3b19486b4e14b206ec8ab2602ec6a430f9fce7ef40247b1e1f4c6f004ee468b4

Resubmissions

30/03/2025, 02:04

250330-chq9waznv9 9

28/03/2025, 18:23

250328-w1kpla1pv4 9

Analysis

max time kernel
546s
max time network
548s
platform
windows10-2004_x64
resource
win10v2004-20250314-en
resource tags

arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
submitted
28/03/2025, 18:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Swift.exe
Size

20.1MB
MD5

532e28bfd55208ef66d609a48a65cf91
SHA1

5da3a7f1a437cae4109b4c052b7de697bc58a674
SHA256

3b19486b4e14b206ec8ab2602ec6a430f9fce7ef40247b1e1f4c6f004ee468b4
SHA512

10c57c4bd1c18242405bb7ac89361121b6169f3444122dbef246e4605b0f793f205a9fb36f5a8d820e9c8617bddb9df65b9590acbaada19a89ac7a064a23a0f1
SSDEEP

393216:V8JNpovBLKnLuJxQBqYuIavH5Cmq+Je5tmCTtu32syZ1k3hqdE7w:VMpWNW0mBqfvH5SZtlTtuGZgxqdcw

Score

9^/10

defense_evasion discovery execution themida trojan

Malware Config

Signatures

Identifies VirtualBox via ACPI registry values (likely anti-VM) 2 TTPs 1 IoCs

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Swift.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

Run Powershell and hide display window.

execution

PowerShell

T1059.001

pid	Process
3532	powershell.exe
3732	powershell.exe
4808	powershell.exe

Downloads MZ/PE file 1 IoCs

flow	pid	Process
45	4004	Swift.exe

Checks BIOS information in registry 2 TTPs 2 IoCs

BIOS information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion	Swift.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion	Swift.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1062200478-553497403-3857448183-1000\Control Panel\International\Geo\Nation	cmd.exe

Loads dropped DLL 2 IoCs

pid	Process
3652	msedge.exe
1992	msedge.exe

Themida packer 15 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
behavioral2/memory/4004-0-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-2-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-3-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-5-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-4-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-52-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-206-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-247-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-270-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-282-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-739-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-844-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-859-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-1957-0x0000000140000000-0x00000001437AD000-memory.dmp	themida
behavioral2/memory/4004-5304-0x0000000140000000-0x00000001437AD000-memory.dmp	themida

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Swift.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Suspicious use of NtSetInformationThreadHideFromDebugger 1 IoCs

pid	Process
4004	Swift.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-pa.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-sq.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\driver-signature.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\km\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-bg.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-ec\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\ru\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1193405131\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1366511088\crs.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-hub\es\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\wallet-webui-992.268aa821c3090dce03cb.chunk.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-eu.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1904784867\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-lv.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-shared-components\it\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1762799786\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\lt\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-it.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-notification-shared\pt-BR\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\wallet\wallet-checkout\checkoutdata.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\si\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1366511088\kp_pinslist.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1762799786\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_2068047852\LICENSE	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-tokenized-card\ar\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_603064891\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-ZH	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\manifest.webapp.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\Wallet-BuyNow\wallet-buynow.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-hub\da\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\sk\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-pt.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\mr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-be.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\runtime.bundle.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1904784867\manifest.fingerprint	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-mobile-hub\ru\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\wallet-icon.svg	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_905967435\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-ru.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\fr\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1659511599\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_910441785\manifest.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-tokenized-card\id\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\wallet\wallet-stable.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-da.hyb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_910441785\keys.json	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\az\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-shared-components\pt-PT\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\hi\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_33113945\_locales\gu\messages.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1108865118\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-tokenized-card\sv\strings.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-hy.hyb	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Embeds OpenSSL 1 IoCs

Embeds OpenSSL, may be used to circumvent TLS interception.

resource	yara_rule
behavioral2/files/0x0007000000024383-266.dat	embeds_openssl

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Modifies data under HKEY_USERS 4 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedgewebview2.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133876603053468617"	msedgewebview2.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 5 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1062200478-553497403-3857448183-1000\{B606FC31-A2FF-4D3C-B697-28BA07FF2372}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1062200478-553497403-3857448183-1000\{711B093D-AEB9-4C0F-9879-C9C210AD3198}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1062200478-553497403-3857448183-1000\{378BE8B9-32C1-4C64-A3FD-E3A3DE8C0703}	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3532	powershell.exe
3532	powershell.exe
3732	powershell.exe
3732	powershell.exe
4808	powershell.exe
4808	powershell.exe
3376	msedgewebview2.exe
3376	msedgewebview2.exe
4648	msedge.exe
4648	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 24 IoCs

pid	Process
3004	msedgewebview2.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe
3652	msedge.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	3532	powershell.exe
Token: SeDebugPrivilege	3732	powershell.exe
Token: SeDebugPrivilege	4808	powershell.exe
Token: 33	824	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	824	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
4004	Swift.exe
3652	msedge.exe
3652	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4004 wrote to memory of 3532	4004	Swift.exe	87
PID 4004 wrote to memory of 3532	4004	Swift.exe	87
PID 4004 wrote to memory of 3732	4004	Swift.exe	91
PID 4004 wrote to memory of 3732	4004	Swift.exe	91
PID 4004 wrote to memory of 4808	4004	Swift.exe	96
PID 4004 wrote to memory of 4808	4004	Swift.exe	96
PID 4004 wrote to memory of 3004	4004	Swift.exe	98
PID 4004 wrote to memory of 3004	4004	Swift.exe	98
PID 3004 wrote to memory of 5676	3004	msedgewebview2.exe	99
PID 3004 wrote to memory of 5676	3004	msedgewebview2.exe	99
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 3028	3004	msedgewebview2.exe	101
PID 3004 wrote to memory of 2116	3004	msedgewebview2.exe	102
PID 3004 wrote to memory of 2116	3004	msedgewebview2.exe	102
PID 3004 wrote to memory of 3192	3004	msedgewebview2.exe	103

C:\Users\Admin\AppData\Local\Temp\Swift.exe
"C:\Users\Admin\AppData\Local\Temp\Swift.exe"
1⤵
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
- Downloads MZ/PE file
- Checks BIOS information in registry
- Checks whether UAC is enabled
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:4004
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -WindowStyle Hidden -NoProfile -NonInteractive -Command "$WshShell = New-Object -comObject WScript.Shell; $Shortcut = $WshShell.CreateShortcut('C:\Users\Admin\AppData\Local\Temp\Scripts.lnk'); $Shortcut.TargetPath = 'C:\Users\Admin\AppData\Roaming\Swift\Scripts'; $Shortcut.Save()"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3532
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -WindowStyle Hidden -NoProfile -NonInteractive -Command "$WshShell = New-Object -comObject WScript.Shell; $Shortcut = $WshShell.CreateShortcut('C:\Users\Admin\AppData\Local\Temp\Workspace.lnk'); $Shortcut.TargetPath = 'C:\Users\Admin\AppData\Roaming\Swift\Workspace'; $Shortcut.Save()"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3732
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  "powershell" -WindowStyle Hidden -NoProfile -NonInteractive -Command "$WshShell = New-Object -comObject WScript.Shell; $Shortcut = $WshShell.CreateShortcut('C:\Users\Admin\AppData\Local\Temp\AutoExec.lnk'); $Shortcut.TargetPath = 'C:\Users\Admin\AppData\Roaming\Swift\AutoExec'; $Shortcut.Save()"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4808
- C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --disable-features=msWebOOUI,msPdfOOUI,msSmartScreenProtection --enable-features=RemoveRedirectionBitmap --lang=en-US --mojo-named-platform-channel-pipe=4004.5340.6064765886576673655
  2⤵
  - Drops file in Program Files directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of WriteProcessMemory
  PID:3004
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\swift\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\swift\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ff9af76b078,0x7ff9af76b084,0x7ff9af76b090
    3⤵
    PID:5676
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1708,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=1704 /prefetch:2
    3⤵
    PID:3028
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2016,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
    3⤵
    PID:2116
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2356,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:8
    3⤵
    PID:3192
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --autoplay-policy=no-user-gesture-required --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3616,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:1
    3⤵
    PID:2972
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4624,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4608 /prefetch:8
    3⤵
    PID:6472
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=752,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4796 /prefetch:8
    3⤵
    PID:6744
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=4784,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:8
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:3376
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4392,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:8
    3⤵
    PID:6804
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4344,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4128 /prefetch:8
    3⤵
    PID:2140
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4744,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:8
    3⤵
    PID:5796
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4732,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4108 /prefetch:8
    3⤵
    PID:5612
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4296,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:8
    3⤵
    PID:5724
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4848,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4588 /prefetch:8
    3⤵
    PID:5616
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\swift\EBWebView" --webview-exe-name=Swift.exe --webview-exe-version=0.1.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=4716,i,3646258822567822794,9567884370744351515,262144 --enable-features=RemoveRedirectionBitmap --disable-features=msPdfOOUI,msSmartScreenProtection,msWebOOUI --variations-seed-version --mojo-platform-channel-handle=4620 /prefetch:8
    3⤵
    PID:5180
- C:\Windows\system32\cmd.exe
  "cmd" /c start "" "msedge" "https://key.getswift.gg/ks/checkpoint/1/XyCVYJpXGVuFhLOfKLfKIDbOHQKNRtGYFLiDdMsAmLzxrmeGNp"
  2⤵
  - Checks computer location settings
  PID:5084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "https://key.getswift.gg/ks/checkpoint/1/XyCVYJpXGVuFhLOfKLfKIDbOHQKNRtGYFLiDdMsAmLzxrmeGNp"
    3⤵
    PID:3100
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch https://key.getswift.gg/ks/checkpoint/1/XyCVYJpXGVuFhLOfKLfKIDbOHQKNRtGYFLiDdMsAmLzxrmeGNp
      4⤵
      Loads dropped DLL
      Drops file in Program Files directory
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of FindShellTrayWindow
      PID:3652
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x238,0x23c,0x240,0x234,0x24c,0x7ff9accef208,0x7ff9accef214,0x7ff9accef220
        5⤵
        
        PID:1920
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2228,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:2
        5⤵
        
        PID:2568
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1952,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
        5⤵
        
        PID:3368
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2464,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=2612 /prefetch:8
        5⤵
        
        PID:2104
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3428,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
        5⤵
        
        PID:2292
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3432,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
        5⤵
        
        PID:4784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=5000,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5008 /prefetch:1
        5⤵
        
        PID:1632
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5660,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5420 /prefetch:8
        5⤵
        
        PID:3416
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5640,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5396 /prefetch:8
        5⤵
        
        PID:2516
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5484,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5700 /prefetch:8
        5⤵
        
        PID:5488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6036,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
        5⤵
        
        PID:5828
    - - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6036,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6056 /prefetch:8
        5⤵
        
        PID:3708
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5928,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6284 /prefetch:8
        5⤵
        
        PID:6040
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6376,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
        5⤵
        
        PID:3020
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=560,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5948 /prefetch:8
        5⤵
        
        PID:3600
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6512,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6488 /prefetch:8
        5⤵
        
        PID:2348
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6528,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:8
        5⤵
        
        PID:3676
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --field-trial-handle=5384,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5528 /prefetch:1
        5⤵
        
        PID:6256
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --field-trial-handle=3728,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:1
        5⤵
        
        PID:6640
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --field-trial-handle=3404,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6112 /prefetch:1
        5⤵
        
        PID:6844
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6800,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5276 /prefetch:8
        5⤵
        
        PID:4892
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5400,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=4260 /prefetch:8
        5⤵
        Modifies registry class
        
        PID:1604
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6960,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:8
        5⤵
        
        PID:6784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --field-trial-handle=6576,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6276 /prefetch:1
        5⤵
        
        PID:5412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --field-trial-handle=3472,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6464 /prefetch:1
        5⤵
        
        PID:3416
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7244,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:8
        5⤵
        
        PID:6152
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6348,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7316 /prefetch:8
        5⤵
        
        PID:976
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5392,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7340 /prefetch:8
        5⤵
        
        PID:5424
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7360,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:8
        5⤵
        
        PID:6464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --string-annotations --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=6404,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:8
        5⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:4648
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7552,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7540 /prefetch:8
        5⤵
        
        PID:6876
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4976,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
        5⤵
        
        PID:6388
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --always-read-main-dll --field-trial-handle=7340,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=3936 /prefetch:1
        5⤵
        
        PID:1924
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --field-trial-handle=7396,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=1300 /prefetch:1
        5⤵
        
        PID:5468
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --always-read-main-dll --field-trial-handle=7252,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=5468 /prefetch:1
        5⤵
        
        PID:232
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --always-read-main-dll --field-trial-handle=6136,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7140 /prefetch:1
        5⤵
        
        PID:4624
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6336,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7600 /prefetch:8
        5⤵
        
        PID:4528
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --always-read-main-dll --field-trial-handle=7624,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7680 /prefetch:1
        5⤵
        
        PID:5400
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7856,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7876 /prefetch:8
        5⤵
        
        PID:5252
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5608,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7524 /prefetch:8
        5⤵
        
        PID:3516
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7932,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6848 /prefetch:8
        5⤵
        
        PID:5480
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=44 --always-read-main-dll --field-trial-handle=3316,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:1
        5⤵
        
        PID:4040
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --field-trial-handle=5500,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
        5⤵
        
        PID:4088
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8080,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7752 /prefetch:8
        5⤵
        
        PID:6488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --field-trial-handle=8076,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=8028 /prefetch:1
        5⤵
        
        PID:2904
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --field-trial-handle=7496,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7804 /prefetch:1
        5⤵
        
        PID:4488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7148,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=6340 /prefetch:8
        5⤵
        
        PID:6172
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --field-trial-handle=8104,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7616 /prefetch:1
        5⤵
        
        PID:6592
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=8008,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7412 /prefetch:8
        5⤵
        
        PID:3440
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --field-trial-handle=7696,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=8288 /prefetch:1
        5⤵
        
        PID:1620
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --field-trial-handle=8300,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7736 /prefetch:1
        5⤵
        
        PID:392
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --field-trial-handle=6092,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:1
        5⤵
        
        PID:408
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --field-trial-handle=7472,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=7700 /prefetch:1
        5⤵
        
        PID:6860
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7708,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=8172 /prefetch:8
        5⤵
        
        PID:5488
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7656,i,4364185014478794163,4394170908550063354,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:8
        5⤵
        
        PID:6204
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        Loads dropped DLL
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        
        PID:1992
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x23c,0x240,0x244,0x238,0x290,0x7ff9accef208,0x7ff9accef214,0x7ff9accef220
        6⤵
        
        PID:5044
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1900,i,2492690402389602070,3723078449677345168,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
        6⤵
        
        PID:1400
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2216,i,2492690402389602070,3723078449677345168,262144 --variations-seed-version --mojo-platform-channel-handle=2212 /prefetch:2
        6⤵
        
        PID:6660
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2580,i,2492690402389602070,3723078449677345168,262144 --variations-seed-version --mojo-platform-channel-handle=2800 /prefetch:8
        6⤵
        
        PID:6296
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4416,i,2492690402389602070,3723078449677345168,262144 --variations-seed-version --mojo-platform-channel-handle=4436 /prefetch:8
        6⤵
        
        PID:4252
      - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4428,i,2492690402389602070,3723078449677345168,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:8
        6⤵
        
        PID:5464
      - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4428,i,2492690402389602070,3723078449677345168,262144 --variations-seed-version --mojo-platform-channel-handle=3184 /prefetch:8
        6⤵
        
        PID:4852

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:4188

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
  2⤵
  PID:4640

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4cc 0x508
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:824

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files\chrome_Unpacker_BeginUnzipping3004_112602476\manifest.json

Filesize
76B

MD5
ba25fcf816a017558d3434583e9746b8

SHA1
be05c87f7adf6b21273a4e94b3592618b6a4a624

SHA256
0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11

SHA512
3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1659511599\manifest.json

Filesize
43B

MD5
af3a9104ca46f35bb5f6123d89c25966

SHA1
1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8

SHA256
81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea

SHA512
6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-af.hyb

Filesize
70KB

MD5
ffa9db945f0f0c15b8bba75a6e064880

SHA1
49217a9d5bb7a868464403b4e3c82e80df53456c

SHA256
5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf

SHA512
cc67b2dfbbb009dd3fdb999fe86410425455613c12dac755a3cded435cd25ca4363782d70f3b7bb7c0fdd63e2eb649ae6a4053d929f463b646b43d7dbfda79c0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-as.hyb

Filesize
703B

MD5
8961fdd3db036dd43002659a4e4a7365

SHA1
7b2fa321d50d5417e6c8d48145e86d15b7ff8321

SHA256
c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe

SHA512
531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-hi.hyb

Filesize
687B

MD5
0807cf29fc4c5d7d87c1689eb2e0baaa

SHA1
d0914fb069469d47a36d339ca70164253fccf022

SHA256
f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42

SHA512
5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\hyph-nb.hyb

Filesize
141KB

MD5
677edd1a17d50f0bd11783f58725d0e7

SHA1
98fedc5862c78f3b03daed1ff9efbe5e31c205ee

SHA256
c2771fbb1bfff7db5e267dc7a4505a9675c6b98cfe7a8f7ae5686d7a5a2b3dd0

SHA512
c368f6687fa8a2ef110fcb2b65df13f6a67feac7106014bd9ea9315f16e4d7f5cbc8b4a67ba2169c6909d49642d88ae2a0a9cd3f1eb889af326f29b379cfd3ff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_1692545178\manifest.json

Filesize
82B

MD5
2617c38bed67a4190fc499142b6f2867

SHA1
a37f0251cd6be0a6983d9a04193b773f86d31da1

SHA256
d571ef33b0e707571f10bb37b99a607d6f43afe33f53d15b4395b16ef3fda665

SHA512
b08053050692765f172142bad7afbcd038235275c923f3cd089d556251482b1081e53c4ad7367a1fb11ca927f2ad183dc63d31ccfbf85b0160cf76a31343a6d0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_511546734\manifest.fingerprint

Filesize
66B

MD5
fc16725ad2526b42e9970864e7362389

SHA1
6cdf46feb879c7b758660eced4b945347e0ed3f3

SHA256
c8234a504880936a0ed783f171dbed1ea8d79074f915ed51a5191021d11115ef

SHA512
2c33163a4ba446544e2eff16649e67ff20471fba7d359297cb1d974af53fcf76ac0ab1811535f4ee1df66739d2a47c6090566f0fa48e486c40f97a4c98908cc0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_910441785\_metadata\verified_contents.json

Filesize
1KB

MD5
28706ad42e4c615a683c2494bc0bd2af

SHA1
6b0465b3d5e85a3ea76c646ba8652c4dc0248dc0

SHA256
709bbb3e3a17e2b7bbf9f4afdcf465312695342ce4eb203df284233eacee086f

SHA512
e95da92f1ad5f56ef61a5992a1b465d46f36eff1fc85643cc5ab3f357b6f14d81a5b5590d0e18d4da5fcc3ac537a469fd0c15b116a3471536707a9716119fa5f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3004_910441785\manifest.fingerprint

Filesize
66B

MD5
5ddbc1878fe757e9fb5be515f8f95864

SHA1
fa7d42b5adf36a370a95a0abaa20c6094b2b47f8

SHA256
a0b13e5ecb7638ffd1e054301fef148b47ea17bc528779c56d77d4e7a6152983

SHA512
ae2a76a48c46a90085a46cf03eca6576ccfdff6d76c64f095c2d657641c73054581b3e8c8738d751f2f8465fe6a2298e01188f807175fd7f4d1995078c7bc1a5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1101226352\manifest.json

Filesize
53B

MD5
22b68a088a69906d96dc6d47246880d2

SHA1
06491f3fd9c4903ac64980f8d655b79082545f82

SHA256
94be212fe6bcf42d4b13fabd22da97d6a7ef8fdf28739989aba90a7cf181ac88

SHA512
8c755fdc617fa3a196e048e222a2562622f43362b8ef60c047e540e997153a446a448e55e062b14ed4d0adce7230df643a1bd0b06a702dc1e6f78e2553aadfff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1108865118\manifest.json

Filesize
145B

MD5
465cc76a28cc5543a0d845a8e8dd58fa

SHA1
adbe272f254fd8b218fcc7c8da716072ea29d8ba

SHA256
e75fb1fa1692e9720166872afe6d015e4f99d4e8725463e950889a55c4c35bb9

SHA512
a00286cd50d908883a48f675d6291881ad8809dcae5aca55d5d581e6d93a66058e1fe9e626852bf16e5bb0c693a088a69d9876ccac288181b1f74254bf1da1a2

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1366511088\manifest.json

Filesize
102B

MD5
a64e2a4236e705215a3fd5cb2697a71f

SHA1
1c73e6aad8f44ade36df31a23eaaf8cd0cae826d

SHA256
014e9fc1219beefc428ec749633125c9bff7febc3be73a14a8f18a6691cd2846

SHA512
75b30c0c8cef490aaf923afbdb5385d4770de82e698f71f8f126a6af5ef16f3a90d0c27687f405274177b1a5250436efddd228a6d2949651f43bd926e8a1cc99

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1473791218\manifest.json

Filesize
141B

MD5
811f0436837c701dc1cea3d6292b3922

SHA1
4e51a3e9f5cbf8c9c96985dabe8ffc2de28dae87

SHA256
dbfb38a16e33a39c35ac50bd81782e4608be14954f1df69ac8272c0b9ce87a5d

SHA512
21e7bf2f8333b2900bcbcb871ede14684073249597d105095dc7d3f101e7ccc326068732f11d4a167365f245a3f2205793f520c7666d7f948e70919b40b43d35

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1762799786\Microsoft.CognitiveServices.Speech.core.dll

Filesize
2.6MB

MD5
0ee2b50c85a110689352fccfa77b5b18

SHA1
d9ecc4b12d2d50e3cbce40e75edad804c9988b25

SHA256
62a13d8459e0992c311dc3551bf3c2d1ce167ea7fa40f0ec62193f3bd760b36e

SHA512
a4f94a05a69b5ae3a0ecf8bdb7592f698d0df81e2f1fae679f38890ad04a2384883837bc792c73848955ff4af7afed49d38839f7ab174454e61919ed78655bff

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1762799786\manifest.fingerprint

Filesize
66B

MD5
5bbd09242392aacbb5fac763f9e3bd4e

SHA1
14bb7b23b459ce30193742ed1901a17b4dcf9645

SHA256
22b55f5d9b1bafb80e00c1304cf5e0d6057a304a2e8757b4f021b416f4397297

SHA512
541e4c7998e91a5113f627c2c44e32b54878fe225b3b9476572f025f51f2b4ec4a44b102498adcc22b8fe388970645bacfafb6e7fc8a216df4d7bbfc8b0ff670

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Filtering Rules-AA

Filesize
404KB

MD5
0c692f6db49c8f21392d3365bfc88be9

SHA1
9073d1a2d99e0d0df90d995d60fd096b30f6b585

SHA256
d36eb7f3da47d7cd92f7bbec4314cdd30b58197cd898b13f11729febbd3f75f2

SHA512
2f8e22ca83e9bd5a963dd2f9a00e1ed2faa9d5a3c07efa191ca4bf7c95f404cbabcbf1eeb8633a2270b8460319ce46791c063355368fc08d93442cc0e0250939

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\LICENSE

Filesize
24KB

MD5
aad9405766b20014ab3beb08b99536de

SHA1
486a379bdfeecdc99ed3f4617f35ae65babe9d47

SHA256
ed0f972d56566a96fb2f128a7b58091dfbf32dc365b975bc9318c9701677f44d

SHA512
bd9bf257306fdaff3f1e3e1fccb1f0d6a3181d436035124bd4953679d1af2cd5b4cc053b0e2ef17745ae44ae919cd8fd9663fbc0cd9ed36607e9b2472c206852

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-DE

Filesize
222KB

MD5
68a6f5d3e851f477b99c00e716b9640b

SHA1
1e805450597d71037995ff9bd63a18ad2c74d281

SHA256
cbab2692330b73e6dab4705e0ba5d9bc7829912b7c09eaf5c5f8e6c5e219e2dd

SHA512
b06888174d81a40ad200113186415a7daf207723f5d704160c1c74087192e9a9652bf6b69c58fa927a9e66af35e993f1941352e96403f673ee7e686d8eb4e06e

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-ES

Filesize
154KB

MD5
4bd0ec01b325a901ca95d03dcb3d0b78

SHA1
3fed6b3ba95cd4b39744a5e6ad7970d5bfe18ec7

SHA256
f47f8980472678dd2caf6c728411ea4a2611c2eed99938ccf4a158296c0a0830

SHA512
28d8f704e4ef7fd4b13938c7c05f50c0e3b92c2753245e363fbe07abb8bd6b96fbacf864f1390031e86d0592034e03e90582fb9910d80b46c6cc3b0282ba6d58

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-FR

Filesize
748KB

MD5
98df506badc34592073fef20e10b9202

SHA1
9c6084e2f72f8de086f34f749c6f478615a61072

SHA256
c875167cbb5484ecbb6974c6b2b70fa4b28e57c58588964a737605016077ab2e

SHA512
45cc8f5a08b75245840c22777e20702884c9d52a3dcb3a6c70a18b6213ea1df407db0f5d8b1bb63e5a99077b210cbe235e6955486268ded1cdc9a20595dbd633

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-IT

Filesize
498KB

MD5
cf12499d6fb872304778c2d047996675

SHA1
36e442007ec991986b4a8ab67bfe39abaa58117e

SHA256
39a9601eb6c69437ab63ff48bb96d63ae38846d99ef954491bcc803e7cfe6e6a

SHA512
ff914da7d35b91d16d411af54b2adcb3ecb140451dd6763f5c847f8e009bfc4440498a02068e7aa2976c06ef089525204dc5698d2247584378b0cd5bc7457c01

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-NL

Filesize
50KB

MD5
307ce3a96ec04053472ffcf0e240fea4

SHA1
4c4ed7097641efd298f68b6bb5e4aa7c16d6754c

SHA256
9300c145e737397b404d877ba0e909ed687e8b7add82a6f3b9f3cb9931e0e25b

SHA512
3e98d66a43650289eafdd6c4c76e1da66eb042882f2979b8e774e0df81510bfa7678cf8b4755829c22c258e25136dfd405bd21e5c40973086247408848051955

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-RU

Filesize
1.2MB

MD5
5797422ea1700f6036c4bed4384877d9

SHA1
1201305e19faf6311a228b6baa2052ebefa9c4f2

SHA256
daa8547f1dbc8c994eed3725f3076aaf6c4e298b963fb712e53eb0fa2dc1e789

SHA512
f85858ad292ef9e5d4fb6ea9e67f731b4a5fe3b823c2f156ecd109650d9de577873797bfd6d01da37a2baa2e05add60d387821254dc31eab54f4e526895bc83d

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\Part-ZH

Filesize
839KB

MD5
35488dda885a4de38b56edd487f1ed51

SHA1
3c85fa1afaf24064437abfd72530aa1e675d58c9

SHA256
04ee35c1660783cc17d89b80d5bb76c9c92a4e052d52b2e4cab00897d9c5655b

SHA512
0072570e9cbd6ed811bc22df5c664a152f1c3322f08b43ca9df6daceecb64614198f5600c964f1abd7890d3e811c57dba54bbed763c12d3e245bf7db5dd4d898

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\adblock_snippet.js

Filesize
2KB

MD5
f5c93c471485f4b9ab45260518c30267

SHA1
ee6e09fb23b6f3f402e409a2272521fdd7ad89ed

SHA256
9aa899e0bf660ee8f894b97c28f05db06cc486915953b7f3b2ff9902fa8da690

SHA512
e50a1baf20db9bc867e85ab72f9976430e87d8516ca552f9342a5c91822c9e1404e4f915042d48d841cca3fb16fd969bf0aa01195791ce29de63c45814fcdcda

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\manifest.fingerprint

Filesize
66B

MD5
2596b3b177322eaeeab4c735348b2385

SHA1
b563fe1496d5d2b336f310288604d5c1314c7bbd

SHA256
b406602a37dfb0408ade2a6d84071a70d3b040c15902da60dafbfa818370669f

SHA512
258ced5170edb34b83cc97a04ced98299c5cfad838989ce7dcb32bf8e93e5d1ae8b15eed71346a323075f4077743a6db22cb26ea00a40720134a60ab4013e955

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1825815732\manifest.json

Filesize
116B

MD5
2188c7ec4e86e29013803d6b85b0d5bb

SHA1
5a9b4a91c63e0013f661dfc472edb01385d0e3ce

SHA256
ac47cc331bb96271da2140941926a8accc6cb7599a6f3c17bd31c78f46709a62

SHA512
37c21eaff24a54c2c7571e480ff4f349267e4404111508f241f54a41542ce06bcde4c830c6e195fc48d1bf831ed1fe78da361d1e43416cfd6c02afa8188af656

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1856061114\manifest.fingerprint

Filesize
66B

MD5
496b05677135db1c74d82f948538c21c

SHA1
e736e675ca5195b5fc16e59fb7de582437fb9f9a

SHA256
df55a9464ee22a0f860c0f3b4a75ec62471d37b4d8cb7a0e460eef98cb83ebe7

SHA512
8bd1b683e24a8c8c03b0bc041288296448f799a6f431bacbd62cb33e621672991141c7151d9424ad60ab65a7a6a30298243b8b71d281f9e99b8abb79fe16bd3c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1856061114\manifest.json

Filesize
134B

MD5
049c307f30407da557545d34db8ced16

SHA1
f10b86ebfe8d30d0dc36210939ca7fa7a819d494

SHA256
c36944790c4a1fa2f2acec5f7809a4d6689ecb7fb3b2f19c831c9adb4e17fc54

SHA512
14f04e768956bdd9634f6a172104f2b630e2eeada2f73b9a249be2ec707f4a47ff60f2f700005ca95addd838db9438ad560e5136a10ed32df1d304d65f445780

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\_metadata\verified_contents.json

Filesize
7KB

MD5
117d173e82b282deca740475e35c8ecd

SHA1
912b12b993507ebd9af6bdc937559b4d4b58a0d8

SHA256
65491b21947d60c87c6358dcf69df9aca2b99e8f3b611bd3d559699bbc25000b

SHA512
e455c0bb68e9056c6242058fcba954bc1d5ea4a864e99be008b2745c51209b477bd7bdba57006be4a02a09bda49c0cdc17e8f870c81c7771864640950f5f9a93

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-be.hyb

Filesize
5KB

MD5
087de134f3b23a9944afd711a9667a0b

SHA1
1b67d0a65ef91295207d66e62b682803aa74ef00

SHA256
25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c

SHA512
42c0b51e0e28109a7058d3fc03fa7bef8b25c9b3c8bb74933574fad06c061fd1636b53eeeacf652e438d4df08002db449681be9e6e6821ec23d32a8be1778998

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-bg.hyb

Filesize
3KB

MD5
e8a4f8f5238f9a0ff6968ad8dba2755f

SHA1
abf002ff28b3aa2a59948225e5e600096348caa7

SHA256
7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13

SHA512
b54811e1be6e63bf19e408ac4ae9da86e1473e4e8f1e9d517d907e025be20fa6979517339ec6defd0ec30613ed42a97d88111d39297214afa7606597cba5ea86

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-cs.hyb

Filesize
62KB

MD5
e8b1509f86508e807d61216614b3dd58

SHA1
b2334509e9d1589ad2e8b80c187018eadb15872b

SHA256
97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3

SHA512
fb340fef9d0dba342fd85b8b18c0090391aed717fe92a8da7c5d939dc9c0aa5235d4423b590e52b0decddd4f4ad8bd4652361161c193617601ff490dd1be97fe

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-cu.hyb

Filesize
51KB

MD5
b4e5921b1df85ba9f2ebe6ce578915f6

SHA1
b5f2e813667aae32e65cab9c9a0dd291421ada0b

SHA256
2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e

SHA512
41696a9e25ca004acdc8def265766392ce3568747560ff73cd08ac9fa4a99e4c4654fb84dc602845b3e444a8312fb099c72932471f7e830874cd7cfa184b63b7

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-cy.hyb

Filesize
35KB

MD5
b0f32ed7b4b8a068a962d820627b7229

SHA1
76734e58bd33c4d1450228bf05e53cfe169a02e6

SHA256
4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207

SHA512
8f20253985c217401627e0c7d31aa1bf213fa220bb498869e11e1e532c3c82dbc2abe6ffa27c69243913243af1aeb35806175511d77d730c914b1cadd71aa7a0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-da.hyb

Filesize
6KB

MD5
d0e160dca547eda390d6cc7c4a1f7ac6

SHA1
7eb71819675e82b1bb92428e07fa6b05cd1854d8

SHA256
86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd

SHA512
9be5f673962c6049ed1c796a81aa7be72a1c7715fc2d4610cf6565541c7bb145d068b94b5fdadd30bdb5f5287ccc2055ec1dc9e11e4c5b8965d59ef73ab145c4

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-de-1901.hyb

Filesize
118KB

MD5
dd9d0a81d897f88f76c1f6d69fb7483e

SHA1
520bf6111f902196591ea358fa8ab4ae89ee0acc

SHA256
8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5

SHA512
8c0a339d353cac1c66542bcfb7d41e7241a59a1886fe8a189aa155aafdf3bd23274f956d3d8a49be5b23cceafb516648a0e0b44f67e6f5ca60e216fb3f362ccc

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-de-1996.hyb

Filesize
117KB

MD5
e7a9906b316d478b55bf8ebcbbb1d1c5

SHA1
5688453de9afb7405960980dc93adf9296aa2f4a

SHA256
d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49

SHA512
36e6beaba33a16203f996d6e8fd987347028d590a4b4bcd4d2a129876c486e03b9ba13f279f301e91aec1e0f8e91bf109a27f2b464f15a3e1a2b56d03473b69c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-de-ch-1901.hyb

Filesize
117KB

MD5
c6773229845710633d3a4d6dd9800fc5

SHA1
1d4c2e5f3ddf5627164edb471e8a8177993449f4

SHA256
8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f

SHA512
ea69926520429cd934d52d84a7fcad6bc9bb654085d8d1de813e73f191ebd7b310e2e68b4bb43fecbd88cfd15ead7fe295405c01b7fdc225914b0477c08d4e01

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-el.hyb

Filesize
4KB

MD5
746a59e9f9dda15c0f17c1b72921c85f

SHA1
eb7f671af76eac40787d9227d41453b5117889bf

SHA256
76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3

SHA512
8894b754377285e2f3071fa5bcd714f249f3dc85bf3690641c6576b070113c1e72caa61e7e2c97d35a7f79b08c2969bc4a2fe46bc4bffc4ed58069387dfa7834

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-en-gb.hyb

Filesize
45KB

MD5
fa3dcb77293a058277cb148a0ff491fa

SHA1
3335315b13cd82075da2adbebe32759c01833e8d

SHA256
ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f

SHA512
c83a8c4eb29c3171fefe983c3e342b6af1bc1add7288c75c5a782dc14f12d2af83043c2b43c9ab3e5db61c91de6d7cb473746517debcff7ac2c0f05bb8b0971c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-en-us.hyb

Filesize
58KB

MD5
b2693233d14890c81d322bec948549e7

SHA1
7ea8e42e319305010d3e6568fb4983171583dd06

SHA256
03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c

SHA512
1bcb5a9c3db408fba6a6d02162a294c5c7264d4b202eb332da8d02c0c662cb070cf1534d5aa0754788d35abc88273f3337ca5f302ada95bcad077eaa52804915

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-es.hyb

Filesize
14KB

MD5
f6bd0377237fca3c4b7c6a6cb244298b

SHA1
b8df975889cfb06fc97db3d63a7820b7cf621f40

SHA256
137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349

SHA512
0a36860580e295122f5e49091127386edc762eedba80a2d7ad958ab33307aabcd420173e08ae797a19664bc830800d92c548f3e434bf19bfd7791e50e0c45c2a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-et.hyb

Filesize
20KB

MD5
2ae42ab807286f6ec0ff1876d9536b0b

SHA1
cf3bbe7348eaf2cb3d93c5cc10964bb8d1ba07c1

SHA256
10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e

SHA512
13c193571a7374bb169f6f0f06a9af7f8251cfcbf60825a85396c907d40f7837c8efd0a7bc8b6c4deed2bfca7b8508f132932d7860c2c9a4fb568d8ba2acaea9

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-eu.hyb

Filesize
665B

MD5
e90ea97070cfcfa795fbd807ac300d34

SHA1
8c83b4cd54d394aeff31b14a219f2a3562132908

SHA256
e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2

SHA512
210dd857f7799f1a926c7aa73f26912ad60723e099acf1566bc39efd445a1b194be4dc557d5da6874e7d75a37115aead9389b8009eec1422764e6648fe4cf8f1

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-fr.hyb

Filesize
7KB

MD5
092e0a95d6dada26ca56d2ed558749a3

SHA1
40bd8296e5e852fe725c7119083a8d5614037cf9

SHA256
00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7

SHA512
c04ba62f4a0336e9b25bd2f6a8c3cb82c8b6127c1c04fc173abc9bf03767a9ffe18c9241b301d6f71f79f3377bc990f25f099d7660880c097a9cf4bb1e4bd48f

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-ga.hyb

Filesize
34KB

MD5
768032a419e0ae3bd870d591e2173715

SHA1
58fd709a1dc40176fb72189c20567ac1950b9db7

SHA256
1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8

SHA512
4a4ca1f735b82f625002b0292f623179f2a6ce736f633cbfd6868e3db0709eb06eb462bd9da3ffa8365c3c38fdacba735ad32266cb3ec33d3e583ed073d0e3aa

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-gl.hyb

Filesize
9KB

MD5
1b08fb098d29c30488b8fc3f19dcf8b9

SHA1
df6e03da66a7a5ae4927334808c8c20752733667

SHA256
89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5

SHA512
de1de90bd44d8977a4a69d6c64bc90f421f5e099396d06fc2466de6ee62a59f5a59ac1ba0ea96e69dfcf744f12165a8a9e9fda73afe5d38704a7b3b0488a369b

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-gu.hyb

Filesize
655B

MD5
f6dc4e0fb974869d3d9457c582a38690

SHA1
e6708afa342639eb96cb97d1f541a421b2626d00

SHA256
af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3

SHA512
a778236fa8c5f28e747214d0ba0417aca1c9a95e4c013fbc21e6defe39d0421a2b27ccb27e6f248404a9f6b5cd1014574d0478078f36af2a0181872ac8173d72

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-hr.hyb

Filesize
2KB

MD5
1864e47e724bb7f9c052a2840eee21d9

SHA1
9749136107913d6570c0c46ae2b52e66d8284c38

SHA256
d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c

SHA512
2d6e76aed93652510f5864dde1e1923c67e7413e895abfa8fc7e8c9177e228e4d153afb7099b86697d1662ca3124ff2173f4aab2c978d52583a8e2dbc70c0842

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-hu.hyb

Filesize
309KB

MD5
37b1f197e8dfbafdac4597edcf673e63

SHA1
e672c6870417c71acdcda6c16a7185d7a868eb68

SHA256
8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1

SHA512
69ee820439633b348bf8efdd3c498a30270753e53ff78d022bd1b295c6c95e0501955009f610a12fc55c786a563b0af40d2b69a7584b47662b943acbac2d3634

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-hy.hyb

Filesize
605B

MD5
70ea4451c3a26fd7197a3d2188be4152

SHA1
e0c1390d94876bf2a3cbdecaabb0e335bd86355d

SHA256
9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a

SHA512
ac957947c51ea23a9b7ca482db08f0ca3332b8048025a96acb01a4486c1a87c3f3d08898e94cc8e0b20721c56ce708fb37e1bd81bee1fedba60a7f370d5ddaa4

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-it.hyb

Filesize
2KB

MD5
a4d5ec24d4c5ee745cdcdc019018074f

SHA1
15dcd0305508afe357eee16a543f4ce547ed500c

SHA256
f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7

SHA512
e9022473816f2ecf4b5b06bd6b28d75ec64fdff974a991aa522eb105e3aa8d23dda0a45e11040af4db32e1f2e8cfffc058bf29fea1403af5a724831c730719fe

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-ka.hyb

Filesize
9KB

MD5
aa6c771083158380b2631f01e3f64f20

SHA1
1b41cd8e7585dcde57fc0b40502328845e524457

SHA256
2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52

SHA512
f8cd93862ca2f76d769721bbf858955fc007bcf2e1892ae3e50846e28c6027208869f580479d3888610820ad5348a21a8709984aed844669fcaaa3f14199addc

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-kn.hyb

Filesize
711B

MD5
d986ac2e7c75cf3ef929a7a269ae0d5a

SHA1
de8bf2ee2b8a77102337c45e5fec924c6c02355b

SHA256
2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287

SHA512
5475c82fd5074334bc5f0f89edab62e94bc5865da0432c6f830b50db3045afda12bb698659951f6d0f76c55a43e1add8d47ad7fd03597bbe92d8178ad4783c71

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-la.hyb

Filesize
1KB

MD5
9aaa47272099a013a4389bc314b7d2ed

SHA1
20b5bf65fa2023e67ea0687f643b52eab3fc68e9

SHA256
fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d

SHA512
318b17b2e2b16ec73f231455d633c69fd44b32868c215053b3ccca54472e775d4589cbb4daad2fe37a40f79b6cde497f654654be009d485a84327e0f560fc843

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-lt.hyb

Filesize
7KB

MD5
970c2671eac4fff6d840dc122e43b7c6

SHA1
d849f8b0950dea8c45e60296f6c8a7ae2e0f3f95

SHA256
6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca

SHA512
c6b799aaaa714650ca39f8728bef6989e7e801508366caf1b384f021ee443bf21b3f59d28c2d9123a1f59b4abd3a27522cba830e431940e6ef9dccb5a319d581

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-lv.hyb

Filesize
37KB

MD5
05dfdb7f1ee5744573ccd62ae565b2c7

SHA1
754991bdb092e363b8d884246f4ca780cc9ab2f3

SHA256
65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993

SHA512
11675bc30f19161666f0d7b5ae001cd2682989465dd3f4973c455ba50eb1250e56fd1782d9589af2f8b3d6843a611d75d38e4ccc03a529a7b42cf403c482f2e8

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-ml.hyb

Filesize
776B

MD5
84a0a36ea2c5b3209a3cd40d1043230f

SHA1
a98436b640a8cfb9cffa26e89fee768dce6f0747

SHA256
90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888

SHA512
845ab7b075d3ec490c477af3b1f6d28cdc83289d206d079730f69ffd32a0fadb04eb3c9539e4dee6dac080489aea9f3365a20810b4bbb229c2aea3558bcfa1f5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-mn-cyrl.hyb

Filesize
5KB

MD5
07cda8332b62726883b29290ca35fc89

SHA1
2e3e1a7e4484225d8e25a59695e86eea9f516ec6

SHA256
0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0

SHA512
a55a5a7ad3e6b084bb15d360a732f344eeb59e0ecdb8a431dc9379653d3cd828131daf18dd91b6b45001aaeecbaa87e1afd6eab4a795373dca1c4e68c7e0cc85

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-mul-ethi.hyb

Filesize
3KB

MD5
b42317960e5da868a8120cb79a440abf

SHA1
5bc583fe2bcf8d9ef971c66a5f57821aad1458cc

SHA256
f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b

SHA512
c26c686f7a1ae785a6d5b5856670cf9b7bc48e4a388d2e2922b21fd6c0124357acfeb73b370ab617c5ed4b033d945fb3c7cc235a661baaa7fb976dd6edec66c0

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-nl.hyb

Filesize
75KB

MD5
d3bb05944de3d0d7186e7e9383805e2c

SHA1
1b1ea734d900f8d766e7226fee09ee14fe606a7b

SHA256
5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca

SHA512
5fd9c6e5e4f060d1b37b7e80f162ab10c1efb24258a5bb26c89469004191ec5517e4cf4c1c7724c838c62b5358d3c95d515c1ee4a5b001c42c3325ce1d11a928

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-or.hyb

Filesize
647B

MD5
7e265a294303f69aa66c243f5f474463

SHA1
4d382ab4bed3dbe481710f0c651ca87b2394661d

SHA256
4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b

SHA512
d347d422249945c9a664be3c48e1ec07becaf03bd3525869f06c9aa328b4fe2884ac963cb97949d97e5ab41617b0fc6f2a2171f06007bf94cce88d55a15da922

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-pa.hyb

Filesize
607B

MD5
0f27e5bccc1cd9ddf3eac020da27da57

SHA1
bd3c83300aad3e79287c1e806e864f7644240911

SHA256
470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a

SHA512
141da09a4a1a3b9e581751a1b2c70cbe981e1a915ea538a8015c7614d11be059cd3a03b4f2420f963e5657a4417b3cc5c3a22e0028132a21363219e27751ccfb

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-pt.hyb

Filesize
1KB

MD5
564ff32ded64c6bfc693f2758a53d68e

SHA1
3965f963d36bee1598683e72c857a3bff196b295

SHA256
f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8

SHA512
e9e574ba07703295aa8b7fd4603ef079816ea44394bd62750e08e523b9a7b408fd979552d90d04f825242ccada7ad66003fba76c9c8469541b5c6d2fb85c41e8

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-ru.hyb

Filesize
19KB

MD5
4d132ab42e0c8abd3ba93d8b34bdbeb3

SHA1
f3ce82f2dbdead517d5faa4490e1975ef8fafa6e

SHA256
336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614

SHA512
eb8e27ab070db7407f1ede29751aab4a88f4182e878e956cc51d0ed9ef2c9afdec208f2f4700551374c5a7f69c176ed7d6cb771ac17c3eae77323a5709a85fcc

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-sk.hyb

Filesize
62KB

MD5
cea295e8b4b99f95738727905a9184e2

SHA1
31db6c826fd7830bc76f0ac1b9d21c2ef67f8b1f

SHA256
138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c

SHA512
b20f651c74a070a4d26b58bd8462e553077b7333a2c854f7974a7e67bc442c3a6feba52c3a537fd9f1579d5de0126bbe1da4be99aabee79b7987b2edfdd8ed67

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-sl.hyb

Filesize
6KB

MD5
a21358dd4506643486f72f7d80d60a5b

SHA1
fb7ee02adc970f4d71c84d18777a59508fa1a46c

SHA256
ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c

SHA512
7dc9e18050b3df4288aacaaffdb17668f0b5d8b5e103305070d2ef83dab2f5dbe3b071b05ca69340d86a53d47d4cf8197ecc1bdd086a320bf81f9df8c0d3ccb8

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-sq.hyb

Filesize
1KB

MD5
a22d0f39cd83f3a8e251f95c5b12dd31

SHA1
24915151b31525a0a9ea0ef7faf8ddb8b3faf11e

SHA256
bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca

SHA512
ad319fc85aa612bedad8289a20fcf42d4336c4b3ed704ce74c6c0ed68e3e18d62c18549f8a5efe5bd481d8def514f2c6b083803485e04bd5919bc600501c0e00

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-sv.hyb

Filesize
70KB

MD5
892598dc59ce71e68ed337ed9ff3abc1

SHA1
c89af0d28b8b769150981539ec2318e34df29cce

SHA256
56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1

SHA512
eb13a68ff5cdd0edd73ce4c109984b3e58763812c31755bd55c0a324048873f610e36d1c41b3f642a64f7fe0945ee872a02fde744d5821aab03a2288851d984d

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-ta.hyb

Filesize
554B

MD5
ab2f6f9696fc7d699356244725e7c778

SHA1
2026841da77dd77715b521ec73bf819d1d098b60

SHA256
40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67

SHA512
88a4c2117102bdb60d482448c36dd79a8da1130a4636513c8ed56eb282da6c638d27eabc9799eab8bc1a7234a0aa6690c55408500608387912fe283f13bcc328

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-te.hyb

Filesize
703B

MD5
bf9df63b3c97de3bff99e24ee4bc5f2e

SHA1
774659cf1d58bcfc69900315281e99e038cd2a97

SHA256
516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29

SHA512
52f40a2c38cc62aa6b0e081c90b9dfcd6d3ed03a4a90e596e11ac85bfda96eaa74d465cd7168b803c0d59a53df878b0ea1ca657c5caf3de49c8758cbd527bee2

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-tk.hyb

Filesize
2KB

MD5
ed60185b6f455b6f8ed27eaeb73334a9

SHA1
11e53bda5e2a0acd000692ad8af45611b57277ad

SHA256
77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd

SHA512
3ef211a330efe9e34468c9c460dfcda1b8da80d113317a177205c76ffcb916ff25ffcb4485703fd01ee248d356a67e5bb18df8e5ea40b2aab3999121083b7e30

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-uk.hyb

Filesize
18KB

MD5
0ec028755f0cd9ebba41fb7273de8baf

SHA1
a8a784454269a2769710fb3725730f06cdd7b242

SHA256
1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786

SHA512
024c611ebabb0a84b5a887d808e24884ccbb4550f222e651728451cddb9a941d7d9a39786ddfe4a57d049dc82780c6bcf376d3e98547ecc4808fc7ed32ed47a9

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\hyph-und-ethi.hyb

Filesize
3KB

MD5
4aa9b2c0c9ccde5140d01dc6502242bb

SHA1
d1759e8a62a42a72529adf9bc73820bf32f2a37b

SHA256
1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285

SHA512
1b456301d814810e857e8a0c426e703a802febb5c3dfd8d0e5c58aeefc6c2d6f55c95830024c243d2bfbb8322ef72e9ff959cdc7f92ae51bebe8b053d9cda1e5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1858239074\manifest.fingerprint

Filesize
66B

MD5
1d09a9a5e62b846125cd7b929cccbe44

SHA1
5271237c4d13f7735689a5acc52e48c491669aa3

SHA256
1703e4e777b285aba435e71256890a5fe92d24cb01e0eefd03baddca228eee2f

SHA512
cd2a2acc126ac6a7dcc81088047c894a427a44c5caa96003c1f3521beac3b46c117f0794e564838de14a18a3f65cb7988ba86b404e690ec77a57518247c03fbb

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_1904784867\manifest.json

Filesize
85B

MD5
c3419069a1c30140b77045aba38f12cf

SHA1
11920f0c1e55cadc7d2893d1eebb268b3459762a

SHA256
db9a702209807ba039871e542e8356219f342a8d9c9ca34bcd9a86727f4a3a0f

SHA512
c5e95a4e9f5919cb14f4127539c4353a55c5f68062bf6f95e1843b6690cebed3c93170badb2412b7fb9f109a620385b0ae74783227d6813f26ff8c29074758a1

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_461029844\manifest.json

Filesize
118B

MD5
3e4993f878e658507d78f52011519527

SHA1
2fce50683531c5c985967a71f90d62ab141707df

SHA256
a2fb35b03e24f5ba14cbe0e3c3d8cb43588e93f048878b066fd1d640ef8e59cb

SHA512
9d24ef876ac989e50e9d4d06732a4c4f61e12df366b3d4e5ff93d6a60badac36c3e55e7f13c2539ecb525017490a887fc56580ef8e83483019041ad9b13358d5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\Notification\notification_fast.bundle.js.LICENSE.txt

Filesize
551B

MD5
7bf61e84e614585030a26b0b148f4d79

SHA1
c4ffbc5c6aa599e578d3f5524a59a99228eea400

SHA256
38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179

SHA512
ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\Tokenized-Card\tokenized-card.bundle.js.LICENSE.txt

Filesize
1KB

MD5
8595bdd96ab7d24cc60eb749ce1b8b82

SHA1
3b612cc3d05e372c5ac91124f3756bbf099b378d

SHA256
363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831

SHA512
555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\json\i18n-tokenized-card\fr-CA\strings.json

Filesize
2KB

MD5
cd247582beb274ca64f720aa588ffbc0

SHA1
4aaeef0905e67b490d4a9508ed5d4a406263ed9c

SHA256
c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5

SHA512
bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_558995817\manifest.json

Filesize
121B

MD5
16f004af39a3675a73f5c15f6182a293

SHA1
e7027edbadfd881e03d8a592ae661a985fd89cd7

SHA256
4e5ef1851bc910ceeb59a63bb53725cf5d8149feff9483e960b54cc26fdc419b

SHA512
8ef0d80259b5a38424676918f07238a76c527b643267008999dc3b2cff5c93e29ae85cbf0605f0d0b4f880fd6ae96254ebd30e5b80097eea95f5d27b5d461ff6

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_603064891\manifest.json

Filesize
176B

MD5
6607494855f7b5c0348eecd49ef7ce46

SHA1
2c844dd9ea648efec08776757bc376b5a6f9eb71

SHA256
37c30639ea04878b9407aecbcea4848b033e4548d5023ce5105ea79cab2c68dd

SHA512
8cb60725d958291b9a78c293992768cb03ff53ab942637e62eb6f17d80e0864c56a9c8ccafbc28246e9ce1fdb248e8d071d76764bcaf0243397d0f0a62b4d09a

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_905967435\LICENSE

Filesize
1KB

MD5
ee002cb9e51bb8dfa89640a406a1090a

SHA1
49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2

SHA256
3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b

SHA512
d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c

Download Submit
C:\Program Files\chrome_Unpacker_BeginUnzipping3652_905967435\manifest.json

Filesize
79B

MD5
7f4b594a35d631af0e37fea02df71e72

SHA1
f7bc71621ea0c176ca1ab0a3c9fe52dbca116f57

SHA256
530882d7f535ae57a4906ca735b119c9e36480cbb780c7e8ad37c9c8fdf3d9b1

SHA512
bf3f92f5023f0fbad88526d919252a98db6d167e9ca3e15b94f7d71ded38a2cfb0409f57ef24708284ddd965bda2d3207cd99c008b1c9c8c93705fd66ac86360

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log

Filesize
2KB

MD5
2f57fde6b33e89a63cf0dfdd6e60a351

SHA1
445bf1b07223a04f8a159581a3d37d630273010f

SHA256
3b0068d29ae4b20c447227fbf410aa2deedfef6220ccc3f698f3c7707c032c55

SHA512
42857c5f111bfa163e9f4ea6b81a42233d0bbb0836ecc703ce7e8011b6f8a8eca761f39adc3ed026c9a2f99206d88bab9bddb42da9113e478a31a6382af5c220

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.9\protocols.json

Filesize
3KB

MD5
f9fd82b572ef4ce41a3d1075acc52d22

SHA1
fdded5eef95391be440cc15f84ded0480c0141e3

SHA256
5f21978e992a53ebd9c138cb5391c481def7769e3525c586a8a94f276b3cd8d6

SHA512
17084cc74462310a608355fbeafa8b51f295fb5fd067dfc641e752e69b1ee4ffba0e9eafa263aab67daab780b9b6be370dd3b54dd4ba8426ab499e50ff5c7339

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
690f9d619434781cadb75580a074a84d

SHA1
9c952a5597941ab800cae7262842ab6ac0b82ab1

SHA256
fc2e4954dbe6b72d5b09e1dc6360ea699437a2551355c2950da0b3d3a4779fc1

SHA512
d6b1da8e7febf926e8b6c316164efbbac22c7c3d9e4933a19fffba3d1667e1993cdeb5064aa53816c0c53f9d2c53e204772de987eb18adbb094a0fb84ae61fa9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
4186deae4245fe06a0aaaf1570cff87f

SHA1
b5658232adf7428b894a29652fefe7dc7bab3414

SHA256
f3c343d370303196c05e1f89dfb367b36f4beeb5177822f2e0cf126d83fa08db

SHA512
e8c21213b40e21858b51b8eb63a2e61b78d036de60995adb7af0971ddfa24a1f777025fa37590bcddb901f70ee1c44df2e997d5234752c20d85b198b0a46d775

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
1e234558212e1fce5c2e318d25b88a13

SHA1
44220b5d1e843f4545cc401cf3c029152ce8afac

SHA256
23ea08d7499cf8e6a0a6fd528132f64c3be62cc36c2fdfc291c52bd360fc5769

SHA512
f456cc7efead7022988646b11eaaf1f0c7502a178c958f71a9961313a895cc4266e7e2ab48d36f0ffa6160a5dea682f4fcb496db1f3fa707ca6c3979272a26a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\90660f57-d608-44e3-aa3b-120e155479e7.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\000007.log

Filesize
21KB

MD5
2a8aff9c31b2cfe619bdc0fd8e15a5b4

SHA1
855f1790df0dde252d7fb519aa2dd55914803013

SHA256
1b7d7dce0f28941befb5b53a464e0aeb12169b22ab9547c3261d397a71c069eb

SHA512
bb76342ab8639ab9f560404d56a923a49870f70711a4283dd8cb474c0cb9f8a5ca06b3b090a9307543b2fdf1f9e95ac946b35fa27372922829f4c4fa255ffecb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old

Filesize
357B

MD5
caa685d51b8bbe60f59397059e5b9d64

SHA1
6538e0e1057cbc1b0f01b13f51174155c553ce01

SHA256
5904d94d949976a4a9c2282bc70f95a8c6126855b854b4a1283c41a55dd398bc

SHA512
f4c5692f7abbeb665bb9969430ead3df8d6cad5e947f5cf9271344db16839b91b898dee5ae75b2cf155bdb324720cd1d6e3c7a42d1c0bfb1056d1f463a873bb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001

Filesize
268B

MD5
91a46703d1abf6b640af761246f0bd2f

SHA1
1a39e0f688193079440f92758e5cbed4de6b9ef4

SHA256
88b605ac8adbf98dddd40e69419d43610d22eff45fe6151871138f73516ac0e1

SHA512
da35f00bf7d542dc47b17166b0d97c233b02bdb6bfaee17bdd20227889eec9eeb71cc14213422e309a45446416bb4aac0de087a41cc36f7a2514e8a1ff7ee62a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f

Filesize
62KB

MD5
268832a9e8957055a254098ee690fba5

SHA1
cdc89899778b04bf2c39d455ff43a8d9ab6ef319

SHA256
0c0a5c2dc82463fddd94c6989fe51efd3752b15c05b8b4adce7ff372aced56b3

SHA512
9daf5644f5b5df0b1d0c34f87307acef8001537ad8caa91fd6f8d7e289806d9ed828620b3f61398640f3d25dbe851ee03981c2e179ce3f0bde7d7412da82baf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070

Filesize
114KB

MD5
1c880af05f9cd8fc6a57cd182bcabd21

SHA1
8fdbee2d68cdcfae90e1994a067a2be6d4efc1d3

SHA256
a29ad24a0b8477fff121feea7f4eeeee6aa08f24844fe632d920a340fbfc13a5

SHA512
853157f21cd434deaf17cc28428061e14b62b9fa394a0f4bc8d4b4958c68157395690b50f8b5c3a99c082c78e2439af6eddd2e31c52aabdd84cdbb93ccb3b9b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000071

Filesize
318KB

MD5
985a240be4d6cec3b291108d29f4b6f3

SHA1
7ee559def0f31ba3584a43588335cd32bd7eb165

SHA256
8bc8427714dc4a4de46e1526439e368402292ebace48824ff246e5cf1904d0f1

SHA512
9135a122acc62495714a5933e980bbaeaab157db03cbfe816b3c3e4906f21b0d050cb26bacb8bde968971fad99ab216b3f501e25f6d10cd295831b97e47ea646

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076

Filesize
17KB

MD5
2af0645d8798834a774f014332120c5d

SHA1
c1f9a794c35d75cd3196ec52e457467d33b2405b

SHA256
42d25e75823f99564c199e3dc486ff8562ce77625ea50ee07385df687296f69f

SHA512
02f4f88fe66c2b46ef97d7ac501adba784b2ab0c960a794611215fda2dec4912bd36c5f2a7912c4b3422407ab3a5de56fee7d1c02b08c161477b28fff4fc5911

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077

Filesize
16KB

MD5
c81d1c429c4b7de451d713bf6248f475

SHA1
1f882d294691087807d77b1d81864524eabad3fa

SHA256
489eed7a13126c089692b9c2549e830ed1a312a6fe928044cb8e872d25bc02ba

SHA512
fef858adb359f9b1d6b271a24cdfb67fe536581805a8529c7009c4fd8cc9b6d4d48925b13cb05cc652e61091c4e25f5d47a13259413e3102dd2c833d5ecc2b40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078

Filesize
51KB

MD5
088e6e8d4999f728ed48f3289115cd2e

SHA1
a887850093bae3900da0b06561d70232f47af82e

SHA256
5d06fa56866b005c26f9b79651c9a5fcc56840d4ee1e6a5b433141ad2cff14f9

SHA512
fe83534f37408b44bb9366ec5d8ab8e24546a9402e274807383d5671323a1970037be5ada0d2b53a6e099f30faea5e0c079139fb95b254da8461b63060cd017f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079

Filesize
37KB

MD5
9ac06ba71cc5803c7515b3e8c3a2854d

SHA1
03ba918aad85dda720c6f46267eb4fba9103aac3

SHA256
6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd

SHA512
8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a

Filesize
30KB

MD5
aa3e9ab7989d9c695c98fc750957670d

SHA1
4022d553f4952fa7c7b57f00942b202354b66acb

SHA256
5e0813c96779ef092cefc6e77fa90de7a86e307f04bd6d64f9d37a5d9a8fb4e0

SHA512
e3b681724244c3834a9d24d92c3b3817afb553e1a697c58b21d84e6a8ba1c07cece4b14e1316c6235436768b2e62362169810568921d660efc576536ec41696f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007b

Filesize
89KB

MD5
a559fabd609c286a2452dded0025d0de

SHA1
e5146c640f59716f6d1fdb21e61d0c6623ffa808

SHA256
3ad5f5ac3b11f914bac61c2716ca220b0e3796faf23d676b62bc39f83a581dae

SHA512
e83eacf978385cb06242ea770a6ef9632eacf977efe4ada45cdc5451a69932a927cf2e455fdca1e013d6a3f0d99e7f76a2dfdbe85bd3ba6cec86940e133ab888

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007d

Filesize
22KB

MD5
778ca3ed38e51e5d4967cd21efbdd007

SHA1
06e62821512a5b73931e237e35501f7722f0dbf4

SHA256
b7e1bfadb8d9c061f17a7234df012df7842ab1aa8fb6f9579fa3f0a3b4a75bc0

SHA512
5f6f02099ca8079305fb7e7f43ae4344d522271fe30379c0854d6a81b7d8adf408a50a4b799b5f52e6ed162ba6ce7fe97e24a2b9719df780e75683d3aa103d09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007f

Filesize
51KB

MD5
5f83f12a5b3180468ce64458aa86c3e4

SHA1
20cfa48de17422a1a0c5c4c58aac9d1444a89b71

SHA256
51ef2a0485a70d0b38d725a58ba83b70ae36016e4370750589f209e66aa32423

SHA512
e0a47040494d81a594b2043e167e256c861f7ec5d701f29717fd3275326169a550ed08a70278e80d8daed9e7dc8756a3b7fd3bf57f5716d8e7d5ff9d396dfcd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000080

Filesize
646KB

MD5
16ba39de97a7242f8ef0e22c914f439a

SHA1
976e1dc1c285b899f96dd2e773f2f12badab8220

SHA256
3adcc0efe60b27d0094e0b0669185bc28b93e9542b31ef5fa3425d9972c9777b

SHA512
39ffe0c69a5ae452df9d2392fcbdf0e280652d19c41cbb635a69de61134426069a0df79b706722436bf9b01dcc54164c691553131362dbd2924eb53772dde929

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081

Filesize
246KB

MD5
c2f28a1a77434234777d53512f4f8a41

SHA1
33e86b0503bc27deafad59b3fc44e378d28ce10d

SHA256
45730a6949508c896a45d77f42431928a142f9908989be9caf704eee2b321c42

SHA512
b24733d26448abe0d15b85c975ab22219257cbbf62b46d1ef40be87d7880fcb8b5c17ae56d01ba926330243c7e1946e1e85dbd5b9981b202a5579babe4ac0ea5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000082

Filesize
1.6MB

MD5
4bf3d1430ee33cf53e0ee3d8c17d3b1e

SHA1
a8dfefc97879587fb321530436d2576ffff04d3c

SHA256
82d1de06468b24967860461c20368d84c5732252e72025364972e23d8417e6b7

SHA512
b2cfaeb6b659c974bbbbca9af02d0123ed3b5dee44057c7ffb70863745d737cf8a0d1e9d1f79e871d31e0370b3f1e5d3fff619f5d9fe2840b17749e4e9ff9de0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000083

Filesize
18KB

MD5
8eff0b8045fd1959e117f85654ae7770

SHA1
227fee13ceb7c410b5c0bb8000258b6643cb6255

SHA256
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

SHA512
2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000084

Filesize
19KB

MD5
09f06dc8779538d600127cdd7771250e

SHA1
7b04c88fbf26cb6d14078486a7c17e2f61883f9c

SHA256
cadce459fc63097989de5a6646cd8aed6f4aecadb9cc6f13e78a36d4c3706b1e

SHA512
b8781c9e953714386d22dd54dc3dff9cf9693ef0b8ed50792e4fa632c99a474eba06a179bde7e7f64843812b9986caafd82509c7314facd36dc0b9a46d72ddfe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000085

Filesize
26KB

MD5
12789d6786e8950b928583ef45626d3e

SHA1
8872c65036cb3a39fbd7eeb47044742660f5cfeb

SHA256
b7911e85ea76b19ab41ab9168e16ae8d9cf0d6e1682d29f70a5785bbd5156f7d

SHA512
2f7829c71e4c31057a02ef1ae79d7966c326830b8be11dc01d136176e8e3062476505ba2d83b68bc55a3168dfcbf2a33da29d1431b8808d55174d85ad4ec8fa9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000086

Filesize
34KB

MD5
25698a23280e505bcff47e65959eb3ca

SHA1
22257d1eb70f22e244ad182bdd16f7e041417eeb

SHA256
1d72bf90933f686542b301610174f450716c165ecfd48e21f966d0b1b6758e0f

SHA512
0254b0f7b109e13d5c9f5025fc4640a03e17e25e16cd98cefc232672b85802c55a067806c54a31870a6cd5a92b7ba830306a8b8f14ed6662931d036b325f4c08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000087

Filesize
34KB

MD5
3d080648de0523643da0ae8463ba5769

SHA1
5013c7dd096b2ed1be120f28c4c3523a07d2569b

SHA256
a2476cfc404a7b3a4c05f01adab2174f43c911c535984b19a9f2bdd194261675

SHA512
150b98009d3a114bb8a6c5403b1ca8d27dd6931769e90fdcdd9ac5fe7ea4752bb1df00df5b3f62742fca4edda6fa531ce2e7a8be7fc082aeba8182c9a23acde4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000088

Filesize
24KB

MD5
11f2411391ab5e5ac123ae10af2295fb

SHA1
1a7c04275a5101422b62d6696c47ce1c30e8c2bf

SHA256
b98796de1053c6063a138f95c184865e8b4834babe59e7b8be84f27067124cf0

SHA512
c87d8e9d552818eb5f6068d98a5b5386286ae4ccbb45d93c98f3712143bbd7fe5e77ff302e1d3aee014ca6888f7994b7a5cdb2f379586b9b6bd5d55584499637

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000089

Filesize
21KB

MD5
7705b8d01bfbdf27e271c08c8a6107d7

SHA1
2f49ab6cb0b8603a5af9b51dc0e0f152cd1cba37

SHA256
cb8c2f955119fd927fbd6232753a97e7401d5ddafca9d6d42c14e14deafe2d71

SHA512
4ea3c18b33532ee6271d19fee28932898320ddbec0b87e05fc4b6f5a953cb7b058c6ae7e1371b2818839fb634e5bd2169453100b7d121f0e378698cfb228c525

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a

Filesize
18KB

MD5
115c2d84727b41da5e9b4394887a8c40

SHA1
44f495a7f32620e51acca2e78f7e0615cb305781

SHA256
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

SHA512
00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c

Filesize
31KB

MD5
2d0cbcd956062756b83ea9217d94f686

SHA1
aedc241a33897a78f90830ee9293a7c0fd274e0e

SHA256
4670bfac0aeaec7193ce6e3f3de25773077a438da5f7098844bf91f8184c65b2

SHA512
92edce017aaf90e51811d8d3522cc278110e35fed457ea982a3d3e560a42970d6692a1a8963d11f3ba90253a1a0e222d8818b984e3ff31f46d0cdd6e0d013124

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d

Filesize
18KB

MD5
c83e4437a53d7f849f9d32df3d6b68f3

SHA1
fabea5ad92ed3e2431659b02e7624df30d0c6bbc

SHA256
d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

SHA512
c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e

Filesize
41KB

MD5
350fef14b9432c8888714f9d69ba79fb

SHA1
f02876195e3b3628384124d63cbcb3606a06996d

SHA256
dbb362d29b9b4111e7722bae880e8a79ef8efe96db4cdf7869195f5cd0066fc5

SHA512
8fab4f3151a81a2cf0465aaf245d507da97c230eeb86dd6e9cee798e4d8d953aedb2e7e4cc004fdc8a5f7e8af0ded27aeefb4c626ad61c95f38572e13d49d419

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099

Filesize
20KB

MD5
98cce929ec9e4d9c2fc864ab64851ecd

SHA1
f473a7b21d6de8b8a722f145d49fdee73c73a00d

SHA256
7ecd6269ae167a57788a80c190a2da32aead27da3f7aca41a68e44e506df1d45

SHA512
21f86583e3c3b44b3cdda409f8ff604ad532ba77ecd4715409dda67ab901b958caea95e42614745b3e92e54492e2a046f2d69416d2136dbf08a6b2309fab83a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
4KB

MD5
38cbc059b12c4f2049d06bb5a51b2ffc

SHA1
8184dea4906c6738f132b08ac73ad6755e8250b1

SHA256
46ae3440cdb374fd3f8961a1600662fd1b7432baf0a69feb8933601628c18151

SHA512
1ea11cb5a0cae43384db4b1a4481b66c55648acc695351cc3dfb24fa03e9202bbc9088a9f5084babd96881d6c95e8f5e4b5743e69f7f73df1b72535ac5582e74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
82b738cfa8c52a47dbec255666396175

SHA1
fb350699e72a262d45d315b6b6e212d7503e5260

SHA256
dfb8af6cd05a3e1359f77a2c800bed3f1e64c62df2a8e74d36cc09eb6f00da6d

SHA512
b04a9b2069c203b28514bc0bf780fbd1c261acdfb8b48fcab2b320a2a0f17830380932a16e317807a8b80db91caabc5988ce9eb74ffd26c4a0d7cef72ea834bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
de32cc6505a7c316dcef60702e15e4e0

SHA1
6b465bdd4e4feae7da9fee062cf1c45490810c16

SHA256
96dedba85272aa61eeed39d8323994651354eb141ebb1cf7b915864d5eddd7c3

SHA512
6359a3e311dcd919be23711ff54dfb182c0519ff1b7466ae2693b02d2533100535c4dd05da1f939b71a901e631baea63bb2c39ddbf91053f76200483cfd7ea3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
dff4f82d8031af97d41f287976134142

SHA1
1a952171cd9cf71e7910ceed92807b16d77196eb

SHA256
ee2fc9463c7e275ef4d7dc48e702b1ddb958d3d5d678d3ea85b5d52f556002af

SHA512
3f468639711025fc727d36506f714fd2baa497339852e15516b806865210b26d1dc681c6f1019da42e6da47b475280eaf9faa7808ebfd7658e411f837d108359

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
1f40d422d13a5fd660dfd0fd3a0dee4d

SHA1
a6b3d0d730b70818197b606edccdac650f692794

SHA256
a3e15e40be9aaf310e6e114ed57f3b5aaafbbf304e15bcc6271989fa7527146a

SHA512
3f0f9e4156b849af052a5a4f43bf973caa0ec36065ec91614e456eb21a4797a87623b67f0d54fe9af47267fa3d5f6c543d1ebb0e707d1122bf0510caa28b1c3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe598a06.TMP

Filesize
3KB

MD5
ba61f23754219f986dcc9d94ca46f86f

SHA1
9aa558a4d65ba33f42f6acabcad5a953993d3b1b

SHA256
8d266a3ac96dab604eeafc09ad2a1324fa2a9fe2047287afc47704f4319d0df2

SHA512
314a2f2995daf3622c5cfaabeacb55af717fccaa75af37dad5659fbbb72b2dbdcc99b29f7df4298c3d0ed17a2e5dadff184ffed20e66b6d08d8540dee6e44245

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
40e2018187b61af5be8caf035fb72882

SHA1
72a0b7bcb454b6b727bf90da35879b3e9a70621e

SHA256
b3efd9d75856016510dd0bdb5e22359925cee7f2056b3cde6411c55ae8ae8ee5

SHA512
a21b8f3f7d646909d6aed605ad5823269f52fda1255aa9bb4d4643e165a7b11935572bf9e0a6a324874f99c20a6f3b6d1e457c7ccd30adcac83c15febc063d12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\000003.log

Filesize
254KB

MD5
13e08d1331b16a0a6c3a3a075a1d345f

SHA1
23fc49236aa73117579570cbde8c4c675a2b88cf

SHA256
c39565e4b11fc3ddbfab0fafb17172319e0b84ff2c9f53f916eeeb1014ccf6e3

SHA512
d08465080ce06024f4878e98674963b879ccc7d693c0010b0fce2139ca15d3f0f08eab46330aed5ed2576b304f9bc1cb7ac412946822b8905d65f56938c6f7ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\LOG

Filesize
351B

MD5
8f8ceca44de8041216b33dc25ef31cd1

SHA1
db874ceb2bfe05866c4f743d1132d2a0944d2e4b

SHA256
0b94ff856379f7604b649c17ad2a3456415f545c7c324d8ced521e7f030aab33

SHA512
280f7a5ee96ee97999a9da67c990dd6f993743307f7b6a7bafff3d12e0504602b45455668b37ee2d7fa78090ad670c28cd8c103210effd2e1f2630b88f8cf5a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\754b3ee8-4c8e-4996-85d5-b88df47a2a0d.tmp

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
17KB

MD5
7169f4e95f3aeb8dceab9a809854ee8c

SHA1
d10ee944cdf499ce330a62b935cb28ee3cc99df4

SHA256
5bba0cf78688c1a98e0574e73e866a3a60664d7f309b96c6133fb4832f20ec97

SHA512
ad5de9fce426c34fc915428ff59b1bbe440ba8bdc9ce99a6735a6485d8e29592b316884062c5c05efa93412a104cb4130011c3014a4c1105f1b9021bc854b6ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
18KB

MD5
25c7b4c8cf8990b2ea7138bf36315476

SHA1
d532c06af29a2bc8d1fd587d19740be399a3e8f1

SHA256
f04e4c755eefaff248ab4a5b52b209129ac0b1529ab3d09df118715952f8c229

SHA512
567412d42f0dbc16f43197238a005179285766cc8838a6f20ea6c19e69ca571e4c8a739435e763ffa122df038a25d062f4aca634337985bb81bf00c8ec185385

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
9KB

MD5
428b746bfc028f90b7251d275d4dbe1d

SHA1
823f9b31ccf9bc576d0f7f5c5864f48a0d49851a

SHA256
12e7f6239732b48d74e6d3bef05c4e62e0b6c16ca4dd13292230153f3e433197

SHA512
54866a4b404a5fe2b6eb18fa31b6f909dd42c536ef2eb35516c9a872f6d7c0fcb1c8eff79a6347c48e6c2e587a0645b2884b92d0e5eae91dccf69152c92dd79b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
13KB

MD5
6d84f9ddfaca1dfd892173553d45b33e

SHA1
8d368d97db9dc8c98556791345e3433ed98aca1d

SHA256
5cd1bf8eb91ef62543335482bb4c54e247dea178a12ec2979b0a49ac5a2da4b1

SHA512
2b4d4caefa4e78f3b3c86d84d0551f330ebc579f92636d2ec0ce305cf4c6845fa9cda2aa0810ad9e6e19541a597cac4d9e37de1cc161831813a2b4898912899d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
21KB

MD5
0a59adf99abb5be4d2afd01d8b5ecff9

SHA1
669966286aa2ea14fdc4f382fa3f54ff227b2ce2

SHA256
7e8e8daf84868966125e3d5aa8db9e542b7d44b847aee515ad801332b999da3d

SHA512
ae793a901222805007012c7b41cc15bc4e43a91de2d7fb7158c709cf16cecd1943d87879dc65662cf9277210f3cf1e8e86cd04b8871e0887fe9522a7173190c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
24KB

MD5
3a48c32d74de0a2a7f8d663b803169b9

SHA1
c20bdb705cdd5ce5baf16d87f30c707fed632bfe

SHA256
11fa504a58f5a5e74e3cba2d9828a544bc38e56c0a096c7bcfa59102638256a7

SHA512
c93d2065efe615d4e2b23c6cecf55256c0ea76bf176ee568269910fca129e13b2e9f40065cd4d1fe492b965a75f514a0e4dbc78ee0d32a4a5dca62ea726527a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
527325e46ae1dbbfbe57d91ea3e17d0d

SHA1
f5fd211a69bcc11284feed13ae6881d3a1036655

SHA256
c3e7d046b3c43adaca7ed5b1ce34f99088e6e1f5d0b013ffc73f31db8119ded0

SHA512
bad5ba5cbb4d2aabcbd85144420a3c0fcbe7ba5e157983976e02985fae2379d66fb18b33c73840aa4720a340c4d99990ae4db2e1c6b65139d289be207c8c1ea6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
8036b72119e1e59a4c7811ed44b31b21

SHA1
00e974aaa7066b5f3699a5ad8cf511e44272813d

SHA256
58617a9cf0d3886867bd14d4eaa8e02857b11c434f06961c87c83d5b2c2e1f33

SHA512
3bcc86572755bf13b644a761ca22eb45307d6027fdc26f72fe6a55ad908f6f2b17f1c209787461ad0b87f635407efc19c92646bd7e8d0a86a97172988210c55a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
de07bb9c0de41051d4daf0e8ebece268

SHA1
fb4f734b5bf3362cfd3b9876735fe8877b9018e0

SHA256
f02e6aebde944414f31e90a7f77ac65587c804fed8b661cc41aae5e7ed755fd6

SHA512
d3cfeadb194c3ac5f4fc28dcb0e813a5d7a1f1ab0f8916c7053f2e9de1d0359518721f4413d605db9439e17f771dc34db642585737fedb6f5b3199a2c4de58bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
41461287306707aaa9c2d605db55a296

SHA1
60aa6a3dc9ca818d6aa8769a7d9188c0aa9fdbf0

SHA256
ef442c892004cee3e745398c73433c64ecb8da2be5867feb0a609bb71eadd5fe

SHA512
eb689082a8456e8a22f7be7d5e6a84c440ad0283b4f3635ca383309dd5eac13c7618e7037b78f950d4e9ff3631f2a2e69a840bf8d73b4f75bac27efb0401ed4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\6082d3e2-6aeb-476c-ae7f-0491b11fafbb\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c69a80ef-421e-4e72-b064-b8726f24780c\index-dir\the-real-index

Filesize
3KB

MD5
3d00501b9a605ae26af260f5a9460a9f

SHA1
e9d04937eb27949d326f87c67c80aee3358c8b25

SHA256
1cf95b85f21f0248e9ce5d66980f4519e41435fe205bdae50c3f8d140ae06610

SHA512
44fbdd9ac23f10dccec10a5ccf496f059cd0a0d9f3ae31f54746682d7240eee3fb6558f99dae06e6710132472bfe09dd1e1ec6844ef8dfb68cac29f80e91d2ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c69a80ef-421e-4e72-b064-b8726f24780c\index-dir\the-real-index

Filesize
2KB

MD5
0fac86b5ef5ee7881c7208efa7f83cb4

SHA1
bc45ad27debaf57790abd43fa91e34a34635c643

SHA256
d436500f094ace0174e22d85e50bdf24ddb2217c206e8cb07c450627001fa703

SHA512
f84aee88ae8b50c64f2d5917c00496652020ad0d1ac93fbfe289e117133a1813c7c51d7381b45ffcc0710ab810f4119307f1b3c7e616c21e833570dd56ff9904

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\c69a80ef-421e-4e72-b064-b8726f24780c\index-dir\the-real-index~RFe5940a9.TMP

Filesize
48B

MD5
80799587b71fd4f8a1e024c2bc0f8f10

SHA1
e23e4f1cf4d4d63af1b196f06f016c80a8805f46

SHA256
ddbe87cd454084981b46cf106a2142c6af7f5c1c4b0228488141ebb836662a26

SHA512
f62ba1d46fe578a593d1242e62b5a5246584e25bc4b1ca02941cc4ed9f3d2f63b1a53c0bd0448be64e5f837cb453fe37b12d543beaca18d625142aa8a507242f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
198B

MD5
1bd93216c3293dffa012ffd4cda436c1

SHA1
422ac5432c2987a714b49036b9476002a024fa6c

SHA256
c285dce77a586fb517f8d1951e5f63e003ba6cf88040af4d19e4f4a478952eec

SHA512
cd3613ef7e582ba09cf2acf0f53d3e48d5007144e16b6b73356946fbeb5f4de3de9ed3c790936d8f20e567933832a6070531a8f6c50a3a3a61f2423684cce859

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
176B

MD5
ebe31722a945a014f24cdedd158757e8

SHA1
b549d7823b8f183d2fb661ea033514cd02f253d1

SHA256
2bde4634c748505c663d50e930765d3ca24f18d0e8633c4740a6feea0c8ab8ca

SHA512
3d5f5ec425c029abc6a92fe13c5b98eb80cc59ce752f35b9cf06e3c0616f3caad128a0d01d1835bcaa7a46dee8007b4af95b7c58163df28c66b22ad76ed1dfe2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
112B

MD5
dd225e5c0d26e35bdd812404419e3c7b

SHA1
72dd0eace4e4dfe5e96ea55f8a59447299b23cdd

SHA256
d63bb1a0fd195f303d9febe5dee1d6ee2942ab3df6561027195628e090f3baa3

SHA512
3d80bd01b0f6dd196f6e1d3962981d7370b4faaf00e5a5bea0428c29b929632f4db9a04a1cb9a560fbf9c48427b5db6e183fcf11262fa87e31871dfe49030767

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
257B

MD5
a84ce8c2dadac92ead30b6c8be20ae38

SHA1
605c8f1285314c5bf9a7deff2f0eac6c66352575

SHA256
56daa13d2fb66de605a80f3b952049fa9bd7ea8f51a62e15c31e08865d0ca338

SHA512
c566d22994a1bd9dda3ff096d4f7e7b05c5f45f20d1f69af24fac189f5f978574ac2e0202fe1dc6f8b25ceb8756e163498a3c64a09e1b28200a9ac746ee4d230

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
193B

MD5
dc4c4ce32046230745d6c65dac876bb9

SHA1
02fdc7241075455a8d74a432cc4fe2619300f56e

SHA256
e1cfae43bc6bac7c373156345b48766338293a0c052d820358338e03d2f67723

SHA512
e366662e727148540b4f4bfa28274904a6de496bcdc3346f3768c7a80802215b5e2070cdcf9f871ead0e556e77ea46678b7939082d28075bb103343bb57bda16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
257B

MD5
72152583854303e48b45d4ad7f301d99

SHA1
228a493ec6dd36e105f0ff534c0d3bdef4923c89

SHA256
7473f6aaf55ba6c0b134cd583962bbfbfa6e7d1c873a05f1143a89b51e1ee9e7

SHA512
b8698e5ea3c10f31bc4d631e5d9c285cbba843a41f27a716c7a35f6710dc5058da7833c88d65f65b6839a4c2b9a46bd50faeda4cc2693e1a4f912e5cea49670b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
193B

MD5
1cc229b097dae19596e0451e816e4c5c

SHA1
d428ba5d397c25913e4f8b74f34e7faeb1d9d01c

SHA256
265a5665cb7a75389c5c1eb58a6391a08ad8ea0163c053537268b7e02fa62930

SHA512
7c273e950a566ae4425616edcc412e95bf4618d9105761fe93d7405f74a51150636610413f7d9cbe8f6d1ccac71578664e21d0fccb868cd638082dd6b5762194

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
257B

MD5
ffca1140f0036f541f901b9eea01700d

SHA1
c3feb2cc0eedc106034f35b4e46e1e8b4f4d6d6a

SHA256
1a9fdc7133dc0f26de1a9bdfcddf01793c179a43b18fc27f123b47e6327009ae

SHA512
26be0dc50e945764b2eba2464351d1297f047e69014da6905a8486e5f1fa984aae49b922952400fda7305fe87230c9d5bb1dab78feb70a4357ceace3689374c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe58d5ba.TMP

Filesize
119B

MD5
1e60a98e927481be0a5591afcc1f8b6b

SHA1
25f659fbee8fc214b5f71f3896fdc8a0d4458aea

SHA256
fb48f0e4374cbb30d2ce6cb6a14a2b6afdccd794cd012bd12a269bd3459419ae

SHA512
e416e1b6618e716133e67ba7df86082b4ebb3b78a35e394458c09a38ce7d74ad89e8bc8b802bf0e474b1c79c3d90c65ce66da2a44e14a526414cfce928d3b52f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43777905-94d9-469f-bdca-c5a9e2858271\index-dir\the-real-index

Filesize
1KB

MD5
ee45ac4fa124f13e9258eb30fba2a975

SHA1
cac3fd9f7fe8842fe231630b484801618871dccd

SHA256
4101f303c569fe41122727958c7252d6b511fd018f9705c002f2f60312ba034e

SHA512
ed6b2c50ef4a58055904da72df7ee54c022705c79896827785dadca122e2e32562c7de1388d9bb7099e7fbce2c51b4c7cde4dba41d9ea75a1c89cbf68d205d80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\43777905-94d9-469f-bdca-c5a9e2858271\index-dir\the-real-index~RFe5cbe08.TMP

Filesize
1KB

MD5
8151cdf94b4f673a202c6082db64bb87

SHA1
9210d1f1ac38271c8a454e0cdfdfb65ea60bd266

SHA256
8adf8b9dbd579c8c7e7c11d1ba0bc48d408ec05caab92f899ee733f3c242d896

SHA512
4d3107d7719468b440bb13dfd4833d2f979b56d81929fe01e734fde340c72ce602d310388fad2853afaa32daadb72dc648186b9a7dcee0ae77f44cdd7b14d2b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
253B

MD5
025edf4d64a6cdaee7ccd133ed1a532b

SHA1
4abfd193b876e8c6fe78a074758ecce0e20e892e

SHA256
5665ed5dd2c2301195f1a4e54cf1fce73fa34144112fbe54739c60cbea101a45

SHA512
afb60a2e8ae73a477954b557a426d26d8710aeaf4f74ee67cc3a13b1b870d3b7cfbbcbba6481fb7ea6d60c1bb9b4a0341c0983dee90a2747ea98d0ccbfb6854a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\f1cdccba37924bda_0

Filesize
8KB

MD5
3f74b99772f00586659b011b785295ed

SHA1
1fef9e8ac6f6c44f29a3652984b9d15f77932ef2

SHA256
f0151ceb680ba10455d755766190a892b3c30f8cb6bc039b133f6817cf34cfe5

SHA512
ea74784b38e1e4ed716e03ad38849cca9dd6d50149f3528fa78522f887c53361489b636f1f6dc65b0589eff85d1309f2d83a12df7df2863fb085ba4a93621b99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
299baa5a8fea3d005b0cc25d596a567e

SHA1
d82fe5555607da0e1ca4d30609e77a4d929c539c

SHA256
b643fe07c82824032ff7c4125c5e1f5f1297d5964023e62975cef31ca1fb232e

SHA512
dd0c85e484d032b993e41067cb667c5c087070461fa6b7322bc9242547c53586af2857b523cbc4040be0da39c65354198ca98181d33910d7dc927b273289fa21

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5924b5.TMP

Filesize
48B

MD5
e6bcf9f08fd25b6bff32e47aced756cf

SHA1
00390cc0710a11f443c9efa5751beca2d34eff2a

SHA256
a0ce557adf830135309a30893edd7134b33d3826cecde7a98b909a652d0ebf1d

SHA512
95617603ab8798b80724010337218892f30455adaae50fc0b13a1f4239b941b8a087acaaa56aca209511b89f37e15291f38fe2572960cb85947648a1a79e663a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
242014206b5c1fad35a00aefdae0fd12

SHA1
c664f58a394a26c5723e8e07fa1af7b1c808be0d

SHA256
f945270e81db294ceb26f6049a3992e9f7210c5aa420ee556962cd6f06119258

SHA512
92c212cc5d9c846cff23d2673f2bea2139fcea56383bfcb252924874ccefc1d3cf62d471904c62bc0212d2fdce05d11173af7252b314f923025a77e7ab4043a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.3.10\data.txt

Filesize
113KB

MD5
60beb7140ed66301648ef420cbaad02d

SHA1
7fac669b6758bb7b8e96e92a53569cf4360ab1aa

SHA256
95276c09f44b28100c0a21c161766eda784a983f019fc471290b1381e7ed9985

SHA512
6dfa4eca42aea86fba18bc4a3ab0eed87948ea1831e33d43426b3aca1816070ecb7fd024856ad571ca2734214a98cc55e413502b3deef2c4a101228a7377e9d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
465B

MD5
bd47f698e6140708f522d0f1bf057103

SHA1
2ef5e763fea5c729e0959d5c726041859bace284

SHA256
63aa385cfa63f6f14837a8f7721c94c77121c76b4f6a500f83273edc0d8ddb1a

SHA512
188a9e1ef4b0143ca23926406ab30b551709a57ae0c30ee7254e24011ec896960d690c8cf3e92038f4315647d82bc602d7061dc653609109b15c8c007702f386

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
23KB

MD5
cb76c2720033bb46fc03d8088c42a8e4

SHA1
410b59ff66ea8e64432bf19b3521ad4a7eef59e1

SHA256
a2b9e7ff456817b9f91bcf07936b81edbaa4a7817298c58e59f87e33c98b674c

SHA512
cc4f6e59dbce38536d20249f26b4dd71130eb83daccb6ed79e2e01ab3c7dc7fdff4a20524a76bc8a8ba22153036f50f96c324d576bdb07e50752c0e7686daab8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
900B

MD5
62ad0955561d6390d44118ae2ae98546

SHA1
1d18199954306d8a8191b2aba83f12a4bf70e647

SHA256
d5c1633aee8f3209789b1c32a63e2c3d79a22e9fb010be2f85d2880930c77cfa

SHA512
c8746f5b9b01ad3ce63125be8c6f41c167a91541d4165e1212d028d4317dee121bdd7c524d4004bb51ef8574f7d9f0e3c8404fccbd2effbf4eb573093bd29431

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
19KB

MD5
41c1930548d8b99ff1dbb64ba7fecb3d

SHA1
d8acfeaf7c74e2b289be37687f886f50c01d4f2f

SHA256
16cee17a989167242dd7ee2755721e357dd23bcfcb61f5789cc19deafe7ca502

SHA512
a684d61324c71ac15f3a907788ab2150f61e7e2b2bf13ca08c14e9822b22336d0d45d9ff2a2a145aa7321d28d6b71408f9515131f8a1bd9f4927b105e6471b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Shopping\2.1.31.0\edge_checkout_page_validator.js

Filesize
1.1MB

MD5
0e3ea2aa2bc4484c8aebb7e348d8e680

SHA1
55f802e1a00a6988236882ae02f455648ab54114

SHA256
25ffb085e470aa7214bf40777794de05bf2bb53254244a4c3a3025f40ce4cef7

SHA512
45b31d42be032766f5c275568723a170bb6bbf522f123a5fdc47e0c6f76933d2d3e14487668e772488847096c5e6a1f33920f1ee97bc586319a9005bacd65428

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18346.18345.1\json\wallet\wallet-checkout-eligible-sites.json

Filesize
23KB

MD5
16d41ebc643fd34addf3704a3be1acdd

SHA1
b7fadc8afa56fbf4026b8c176112632c63be58a0

SHA256
b962497993e2cd24039474bc84be430f8f6e6ab0f52010e90351dc3ff259336c

SHA512
8d58aa30613a2376ccc729278d166a9b3ec87eca95544b9dec1ee9300e7dd987326ea42d05dca3f1cc08186685f2fdaf53c24fd2b756c1ed9f2b46436689dc74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18346.18345.1\json\wallet\wallet-notification-config.json

Filesize
804B

MD5
4cdefd9eb040c2755db20aa8ea5ee8f7

SHA1
f649fcd1c12c26fb90906c4c2ec0a9127af275f4

SHA256
bb26ce6fe9416918e9f92fcc4a6fe8a641eceea54985356637991cf6d768f9fd

SHA512
7e23b91eab88c472eec664f7254c5513fc5de78e2e0151b0bcc86c3cd0bf2cb5d8bb0345d27afdd9f8fcb10be96feaa753f09e301fa92b8d76f4300600577209

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18346.18345.1\json\wallet\wallet-stable.json

Filesize
81KB

MD5
2e7d07dadfdac9adcabe5600fe21e3be

SHA1
d4601f65c6aa995132f4fce7b3854add5e7996a7

SHA256
56090563e8867339f38c025eafb152ffe40b9cfa53f2560c6f8d455511a2346a

SHA512
5cd1c818253e75cc02fccec46aeb34aeff95ea202aa48d4de527f4558c00e69e4cfd74d5cacfcf1bcd705fe6ff5287a74612ee69b5cc75f9428acfbdb4010593

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Wallet\128.18346.18345.1\json\wallet\wallet-tokenization-config.json

Filesize
34KB

MD5
ae3bd0f89f8a8cdeb1ea6eea1636cbdd

SHA1
1801bc211e260ba8f8099727ea820ecf636c684a

SHA256
0088d5ebd8360ad66bd7bcc80b9754939775d4118cb7605fc1f514c707f0e20d

SHA512
69aff97091813d9d400bb332426c36e6b133a4b571b521e8fb6ad1a2b8124a3c5da8f3a9c52b8840152cf7adbd2ac653102aa2210632aa64b129cf7704d5b4fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
62KB

MD5
fbb5bc1de618e22f9a490d369f192028

SHA1
ef296b82ae2b7bbf0653985478a5d0931dcadb6c

SHA256
80f2fba6b29c1044d6e5cf40040170e50ce6fb4a71e2a4237454bbacd926a686

SHA512
9a9fcecce78e4f942057edb83627a8d0ccc390d34a5b89800fabfcd32d1acde8a143ad4f53b3a91e4cdc1754799d60025222e68e6d085873a03d33389632f8e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
7b67c754978f3dc14d78f32d073d4614

SHA1
be3da94a4b3ac29b29aa03a8b9da65efe16d94b2

SHA256
16692f2b59a30efe7b453969c6d54406a859d90d2f2b5f303ca3dc0214f9c154

SHA512
acf10ccf237d5771dab217ce2c7e6063a532d315acf701f641aaa78095e1b6704b5dad2ac1887a0583eed3552bdb89a61a8f0ee2566fec7a2bbbaaf7d1c17ebb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
2ce0ef81b9da687548001f40f635f39f

SHA1
cdddf6b2ba837d9ffc284b2860b6c07761468b69

SHA256
60913c02c6edc12f1c3374f0f8d784fb9a6b8f72854c27a5cb36509353abb3f5

SHA512
29bb60dfa10868932d540c90ce700dae2b9ca184e52a24818fdd80695eef5b33d071758b29af8ab4588b70b946162a7810b52e1951b5d865a7820d5974c0f37a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
54KB

MD5
48c592e5eb9bf77a64a17bc51613c63f

SHA1
ad652e05026befacb05db7a5e9460728396c95b6

SHA256
80fa36d4ee03a0b71e8651c0bba756e44260be11c9ce0d61a9f6f5f4dfdb71a5

SHA512
9b87a5b1270d501b37b5784e52f364dfe16b13e2122e0586ef28b6769f02b6709761f1f456511c50632952fe292a34bdf6f83575538ff67247b70f9c0df18e15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
55KB

MD5
d4587e437ff693243344e6bec14ea747

SHA1
f9c15ed706c8f82846644dc355d724e52c90bc54

SHA256
51f548953a04267a911141adb021d0febe27d9c96b304821571df562c682e153

SHA512
d377618c0ee52b18d703f668947fc1f811f6ecc056ff25d2bbabd61daf58561e0f4f391d83264c0f6c8fc69b89d40c8401b8ee14b177381aa34f92fca8865198

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\22.0.0.0\crs.pb

Filesize
289KB

MD5
2b59269e7efdd95ba14eeb780dfb98c2

SHA1
b3f84cbc37a79eeecb8f1f39b615577d78600096

SHA256
ff2ced650772249abb57f6f19c5d0322d6df22c85c7cf2be193b6134e1b95172

SHA512
e4b454db2248021e0d198805ea54f1c0cfd84b9716a9348b1d0e0acb7c6fb5dd0839e532a5eb6d4410ab759d6688dd6cce8375ad55a150d738d280993142e9d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\22.0.0.0\ct_config.pb

Filesize
8KB

MD5
811b65320a82ebd6686fabf4bb1cb81a

SHA1
c660d448114043babec5d1c9c2584df6fab7f69b

SHA256
52687dd0c06f86a2298a4442ab8afa9b608271ec01a67217d7b58dab7e507bdf

SHA512
33350cce447508269b7714d9e551560553e020d6acf37a6a6021dc497d4008ce9e532dd615ad68872d75da22ac2039ef0b4fa70c23ec4b58043c468d5d75fd81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\PKIMetadata\22.0.0.0\kp_pinslist.pb

Filesize
11KB

MD5
0779206f78d8b0d540445a10cb51670c

SHA1
67f0f916be73bf5cffd3f4c4aa8d122c7d73ad54

SHA256
bf0945921058b9e67db61e6a559531af2f9b78d5fbedb0b411384225bdd366ec

SHA512
4140b2debe9c0b04e1e59be1387dca0e8e2f3cbc1f67830cbc723864acc2276cde9529295dcb4138fa0e2e116416658753fe46901dfa572bdfe6c7fb67bd8478

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
b45745198efe7afee782f8dbd55af656

SHA1
d477e86fca0f0c62c9bb8bff66f7e5dd9f3e706b

SHA256
b6a9c06d8f00651466f4c5a699241969c7df46378d6f9548ef49a0fd1215d995

SHA512
f7405258986b946dddc1d3fb88a09ede988c7c4fa77add9ffab4e9724b767752b232cdffdc3de5f45238a8836a3a78888bf4c2bdd1f69b73f168441f6abc0ceb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
e020870a95b1f1340969f883f41bb0a5

SHA1
526ad00af3c5715085f598bd3c0bf71dec764ffa

SHA256
29e3e648d8f45a80cef93689337a1b0d0766f56ceec5594ad70d6e651652a8bd

SHA512
79255aaac64546c917ecc01921870a391261888576b272b0dd43b5af483468b7e9ea2a5736423a11b5497f42f571c4dc196099752ddcea1b9c22202f05e5fafa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
fdf4ebccbc87ce7ad4a572e682c0f519

SHA1
6946debeb485385eb6f1e745b1c1998d8f9e7a14

SHA256
244088f528fd728501060fdf71debb358e46787852627f894c94a54721be34e6

SHA512
d3fdc4fc31e5bacc38fbd7ba7f2fba38571a6c0de5f28b3d5a827785b082b153aa281075bd06479669eea1a94e02e7cf7b0f10d02758525f6bfcdefb0190c3e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
6d39d08a9aa9919e31207b3fa2523f52

SHA1
d8334806513ffce1a7db2286c7e33a3a193d160f

SHA256
36170822f874cafd2fb75b3a7dd2feed33e9857f207dba63331e78a86906c610

SHA512
7ccbecea113e1d3abbdd7868848fa127221fe6f9897951454e71880d3a68ef496ece5872b25b9a7a8417e74613b1007683c1a68fd1fa51bdb03adc439a592e29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
1a785bf3bdeba8bc4b2cfca00accc3ac

SHA1
1cb2cead9c905207247b7b9228eaeaf82928771d

SHA256
d35f3182616d3bf53ab71e5db17bc04562ef7ec05d1069b4314678d6dc041283

SHA512
f20a34900638197adaae2ea5638f193bb47dfd2c1632288011ae62b7213a9b98c86899396db31857143fd66af7e5704b676a870a8c455914ab5765e5df85162b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
00140ed06bad3b160119fea79168586f

SHA1
abbbf874107931d53171f4a9008666fd88ac2afb

SHA256
63de79bc3c4dbcdddd36e39cc7e47f21378637a8d74da509d6a0e67217a66d70

SHA512
453809e6dff6262a955e6c96d7a9472694a0cd7ada28023c68b889b0f8c4d422c5ff575655f884c0a4937ce73843d68765bd4e509c732f98e82e8c09be929724

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe591f84.TMP

Filesize
392B

MD5
1ecf53bc9cc1486a7917f327991b4c33

SHA1
1df6c78980c3568ed9ce19f877e4e7712d8d1376

SHA256
4dfa91fa34f399c64dd230a56ef5d8d90f9d8907e79d4d7753374147057a92d4

SHA512
24239d8dab96601fab6a4d58a8a71ccec9b90336d3bf0e304749b6bd52759ebc3012fc21cfdad180b62f9f05714154e294b647d61ae6ac1c1a03db0f0411e582

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Indexed Rules\36\10.34.0.57\Ruleset Data

Filesize
2.8MB

MD5
6a62b26b738ffda1414b1e45b3b97c12

SHA1
ff44417a79841f948bdbeec9049f9fb59d16dc9f

SHA256
da3927c997d3bb2326e97a8dd7835c28f50ad8c4a9dd407669f20730c0159207

SHA512
820caca570523600a057dbedd38b7e3b375d6427d716cb74d0aee0825e621268a9f418f135443e5bc6bd7b9a1fbb8eb6676324d46f9111e56404b8953f23de53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Subresource Filter\Unindexed Rules\10.34.0.57\Filtering Rules

Filesize
1.8MB

MD5
d7c9c6d2e1d9ae242d68a8316f41198c

SHA1
8d2ddccc88a10468e5bffad1bd377be82d053357

SHA256
f215127185b2ee6b01e12b6ca75d3e5c4e454598dd4aed36124ae13d59afd547

SHA512
7fd14824e9200dd99e1fd2cee402656dc0cfc3d0a60058c5eb05c68e9e65b7f0b47e550fb4d6c2b59eba204dbf3ef9e69dc9723b43a9b3ccd5412d6b77715fc3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\TrustTokenKeyCommitments\2025.1.17.1\keys.json

Filesize
6KB

MD5
bef4f9f856321c6dccb47a61f605e823

SHA1
8e60af5b17ed70db0505d7e1647a8bc9f7612939

SHA256
fd1847df25032c4eef34e045ba0333f9bd3cb38c14344f1c01b48f61f0cfd5c5

SHA512
bdec3e243a6f39bfea4130c85b162ea00a4974c6057cd06a05348ac54517201bbf595fcc7c22a4ab2c16212c6009f58df7445c40c82722ab4fa1c8d49d39755c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Typosquatting\2025.3.28.1\typosquatting_list.pb

Filesize
628KB

MD5
bd5eeb9c4b00955e5a0f6a332d78cdef

SHA1
cf9e85ae41cf1ef2385a73ef36ebeb3c3378ea3a

SHA256
dbbea874b4b73aeb3ad17355c90f692767a947516481f158b7319f7c43f0e657

SHA512
2cfa521120dd1ab9c2cc90b74cd8d3f6f8991a086bd2dc1b9d225b08aeca8420f565e047f551ddf6d2149cfb02e4ce69b641e328a774dde7017ad374fd58eb96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Well Known Domains\1.2.0.0\well_known_domains.dll

Filesize
572KB

MD5
f5f5b37fd514776f455864502c852773

SHA1
8d5ed434173fd77feb33cb6cb0fad5e2388d97c6

SHA256
2778063e5ded354d852004e80492edb3a0f731b838bb27ba3a233bc937592f6e

SHA512
b0931f1cae171190e6ec8880f4d560cc7b3d5bffe1db11525bd133eaf51e2e0b3c920ea194d6c7577f95e7b4b4380f7845c82eb2898ad1f5c35d4550f93a14b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ghbmnnjooekpmoecnnnilnnbdlolhkhi_1.fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

Filesize
152KB

MD5
dd9bf8448d3ddcfd067967f01e8bf6d7

SHA1
d7829475b2bd6a3baa8fabfaf39af57c6439b35e

SHA256
fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

SHA512
65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
448cf54986bcc854c74a0fbb75d35873

SHA1
0d5da7269e0e27e3b6b9b38274b1af9ed101f618

SHA256
806fb9d26745a0d1dea6c84dc8afe666933e45a0262a9f698fa667092e80d816

SHA512
2e3c53594f7c3939d4488c2939efd8ee92c64e0d41ff142f105749b46512e7fa4279e878adbc3f57803c38068dc19e7fe10bb2b949e6c3dbb209946573692596

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
9733e8c5f7dd73b57b3515b5c1a7b77e

SHA1
6357be4f66976ca6b9211823bd0bbe9beb8d0da3

SHA256
b4b5d73e34f75a48a12f693f4a5a6a38b1b09299fc3810b720f778c613b0d991

SHA512
2d0a6425bbeb1339e8ce5e8bbdbed4991c9ae50b5306933cb5c5f8070af7e3a70ad898fcdaacd713e1c17345fcfbe7a3cf90b7944a99fe4dd285f6b537a26016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

Filesize
1KB

MD5
3df110e480ee96b0eb33e2a49b6e9c38

SHA1
ab63f7e1cae2e3c353480cf9649ed003f297f02c

SHA256
6e681c03c4803b75a721a4439acf24c12b774dea7c652f6feffe57466e3d056c

SHA512
37287132e7a1cf3ee34d12db777fe1c067f79bc82dda78a9bca31880fa1937a9230d309b7dd04a541c33c8523063c038ef943673bffd36d3e276cc157383fcee

Download Submit
C:\Users\Admin\AppData\Local\Temp\Swift-Module.dll

Filesize
22.5MB

MD5
c568dbc5fd90067a6712055023a18568

SHA1
1546683eb7ed167b54b9e4fb0a8ae72374f688e8

SHA256
ed927320654bccb0164b7c1e8835975ec9f680d607cfea982c7a0a103684d188

SHA512
72da4af29fd9aeda9851fc0a0a4ffc8a5b35f260074f2203381a760c94e4b836fe28b11186a6d3cca4d01de65893c0063edfcf355268b689330915ab66339816

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_qww2mj5e.ojq.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\4a25c11c-d0b8-43f8-a631-079c5af43e39.tmp

Filesize
19KB

MD5
d82b27d3089af29efda5a20b51ea76f9

SHA1
512127947447ba29a4272991ed7dda0e07914d0f

SHA256
c67c5251fa114076c98be45a9d23c91a12ffdf435c4cc13955d0b8d7b06fc15b

SHA512
3601b8c714c20d3049f70fd48d4ce0bd9de49037c32fec00c8d0f1c91b03ace5ba437ef5270e3258b6830593a65a2c8fd8c3f56156d9bfdfb81c3a812e094616

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
dfc2a8afca25c088630e39ce5f3835c0

SHA1
277c26fb09048b1f0d1fe0b13803f73dc57d47ab

SHA256
e6e62d26506e55022302bbe24c5d58ab490d34c77e4c0085d213c7014512edbb

SHA512
e26263314283c1ee1cc9d99c879e048a185395309e7059550fca2e7353348839777b583a586812c61a4e911c6040be798fc9321ec67690f9e840a271caf4725f

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Crashpad\settings.dat

Filesize
280B

MD5
e3a3bc72b76eb645b6246e3e17a159c2

SHA1
c63f438de31d5816651affbab613d46f45a47e5a

SHA256
cf614a5b079e4b9e96e8948afc0e62c4571282672fef77a4bce01ad56ec83767

SHA512
c9a4ce3a9d06cb804db409b08e853d34c856cb9b9ed28717fdb4720ae19cd8b0675f9885bbd4b0255831fcea026508e7b4cf1f6e1b4240ea77f641e602457389

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Crashpad\throttle_store.dat

Filesize
20B

MD5
9e4e94633b73f4a7680240a0ffd6cd2c

SHA1
e68e02453ce22736169a56fdb59043d33668368f

SHA256
41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304

SHA512
193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
a88ea70f5d5ef1a71bc7965a2ac886a2

SHA1
88cd0feffb93af5f7754dc71b4b44d63f5dc159e

SHA256
8da3564e927605158bf05adaf822f5f8e4a0c890fd4922ff5ccf26276be3375c

SHA512
0b9503fa7e46454f5d24f421ef3ae60fe282a664bca6855fc0f8091352e5d7c672a80bfc76d1f45b4068bc32d6cf51ba96fb2f732f57ddd81f02d81d3bd4176c

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
0857598d77ab068951b2e8ef4872a362

SHA1
19d6f02a200b5192b8b67c37e696e0f5f3ec6e5f

SHA256
b931255fccfb60d39050804eb1af3dc2c056bb4bdba34eb467d5cb72f6d45abf

SHA512
61939f9f90983796a210ea382da6a0515fd3774222209c8c7ffd4be9165f4d513c2341fad5bf6cb5029a976068223e255667e87ea9333b3fbfbb878cda5d1b36

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
029d936b831688af8dfaa9304835ef48

SHA1
f635e76fd3cf64422e7c03ba929b605c6bff9a97

SHA256
531d6e257a9f158857619a6daba75e81eb50a0ef52a1ef5bf0731bf3e0e609e4

SHA512
a34da90310f253a4da3ecb692eac5c0f8f978850058812e3d9b78d0898a57569fd4d9d1b09f3bf4e95be201c623e8311289613d1661ea781286999079c1875cf

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
586e6eef9003ee96dfb32734a02bb58c

SHA1
ec861b0c1097258246b0cd4698f376ac28cad55e

SHA256
f6b7eb17d9bad0bc93076404c1f5f8e8552c5a8bca560a94c0dd89c8770a3334

SHA512
b322af03b9868dfc3054144d0b6914426d57bb1c19f542dc0d3eb4b9145ba6ba5c6f754ee298932c06f6736d6edd2683de58ad0682fb785aa1f9165a43845c9b

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\DawnWebGPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\DawnWebGPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\DawnWebGPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Extension Rules\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\Network Persistent State

Filesize
448B

MD5
b1c7ad3eb53cce1cd6119f2bc2c11935

SHA1
83767f78fb84fae2592a72084decca52cbd578e9

SHA256
af61f5dc7e71d95857806695844e7f53aa325ec027a7b9e412be209e3a637068

SHA512
2b80b772f051923e63d77b04ddb5ab50911cfbf0b93c0592a23a17885eb6af028df7a57d9d17af9ea83cb9ec95545c533f985fb5c4a3928046d3ed9bff546c89

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\Network Persistent State

Filesize
831B

MD5
4327d4f0475928e23dc68c6a195d623e

SHA1
8c21406fb467fe74f0aea251de8431b9fe1e38ba

SHA256
afd086431ece00deb93ceb41aae545f692e7cab44585f4a5f48ca61e8d39bdcb

SHA512
514cb4d0e3603d958ca6ff6442d2065217a39c9e902875b1c61ba82c998bf9b2a8e16d639d4f4924b763ee379cd543b3b9cf0fd300d3c914842f5395f07bffc3

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\Network Persistent State~RFe58c232.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\TransportSecurity

Filesize
188B

MD5
0e3d8c1e068be710ad80eecc9646de26

SHA1
d9a06439da74d1b4b2d87c052ebd87e82a0787ea

SHA256
d3fac0d46ec1bce26c7cfea3baeca4fdfd34273f53d25f868ad85aa933507718

SHA512
dba8af3feef5ab200acb59b44df49c8fa8268b6e9a8b67be3a2725e83400e8a85ebdfd6fe732628d87cb50903240a55fcc5e0f27dd36bde48abfd4400e0d40f5

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\TransportSecurity

Filesize
356B

MD5
904728b946e36673b23728b9cdb6b444

SHA1
c64a36106becf5b1f5e3a7c6a518f0353e49f7cc

SHA256
023bc6ee47f79fb1b514c3b127da5c809fca2c58785487c6cd132983c48ffb6e

SHA512
20ca674e8c0afc4dea08df2e731b759e6dc028c5db532f8a1f9d4341cd659e0ba3f4959946bf2ea79ff1077987401a7b54dc1c9020ed897d778d2960132ae5c5

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Network\TransportSecurity~RFe584a52.TMP

Filesize
188B

MD5
c1d16e6cf0de3288cf1162578ed3f884

SHA1
725635e76b7b000172f85c75942e323c17674521

SHA256
df6d029eedae2988599aa5bf0742d568f6d14dab4336eb21b96cc590528063f9

SHA512
491ffab007981db3a6f9930ca7488aa48e80c3f145b75cacc824fa24d9d76a46041e79969d6038dd02597b3880d3a6201c3d748d7554d70be0ddd024838bd2c7

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Preferences

Filesize
7KB

MD5
d004e5233f82b11b2f6e4076573e2caf

SHA1
89cff9656f40120509da158ea4cd62f320d8a9c4

SHA256
bad212b4baff8b0a9f1c2e75fe73046f416b8935c8470c2afa86a12e76da4383

SHA512
d84f00be08c27cc2e3edb0625d8c0c6b5e7a30639868c2ecceddb315c66eb751bee35b76bc20db1c756867850973feddf2243d57c9abeec1aa32cd88c9be297f

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Preferences

Filesize
6KB

MD5
84c2d8bb492ee5cdbed63f37346a85d7

SHA1
627a00ae6ba30041fbb33865bc03ddc598e6fef3

SHA256
4d64f3b40af5c9d90e3b17a643aa5b615f4612aaa44dbfe51008b18f45f6fa05

SHA512
46d7fafacc3590b295847e75f6bcd55a2cd0da0d266ed6354b4aeace26d134214a14f018220ec427a817da7d840096efd14599e1532992358eb05dc5668d2e4d

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Preferences~RFe583a74.TMP

Filesize
6KB

MD5
645310bec746fc3de5c7e25f5be510dc

SHA1
972b2385c98e1710d8f56e10e889a5cabc5a1810

SHA256
0756086bf22cfcf7d01b4613bc3a46a87917cbc28456b63bd4e7bd94276827cd

SHA512
2736a9ce875525a2653046a54649b2630c67a54e5f2bbbd1d71425faa3c75018bfc09c3105c9be95e6a382973969664b6ee86c15aadb7727113a811c3ac1c841

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Default\Sync Data\LevelDB\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State

Filesize
2KB

MD5
3c87132e6c8ad50c81221763d6a4c928

SHA1
0a59f703b75dcd6918d2aa32d8c4823b205472c7

SHA256
065a70890aad8d41dbd9751c2653337e836e401a15260c4697a47d0d9917624e

SHA512
4e7dfafb81d739c28af91257ff36dd6852d14877940526b10171442be4c1f3bf2d93eca43aa2f21c8177aa062d05900fb5dc57e32810bc572252a8e89f106bbf

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State

Filesize
3KB

MD5
162774ae022efda665e569f402fce43a

SHA1
253a453de8919c5c1ad41b0af6f1cb510c1dea6e

SHA256
d6897f49a1893a6887b22e9876e61a33f2a729f484f880858d845c1030b82f7f

SHA512
82054645613f1d5457da68fdc07bae23cc4e54cb98e94b1ad3c43c205f59b2735d3df0af4f5dfde0dfbf56fbbf54b9425cab4d0d737e1517964639e83d688186

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State

Filesize
16KB

MD5
616a455d47f4792cf1a555ce9b25a720

SHA1
901c122d6494f32ac7d835331d55de5ec596fa4b

SHA256
f3f3448960ee4c7fa7d475e8faaadd4381e1f0e3606130e72764b73f5cd768a2

SHA512
f058e2320066eb9b93b63541fbf3ebf360d6dbc9ce4934c33174378f883d01d701b3f5eb5138898088241ae02d0046c673390b17ccfbf32864c243a4680068d5

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State

Filesize
19KB

MD5
c001c5c07ab0c6e752332113e3483170

SHA1
c628e617856066ff0e545a6e25d511915e723803

SHA256
31d3421dbf3fe0705abef28fa9273f19029eaea53679ef5def5dbc584dd43e0f

SHA512
e3923619e3bc4742b91b216bb48971c135b4d7cdbe0535f8e6bb2100af870ff8260b44a1be7d9cbc796148eff1b58b3679b9fe69a410e3c975da7bf48850f3bb

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State

Filesize
16KB

MD5
5a345cbb0b03314be8573def3f9d49bd

SHA1
5bea77ecdb4a7d5eeea3250b5ad5c9ce0f614c25

SHA256
c06e9b6894c5cb7cc4326a0e22ffab60fa87f12ee6d74e622fde43e426670d6a

SHA512
067bb1fcbe66c67d78accd7621dc1980e23934a466e4691c05e65f75dd448f858af912dccb851c1c9945335a57f0d55587b81836709ce8ec665bacb499325896

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State

Filesize
1KB

MD5
a947e63fb59272f7ba481cd81c70d836

SHA1
9f76b42c2f5d0dcf6db004e9037e7dba0c9a0776

SHA256
9906bee468e091ea147c11b4f7900a6ec493c7cef042bbba7d56518fa7c6d605

SHA512
85e17f14bd5018e2fb1896f703e2c018fd53c8340758f9e76ccbd3d8e0125fe36c3f57d698762da9ab77f421f118ad286108050fea73c8b68511d50a49665c90

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\Local State~RFe579bd2.TMP

Filesize
1KB

MD5
b04161811a2a63485ba7ff8c76849f9b

SHA1
53c005bad3391ca6d05dfac6247dba4de2411754

SHA256
53eeee0f2ff63df0bad62027ccd3f83d84de2790b5bed546917be8cfc3320978

SHA512
69011a92302ee8560b8d6a3d96a911c109758c76d9f27e32ecbd9ed7871104908f512cde5b0331ef4eac22e7eeb30a7e51cc3b87158036943e6a41b475c7a9ab

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\RevisitationBloomfilter

Filesize
392B

MD5
66938a408989efeaa9b9479d8241ff07

SHA1
ce3284d1b1e3c80490f120dcd0eeca4dc8bdbd20

SHA256
47d6f1a867d26a94089d3b1002ff24049ba2bdbf37b32ae75c48515ab798000e

SHA512
dddb5cbc9147f672c7308360decce504b47edc46370ee7ad713290c7873015a2dfa02511d4731971585962c6fd31f9c314ce6d3768616535f744b488c015d163

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\RevisitationBloomfilter

Filesize
392B

MD5
363a5c2769d31047cedc06e3e45edb07

SHA1
446b1e214bc13c2f9d01baf57f1e6c513a4c4b94

SHA256
c2ffa1e83d64d31f196f449f7c6f0084cea0fc9f47f141b78bff5379b62347ec

SHA512
4e6e2cd79a3e53e26bdbfe5c56d87ac18972436e727de760e86fad1076d29e53e5d4ad764435f7edeb994497d607a400e0b92f20e84c6b4243b57b1d71db54a2

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\RevisitationBloomfilter

Filesize
392B

MD5
de87876df7de41529b242b09cffd76d5

SHA1
09ea2227c11a978af597f2f97a1e36665a7b7503

SHA256
b8e56572389a56ea062533a5ff1ec139a6a58da13bfd7974694403d76dbca2c7

SHA512
441ff7dd1f4ef186798ae1aaa9e47d68a98d7c5fe735b6872bc79b9513e2017ec1ff03beb02b94b14b70b9161837e24c8e98443c3801a7cf6d4b7cd7ee4fc88f

Download Submit
C:\Users\Admin\AppData\Local\swift\EBWebView\RevisitationBloomfilter~RFe5dc45c.TMP

Filesize
392B

MD5
6ab809cb5614e181f2b913697fe216f0

SHA1
939b58a36ab4c3ba354044bed392853d19119c05

SHA256
bc0078ebbb3cc3b0a333e55d574c6a965b2e47815e0394944db4637410d1eecb

SHA512
dcd314452901bb080ac94534480009d3aa5371fb2c49935c767fde374e08203f01827f73947feef4ae7c6a56633c0c1882daa98837228b36359794f9d33974fa

Download Submit
C:\Users\Admin\AppData\Roaming\Swift\Scripts\untitled.lua

Filesize
52B

MD5
3bc441c9fbcf22f14121aeea58557687

SHA1
4a558babfd7e7df9fdcdec43306dff4bc1c65449

SHA256
34f8a63aa657f16d24ef779e2e8b17b83a6a47a195f03811fa1e99fed1d73fdf

SHA512
60221f19280cf368feebdbf8018648b0985c784025199d1901bfa92b094e7e30f817a2c358efaf9e164b060c8493b8d784b391576a0eb40d93f0e718036f04a9

Download Submit
memory/2972-267-0x000002BFD9A00000-0x000002BFD9ACD000-memory.dmp

Filesize
820KB

Download
memory/2972-152-0x00007FF9CD360000-0x00007FF9CD361000-memory.dmp

Filesize
4KB

Download
memory/3028-73-0x00007FF9CD360000-0x00007FF9CD361000-memory.dmp

Filesize
4KB

Download
memory/3028-248-0x0000024644C00000-0x0000024644CCD000-memory.dmp

Filesize
820KB

Download
memory/3192-104-0x00007FF9CD790000-0x00007FF9CD791000-memory.dmp

Filesize
4KB

Download
memory/3192-105-0x00007FF9CDB80000-0x00007FF9CDB81000-memory.dmp

Filesize
4KB

Download
memory/3376-1881-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1876-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1880-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1875-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1886-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1885-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1883-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1882-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1884-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3376-1874-0x0000022A880F0000-0x0000022A880F1000-memory.dmp

Filesize
4KB

Download
memory/3532-6-0x00007FF9CDE90000-0x00007FF9CE085000-memory.dmp

Filesize
2.0MB

Download
memory/3532-13-0x0000018E1ED50000-0x0000018E1ED72000-memory.dmp

Filesize
136KB

Download
memory/3532-20-0x00007FF9CDE90000-0x00007FF9CE085000-memory.dmp

Filesize
2.0MB

Download
memory/4004-270-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-844-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-5-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-52-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-247-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-206-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-859-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-282-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-5304-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-4-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-0-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-3-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-739-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-1957-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-2-0x0000000140000000-0x00000001437AD000-memory.dmp

Filesize
55.7MB

Download
memory/4004-1-0x00007FF9CDF30000-0x00007FF9CDF32000-memory.dmp

Filesize
8KB

Download