤵
        
        PID:5456
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4500,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=4464 /prefetch:8
        6⤵
        
        PID:5216
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4484,i,16048896179796751749,1822792550514502306,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:8
        6⤵
        
        PID:5760

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:2932

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:5224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
049e5a246ed025dee243db0ba8e2984c

SHA1
15ec2d2b28dcfc17c1cfb5d0c13482d0706f942d

SHA256
33071ca42c472861a2fabd0f82f8b03ef0daaa6796b24b83f3df02587e4c3d12

SHA512
bc5f6fa6a8cae20ab40eae4552650d75f38ebb158c95288a79d9f332623bb507946513c39d19c00a5aee323df01f0f1a51c54594ef1c293289baf45f4ae2145b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
4facd0ff10154cde70c99baa7df81001

SHA1
65267ea75bcb63edd2905e288d7b96b543708205

SHA256
a13534df0cd0a79a3a1b91085a6d575b47d5a9aad7fc6d712fd2616c0e95a23b

SHA512
ad8d2b965851c0ddc23e92ae151b3b0b2bcda850c446f4278bdb0754d6b42ead8fc034b394749578a27b33ad7e4ab0633f974dfd4773fbe4d93ae477f00b73f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
695a7096180967f369ad33d89f5a5e81

SHA1
1fb7d1c0b4755597b5a633a10767e319ad620395

SHA256
7ed19dde6be176fa7ba06f2fd88f79af797e554255a2ed6a71e0fb18e17bf3e7

SHA512
8e88ef62fe187cea3fc388a163c74b0ea2ff6bc89d35387e9678e879ea9f350f01d5c3eff2b3e318a02f7f92cfa4daf48b594629d900f1c76c9b37751ff41114

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
96f1fcd92489b3f64d79e342bef48432

SHA1
7f82ec7e3ad31b26337d98fc178f21d7a6e33e43

SHA256
c76a2dd101f6a55fe05bcf5c24fd12477ac37801160f60b56f02eab56aad8eda

SHA512
f2c4dafac835de9b82f776b72da2cb9361973cb204cdaa6eba4169c6de0ec0169aa0960fce979e3a50fdfe6fa0a7f249ad002c1d5d9d57f5f9de0af099894db7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
180ccda510b07af15481b2ca5b5ee497

SHA1
d1d6bcd9def29fbe4f469be6972595fa4cc15656

SHA256
8d754f910a2ffbac60be08e7bc97b27a63726e7d3e40b9c314d4124694350993

SHA512
4912b7b92612bc12eb734daaf069f5896ef160815fd8e583e89eab962c1d60db3bff25da49eef7e4bf0c293151234681fada3287980ba68600f5c3e7460f92ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
9a4af1fc13fc3cb643214bdf5bfadc1f

SHA1
623027323ea9dec1fe475c305976defaa3b178f7

SHA256
dcf9c843ce22514c07789fe1acb8dd8f2d76c367379fd04e5f2b34b18484bf2f

SHA512
59e159c05ac6d2ccdaf279083b0f515549213de29cbd4257f37c4cb5ced67924379e0e52c5b89c576673e723b9ce399befebe712d2ffd0dbb9253b4ff18d26ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2

Filesize
1.0MB

MD5
02f9f575228ac3b4e4ad1bfaf9ac387a

SHA1
3ed3adaf28007becc7bd67febb3e1c7204358c9a

SHA256
68bf29bbb4e005ee86ed1433a0c2276cc823d01da524bdce51f62d4662454e11

SHA512
da73340b5fcf94dc574b6330878d6b5bf2861e30c28cbec3866bb41564882d8a8a7eeebb16853cc2de007d4f6bec7c554ed540444825dbe346ac751adf62c943

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3

Filesize
8.0MB

MD5
c24399e76e3af7add8695e449fb7f29d

SHA1
d6afb3b1a39eb8f6d03b26bf70845d827133f4af

SHA256
a62215f73f046e52518a198737b0804b049c0fb04e36d5a8f9b1e49afdcad5ed

SHA512
1fa97b0a90cec02b82ed8576ed4f2b19dd6b4fabb3efb7ef1bb5ead7e855583fa1507ea8aa04d8e1a6645956ca5d5441ef3ef248c39418b2df0359bc9ecd230f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070

Filesize
28KB

MD5
0129713e1126e8172f90d2db817e7a4d

SHA1
62975ba317f74e1b89561ae85874fd452e7d9c55

SHA256
6d95f110c9dd0eb17c9631a3ceb433d2101b06fad42b451fcefa7e66362ca893

SHA512
332b10261a8530ad1f8f9a82bc84ecf6bab844bf46bd35026a8ae347fc35492de595f7f0eb7be775533957cb0079e349f587f4b211afa4d66e6e66b3c71e969c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071

Filesize
29KB

MD5
29437aa5329bf07ac6bb168a0c5eb77f

SHA1
25379fcda70986171d1f4a2ae43672a6fb3c56e8

SHA256
fea76d3ce5b8aec49750cbf29df1a72eeeb7f993d43e67950d8cd9f6bb817a2e

SHA512
31689653354979c69815a3065c5abbeb93047a1a044bcffd5b9d09b7d1d9031b0d3909098d1d8b2cefab8dfa0be2da799f40971ee46b0c8a63e46713370ff754

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000072

Filesize
32KB

MD5
c05559d327088515bd01f80aed2ae44c

SHA1
088d6c41ec7e70b3a1dc890a7d7e6e1f47c1b582

SHA256
6b920dd6a3754a8137b9c95b63dfe0034de546ff89a5b2e2a27001224de3a6d2

SHA512
b6b4b02fcf78cd04db043b6b41965c0522329fe6f5c4602c352aa7bcf36ff5528e6afee36709a8613bdd60c64cebd4536cb78730b5fd762a5ab1513febf42322

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073

Filesize
25KB

MD5
bedfb4df06c07e2a8986178da5d15bf1

SHA1
852d0af9f27d57eb23cdae26a1b65db67c79d1eb

SHA256
cf457ef920ceb772ee533c6920d0e8fcf727b6adc3ed8ab83e36c79e257fdf9f

SHA512
16dd2003f39315575bb5f668086213dd3c0599c9b50a146306463b4f892654f6f80a16ec8d7d651dad22406d263d06d71237f20e0101d30359b81be142163227

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074

Filesize
156KB

MD5
d78305582449bebc77d8c760bd894e0f

SHA1
27588c4405b9621b227947629ec7c0f159df6518

SHA256
7f4dd59e044005f787e1d3b13f8bc09d4bf61bf15be3a839a6a47f9b74b3f5d2

SHA512
6a1f09c32142ceff92ddeb3f1db293e8d3ed089ca4603d7cd980e124d8173807c2c48c29a9a579885a9354a76b033c83cb653415840068fd21cbd2b462a8751c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075

Filesize
79KB

MD5
bea2f1dc44d05ab270991f3e95ba1ce7

SHA1
3cb8d53fa4dbdbd37655622f75343c5b4ef36a6c

SHA256
e4deb9514a9aa973ced4673b60e586b0d629c799c521025a189ef2b1c1d57054

SHA512
7f64bd9e20cbf9fc1b2d718de6f26af7e1ac22e630d8328a921134e2a34fc12ce3046c174c0b456893cdfc187df772b6144b141e58b0ddd8961d08968b3ae9ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076

Filesize
91KB

MD5
06d48f8d47330788d1710a87e4a06d83

SHA1
4d54329c90ac422e85592443b6975d1252087604

SHA256
f516f194186573f7e1ec18c808163e454153a9d11b54a7419506e36084523c03

SHA512
6477c147fae6abf5a505ae4b1ca1064b59406c2b575a319178375553baf8cff4669dec0e9baa1a217db54d5abe28bfd2b50e23f43a3ef66f27b2885de99d3bda

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077

Filesize
42KB

MD5
186e033558a22127da4e7dae2b43c239

SHA1
6188c7f7bb221c1639b2fe12d8f743e750903d8b

SHA256
df498c5c42c46a2edb549cbb2454131e50ac5c50dc28c8c3d07b0f22d9b8ab29

SHA512
87df525acccc3d9102472ef8279f7c9081ed5bbc5340f2823ecc8990dc6824684bfeda770b27a6092371e3e7dd5902380e0a99da2ab600501419d6a87dca51f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078

Filesize
51KB

MD5
32aaa2c79e0b335130cfb804de2d071e

SHA1
fc4a04bcbdd9938aec1d53df488999d7cb8829fa

SHA256
f6fb6cfd2637df7e21c4505ebdb9bc988ba9b2c9408c78bbc90d8856a916217f

SHA512
c4ec33f7f1a9da6bf825aa3dc71bba3757b0e24ca0836987a22f2377f90a578c4445873e12989ccee6fe051dc455e255253edca96e1405fcde3c9ff7fba30af0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079

Filesize
54KB

MD5
2824611f8433ad7ebca63f40dca15b70

SHA1
fbc457de6dbefed390792fe3444b74868e89ee6b

SHA256
44695c0054d50d76229d52011f0a2590d06a1f98506ea595038b61a353787dcf

SHA512
6bc2e9fdd57cd940b9e6c1f5118878575fefdded78579fd5ea702798f60843113198170a63be58bf5883a432d09c967d18ca4145bd6bac902a6cfeec9ae64202

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a

Filesize
100KB

MD5
5c8633b2b2fb53ede8e4f7709d2bd73a

SHA1
d42f057fc8c6c10474a035be1f0d37815e50d256

SHA256
0aa839ad70b4e86c5492fb95aadf12974e32c34f877b166c1a2c95d2e30a08fb

SHA512
b31c800d8216484fac1c75a88e108cb981d0c2316a028d8e9701cca5a757929ff55babe1c229da046344a84098e062d387f19f66e6df767c9e413a8c766fdc37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b

Filesize
647KB

MD5
b244f328b51e2e3504d0a56c54ad10c4

SHA1
422e7b9de1b72aa2723bde6153d6aa172c6056f0

SHA256
35e1b0ab4ee87a604fe4fc621bbf252c9c8258bbeb9b6510cf6d9957726041b0

SHA512
699a5b3bbd59762e598880e845e7ef5f091a8ee8d9e62d4cbd8bfa736d858cc8bc5b2df9bfdfc1a8b74ce8eafcea0c8a25770794c36dbf6fc7e57ee9b6a116bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007c

Filesize
34KB

MD5
02637a323441692541aa3eefa25b6096

SHA1
4aa7278ff3543f958772e9a08d802d22e7ec3b7f

SHA256
dd8bef0cc314a43230b8a9665b0a8111ed998cef4000ff379a167d1a90a434b3

SHA512
047d19a86832f3a1b60730e5a580c8158bda0053d373a0c345bc60458457e37abbd1f3c36169374f87fe29605f2aa79992647650ebaffec572dc50d458347e33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d

Filesize
21KB

MD5
05510cad664052ecfbf783996f1aa772

SHA1
ca8107f50d1dce822d29b0b8450ce300e05c1579

SHA256
fedd3858ecc86e16c7b11756dc1595a2b65f16a96d10006889493cc1b141f260

SHA512
a11f61581f7f9e6bfccc0342be8dc18149a7e059dde52762428b2e80ac47519dee6c8c1e3a416699b2fb903f75dc7cfe06de8a987a056a0aaff33e877fe65dc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007e

Filesize
135KB

MD5
8ae8bacff9b93219e20c3c3a0fa75e13

SHA1
2635eb27499da730393f0535f49c1fb5c7256cb2

SHA256
5e7801c6893eb7e4964962b913185527df746ec81fba359c273d3a91a6587e59

SHA512
e1bf58a3e8aa0a64f993102244cc17914cf3be0c657fbaec4419b76f381c902c0caf447de050500a5db5671b75f067c37e3861b531dac2f1c53bc65e7c7dbc4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f

Filesize
19KB

MD5
5e5ae2374ea57ea153558afd1c2c1372

SHA1
c1bef73c5b67c8866a607e3b8912ffa532d85ccc

SHA256
1ef458d087e95119808d5e5fecbc9604d7805ea4da98170e2c995e967da308f3

SHA512
46059e4a334e0a5295ebcef8401eb94b8fa0971b200f0f9e788ed61edae5018c917efd30b01631cbd6bdadc5240c9fcad2966ea0aa9c94b538bcc369e10bbbaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080

Filesize
37KB

MD5
3d8b7045500eb670b360ed89ccaa6daa

SHA1
67a027a0001eb1d1e2be932243a5ff5eb59a507b

SHA256
e8100406ea92ada8c73e89775698464a7d5afed9cd5d5b5deb8dcd8bdf29f9d1

SHA512
4c4ab3a26cd5cfd603a9d2803172aa4665c7833cfbc2b6c291502539709edaab60585de70487f154b1cce4f220f495252172f336136a6946c99f6a3eb135d46b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081

Filesize
55KB

MD5
fc6adb42f41f77376dbe548c1b78b995

SHA1
c24d8cd356dcc8778b3001530c2edd5b0c369053

SHA256
9fd6ca91b4840cd21acd8072f97235fc69869a344b70581ee02baa68eb16e3da

SHA512
c01998cf49f7b57ae59bae0f39d6da07a2f13a81978b1d967d143e1833761eb05003b7ff07861715298f921eac8827b3ebb548a5f8568ad3bcdd9cec3f5a8b41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082

Filesize
19KB

MD5
da8df7ddb6241301fd622712ec06f1a3

SHA1
6f6615a207843ee945086d38b7804cdb5f619b59

SHA256
5edc8acfc4868cc9964d166d9959bb6136fe3000407945a28ca36c688b0dbab7

SHA512
277f997002265fb61fd2245e375dfa5ae02b72bc3c436e7099c000d08d84d7d073bbd64b678aa1ac027c9603fd4134cb7414b32d7a5076296dfa5c352f9ab9de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083

Filesize
76KB

MD5
54617d5f6a619e7fb0dbabd25dbe26b5

SHA1
9101cef172b4d4314caa182e9ffc0a1992cb5cba

SHA256
96423e8b85fbdbbc61ac0a27fb805e4686fbcc16a57860a800b34ae324c0f0c5

SHA512
877dab03db1f76e57f61212e832cc259504544a63c2544921ae57f3d48e001e35cec9a1ca376e88eb88b72e2b9971486590550f4a3ac18569308c604ef157821

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084

Filesize
52KB

MD5
9d3729f376f4390ef55de95a57e884ac

SHA1
9ee95f2fe79181d59daf749b2959f358f0819040

SHA256
157c63e138ba230414b7e3e400fedf93ca23ef1f1dec7dd35b9a21f9129a5aa9

SHA512
df081d8d61b27466bd57d32285361e97bc11e74eae778c9c928db91ae9d5a3e98edec21317b4cf4b6c6c04e2755120686efed0e173f8b5ce3872ba5c596e42b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085

Filesize
21KB

MD5
34bab7e8f85684ff8eb66d9ab091fdb0

SHA1
da72893e462ac4465e42bc73b7431241e64abccf

SHA256
34e8ddc32161085b0a21111a6d1a598f26115bbc76f7b8b70240898fffd1b06b

SHA512
bd47f6392c52d9350db1e5b2e79dcdb3b7bf1c0e3512489cc8584063a3cf115beb57feee9fa9eb9380473c7c9ee0a666be34dcd8c1b8e3e2f5f21f9e03aa3480

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
6f05eb722b6472403371f46e3eca2040

SHA1
cf4c2c9b39846cccadb3fb6c4c625fbfca561166

SHA256
ba6a960468183808b5ad7adadbf99753c0238c9a458d89d5acc0a2a97b09aae4

SHA512
e10005264052543621604a33e2d329439f87c5590b74c49965c97b3678baeacb3d8ed97c1c990b410d2237831a2c91ed0cfd9fc727cbc263c389ea7e63c8afd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe581b63.TMP

Filesize
3KB

MD5
b7b084640d081156e16e28460448eb61

SHA1
ffda160fb32da5451f3d7a0aa69bbd0f3251ec6e

SHA256
29d57a7bd40b7a5a727469e5dfca7565771ee53254fe4aa28f0afcfea0c6b072

SHA512
678556ed4e3e2a6b6de87b443411dd614b34ac6766dd1502e4716f5722dd8de0610cd4f3a8728f7aaed9d55463bccb2539be52aee5b3be5949b4a9acc4b05cb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\f66a03f8-dadf-49c0-896c-e6ab54faee1b.tmp

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
69KB

MD5
164a788f50529fc93a6077e50675c617

SHA1
c53f6cd0531fd98d6abbd2a9e5fbb4319b221f48

SHA256
b305e470fb9f8b69a8cd53b5a8ffb88538c9f6a9c7c2c194a226e8f6c9b53c17

SHA512
ec7d173b55283f3e59a468a0037921dc4e1bf3fab1c693330b9d8e5826273c917b374c4b802f3234bbb5e5e210d55e52351426867e0eb8c9f6fba1a053cb05d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha\1.2.1_0\content.js

Filesize
9KB

MD5
3d20584f7f6c8eac79e17cca4207fb79

SHA1
3c16dcc27ae52431c8cdd92fbaab0341524d3092

SHA256
0d40a5153cb66b5bde64906ca3ae750494098f68ad0b4d091256939eea243643

SHA512
315d1b4cc2e70c72d7eb7d51e0f304f6e64ac13ae301fd2e46d585243a6c936b2ad35a0964745d291ae9b317c316a29760b9b9782c88cc6a68599db531f87d59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
192KB

MD5
de853f443cbef958fbd1bcce90fee843

SHA1
dfb3589192089d15be5616be6393ca5e9933df51

SHA256
6f3240e9fc712e8828b3dc43a62bd09cc782435e7dc15e52e5a8a493bdfdb7bf

SHA512
08a723bd0c7c292c674f24c75d032798465f6365a350fff27eafab8d3545511018b05190839ac59bf2041f64cc58389d2af658943bd6cb4c7f37a534ad2e3b3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_freetp.org_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_freetp.org_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
14KB

MD5
2acbbf6f48d25e08eb4e54f9bde14dfc

SHA1
d73001ad83d8f5b3d98c7e63ec2c4ca003797a50

SHA256
6f0d34f87531bff4730bcd1cd2ae3396a3ad17709dd00d46550f9e4e2a71d3c1

SHA512
30d4f5cc198f5fef8fcb96e28b781913e53302808ce775f184ad0f13c1cb4c746e7f2d016d7609c90ddd7858214fd08303da53ce98d3edd500562fe1190ba9cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\a38a917f-ffb3-4e5a-8a4d-26cf92aaf786.tmp

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
4fb08634a687878407add8533e54e202

SHA1
1c7e9880834171f5862833260499fb161748cc3d

SHA256
efe6d2144013b07166d42eee6446f072591c02a136517fd8706b38a63e409bda

SHA512
4222281de47c873ee0844f11008e4be32bedfd8b7e3ce5cc55219b6219020c599c14e3a77065939610bb0b94098e1a53fe2dbf6723a61d54da2ead63744707d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
17KB

MD5
135d968c277c2631d98d0ed1e88f1257

SHA1
939a5fe8c529abdc3e4fd6d846b9429896aed8c8

SHA256
0a92085181dbd8e37c277b32d54c05a4aca86b7779bf765a5a0dc40e39165b36

SHA512
04dba8495ea627d92511132666ef38c320af9c17102a87a2b5dd203c40cfe25ab7f67d812c5657423adb823fbef2e04ba3e6ccdd128cc5e90f3287fcba4b2418

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
a0591765726b55a93df2554a932ace2d

SHA1
db372eec58bee8fac23203cc73e82fb55a01c37c

SHA256
2aada7f75786eda8025cb2a840f1aa74b3c1668f29faa8f2bfc20ae894037869

SHA512
4ff82b2b6763ef062bfc490a9b4ec49c072d29d282c36140f93c92155176fcdd5c09cd0f1f38590065a6340cb4a514db370c7eda8f0b2f651832528411ad1071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Filesize
112B

MD5
e6590d3dad85cd665ec79ba9f7ac33ec

SHA1
a8457462e40df103beafd5565168698d495dd15c

SHA256
daa692a255cdb8d84fb9e12cf85cdb3a5cb76a1f46fcbe3ad261dc615c25a3b8

SHA512
3fa0bc9675172061a773889a7f91c13fdb10c6a3ac96206b1467e2ed77972c3967ccd48d805b131eba4cf10920a68e5b7597ec8c5e31fb98f75bd5d4d3129769

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
13a3ee3a9d7d78732edc56a4f6a7bd92

SHA1
162ed3f8dcf7114431368627b06738ba01f3dd3d

SHA256
da869ef332a8a837e478ef3fa8c096c4e105687afe6af9166e276a3708cd8544

SHA512
b42e3aa09b2ec11229425e1d9782de1a8157579518130c9859cff6c99281ee55d959e0ec1f7fe6a3d1068269a0af319b3b42eec942c990cd449bb3592359a1f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
323B

MD5
5c5e120fac5f99855791c0f18a6d76aa

SHA1
d8511b7693df16c02dd6528f02a6f60339704a69

SHA256
67fed0b79ae05766589e13c0dd64f3aa3b767c0d79ce78b5dacbc453d57c987c

SHA512
e92e61e2a13a8851575f0a56035782d6a58646a720bba3d46a198062ce3d7c0f0652c0a8b5481f5ccc7838a3241db95cb853d81a8feca2db145aec2a75f6aea5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
4KB

MD5
425794822b2cb2fb1305f1dbf8392e50

SHA1
de91e1896f7212d916bfe2d55757edf77e3ae7a2

SHA256
be11228c8e7e962f2104cf2e64efb3b950a372001b80ed3eefe7815a9f2a832a

SHA512
cc983d265b52ea8ced6a549e147cce7fa1369a93579053660779e0cc0c7939bdd25e70a4005fa4b9f98d03bfede81280122fe89befbfae1471fc589313e96ff2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt

Filesize
76B

MD5
86e8df9402e31831fdeea8584ed0df7d

SHA1
96db055429c26c47c9ddc5a2d438b9e6b08248ce

SHA256
43529ca3caceab090b0ca329c7aed4090070d63d8725b94b59ec89283a4635a7

SHA512
afc7f2b6ecf3c2ec44cc60c14d7ab96cc51931b8e475af465d822132a2d8605f8c63f81b7c77e197406e39a253cfd499014274addc8d59932cb0a89080c1a40c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt

Filesize
140B

MD5
6a31c4a6cfc5e4fe4767a50637f57139

SHA1
e3c077f48b13392ee787f2bd39bb54e12c256fec

SHA256
e8ce17e03c75cba2704aae985f02ca7828a030a2b3cd1628f8144cc1a3423d5a

SHA512
7e09dadcdbd1d5890da76729e0454ce88c383fe730ac1b2651fb5bfa77915b6c945a318939ee0cd63ac93786a36ada8d709fe4ff27731bdf2cc691925d6c1c95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe57ef61.TMP

Filesize
140B

MD5
8af5d57b641e84bfb6d77d470a72084b

SHA1
d5b93e674158781d907a3b7f9d54373cce1421ad

SHA256
fade7ad58c880ca4041d98c3300415917ec1d62f1fba19c0a832f6b00dc60f9e

SHA512
e1d62c87d707d426885b223119912f3f8371e1a5cb3e8ce668c45269e0f08ca43f8ff1364e13d09335a69d7d693ba3d66f656cfbaed33850578035f6b2c82a95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
13B

MD5
3e45022839c8def44fd96e24f29a9f4b

SHA1
c798352b5a0860f8edfd5c1589cf6e5842c5c226

SHA256
01a3e5d854762d8fdd01b235ce536fde31bf9a6be0596c295e3cea9aaf40f3dd

SHA512
2888982860091421f89f3d7444cacccb1938ef70fc084d3028d8a29021e6e1d83eaef62108eace2f0d590ed41ece0e443d8b564e9c9a860fc48d766edb1dc3d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
30KB

MD5
ec1f5866e6abf0223315e21d40040ff4

SHA1
cf3f61091bbc89d1e0d57e1a1ef7b3aa6bb3a654

SHA256
4659204f15149efc6257993694555f2477fa6ec0988a397ee8e36f815d8f958d

SHA512
2d2e03e1b6e84c5ba717eec124fc9caa40fc8dd98d8ff6769cf4674d3197f4c74149f12d6596e71d62d9d52eea5bff06782504492356b1a2b83093c5efcde264

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
6KB

MD5
a1488152943d779837d393234f09b89d

SHA1
4bc559ea4406a7f0b612e3b3a71766f4c1291069

SHA256
6820a83238aee72385f7fa2609a936e2944923bd6f41fe971fdf05f27a751fa8

SHA512
6dce9f0e2655cbdc677ee96910f69b73ebb7ca5d02e125daf61c3ce2cf268afedfbb878dae0d5321f79ec3cf09bb3be28854f0d9720651637b1be5ef94b788a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
36KB

MD5
a11ecf4140c8d1ead4e399cde6e5bcff

SHA1
2512bae3265dd1989f04a078af771cee15d50e71

SHA256
d8e34b8e112184add0d57fa0a653284490a039765488b1ecec116d17aff59113

SHA512
9ed09685d1b4d6014c772ff64db104d44c6e29541acfd7a0695f103778edace895112cf564896acb0071812e5d2d5cbc01ca03480be0fefa871fe43390fa4c6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
7KB

MD5
708e95395d612080df0228105f6e0ed0

SHA1
a696bf021e5626839d49425840994a916210a5f9

SHA256
f4379f9ee149c9a5ff3c20d0d33d0455cc9ad26cd8ffce716abe8d6a549b9800

SHA512
22ef72efddd04f089b44e2f768815e31885cbc29245762e0dfbb925fcab6c1684c872208f14d825138bc3ae5358e8e3e9407cf2133817d900f876cf6f98a73d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
36KB

MD5
5b94752559ad9c09955952ac5ceb6fc4

SHA1
c611b6c2583359c572b958e56ba89abf1738a828

SHA256
131ab6e799a86a211c17800897961ddbe34913c8c122ca0699a33b93118a64a9

SHA512
10cb7cbf043ecdb6fa6eec7e1f9d73b661437d1ef652676a06119a3bdc2885634468c855160943f747a3e60fc5ce33f1ac09458b1ecc4554ccaa6db7dcc756ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations

Filesize
86B

MD5
961e3604f228b0d10541ebf921500c86

SHA1
6e00570d9f78d9cfebe67d4da5efe546543949a7

SHA256
f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

SHA512
535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
f1c7512897efbba9615d89cb54d6a72c

SHA1
8f45407c6e69f61dba8e47f903c29df397753999

SHA256
bb2fd4d755dfa873c277c9a59fab6d6563bc7b329aa10d317c21e42365ddd727

SHA512
a33a3a542a015e16b1b59bd93e72b16b959659e4a4dc9717025b5575d4339aa025c9dd18045c0a7571d09822697ca3a86d08c5ef12483a7e82d694baebbde143

Download Submit
C:\Users\Admin\AppData\Local\Temp\6f340d63-7c9a-4923-bb50-de36e6a7a381.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Temp\a364c445-eec3-4e7b-affb-de0c2c1a647e.tmp

Filesize
10KB

MD5
78e47dda17341bed7be45dccfd89ac87

SHA1
1afde30e46997452d11e4a2adbbf35cce7a1404f

SHA256
67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550

SHA512
9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir4972_1538282976\73f7fd84-2404-4ad7-a954-7cda2cba1523.tmp

Filesize
152KB

MD5
dd9bf8448d3ddcfd067967f01e8bf6d7

SHA1
d7829475b2bd6a3baa8fabfaf39af57c6439b35e

SHA256
fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

SHA512
65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

Download Submit
memory/1900-4-0x00007FFD9A410000-0x00007FFD9A658000-memory.dmp

Filesize
2.3MB

Download
memory/1900-640-0x00007FFD9A410000-0x00007FFD9A658000-memory.dmp

Filesize
2.3MB

Download
memory/1900-0-0x00007FFD9A410000-0x00007FFD9A658000-memory.dmp

Filesize
2.3MB

Download