hxxps://learn[.]microsoft[.]com/en-us/windows/win32/inputdev/virtual-key-codes

max time kernel
52s
max time network
74s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20250314-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20250314-enlocale:en-usos:windows10-ltsc_2021-x64system
submitted
06/04/2025, 14:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://learn.microsoft.com/en-us/windows/win32/inputdev/virtual-key-codes

Score

8^/10

discovery

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
185	3708	chrome.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\en_GB\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\fa\messages.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	chrome.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\gl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\fi\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ka\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\eu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\cy\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ne\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\manifest.fingerprint	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\nl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\zh_HK\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\si\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\pa\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\zu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\msedge_url_fetcher_3328_1137942579\GHBMNNJOOEKPMOECNNNILNNBDLOLHKHI_1_90_1_0.crx	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ar\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ur\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\is\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\offscreendocument_main.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\th\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\kk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\en_US\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\lt\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\lo\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\mn\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\dasherSettingSchema.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\fr_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\sr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\my\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ko\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\hu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\tr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\offscreendocument.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ja\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\mr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ms\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ca\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\it\messages.json	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\da\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\fil\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\en\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\iw\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ru\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\gu\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\en_CA\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\zh_CN\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\hr\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\cs\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\de\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\sk\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\128.png	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\es_419\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3328_1049454291\_locales\ml\messages.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe

Enumerates system info in registry 2 TTPs 9 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133884249487522017"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-73851796-4078923053-1419757224-1000\{3BFE450B-8C98-407F-BE30-9AC4AE564C91}	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1772	chrome.exe
1772	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 21 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe
Token: SeShutdownPrivilege	1772	chrome.exe
Token: SeCreatePagefilePrivilege	1772	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe

Suspicious use of SendNotifyMessage 48 IoCs

pid	Process
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
4076	msedge.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe
1772	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4076 wrote to memory of 1600	4076	msedge.exe	82
PID 4076 wrote to memory of 1600	4076	msedge.exe	82
PID 4076 wrote to memory of 5284	4076	msedge.exe	83
PID 4076 wrote to memory of 5284	4076	msedge.exe	83
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 5092	4076	msedge.exe	84
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85
PID 4076 wrote to memory of 1528	4076	msedge.exe	85

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://learn.microsoft.com/en-us/windows/win32/inputdev/virtual-key-codes
1⤵
- Enumerates system info in registry
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x264,0x268,0x26c,0x260,0x28c,0x7ff895aef208,0x7ff895aef214,0x7ff895aef220
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1912,i,15664876428531018368,8572820241760977047,262144 --variations-seed-version --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2376,i,15664876428531018368,8572820241760977047,262144 --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2544,i,15664876428531018368,8572820241760977047,262144 --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3460,i,15664876428531018368,8572820241760977047,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3448,i,15664876428531018368,8572820241760977047,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --field-trial-handle=4668,i,15664876428531018368,8572820241760977047,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  PID:3328
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x264,0x268,0x26c,0x260,0x30c,0x7ff895aef208,0x7ff895aef214,0x7ff895aef220
    3⤵
    PID:1364
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1932,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=3660 /prefetch:3
    3⤵
    PID:5648
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=1804,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=3708 /prefetch:8
    3⤵
    PID:332
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=3532,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=2772 /prefetch:2
    3⤵
    PID:356
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4248,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
    3⤵
    PID:4536
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4248,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4308 /prefetch:8
    3⤵
    PID:4744
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4392,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
    3⤵
    PID:3464
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4488,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
    3⤵
    PID:924
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4696,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4704 /prefetch:8
    3⤵
    PID:5784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=604,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4300 /prefetch:8
    3⤵
    PID:4776
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4720,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:8
    3⤵
    PID:1192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4708,i,11759370955957068336,5531036070310348910,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:8
    3⤵
    PID:2476

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:3296

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
  2⤵
  PID:3300

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:2680

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1772
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=133.0.6943.60 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff87314dcf8,0x7ff87314dd04,0x7ff87314dd10
  2⤵
  PID:2396
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --field-trial-handle=2008,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  PID:3708
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2056,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --field-trial-handle=2412,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=2556 /prefetch:8
  2⤵
  PID:4104
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --field-trial-handle=3196,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3204,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4244,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4332 /prefetch:2
  2⤵
  PID:5360
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4704,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5388,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:1120
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5316,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5544 /prefetch:8
  2⤵
  PID:1192
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5392,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:760
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5484,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3920,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5448 /prefetch:8
  2⤵
  PID:6132
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5832,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:5368
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --field-trial-handle=4884,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --field-trial-handle=5844,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:5988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --field-trial-handle=4916,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --field-trial-handle=6176,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --field-trial-handle=5656,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5352,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:6060
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=5788,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:1764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3928,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6412 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --field-trial-handle=4408,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4328 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --field-trial-handle=4484,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:5812
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --extension-process --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --field-trial-handle=6100,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5828 /prefetch:2
  2⤵
  PID:720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --field-trial-handle=6324,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --field-trial-handle=6252,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --field-trial-handle=5644,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --field-trial-handle=6572,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:2648
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --field-trial-handle=6708,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6744 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --field-trial-handle=6900,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --field-trial-handle=3252,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=3312 /prefetch:8
  2⤵
  PID:5260
- C:\Users\Admin\Downloads\dotnet-sdk-8.0.407-win-x64.exe
  "C:\Users\Admin\Downloads\dotnet-sdk-8.0.407-win-x64.exe"
  2⤵
  PID:3360
- - C:\Windows\Temp\{B60FCB77-05F8-4D32-BD9F-66E21E6DCD74}\.cr\dotnet-sdk-8.0.407-win-x64.exe
    "C:\Windows\Temp\{B60FCB77-05F8-4D32-BD9F-66E21E6DCD74}\.cr\dotnet-sdk-8.0.407-win-x64.exe" -burn.clean.room="C:\Users\Admin\Downloads\dotnet-sdk-8.0.407-win-x64.exe" -burn.filehandle.attached=584 -burn.filehandle.self=720
    3⤵
    PID:1640
  - - C:\Windows\Temp\{0D8B0A9F-3F16-4E47-BB39-90F1531F8608}\.be\dotnet-sdk-8.0.407-win-x64.exe
      "C:\Windows\Temp\{0D8B0A9F-3F16-4E47-BB39-90F1531F8608}\.be\dotnet-sdk-8.0.407-win-x64.exe" -q -burn.elevated BurnPipe.{0AF43BFC-C978-4D07-B6AC-EC16D6125061} {88582EB2-EB87-4E77-B8C2-78CF55F9E084} 1640
      4⤵
      PID:6076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --field-trial-handle=3184,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --field-trial-handle=7144,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6612 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --field-trial-handle=4828,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=6608 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --field-trial-handle=6172,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --field-trial-handle=4880,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --field-trial-handle=5408,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --field-trial-handle=7184,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=7172 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --string-annotations --enable-dinosaur-easter-egg-alt-images --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=40 --field-trial-handle=7372,i,9478216983313137602,12905237012798308487,262144 --variations-seed-version=20250313-182214.581000 --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:3832

C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\133.0.6943.60\elevation_service.exe"
1⤵
PID:4880

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4740

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe" /burn.runonce
1⤵
PID:1116
- C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe
  "C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe" /burn.runonce
  2⤵
  PID:5564
- - C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe
    "C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_SDK_8.0.407_(x64)_20250406145638.log"
    3⤵
    PID:1848
  - - C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe
      "C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{ba474f93-a4b9-4941-8327-c6d488742031}\dotnet-sdk-8.0.407-win-x64.exe" -burn.filehandle.attached=520 -burn.filehandle.self=540 /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Microsoft_.NET_SDK_8.0.407_(x64)_20250406145638.log"
      4⤵
      PID:2756

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
PID:4064
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 7A8597EB456949BB23454FF6CAE6C093
  2⤵
  PID:4808
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 083A954D385CC5A2E9249F0F84D3594C
  2⤵
  PID:644
- C:\Windows\syswow64\MsiExec.exe
  C:\Windows\syswow64\MsiExec.exe -Embedding 838C2198ABC42BEB7FCE8917B96E3148
  2⤵
  PID:5096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Config.Msi\e587a6e.rbs

Filesize
48KB

MD5
3aedc2d231bb93ea695441f994dd16ac

SHA1
d325d138db398f46cc75d0e8c96249b5bc30d760

SHA256
af193b51569b9b3f6b64a7bd8299fe43c154c52acbe6506d08c16da8463ebe86

SHA512
604018b7d9f8a1a4a56517f7b8cbf12c97d1a56a919238c1fea7fd51dfd5ddd42f835ce3d2850b3852e7c20734b2125c2dc1c9713518492663c52acf1669afd6

Download Submit
C:\Config.Msi\e587a73.rbs

Filesize
9KB

MD5
9c176a278f057638984cef25a0ec432d

SHA1
9ded6ff9a7068193872405a541927d4a89f8fa72

SHA256
97fa9433fbbdd2615be47649a645d57b08810503c4c41a19b3d9fc7f306d30a7

SHA512
3dbe90c3116eb8c7b8304512d85a7b0b9f7d741c53dd6a3b02cfa4c10667abb8145690c329bb267e859891c81138e44c71e4ba88063c5c1641e3915495726e4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState

Filesize
649B

MD5
4d176b90f231a522f2dce4b45234eec0

SHA1
0c7a9788554c6f411f4ed76a9b41bdf2f798f6b1

SHA256
a07573f59da0c03181d23275bfc4c93a4f60899185227769de815935f18b4cf3

SHA512
008b01ca3c056bf9c577ede4a62492b902d29c80d63cfb70caec9fbe6f2832bcc895692490564c93d5b5320a1a2afa842fcffa2d00a3c595f2f1e484f89f1c16

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000006

Filesize
63KB

MD5
00a34503c5efdf7f4815c3bb9cc9cd68

SHA1
a85d51a8bfe01bc2c26bf0cbeae56c057788e452

SHA256
95ac4bfd07bbab1602f31faf2b3a3ae4064bf191917b229440a6cc722af24764

SHA512
c52764de41844701a47d0eec201649f20813a51a7b68feae77b47fe32bc90771c809682de3b12a94f37c2d41c8adca5a3707ad50618b402cc49b2f78d23c4259

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000007

Filesize
38KB

MD5
f53236bc138719b68ccd1c7efb02a276

SHA1
26b7d3eea5d3b12d0b0e173ebf2af50a7d7e56d6

SHA256
787c14f8cc865430c03c96a345044b7c5b8dc8a032511a500d4a42228533acd8

SHA512
5485bc7ccce8ec75f60bca3be846086a4bd4466009c8e22da9cdd16bb1154529af2fb2667cd3a97485cc4f6635fb79ac0fdda4f3e1f39f25f6196f708a92d740

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000066

Filesize
216KB

MD5
50a7159ff34dea151d624f07e6cb1664

SHA1
e13fe30db96dcee328efda5cc78757b6e5b9339c

SHA256
e990d9d31c4c7d57dd4795e43baea05501fb6ea8b7760f89001be660425dd01b

SHA512
a7768dd7e315b07754a305080e0fc023765e5a224b2c3824e8e10f29286df63bbdefef379e069941fd8cd9c7c3befce976779ae2efdfb6e7da697b09d7f07250

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.90.1_0\_locales\en\messages.json

Filesize
851B

MD5
07ffbe5f24ca348723ff8c6c488abfb8

SHA1
6dc2851e39b2ee38f88cf5c35a90171dbea5b690

SHA256
6895648577286002f1dc9c3366f558484eb7020d52bbf64a296406e61d09599c

SHA512
7ed2c8db851a84f614d5daf1d5fe633bd70301fd7ff8a6723430f05f642ceb3b1ad0a40de65b224661c782ffcec69d996ebe3e5bb6b2f478181e9a07d8cd41f6

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.90.1_0\_locales\en_US\messages.json

Filesize
1KB

MD5
578215fbb8c12cb7e6cd73fbd16ec994

SHA1
9471d71fa6d82ce1863b74e24237ad4fd9477187

SHA256
102b586b197ea7d6edfeb874b97f95b05d229ea6a92780ea8544c4ff1e6bc5b1

SHA512
e698b1a6a6ed6963182f7d25ac12c6de06c45d14499ddc91e81bdb35474e7ec9071cfebd869b7d129cb2cd127bc1442c75e408e21eb8e5e6906a607a3982b212

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
3b16ad766641e8320019753740924535

SHA1
540b0cdbfb7e330b6c3ca698d13ee35c4298e076

SHA256
e46c92295ceddf1b9cd67366c1fab2b86b82b5d69bd659302dba686f4c8032c0

SHA512
d1f6751090ee6fcaa9b61f6a064a6585fcbf3be9da9b38de8779318753d2871b564eda86a33031677d6a10bc2e1a89235012fac23f481b734016aff7fdbce472

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
11KB

MD5
d7b58e96d84f89f26b6fef8a6242d246

SHA1
cfc1792d392e545ece07966e7ebe31e3cf69cc0b

SHA256
65650eccec3f166c8bd33a41e7a7445cc7fcf037f115b185c29d4f8f438ae9c2

SHA512
bcc6423d308b6459471dc8734ef46b96d4924880bc075c35b02a700feb8107f6ce6bc036d31d43d21ba4f5c02a26ab1adbefe482f3f2cb7cb3cc379431507e4a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
10KB

MD5
782c4210f47b48faed0df15b6a86e82e

SHA1
72de6642649c9d81cd34aec64af7679ab1d91539

SHA256
779ee8672f1002281378702c71cdb92b32a2b2c0fd7c89b327b49b3be8bed959

SHA512
51de7842decdb8980cca32dd12cd14b9412d03223118c8ddba1cb8093cca3ff34cb306660e4bedc0f3761ec1548eae4ddd487d73b3a67c7cdb87157ef8ddb2c1

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
12KB

MD5
1352f656b4730fe5a049324ccd1a9601

SHA1
ad77b5b229cb13de93118f9cb481af729b8909d1

SHA256
4e7b81a8dfa63a2c5cf3d8ae8c1b8f3d784a4977679c27e4ea1db47669ec2800

SHA512
57bce822bbf1cf0ba802b147dd592849b64cd8d274db716fd31e7fefae489eccfebeed9cff5dcc1c7937ac6091bfc9f230f5111a43066fa9f42a702ad538f155

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
18KB

MD5
7116694b828e7a3d2c215b36bb3888a2

SHA1
4999a1a11cc8c50c4b7bb182d4ecf26465d7e29f

SHA256
f4ff1a666c38567b1184a488d6d9df81bbaa3ed2d104e22f6717cd277aa13590

SHA512
50b718b82773fb8ab6c499c1e08913c0493f1caf500d4159f58a16336cecbf646df47da0f49448d2a715149595f38ef0b4e096c4f22137881196cfcc7d85cb53

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
15KB

MD5
4d1285847494bae39c73680638223760

SHA1
72d144b2a8101e5ac498be812c7d9be8d14496cf

SHA256
ada5f70b7c028f97dd959d6be27a04ad73841c90835edfdea41d3bb549576f02

SHA512
e75cb4a3e77c41931ae8f950f25e48202106914edc7b426252fe116bc9d247c85149d54d6988401e957cfe30e8afd011ffe14862490f3dce235ae88ea83a4ad3

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
66a9e6a0b50395d3afe88736f86bd685

SHA1
bbdba3d15eeb83093aec40bca218dd4c81ca8f51

SHA256
1fda8e48a31fbedfceec0b47fdf61425a29aa77e47e876d554f3f7fb56913c72

SHA512
5a9310cb4bc1a510ec35dafbbac233d48606f91f52a7d3030e69e2de055b38573c68ade6e6a82bceebcbe3aed260134243091d8f10ee5e1a233965e3f1137e3a

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57ff5f.TMP

Filesize
48B

MD5
4c2dff484bf397929fe8c5a7cc2ca876

SHA1
8c0afd5e6d0beaeae5585e79c3eebb13befd93ba

SHA256
f1ecf2d967c162b255245b5f519426ffbdd50a6879f39a1730a195789a555a05

SHA512
f653bc6420e57f856ecd264c229d97d09c87b2839e153ba5e6a8df8d2b7f52aa253e6db74bd0ab3d0ed80084f9c61313e535897513fece8bbc7660bb70cc3de7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
153KB

MD5
b185786fa595bed379eec0e6c11956d7

SHA1
4d3b713c048de26add072132b452976b2cbf5b90

SHA256
bb6b22074c2bc5a6c9aab24523da1f68ef954f29d96018cfabc1a61f6e563783

SHA512
62659313aefd13d0088e2367f51d9e606d0511962ebba7d65112cd7447820d55753c8b1d163331d92701e63024c5f954aa4bdacf28bd82dbded1bd6b2becc13b

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
80KB

MD5
3fbcde5142ea3a1d3feba515e9589e72

SHA1
466a9b97b80955437f24ab5abeb8b16aba1d56df

SHA256
09b4baf04e2ae3e6292f747a05101beee395377cff96dc44df614d51da1c6757

SHA512
53cb4d1fa6d1dbbb3074d4ff4e270fc3103a6206f52f00a480050ab1444855082c9082e81a09799fe3c118892660deef2c1c1383045228d075d42b8efddfaca9

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
153KB

MD5
e8f85f1124f4bf837a1ed62a959bd848

SHA1
64006bec214549fe3e1075f9add98fc2a98507eb

SHA256
d1a7ed6298eb86b7964c95c4922061296980c37e3db1cd89f3ef702e43db5382

SHA512
b751efc357dbc8a91b8f8b346f21c26a75850b0ad7866e2601f9fa564a2a6f75f541c71e517c530006ec4e782fa628fd4e6c1c4089452e65f17b94dbd6973a54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
aad9ef568b38aa2ab42b57a3cbd8d8eb

SHA1
efe601b188069ca6b54ba6bd63866687c5574780

SHA256
ef0ca3af55b0eb83ea83d3376038feecaef97236df7c556f821c93bd08e86a9a

SHA512
5a3e66a1f995ed2779c7260787a2688118406190312d31e7a77bbfef233d81bbc17dd1bbf77a08ba73e390e22dd973c173b5eb39851b359a9196f48bb6fea963

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
347ae4222931bc137e9d8c2c594ba940

SHA1
94d05ab7849b7b09d0e2fbb4d0096cd4a19e3f6b

SHA256
462a6f32aedc40c575fe2a0a2bae37abbb58fa82749343e0f96faccb483ff7fb

SHA512
e01ce7080350d2df011c307078057327fef42569d588fae42e621a927973978ad7c9f5d7843a27bdd26ea05b78d11e308921e8186324d253d700d626c9a288b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0

Filesize
44KB

MD5
e8e48599684c591d7514a5c386df4d97

SHA1
8703d14c3aae5eba2017ff50870cd494ad10286e

SHA256
84ccb05658b059cf3cf82b95496497cb9a19a0b48dd002a66f0d904ea4cc6fa6

SHA512
250a1e94ee831800663839baf62cb8635f8d575ded3330639a6ed778b8b5ff9e4aaa280cb9176b159bae82731460d97072fb03aa99c4d642528621b845c17d2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1

Filesize
264KB

MD5
772d330aaad8c74bb748adeaf63495c8

SHA1
b35f8af18a1c35e275ed68b315eaf4cd4d08b5f2

SHA256
4a59bead0f005437bb2c73d06ec9a7110a30e68e82ed687d54d37f8740620eab

SHA512
6b7f8075729f02537533ea1a4f36f4e3ab67a020134747aa343248396d5efd02a00eca84c318f91ebc0732b278eee88128744715d9d04e7dfc95cdded52ac130

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2

Filesize
1.0MB

MD5
807d29379e5997dd99331e8ecad648d8

SHA1
c0d4b2faadf593ceeb774919e2c3390d8c5322bc

SHA256
63f6c02eb937ed135a37cffd7c1c8b504b6bc69c5d2aac9a454f007cf4f7a99d

SHA512
b6cde0a15dd39aa9c8b14a7421b3e0e65b50539712110c563de4612dd3527320cb4ba6e7f13f6be20049565cf0dc2121663680eba30558a3bc742c44631137f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3

Filesize
8.0MB

MD5
bacba49660e4e153a2b12e8e50c35d5a

SHA1
d251694e467da1491e253b146235c04956cd2ee4

SHA256
02d884cabf5e7f26963b96547fe26e12e9524f64aa82a26a1c0977feb85fde1a

SHA512
7f4da2a10224dddce2f38ae686dfc7cfa19c7c3796a876081f0867c97ca535d9b9a83caec97f10bf89c9d4452494f23c6d3c35fa8d7a2fcafd62f7a5c4a80731

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074

Filesize
33KB

MD5
1478de9c94a368d7ed03d50bb6005cdf

SHA1
afdcefbe26aa59c0e4ae668cf422adcf589461a8

SHA256
81cf44a40792ce2cc46ea896bbf06a91687ca4c25faee4e67e470a7d61a77914

SHA512
dc980bc3355ddd8096f8751c9bb51f1e296322eaa5d4a9f20588690c3e799eb9aaec823fdccb098c53f4be978614e7980c419bb9ce7cf6b66c3db9515d9bf80c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075

Filesize
69KB

MD5
ab50c89b34af95d66dd3289f34eac3f0

SHA1
4e9343182bb13a42bc82a5d5b246752bd91119bd

SHA256
9f97423375858e8aaa58ad5c893be2f2f6936ed011b291b425795926a6bfd317

SHA512
4c31f21b4f783c313da8e5746ebe052d3a5135c6efa2835818970bd97713632fc027540ff8b5fdbbce3a970dfb50673cb8341bcbf9a08f5bf4717912ca33e5cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000076

Filesize
506KB

MD5
b933181e3d419d4b8274b8265f79d5be

SHA1
f8405159c659968e8a9ad7eb39b5a7a370aa8d23

SHA256
7a4a898251f175436cbbe52121fd6e12d540f010220252859c1969625980b64a

SHA512
239f9acf6ffbd182d8bab3f4be6e18eb626d071ed95840f1f31df9ee802ce1e0f65ab4b5ae27b90d1ac440b7bf794f9de611f4e48e4be14dd03558dfc6d5ddee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000077

Filesize
89KB

MD5
7a6ebb3193c0c23eaf22c4df76dbf3f5

SHA1
8c782bad9eecf80387a61bff578bf5c20e70ed80

SHA256
b78264730ff0cb3d2b2eec16a9b129a9b633c704f5178613ca7271be967fcecb

SHA512
17aab5b91a271555fa983312156f2e99d0bff3ae02963b2e73a57b30c4fbb5faf482acac34b77d8dfc6daa28d2c1c2282eba921f7c32fd791b0a98a9e2532083

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000078

Filesize
62KB

MD5
52400155f9508661a4b073e1a55f9870

SHA1
341678bc95b88128d4b2653cdefbd41551d2305c

SHA256
0b5fe4f1e7837b58973b5291491ea341caf5d12fe5d3f38dbe8a4c21d9415047

SHA512
570f1b516c25775c2187e93983a5d480e1a77ae2583d71a00927b46c66a7da3f9018e381905f83aa31952295963a69fd14b6a46e1dcd54ef32144b066b1b9bbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000079

Filesize
272KB

MD5
5f524e20ce61f542125454baf867c47b

SHA1
7e9834fd30dcfd27532ce79165344a438c31d78b

SHA256
c688d3f2135b6b51617a306a0b1a665324402a00a6bceba475881af281503ad9

SHA512
224a6e2961c75be0236140fed3606507bca49eb10cb13f7df2bcfbb3b12ebeced7107de7aa8b2b2bb3fc2aa07cd4f057739735c040ef908381be5bc86e0479b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00007a

Filesize
21KB

MD5
caf225f7adbe3c2452a62dd3fde23661

SHA1
cbf6ac9c6cf00094fc79e189096a6baa3ff40631

SHA256
026b86f6177fe1eafc143d0bb1841929df81cded8df3894dbca28b940c9153c7

SHA512
455c1f42bce6849e4065c84cf6368f828e2a8cc3f853129e0f2f019d36a54c1e282823283a6cf4b29ee792d29a99648e3a97a4e9290997263048e9fdeb56a57e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
7194bb03d91d59581896e7706e315a0d

SHA1
97ebecce109b4652b2f32b5422c876cefa043f0e

SHA256
ac7636d5c4ea35c67d1a55d5b30e5eca71b7c1df80e4361e654a4012454014d2

SHA512
e7ad28bc696fb166655298b4b47cd803ef78abea7625c1fdb39daeaa64c592346b8089fb6a7d599672cc67d2af7871a8a6431babadca12dcc48d6b7a99fad049

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe579eff.TMP

Filesize
3KB

MD5
30fd9593e4568ad02197790aec33786b

SHA1
cc550c3b270cef61425b248d8c1f31be03557033

SHA256
0f9c1f5eb64cf4df16f38f1708fbd88e8437d8f8a4d7bd8132c07835e9b644d9

SHA512
5f482c328835588dfa8c2f794f45f0d922eaa60523519fc322cae008ab7a87d201480ef5ac7573959ca7cd65dda7d056f62cf3b2c992bd93dd2610d102e7eb8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG

Filesize
343B

MD5
5b219b3e583d88df6ca7c048cf53ca01

SHA1
8993a435430f3a18c0b0342973162d7a5b3d5109

SHA256
f861a3864c0dfb53b7d512a661456656a0d21cf57b217bd592603391fe2ac41e

SHA512
ade87de3041b9470fdf8a0fc30d5e92a15d633a23da15a11f7768f5060e82e07a975f1910d26cecf179fcca6886951be550dc275bbf55f23ec180edf4aeb49c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Filesize
319B

MD5
5ec69f9db754302f6ca8cd1a23522824

SHA1
9953c791abe5cf4f419d320050304bdd1be53ebf

SHA256
4935a0c5fc36e35919302a6e5f36a1281d1a97aa3276fd5e9a4e569ecbe0a624

SHA512
932a1c8fdd1c54f250c11c091fae5f601c560522a595d5af0714a190acc09fada696ea678f6195bc9212f4f0d8c691a0286cfbf898aa5603c8d0897fd6252827

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
192KB

MD5
f584b1ff5fa9545081794fe14045ea6b

SHA1
c4e546bdec5b6ee92a8bf62ff9ab2e401899b449

SHA256
1367d1eece06d91535404a648ec029e753f5d40c499a4a77fa55c46b1f4f114a

SHA512
3eb59df673ef46542ab05c2f1e358f4d8721eec619d572eef3871f9b8c9490733772c3eb32d372bff7f91f7b3c96d17e8d51c9900e888114e7f313fe03829a8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Filesize
1KB

MD5
07ba31e9abf312f2384e8481f7af1783

SHA1
1a69b56e1f138c034f27b10b5eac4a4f95e0af45

SHA256
d7e1c8f19266085c7b93eda215ab7a9b3eef4049e65bf84e0075bddd04ac7f7c

SHA512
96e42ce4cc1198987038b1c3a4ce9525c42aa45a625198c71ce8f53f0ec200d483559ae3fc035b705c403ded1fe6be1600d3663d93bbb80ccc52422a91902bf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
331B

MD5
8def97a395212073659fded25434aa05

SHA1
671fc2179e6c44dc89c3fc762ae9c7feed22ee87

SHA256
3118bf37f0847d4f494125eed60c36f095c5016ccd18d12d447387b10e70b395

SHA512
ddcaffdb22287c6d552888cda3750541b1bd00fd6182d17264e9c7fda1826fb7364d891f53ff8c33389b9ab95e4af9b3579082913ae338fd5c2740c4521ee015

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies

Filesize
20KB

MD5
4933160f313f70677c5aa40b26ebf17f

SHA1
d42fff91835d5f281ed358e84b755798338e148b

SHA256
a2dcfe8d98539b1086981cedc7c1bfcf1a0292d3fb9c7e36ecfd1de173d68c1d

SHA512
55070b3866241f78512d5315bfdda260af0ec2ba4fb25159a524456886c12adf82f27e1f39942b8726d15be8e36f9906c2e0d84402f481f38aaed03078e4995c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
2KB

MD5
c6a70010356cfb61e9f64ce05d3c8b0b

SHA1
142a7c330c37dc998b6be1b81a7fd830def6fb31

SHA256
93feb71c508b5e4926c59ea2fb701609762d382a92aed7502ead110717be81a6

SHA512
f402920c6a9300bb6210b040f4f3c20fc917dd84e1844c3804ef3496d641dde0cb85822f165cf93a28ab05903aaf87d6762a1350fa4ddeea6791c13a777e5fcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL

Filesize
36KB

MD5
7ff2781999e5d623b79ba22cc986890b

SHA1
d4ee564bccdc6e95ef19b8379835901ddfeec05a

SHA256
dd403167f8199ce33c735eaa97d6c80070f3d9bfc67fda1fdd11ba514b067ec6

SHA512
abc4add7c95bf6cc47e27ecdb692f7786d7a57e54321a67f73f0fecce7bdf41485ab010f17b335cc060ab494f74b37de8fa69c125252e3175ac95983834d05bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity

Filesize
188B

MD5
ded8014f46c9fb047e0cd4677d715c87

SHA1
3d63013fba0b2a06e667c6bd88f0fa2181e291a2

SHA256
9f312ae0f8219711c3d9b03da673c76ffcb064b67a660751722cc2b999e94bfe

SHA512
3ed43b5237dc58ec9ce837eec67a3c8a65f2198d61b461b04fcb6e9a40d397ca0298c50211dad8ee6bd32d406b81bb9fe6970e056a6cd0d9e28557fd68a45e14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
b03f1737a7b9377faec62f127f9e5c95

SHA1
366f7d44eb100f73f4fbad1d7273e45e26e06a58

SHA256
dc2b15705ee3216162de0a11d09c80bdd7ef2dece0f54e9fba016fa221e62c74

SHA512
71c90c18b06bab7b2a9f5532338bd8c1b7f9e77d68389af0f22595ecf3fe14662a1474277fc865af43a9364c659f09bbc3b2925a72f9364cf72bfe586587cdd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
36KB

MD5
00cb3355498e7150ad27157e97c7eb5c

SHA1
0a5efa75e6a4d81ad48cd05e56bc655ba1fe5fe7

SHA256
51ffc9e9c11df79740cc12d76f0a684f5f80c4ca52fcf8fce0ceda2efe3ce007

SHA512
b17a69f9e583c4e27e6058d399f0c54a41bbbb9d29e2ded3fbabdb405ebef45bddc8d7ad0b7b01b35baf9779452d5696a831c76b596ddb4704d351a250e9b7cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Filesize
335B

MD5
ab53fe503661da2d22ab7d5fe043fa48

SHA1
b571381c174ff8e6a2b015c1fdfb2eb8fecf0e8d

SHA256
caff596b7fe6912eb594297ebbe6172ef92ff316af4059b106f868b274bf44a0

SHA512
49db2cbee624f2abfe554b790cc9270366305d8a3291b858456d1a822375a99cf9e52a496b3750c2c035e9c0b544ca0343bf450370f1e5a0f0f5747fb84480ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
317925643e1d96b3b41dd2daab9d88b5

SHA1
c4f39a0dadd66b22cb9918c0f39a48a440d600f5

SHA256
1a5db76d242dfe5f3ea230b5d9f318a6e2f4a6384ad57445ee7f6f420599dae3

SHA512
d9996f02e7452238724c0ea92131e72d256c3d252ca4b35f1773b1e6f9ae60ad23f51cfc41ed6892f66684fe2782faa50fda04f5f99c46bb7c974243feb3ac09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
323B

MD5
4ee2075d89a3aa320b495ae2b3fefcf5

SHA1
4cc71f50658b1743c0a9906020e1f13416348c98

SHA256
205a71ae853c1a08c2830e0c6fbc2d0d55b2850ac442b8fde2e88f47de04bcbb

SHA512
188b9b30ba7cbe5a7a01708f086b077000ef93c7151cb9053524f7c67194edf6d21c15ae86d6a9f7d93e08dd510bc1d5f17c271c03c18e305868a8e9005d8d0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
8841493f4085c80c907141cc5b32c682

SHA1
b7f210be71bb7c036e4a735ad03864adf2da3a95

SHA256
323fc756cf4091ffa27942faf694fbe0d175bf7a4e8a11da7f1de9d8f5c2cc93

SHA512
fcef32e54867c5fa6f22a6260a0efe1282277d54dd2c2e3c67695f93e023d85c98e29b8a414bfe0975c9de6c476e4c1f55e602973270f7d2e1b3b489a6978e7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
d81a0b4a908747d3c12cc0dab3921191

SHA1
f2dca518662e9d6f01f160d449aa76fdb7087db1

SHA256
03b5da4abe245b79f366abc331757eb3bbf3ba83e7bc55539ae4601ead9c1d60

SHA512
08e42e4bc034079beddde31f73d6cd1966f66d2101d30830b317bbc599aa09df669abf5acbe49c1ed2b12ed51f8c73af8f6df3ad0f31d14bd067e00ae3702d92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Filesize
228KB

MD5
ccb7415e99d019c7cf76c3c42b5a79ad

SHA1
2eeda8713b150f8988561155e828215c22c959e3

SHA256
f10a58db5c651e3d757e6fe339edaaa037f29ad79b016b2c5a44db21c481857b

SHA512
d0f772a32a2d7f037702b0a5dd49a094f1094282fa1d67b9bfd8d463b85910f154ff346cef7624ad3ae98d6c2a75d32670470c2ddcbdf62aea12cd90ada5f055

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json

Filesize
12KB

MD5
18261eb12378081f939fb9415ca0c9e1

SHA1
20d4ff782e17fe45e71c3f9fc60a94655f72ec7c

SHA256
12bbeec9a0af9e3ed945b28b9b8ef89b2f897768d1ba3ffd6f3fbb42fa5bc556

SHA512
fef634b4ce77c2f36ce1bdd63e8ac28e76cd089f0bff33f4425c757ddf37fe9fab30dea7b5bb51c91eb27012cf78800e03643e13d51a25bf624ce58ab3488a80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Filesize
319B

MD5
5efe1d1b85924d3c0d643acb79f1f178

SHA1
ddcd22fd0b8d758d0a07ebc28d11cd98953bc945

SHA256
58a60135bd6e41d87db1a558045d810a4cf51e3e5fb6edc0724155302cdf6c55

SHA512
569587470ab5b9973f0bba3f4949ab5e59a9a84774f64def358018edebb6f88c448efced53b270e0f2e49ca561c34525241989fc12ab4812773dca496f6b4f17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Filesize
1KB

MD5
7d160472f3f27f404f6ececec4ef34bf

SHA1
4c67f0697627a23f3b9fc23f24620b4d80c81927

SHA256
35130f2d705985ef14e131fe6fd9fd59612e5d4bc74b334579dd20efe1970457

SHA512
2aa391b0b5223a67893147cdcb4eceb3d415a31f482ace6312ff948a0787897ea8d4f42ee9926421939dc431fa47327689a85c6bd4f5d924f80b7c01d08e6b41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Filesize
337B

MD5
f56da1460626b0e6d965808218450f36

SHA1
c08277b0b95d41e30aed21ffa8986e4e4b673a54

SHA256
60d470a7ed77182565549ef861cd140be45140dbe5afe9eadad06e238b9efbdb

SHA512
4159a295944a8b68b3529a2d2ac5497c28c1eacc5c90a4c1480b73c209affee4e9d64559ec68c29664ea136418067d0357af7651d6b5e4fb2ab87cc86c7b299b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
465B

MD5
4a7d16af94d56edc863ae2d7d477860e

SHA1
e74fb8aa046e4e60f0790ccb73f1329ba6a07cb6

SHA256
f40f62257a8536dc1b0133ce38bacd54691fc03bab69b8bcc3fffb49fabb832c

SHA512
608bcd890690f0d1646217860f5073fe67eb0146564e61e67800f5a6d255a9271a38c6c6bde493910f99dc0c20c1039fd2dc848b8960b965e381621328eb8cce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
896B

MD5
5821abe48fa82cfa43c38e6db0b853c5

SHA1
309117219890488e4a3eb95f498dd6a2cf1238cc

SHA256
4a75a48f811959138da00f041243b658ae97f4c00774fa17d06e6c6baec4b993

SHA512
3c9591d1d0d3a683b11a7bc31a9c11e2ec1b133cf17939966d3a2fa194982bec8dfd25b5f4d9ed49a913ab622a45b2a9dc034822efda1ff6581eddb9644ca88d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
19KB

MD5
41c1930548d8b99ff1dbb64ba7fecb3d

SHA1
d8acfeaf7c74e2b289be37687f886f50c01d4f2f

SHA256
16cee17a989167242dd7ee2755721e357dd23bcfcb61f5789cc19deafe7ca502

SHA512
a684d61324c71ac15f3a907788ab2150f61e7e2b2bf13ca08c14e9822b22336d0d45d9ff2a2a145aa7321d28d6b71408f9515131f8a1bd9f4927b105e6471b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_0

Filesize
44KB

MD5
4ee53a3d1e060975b5be33d656c11ca5

SHA1
23ea420edebed4a46448810caf26dc07c0178ff7

SHA256
334a1b920c12c71092d1b9db349f0c2f559401fa4d6a2bf0552f611f1b0cd955

SHA512
d6fb99c9555c7eeef68e00f86ffb7769c7454e3a2764ec355e0a193e82ff063df806561a43287731fc51c081498ad11f4a863af8d264bbc528b83ae7b6a6eeee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1

Filesize
264KB

MD5
44da1d78de0094c5e0b2b0630d9d2c2c

SHA1
af9210d1b312da68006f72d37a670001a032d96f

SHA256
21a2a43167eaf8c242895608abb99238eabe51fc14d4f8d070eb3ecea47d90d8

SHA512
082afc3df2b9ed66f30890256e5ccaad91c7a4ae8579368c325950dba2ca4e407a60fdd3f53af67da8a17a40f92e16e8f7046b1baeb58e16d1a82f417406e752

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_3

Filesize
4.0MB

MD5
71db2032479dff8fdb054cba9f2b436e

SHA1
2934dcdd0b0cbcb92c41b49ae103643ced2238be

SHA256
17f1a9da48bb886ded3f020447c60e76150fc07993d340bdc7b200a1115ca7f1

SHA512
fd05bb842b839f01b9dcd0a91764eaa9d1d7dbd2c890f7057355772bf01ca865cf51867bfdcafc2d5357d3d473969a9b4a1ffef810ea8dc88870da165c8beb10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1

Filesize
264KB

MD5
f99d5ec880334696aa4edfacd9c9c4f2

SHA1
5e5581c6229c99309afed2eaef3e4cf7db5590e9

SHA256
6d21ba2a9fbc6d60e07ca3ff3c1533ea384596fdc0304248ca151ead804fe39b

SHA512
54f9d8cfdb2e5f0d36e319f0c557db4c2c2a25ee44ca921fac8f9f70c0e4cbbba101a0255501e11993a5dbaf82331d7de3063fa8e77abd7ebb246eea7b2ec18e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
13B

MD5
3e45022839c8def44fd96e24f29a9f4b

SHA1
c798352b5a0860f8edfd5c1589cf6e5842c5c226

SHA256
01a3e5d854762d8fdd01b235ce536fde31bf9a6be0596c295e3cea9aaf40f3dd

SHA512
2888982860091421f89f3d7444cacccb1938ef70fc084d3028d8a29021e6e1d83eaef62108eace2f0d590ed41ece0e443d8b564e9c9a860fc48d766edb1dc3d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
46KB

MD5
cffcfac4b9f2c0513893c11ca702371a

SHA1
632278d24bf6a6a9f58dc5caf5d57f234258b1aa

SHA256
c9d04e98ff5a8f0279fbb458d2adc6dea7232938d04c1447d20bab5b1e4a59b2

SHA512
5f38306953f2706aaed8c419efebb8a2804b491f0694cd32e4d5e9bb179a0eeb610e93dd40b2985d8b80653bc8768b7d41a68d3fffc9b17b0fab716478756f1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
49KB

MD5
4a3a1485f5f0d2bcef73db28d71e9b31

SHA1
86f1025139f53f1970003799b9a5a270d75607ca

SHA256
14d56ccd8a3d55dabdf397a6d67a3bb48f2d7be068a20ee05760e378323248b8

SHA512
73701e4a062b61d13a39cb9a903fb0f65431937571b0e8820a5bf59c7c555ec8d930be0736cbecc7a289a8d1e34a4051de6706202b7a34b0046d362ca59ebdba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
41KB

MD5
a1780753686f2df459c5a16c60215d35

SHA1
e65391b91b4bbeb0ce2f7e4b25d358d70fe26ab6

SHA256
7f6e396b717b2f87e6f8d6d624cddb55cbb2564c796ba7c9ab8e228ccee14e32

SHA512
3b80ad4f45cb53100ea08f78e893b982424a6991716186980e1cab15f890f697616938e87cd39713aacf7fe2b2a69454ff0042d41114962dfeefc872a2d80f49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
46KB

MD5
db19035b166a2204a00cc7a44e51653e

SHA1
c8faba6c271cfde04cddbfa440cacfc6b0959804

SHA256
7674307e4ddf7f52dae1829313ee06639a0f80fe412651990c450c4badf491e1

SHA512
a5e746f7573c3a6a4c1ed7d9a3741c7bf8e77b93f61c8c86380f163f9ed80f9d822d04cc717ea351a8a351dfab92623b4f25585e1f37a48a2ee4d168cab2693a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1

Filesize
264KB

MD5
aa57179200346c49f28fd229d3ab80b6

SHA1
270601e479bfc54f60d859bd26a38e8dfc2023a9

SHA256
78b3478e5bd4dbd61de7503da0167154dc88d6d5ed725d181e7d4a5a20152033

SHA512
94a4e408e7742f0d2597f6d03e941711e3e304cbf654640458986404af5ee76c5bafe801d9572cf8f3416957f69b4207295181532e05f4bcd55939c9a9a10e76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations

Filesize
86B

MD5
f732dbed9289177d15e236d0f8f2ddd3

SHA1
53f822af51b014bc3d4b575865d9c3ef0e4debde

SHA256
2741df9ee9e9d9883397078f94480e9bc1d9c76996eec5cfe4e77929337cbe93

SHA512
b64e5021f32e26c752fcba15a139815894309b25644e74ceca46a9aa97070bca3b77ded569a9bfd694193d035ba75b61a8d6262c8e6d5c4d76b452b38f5150a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\ghbmnnjooekpmoecnnnilnnbdlolhkhi_1.fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

Filesize
152KB

MD5
dd9bf8448d3ddcfd067967f01e8bf6d7

SHA1
d7829475b2bd6a3baa8fabfaf39af57c6439b35e

SHA256
fa2232917a5656ea4f811936561ea6b7c92b3c0004c5e08ecb97636d3afc6f72

SHA512
65347df34378c2bbb34417e2cccfb3251a0b2412422cc190eed9df525b6e0a9948e0295ea3c33b3ad873ce81e369e89a138ac41d6eb7229546c3269107e661de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Filesize
2KB

MD5
e50ebe4acf9f0dbcb21f0c041dab4256

SHA1
8eda92dd073dcde5471b7c03e20411ab05d3de11

SHA256
1d635c95ee98025b405530cfa1a42cc19893752830398e9fc598ca07a7f6e8b6

SHA512
5d88d26d0befd30c0783e1515a3b907ed457e33fa85d5c56bfece908accf614130cd5a12ebd35abf311c7b98aaf7a9ab56b056993a3953042d6283d04e08b4d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\8b0d4544beb97a69dbb9583fca5575a9aba6e37d.tbres

Filesize
2KB

MD5
b82aefa93e5c3015a426586be26adbf6

SHA1
72aec39d0be06d070dcd62fd41bec19ba4db792b

SHA256
2b7b554accb3500fd0c7df98e9475da73d551ac0e46789f813eadbd9360ae77a

SHA512
68ad7d68cc3dc52d67b0d8ef6d41dc898bc06fe400f6b45fa11e10dab614cd4e85f972a87c721157e866beddd8a10a394858e24b61c1e15aa58f3257d43ecfb3

Download Submit
C:\Users\Admin\AppData\Local\Temp\42320e16-26eb-4691-b917-27ca521540fb.tmp

Filesize
1B

MD5
5058f1af8388633f609cadb75a75dc9d

SHA1
3a52ce780950d4d969792a2559cd519d7ee8c727

SHA256
cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8

SHA512
0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir1772_949748454\CRX_INSTALL\_locales\en\messages.json

Filesize
711B

MD5
558659936250e03cc14b60ebf648aa09

SHA1
32f1ce0361bbfdff11e2ffd53d3ae88a8b81a825

SHA256
2445cad863be47bb1c15b57a4960b7b0d01864e63cdfde6395f3b2689dc1444b

SHA512
1632f5a3cd71887774bf3cb8a4d8b787ea6278271657b0f1d113dbe1a7fd42c4daa717cc449f157ce8972037572b882dc946a7dc2c0e549d71982dcdee89f727

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir1772_949748454\CRX_INSTALL\_locales\en_US\messages.json

Filesize
1KB

MD5
64eaeb92cb15bf128429c2354ef22977

SHA1
45ec549acaa1fda7c664d3906835ced6295ee752

SHA256
4f70eca8e28541855a11ec7a4e6b3bc6dd16c672ff9b596ecfb7715bb3b5898c

SHA512
f63ee02159812146eee84c4eb2034edfc2858a287119cc34a8b38c309c1b98953e14ca1ca6304d6b32b715754b15ba1b3aa4b46976631b5944d50581b2f49def

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir1772_949748454\CRX_INSTALL\dasherSettingSchema.json

Filesize
854B

MD5
4ec1df2da46182103d2ffc3b92d20ca5

SHA1
fb9d1ba3710cf31a87165317c6edc110e98994ce

SHA256
6c69ce0fe6fab14f1990a320d704fee362c175c00eb6c9224aa6f41108918ca6

SHA512
939d81e6a82b10ff73a35c931052d8d53d42d915e526665079eeb4820df4d70f1c6aebab70b59519a0014a48514833fefd687d5a3ed1b06482223a168292105d

Download Submit
C:\Users\Admin\AppData\Local\Temp\scoped_dir1772_949748454\CRX_INSTALL\manifest.json

Filesize
1KB

MD5
2a738ca67be8dd698c70974c9d4bb21b

SHA1
45a4086c876d276954ffce187af2ebe3dc667b5f

SHA256
b08d566a5705247ddc9abf5e970fc93034970b02cf4cb3d5ccc90e1a1f8c816e

SHA512
f72b9190f9f2b1acc52f7fbb920d48797a96e62dfc0659c418edbbc0299dccf1931f6c508b86c940b976016745b9877f88f2ee081d3e3d5dcdcc2cc7e7884492

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
8KB

MD5
291b62b2726b38ebdca114cbe720c0f2

SHA1
306f795288fc382fee1f2673ca17f030288a4700

SHA256
d256a2c82eedd1ca6e3729e3fc307f65073ddf6b6f5c4774965f2e3984f5aaf6

SHA512
c414fb517fd855a4580b958f58cdf57a129c1eb3d2ec935677ee118b7da5127f6f16cf6632276f5f7524919c1c7af4935a41dc3e2921f3d8715759ad10bf6433

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms

Filesize
9KB

MD5
500ecf425e8a27c4a7291df6d1811848

SHA1
00c56177e393017e563cc0f85ce42affc9ea715f

SHA256
842ef76e92fb61cabea11534a317642bcf4f4758d1a9f1a063d51306155fc525

SHA512
9c962665562e2a29bf9a57d099d557d561386c9cc7c7b9e30d3c45aafef622ccdd3303d3902d9290a82198a8132277011c290c00d99145cd303186d79a8bf42a

Download Submit
C:\Windows\Installer\MSI9BB1.tmp

Filesize
219KB

MD5
928f4b0fc68501395f93ad524a36148c

SHA1
084590b18957ca45b4a0d4576d1cc72966c3ea10

SHA256
2bf33a9b9980e44d21d48f04cc6ac4eed4c68f207bd5990b7d3254a310b944ae

SHA512
7f2163f651693f9b73a67e90b5c820af060a23502667a5c32c3beb2d6b043f5459f22d61072a744089d622c05502d80f7485e0f86eb6d565ff711d5680512372

Download Submit
C:\Windows\Installer\e587a6f.msi

Filesize
26.2MB

MD5
4708f88a9e4a4727ec3c45627ceffbbb

SHA1
5544fe796e2d8ed9eee9348cb92747d5e491c7aa

SHA256
69a125ea1d803bd539acf6f65ef581aee1171709660398b8ef5cceeeeba198bf

SHA512
91f5fac31b3804799c44429e6f058c9b7205c5caf95637fd8092a48965ffd62ff7b40b572f11697bf38a4996deb7f78af9068acedc723bd25455535913fb33dc

Download Submit
C:\Windows\Temp\{0D8B0A9F-3F16-4E47-BB39-90F1531F8608}\.ba\bg.png

Filesize
4KB

MD5
9eb0320dfbf2bd541e6a55c01ddc9f20

SHA1
eb282a66d29594346531b1ff886d455e1dcd6d99

SHA256
9095bf7b6baa0107b40a4a6d727215be077133a190f4ca9bd89a176842141e79

SHA512
9ada3a1757a493fbb004bd767fab8f77430af69d71479f340b8b8ede904cc94cd733700db593a4a2d2e1184c0081fd0648318d867128e1cb461021314990931d

Download Submit
C:\Windows\Temp\{0D8B0A9F-3F16-4E47-BB39-90F1531F8608}\.be\dotnet-sdk-8.0.407-win-x64.exe

Filesize
611KB

MD5
cb2d12f4d983409ec7170a17825fc5b1

SHA1
8b38e8290f30be36be6079fa89e55d0cf81ef5e1

SHA256
67f47054f39a1d0a2037c4460e19f4f1d817a7192fe11a0de14b6982176548dc

SHA512
315bb587982213e4f344a6f722ed410fa5af677ccd632afd47b54e2d7e0c96a6c5eeaf64178e5b6c87f954be9360b17d6b7bce5dba2dde2e7253bb15829728bb

Download Submit
C:\Windows\Temp\{0D8B0A9F-3F16-4E47-BB39-90F1531F8608}\windowsdesktop_targeting_pack_8.0.14_win_x64.msi

Filesize
3.6MB

MD5
d9b193684055e6a587271ca507183e0a

SHA1
6791632c247e9bab93081fa92e932e181695de1b

SHA256
42f64289c226dc5debe57998f75f4afe76aaaedb806e93c8e2e99761eeda004e

SHA512
ad23751936c6a2c2ebca6b429c6a6173906c510107f15b556cf8b4d67f1bbfbfca7986b6249b1f15cc16289ec63a4857cf0372a60c3fb9d2314eababd60bdc29

Download Submit
C:\Windows\Temp\{EB320802-356B-4524-9074-3B5E3F90645A}\.ba\1033\thm.wxl

Filesize
6KB

MD5
4479c9aaaae17f8009392786f0910789

SHA1
216b73ba2094150424a9fb4a3d4e1d46b7a38945

SHA256
34919f9197533a6ba636941a91e33e57338fb86a821fa02bf586cb80e9eebdb2

SHA512
6a15007c0239ef1d463f688a5a5f577a8dd0bfb1ca2308b128e31efbb4fb2a2856cbbaa4695e688ec894f8e3ae75a132707d61f88591c686d410f019bc30a9bc

Download Submit
C:\Windows\Temp\{EB320802-356B-4524-9074-3B5E3F90645A}\.ba\wixstdba.dll

Filesize
190KB

MD5
f1919c6bd85d7a78a70c228a5b227fbe

SHA1
71647ebf4e7bed3bc1663d520419ac550fe630ff

SHA256
dcea15f3710822ffc262e62ec04cc7bbbf0f33f5d1a853609fbfb65cb6a45640

SHA512
c7ff9b19c9bf320454a240c6abbc382950176a6befce05ea73150eeb0085d0b6ed5b65b2dcb4b04621ef9cca1d5c4e59c6682b9c85d1d5845e5ce3e5eedfd2eb

Download Submit