hxxps://roblox[.]com

Analysis

max time kernel
1800s
max time network
1802s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
19/05/2023, 20:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://roblox.com

Score

4^/10

Malware Config

Signatures

Drops file in Program Files directory 2 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\ffd8797a-81e1-4120-b348-efe5c7d59fb4.tmp	setup.exe
File opened for modification	C:\Program Files (x86)\Microsoft\Edge\Application\SetupMetrics\20230519224107.pma	setup.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000_Classes\Local Settings	powershell.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
4196	powershell.exe
4196	powershell.exe
536	msedge.exe
536	msedge.exe
4080	msedge.exe
4080	msedge.exe
2376	identity_helper.exe
2376	identity_helper.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
3388	msedge.exe
4380	msedge.exe
4380	msedge.exe
5096	msedge.exe
5096	msedge.exe
1104	identity_helper.exe
1104	identity_helper.exe
208	msedge.exe
208	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4196	powershell.exe

Suspicious use of FindShellTrayWindow 45 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe
5096	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4080 wrote to memory of 684	4080	msedge.exe	86
PID 4080 wrote to memory of 684	4080	msedge.exe	86
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 5028	4080	msedge.exe	87
PID 4080 wrote to memory of 536	4080	msedge.exe	88
PID 4080 wrote to memory of 536	4080	msedge.exe	88
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89
PID 4080 wrote to memory of 836	4080	msedge.exe	89

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell start shell:Appsfolder\Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge https://roblox.com
1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4196

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-redirect=Windows.Launch https://roblox.com
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ff9543546f8,0x7ff954354708,0x7ff954354718
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2356 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3472 /prefetch:1
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --configure-user-settings --verbose-logging --system-level --msedge --force-configure-user-settings
  2⤵
  - Drops file in Program Files directory
  PID:3368
- - C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\MsEdgeCrashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\Installer\setup.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x220,0x224,0x228,0x1fc,0x22c,0x7ff7f4eb5460,0x7ff7f4eb5470,0x7ff7f4eb5480
    3⤵
    PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2088 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5224 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5888 /prefetch:8
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,12182105234938973690,11917398724185888971,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:1308

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3708

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x524 0x520
1⤵
PID:3816

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ff9543546f8,0x7ff954354708,0x7ff954354718
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4116 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1940 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2744 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=3776 /prefetch:8
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5288 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,14047586756286363670,15366422374651111068,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1636 /prefetch:1
  2⤵
  PID:3324

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2788

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\52b2bfc8-088a-4be3-ba4b-f7249fdaf2c1.tmp

Filesize
13KB

MD5
8cfff9a56e9ce6e0686bdd95e2a688dd

SHA1
c619bbae3e6de061ed2f55bc9835c9fc83526c1a

SHA256
c279f629bc118b31aef2e67b6b9b69127969e4621fbd47b55b8f118b018dbbec

SHA512
e57aa8876b9da74fca204f624d56906d250504fcef8e86f3e907f5bd1c460957337d742efe89e566f5f08b72dc1af047189b5afd350be81e652cc7ab5f0b195d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
78c7656527762ed2977adf983a6f4766

SHA1
21a66d2eefcb059371f4972694057e4b1f827ce6

SHA256
e1000099751602ae1adcec6f1c74e1d65f472936817b45239dfed4b043984296

SHA512
0a8e58ae95163b3cdf8e81b5085887761e73cb7c836a1a6a972e837fb3df69b2ac70cfd6311d06d40656344ec35eb48e512f007561480f0345486ac2b329be0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
322d6d00bfc30242630697a32ba5f567

SHA1
35c4896afd2f3f471f839faf9b81a2138a11cf76

SHA256
405e56fbd1f03a246a259146bd9f292302e026363dfb48dba34603246d66f0c9

SHA512
9225c1b7c861387536d7d65452929be69207cf3d3c325ac6d201721dcbb57679636e338b82d9cd69d497c99582f6d8c2e8e9f24824d319050c55ebde29aae9bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
322d6d00bfc30242630697a32ba5f567

SHA1
35c4896afd2f3f471f839faf9b81a2138a11cf76

SHA256
405e56fbd1f03a246a259146bd9f292302e026363dfb48dba34603246d66f0c9

SHA512
9225c1b7c861387536d7d65452929be69207cf3d3c325ac6d201721dcbb57679636e338b82d9cd69d497c99582f6d8c2e8e9f24824d319050c55ebde29aae9bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6709b38e2542c4d9dc80cfbc30d4c9da

SHA1
fe0fcc9d0b8cb319eb1ebf750f27f0259e9e6297

SHA256
039a5a325ec786d69ac54a04fe9e9bb74b7e36467f745648042c82922e04fead

SHA512
6197f937ed8071aa590c601cce828708a2196394f36cca396e5acd184e34969a762ff8b4b094af2622c98ec30c8072c8a0f8657d07371b4d40aec8b8c65c2e2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a109264b92a226f1613c364046c8bd9b

SHA1
9404b5a26f1f8a61be4127ed6b53f4c7385c2c53

SHA256
06b77d91e23a51d5fc3483e62da108046fee0597133b2b62a57ba69eb914474a

SHA512
46783d0da79b4dc6f7c5406ca3e5c290bfe781706ec7ae3faf4f5197e2545d5475d5fcde1ae59794213e1f1618a8287cf30e7b8438bf1cca5ba0ae6b3ce8a69f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
099b4ba2787e99b696fc61528100f83f

SHA1
06e1f8b7391e1d548e49a1022f6ce6e7aa61f292

SHA256
cdb1db488e260ed750edfe1c145850b57ee8ab819d75237a167e673116a33ee8

SHA512
4309375e10785564ceb03e0127ced414e366a5b833f16a60d796471d871b479e4c044db5268902d9dfd14715ca577cb26042bab8f7b0f31fe8abf33947feb9d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\06d00bdd-a979-473f-a0c9-19d01f017c23.tmp

Filesize
2KB

MD5
099c3f4990408f8b0c001165a0b8ad79

SHA1
7c672b4d2269178715a799fd6d71cd60c1d4cf69

SHA256
c4ac4b2d02d77f3a660857f6a952454dbe79455c28df283924ef2d0faf895ba0

SHA512
9eea1ddff937f156cc925380f431847e0386eedd91ef7dc16e59ccad8fa55aa715089261257d574fc4b6c03c190ab4a43fcca54f25805bfe053e1eb6032da6ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
97KB

MD5
34b97f8b9e4296af5238fc8f67586b72

SHA1
e6c4b92901c1a9d8aa6a7247143c2560a90efaba

SHA256
70c158c98bf7abf5e0bb3167edf6ed0d378f9380fabcf281cf0fe59623a0c774

SHA512
0df677459ce64c61aa109aeabcf8f91e5a19a98ddc3426818d5cb256e05abab604b2455296e83fd4687798f6f241d470af431ac9e153df95283186c28c3ab4d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
67KB

MD5
dce35af078d0c324260d5308b5eeeafb

SHA1
17b78499ea69ce0c8aa7c2c90d5891735524a38f

SHA256
ffb0abaf4087d9b9ad79371b28fc2f88fc65ad8192458ca8800212822130f705

SHA512
911c9ca1b400857e7a1e3e9093e69c0c79b0a617537248159806ca2a892ff304e6be06a8fd91c17541246d0b2dc4f9cdeb21d77d4250fe5f87945289e5832ac5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025

Filesize
49KB

MD5
6983568534e8cd4d346a2638a0892bf2

SHA1
2df1d616ae8f4989dbe9427848e5974b195e0a5a

SHA256
02043e5d2b23f9582ee2645e55ac26e556496bf25f15d146eda049af1f8553b6

SHA512
11a02ae3e51eea6768f8274178feae2da5398e6c5f62a5d34146ca7edbdd484ff85e59a2e1c61a8c0e1a1eda8af8f9fe9d5470cd357c2b424719b41eb7effce1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000e3

Filesize
43KB

MD5
0acd8ff34f3a5c177d02e9011ee74eb3

SHA1
7985774d3676c27586c71bbf28b1f53598951a05

SHA256
ecc55e4682a2b83956e183e86dc4d475e91bf192ea71faab52a8ed8cde83a3a3

SHA512
bd5402b5214bbe9e499ec5cd9c6933592e1d3599ee80f72fd2ce2076fcd50dbc355cf3d58e923ae2400d09742768bbe9086c7cebc8d2560e741726bb37374ac2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000fd

Filesize
51KB

MD5
588ee33c26fe83cb97ca65e3c66b2e87

SHA1
842429b803132c3e7827af42fe4dc7a66e736b37

SHA256
bbc4044fe46acd7ab69d8a4e3db46e7e3ca713b05fa8ecb096ebe9e133bba760

SHA512
6f7500b12fc7a9f57c00711af2bc8a7c62973f9a8e37012b88a0726d06063add02077420bc280e7163302d5f3a005ac8796aee97042c40954144d84c26adbd04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
2b58e6ff9beeb4b1e5ca3277e6effe70

SHA1
6265c4b632e330575f61e3617bca1a190c2741b7

SHA256
304daf2aa5912febcedfb0d4aee44a94bd86ae2163c035eb5791f71cbc3b32c2

SHA512
260e2680213104b830c2f7d0c1f81a73929b982bea372bc28c7642d246a8a7c19d430fce3cba06f14ebee12f0b1e6650dca4b0a9089db54edd444e15593432f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
2b58e6ff9beeb4b1e5ca3277e6effe70

SHA1
6265c4b632e330575f61e3617bca1a190c2741b7

SHA256
304daf2aa5912febcedfb0d4aee44a94bd86ae2163c035eb5791f71cbc3b32c2

SHA512
260e2680213104b830c2f7d0c1f81a73929b982bea372bc28c7642d246a8a7c19d430fce3cba06f14ebee12f0b1e6650dca4b0a9089db54edd444e15593432f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
856c7504aadc83e486ee3d8803901fac

SHA1
8c260b6e83094513566f0072bd6944beb8cfd267

SHA256
0f8de7553be804ad5816b5fcb467b859ed5a37dc9357b6422b78864a62e1d0e5

SHA512
29d1f1f7f094be1cfdcc42c17f4579b0ee6db4e718ae6d3d154ab2307b12cd67035c24517d6280bec26343ce212ab484d4684d3ca01b613e6a1af346ef52abf6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
4KB

MD5
1bc5f51f0f3467d5257b6839b5d8e136

SHA1
a97442eabed177966f02bfe4eb2de80d74a6e67d

SHA256
3c115d2c3b863647dcd8d2c2358a7e362b35385435429ddbd3208f5b30a24b7d

SHA512
de187f3c3cb9f90019946c902bc68bfd5ebe6c080126d079854dcc6754d81af9f32768202e3a54b019155cb720c23ee9e618eaa7e4a9e4365785066504e75e7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
5KB

MD5
8966f7d38e24053784f6de5d3d2641d4

SHA1
a322525389fa7ec84c4825b4f368c05248cde2aa

SHA256
e41f39c0a3a296dcc5616c66977d62a4d55e20ad642240d2292196ca262ab450

SHA512
a82fb996ea7ff6d2630f74ab8ca605a07f9398f0a62dcf9a6ad72b639c8e884b90f6a679c8ddd2c8a7f2daa1b4c1058658dd42f2b8e1d84f630cb1bc881b089d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe57a131.TMP

Filesize
48B

MD5
4076aa8796a18135ac5b43fbddf470f8

SHA1
d4ea469a925826d75695052e86f6e58884c03f67

SHA256
f1b9f9745d67c63ccaa30d16708405adb923e85363514a350569ea175f37593f

SHA512
0c2349ea2247214541fd13465b843b673fa203611b471a2aa356eb147b7e737bc6c66e3df754cb3ee76bf06596bc0a7c5c149a7b721897487c38136a7da92a92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
48B

MD5
54f3a057c4de0035f936e07b195d8906

SHA1
6302f06a74a87e25df23dd8120ff209d86e0e05d

SHA256
8fc03585e6f4d12201d2ba04f1a9ee3a13b9908d480a9141f6d33d74074639ce

SHA512
117de713e539bd5d616f0072510196231a15e9aa7b0e7f8bfd3a14811398947bb9e1d01930944932d8d9de260b88a573ea4bdf542f0c432239fd779729fa3ebc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG

Filesize
279B

MD5
ad6cf2bac203bcbafd897640de1fc2ea

SHA1
0f2a79f3f005cf9dba8461c07b72567868d4f28e

SHA256
55103e56848173c8d99d49032576286a033ceecc818d58c7921686729780d2ff

SHA512
bb70912268e40e403d87c755f4fb3b319ebdf9753bc071e88fbaf8fcd91905e2fee4e1a9365389a2bc3fd5b760feeac28b1a43866942e71f9400f9329118e728

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Filesize
28KB

MD5
ce698d63077785f75d5363ef74c74feb

SHA1
84cad525dd6deb521a83a311ed54ed70c5904a65

SHA256
7447fef3534dcff8947c59b0483cb387927de132ea53f1abe5b77b06a28d7df4

SHA512
ce60150de058e9ce5673bed2a69cc0944f670bb6a55b6c556e316fa61984cd38a211090340415453d749c9da9c2a563d27261124346d6ce49135d5b91c841e47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
3092d135963425df127190d5f3a57135

SHA1
37e3cb764cadff3b4d2cd98da1a7025441862d6d

SHA256
6c04973a50da41be569a6a4cc552a20bc4ebb1632ed8ba245f050b5264046d71

SHA512
10328c369eaa95ecf24457ccd8f8796b8bdf3ccdf52c650ddbddffe61c7e9474ed520232502c050016bc5542d2b6e88d56aacdc4bfccff9adae4ac14cb50b366

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
3092d135963425df127190d5f3a57135

SHA1
37e3cb764cadff3b4d2cd98da1a7025441862d6d

SHA256
6c04973a50da41be569a6a4cc552a20bc4ebb1632ed8ba245f050b5264046d71

SHA512
10328c369eaa95ecf24457ccd8f8796b8bdf3ccdf52c650ddbddffe61c7e9474ed520232502c050016bc5542d2b6e88d56aacdc4bfccff9adae4ac14cb50b366

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\index

Filesize
256KB

MD5
c5cc4418f9e17a6b383145583ef8ae48

SHA1
a7bd14c581125b211940c48a4cd79853378e5329

SHA256
6fbb88790e58123630086cd23fdcbfe5a644da7aa76b117edfa3afe750387038

SHA512
c07b9d9c1d64bf065a3c28510b53992759e52b1affef9366f3f1916fe4d05dfe4a4e289a252120222bea66b282dc64e6e38007c81c97575fd81e35f9b6dde347

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
124KB

MD5
9b3ee527c185f5af2c0766f3fc3a3539

SHA1
cf2ba65af54225561694fa1806f5a081ed0a0cd6

SHA256
77e7dad4eca7a09266162145522d5861a663ed017638c8b1b45849d34a2a699d

SHA512
28cfacd0d346c6724047cb63252a616ce9b3cdc6dc5a6e796e16cf06a02c3984bc69887157abea438d8cc1794e8281b4be9f03df9e4287b9677b331a23878829

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

Filesize
2KB

MD5
5e41353a2d47b18a67cb89b603f61168

SHA1
697c6607c4175bc07126fc91faefe667244e25f2

SHA256
efc1b0debb1745d33658c8b5d7404e61ae338536091a91920e6f4020bdfc52ce

SHA512
33cc7783e9fe7dae5a5436f29a5ad7a329991655f2bc5465c4d9ec5d46ba40b8e53db665801b7df4fba32d6d7bc461c65edac98953c50e733adf2f444ebebfc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

Filesize
392B

MD5
3b48ac320822dfefa9cbbb7189292327

SHA1
a823e45fab976a8d33ab45ea7fb09a464723d319

SHA256
fd66bed435bb420c6f02adabe8dde2d163c94476d731396b7ec19f3f160e2699

SHA512
aa9c7127f2c528f33e388af1f3bf15a5d31f3368b1db2bbc85968e1d9e4aaebaf5b1760c927515ec43b6f54c3dbe0948647cc53a5adde77edde986ca0c3e2208

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\LOG.old

Filesize
389B

MD5
7ae228d54e738cfe0270972424f79525

SHA1
4ffeb97f9846aba440af7739b8551b73141af9fa

SHA256
8459b2d9d227a63ba28059f3d2bb76f49cc6cabf29767c0a2469386665d7acc0

SHA512
9a8fd6ce66c1d6dbba296f0280d1a417151c2d7462dae0e7004678512f5f9a3b7f33c3b16215ab17f8b49fdd2acc8c1c54eb59a24833ae8a70187db6c4a4e9aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.roblox.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000003.log

Filesize
30KB

MD5
4e6caaa54d69d646f775e8b91520e777

SHA1
997fb339b321f22cf9df1936c34aef13e9d0a608

SHA256
74e1476dcbfe14146374f5fd0495ef603d7211257cd3b656d94bd6178c28717c

SHA512
54393d048034af15b8bc63bc21124780e7bc3a894f4bc087711c3c26af03da563a5f918174f873c5dc6fba3b09e57da8bd7807630d6dad0767a6af7fe625cd50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
331B

MD5
04de194f5a698c70a134816abac61763

SHA1
d86064c3448c92ab8d69802dca1170dd22e44c18

SHA256
029368ef6168ec4cc0e06949ca61b260dd8622dd707f18ca7e94c646a9f23788

SHA512
795c66cd52d68b8f24ebde0786e8ed4ab525ad6092c6884511c29528edef2834ac8aa4cd576c02ce54200ce9cc64dfadccf983aab9b05fb3ea041e0b1a7f74c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Login Data

Filesize
48KB

MD5
561723a34d17a5a0a59b89f7d4da85c0

SHA1
17c7203669bc6f097d97d478a007fd22a7243dfe

SHA256
50bcd0c6fe5fa6ac973ed9db0cec1ff49da6b5614d841d65e63bfcdf21ef8c48

SHA512
f4b7159d97ebb7045813df9efa8fda33f5f517a108adaadb97726dc5685cb04bb53f8e18be38c5c0b20524d62d5fa5b2c54e8eb9f130bb0990f4912b8b9063f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
c3b3275a2d38062b44a9d50833edcb71

SHA1
912e4ba2f8394908a34d5ae3f7000fd441ccbc22

SHA256
152b1853c8c19f398f4a8efa6c1dc688bd507443199cf37bc713fea34022cf4b

SHA512
463f5e42904ab57e744608e3a4b6a44f73027092c71cd17157ba8afa61d9bf30ac1892de7a62a857782210c9c084a18948b8f5519d7788b203e76f3504a22d2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6eaf2cae6ca35586bada187fb3cf8529

SHA1
9096936f7d122290e464de8751525c9f1da800db

SHA256
acebc39334b077d88e69f78e7f8782756120886ee13f8a185b7000d13bf29f5f

SHA512
c3a7a62eabf011552a8ec1bb767d626387942770df8ab435c08cdd7698824dc5dc40eef75d3e00d2ed60d9f7274fda02686deb9c11482205b4a85f6d5c37d8f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b2ac3b72dffd1a4f58ffe3515457614a

SHA1
506e740d31860389696b14915938df124e127c63

SHA256
8872d0ea29588879d44690cabbeedc9c13f19d32a2273b1b6b158797162ea822

SHA512
68ffffe508c8e3b53e5e4a3c52d5de497ccc8497ffd597ea08f35f3688784fd29dd80358c7c361374fcffab687907eea83a8ab34d757580a40adfc57242bcbea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
a6b4d123c5e3b30826fbf8c1b72844be

SHA1
59c73a2a5750c634482de7cfdc6a7e0537b7e1c6

SHA256
2cd73c46f823a532e1a3d4802592979ef9d4638f4990bd25e941004603d80c50

SHA512
5b59d3dca0b5939bf5c9f11003b7ae28a349a9b2447b7a4d8a1862a71e5cbc61f55622192ce0b1818d83986c9c016512bb8c04ae835b601b9d3f18421a17e324

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b690183907a118ac19190091a12caf66

SHA1
9db2fcea34e565c0c59e106c712ffdc63137c8bd

SHA256
003d136b888c9a5739eb72d0645dfeee842ee5e55a404c4276781c1db3172e1f

SHA512
9e97d3f7e1a37417efa4f3ca082f719064971f79d0719194a6725314469ebcb73624ac137473874810542f4d0bde51fccf07ce8fb347aa921a60f85c17d36fab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
37edc3f3437c331fb0632c45469308d8

SHA1
3beaaf3e9916f1a1ccef1f3e145f827548e508af

SHA256
c94594f76affdfd155f91b36c5ec28bba79ea7e02b4764bc9772994e6be93856

SHA512
7d7444e802d79e51462b146405a66b02f21bd643733e6f6574a7d74f9edc55155744c337156f1823689aab38b815e88c2304ba4fc467aa81f6b615fe23b382a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
c0be6f06a3b9c71589045a4862882646

SHA1
7df9295c39ad6d906ac54cdf39e5acd6a6d4c4f9

SHA256
7fb80f61ffd3a5baba69c638c8094aa15b7e13c5afd2da92eda0ba32f3dd800d

SHA512
c54b8fcc334b0cd7aed6f3373a69909760a53151bf23c55ef0d8d38c9acc1f66f5a4b411b2bf6b02a4313ce0b367335db93b6a5cdf70f51755e5b83e20f43a0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
b705e793ba5dd11917397260e6f4cfe3

SHA1
85b1ae21bbb7d375c906548d3a5b9c3bdd095a9d

SHA256
5750e7398a40a6b599c78ffb7309dd5fe223b55a251d6fc331a43d9bd3fe0e77

SHA512
998bba3867bada5e41579a0b58596db56eda1d63e678a45d8db563bb08db919e8c1850c36145f9bbc394747d42f76edbb59b4a3969ee8e9c3ab28d0afa5fcc08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
b4771b3c9c3e39d3f348c11a49419409

SHA1
c1099794438133c308bda60afd4d37bd9c8e0a77

SHA256
88c498ca9ac806485738a26652f1e104bb966b4a9f14200d1d76b9b932d49469

SHA512
bd7ebfc5ed30dc0121656f711efcd7132588db92673bb912b330f1df1509d4d172f726582544cbb7585067cf9178df7ff627e0b55b29c9a327cf0670f6c54c4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
1533337e40e8b3ee83852da9e97ef550

SHA1
017ed2c5321f3b968f6054eb75527de296749490

SHA256
f127aab25f9f8f473702aac1bddc9094495141126b909217d5bf65089ff48f44

SHA512
dacaea12cc12c3945abe104abc381b288e04f9bb1b397d8f0a6d990fdc1e43e8cf912245d4b7803f4f672b1fd4c00bc4d3426b8021f86d0a8f31f681d44565ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ce01e466d2e1a70032787e77cc42ad2c

SHA1
b05cce9859ea4239590ac66dc08d26534b2d3aec

SHA256
cf7d5a7e6ec07d13760429c4a505d13dfa4df31f66bf4e06ac37f0403d2a63cb

SHA512
8f2de0652bc82c16a5fdfa9879acf3cac7dde6538baa9e6e11356a56e0cb8f9045d04178a396083bd16a4cafee3eb0588bb932d91be34af0c6e829ea78c9a13e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
95bf440a502741cef9950d9cc4d5e29d

SHA1
c5244abffc9fe3d6aa81fec94a3db482833e2bf3

SHA256
6e28f64ed9e89df4e4cb1fcdb0685736cc1b4af423af11002fda633bd17ffbab

SHA512
3eda71a2e44592fe10c0d6f1553e0575abbfc782e88131f23adb9f42865d713d434812ec8663d3a9bc418f931eed900ab7036371a09c1b973be43638e2dcfdee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
95bf440a502741cef9950d9cc4d5e29d

SHA1
c5244abffc9fe3d6aa81fec94a3db482833e2bf3

SHA256
6e28f64ed9e89df4e4cb1fcdb0685736cc1b4af423af11002fda633bd17ffbab

SHA512
3eda71a2e44592fe10c0d6f1553e0575abbfc782e88131f23adb9f42865d713d434812ec8663d3a9bc418f931eed900ab7036371a09c1b973be43638e2dcfdee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d20565316807773b40709447b93f597b

SHA1
de51ca918d071c808828715ae23cd050020035aa

SHA256
9eb7da9e160359a5dd6abdd67c0c4eed6642463c4c4f647c5aa4442c5bf992ee

SHA512
ef49740dce45c308b5a2d13f247c1840fec9a7af7f8346d55a3fc13554941f4c74fa1c2a82ff04fb47792dfe128f92d392d12d766807e0fe1d206606fb4ab2be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
543d583e875aadc923c08406a76c1b56

SHA1
24142554cc4bb69d98ed8d4b15533021b4856bb8

SHA256
0ae28fe285e395678ceee4746231519d5ee7f06294413f7ce381a152f21f7728

SHA512
ca4504a5a81aef83a8d96fba7556dc0e913495de044f9d03766e4f3883103af174a2a43983994556be458f95fa16f3f9402d75ed6b04b1e934f758e8769142d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
563993bf5625c870dfcb69e8e8d37bc9

SHA1
d79129a589d4b40823368bf78228923ee82df192

SHA256
02185498b78360802973779866efc127ee1c53ac0533417c7349989beca4a08b

SHA512
e894d37bfa75f770be21b5f510d8f2a96b0e4b596d2c19efe6a102279b235d01df3029f551a00e513baf35b606748b68683061815ff5e96094c09913a10270a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
e84c0b88dc5d207bc4c664ab0bd76d9e

SHA1
fdd07ba19591f343d3b364534b55ebe39ffd6d58

SHA256
a4668e26f43c47c757a3fea1bfea80312a53bde78f568d84b7406d1b614dd5d2

SHA512
b441996a78a8de4463a25a86d365c704b22a414bbf609f5baf199266a8b8380f2679dc73cd0d2605fb92dcd37a969f91587900bf9875828a3d8781edbc464df2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6d347efb713b5f821cb9a07901c15c54

SHA1
92e5f5ec69c29572f7797f4a977f0bab1d2aa14a

SHA256
745395d0ddc3f55ead0f184a67803ddcd657a1c63cd0fa2fa3ad39124e00eeac

SHA512
23b4dfe121add3cca65e17307901cd6d84639f4c54d852208a3965523c8198fc80b23e7f60b39dfdb2354df091e1b002de1be2a26731092e7f944667f7e4b759

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8776cffa7a70f8842ae1c320ff2c51f5

SHA1
d5f495aed3946cb4daa6c7d0f0ca7c14f73a52e2

SHA256
550fcfa9847e38ef2bd7d0e3c4691a75dae0b0b7f2439c161a8f3872345bce90

SHA512
b3c0ea85dd93967456a6341e296bcbd193a739a34faefb7f8b58a839b56ba650f1c46746ee709a0c7673305e5b03b9fc6597ba340d2a45a6b63754f8b24664eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0745c25b41d3a2d7bae3632659018be9

SHA1
5f36ae755e428d05702f8d324ad02c16e192cde9

SHA256
44d7824edd67433f1dc092202f0250f54824705b1005b68eda57fcc8e1acee6a

SHA512
900c7396182accbf0dec0f7c865697096710b8ef5a592e5ef3d3f53c2fcde9aef71b69fe03ee07945b1ae74a2d77dab75cc471d9d73ad46994d8cb5641789db2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b315f2ebbf655942e9c1708184bd8950

SHA1
1ef49d1c04c9c06992a6e05499b19b583d1dd6fd

SHA256
16914c9dfb5c5f5d0d3f62f9e6077b7a894845e11ded0cf2720b446fb07c4279

SHA512
87891e12c3bb34f9a123df9e1a6cd805ede7156cc1dd145706e9af16a93828eac2bbf7cd7f6c205130d2d7567df7dfcbcce678f039f8b4c21b0f987c47de4915

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2108514207097f53a78d51c2a106e6ec

SHA1
74ba1659a02e776ab82debaa3b4bab13577a1a5e

SHA256
7cb7f304ed4bb30c747a7a3bc9c8574842bafb8b17515da58155de728fd87323

SHA512
49eb912082d02af967b7d0932e2b8598f24d8dbf07c093bdf2bfcb76b20b251c47759bb0ca20b24be300226b590057f4948b9edd86db848c8c36cc10007e5242

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
97e86bf14571e4a70d11ee6c2a7ad900

SHA1
c7e12d68a80c6193fce40a6d3ad1b3b6a5d2ea70

SHA256
7d89635526407065965778e8e7098b56978d70193fb65808a960a7fb5ef5a9b4

SHA512
02ff4a2baa766fe3fa521b920d332385cba2eec0d3d79a61e9a8e3c76b2cf6ae080636efdece2f183ca1314c957d0de6b209f0fe474462a550a178ec7ec5a043

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f9af3dcfa8a6eab45ed0725cca2e1c60

SHA1
dea5f4967d623013c88e497fe96dd46641890968

SHA256
bc5d46032fe95ea18f382c45e9015be378a5af7d3e132b6593b6b2e08980de10

SHA512
a2efe4cbdf1e452aeeecc86b9c5063c97a44ea98fe2e3943077511bed5fc28ef95093f6877f76ca43dfadc48bf9d00ad9ee1db412352fd172806174c83e6bca2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
b7dfc2bbf42909632a34ef2769d84193

SHA1
4e33e5053c8a8113cf84b5e57cdfe29aa7e75fe1

SHA256
c5be7dc897e0467741149afa655f9b3f0d7497110efc8c235ec8393abc58c0d9

SHA512
1e255a916e54d3279e4427aed358616a8b8377e378cc67ece884c8d4503018c43d85cbe4fcb100333b10864684fa44fcb3f71396b46368b62dc82ae55e410b00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
02ee7addc9e8a2d07af55556ebf0ff5c

SHA1
020161bb64ecb7c6e6886ccc055908984dc651d8

SHA256
552d3ed359b7a52278ce621674d16428d8a7969f6cd5663df18e240cce66aadc

SHA512
567989543c3848a0c3276d96b96ca761f750e4b71fb74f36d809f590ffe16a72fd5ece251737a8b1ffe65f0051e211bd7ad19d2b8b0b7ca1b7ffc86dd2a52883

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
3966348bbd403f0d73c498b32b42c474

SHA1
e831a80dc7540db9afced875d230530380ec5119

SHA256
85295f1484a81c8e36f1287dbb3d8c2ff4f80a5b2dc0985b88abcf49850d7542

SHA512
75a7fe567b809507d121ecfccd5cb85d7dc8e64609f916a450345a1ba959f7535767619970de25f9474c498666ad1b08250697222d5696f7a589f663a035c41c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\000003.log

Filesize
870B

MD5
6d4b681e775d3f83a1d1b498fc043460

SHA1
1ed4a8ad37585b2b9a9d68fa72cd3d53d7598b55

SHA256
33fc1368f1cc32001917615d6a827c384260446e970b50e40e54a51e9b553da5

SHA512
5940e88b6553a8a6e4828ed025d05c9fe8aeb32acb14e6c501d4cd2c3bb2947f778c64fa94bb5189165fb7c71d9fa85e716f67d5ba6eefc809b731b99e60e565

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\LOG

Filesize
279B

MD5
5f573209d215becf027c9c6c5f8dc36b

SHA1
e41604c93d21174f4238f6929f5e3e8a64b8e945

SHA256
1b58b56eaa221da3e5f483eff48439ac8608849dc4c588d7d8791841835895cb

SHA512
954f9ad82bcc1fe5e3bdf37310c2a2e99d27bd2eb5845ba8c5ff09f3991c9c68635efda6b15cbfad5a1e0b3f9fbebe20cdb64972b9a0e1aabb934075eb65ae2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Session Storage\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13329009909355252

Filesize
19KB

MD5
882f4a72c343a98f7d6fbf028ffc85e4

SHA1
8605aa3822dff5367caa3ae410ff837cd801696f

SHA256
7de80ce2b6350d1dc8e380678f11dc62ee41c40e35ffe24dd6dd90d4a9b94bfb

SHA512
7519381e425db738b2fca5c7dec9fea76a46871fb5940ed75770ab33be44f5ea778fb4cad93599d2af6fb3afe690322211c229e78efe07593c5cf5c33cf63a3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Filesize
172B

MD5
3504ea8aba2203a0e1a93f9f736c8a95

SHA1
b7b665e9ed260bbb023b2d691efa85111093f96a

SHA256
cb1e38cb1dbcc542f09b4cd5db31fabaec2004a6a2ae68ac4915ee66130443b4

SHA512
defd91d288443b4d14cfc264b4832e6c151ad55b88347fc3c23bb55b2be5f4c7bb57be4cb5df240091ba210bfd31432b105b5bff6ae09ac20fd45aec3e2fbc9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
d1962c6bdbc33f83aa860a7b55d01a22

SHA1
3c6cdf0b590733c9fd0ece84f6895e3818e2ba18

SHA256
eaa8d684d9a4b9436c45ffd2965c9fb89e2d46c2b4f03b0b94f073768f29b4db

SHA512
f87f52dca0857cdca9cec0c1b88ad79f970269e8cebd17eac928904d66cd677ec9012a3bb1ed2c0c8c83691ac745f093e1df8dcdd77a80530c98fcd7f6a5c8b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
326B

MD5
9cb045afc97ac8828877cd1909adedfc

SHA1
d91d9bd88b9b5f21329e91a01b47ab3ac407d1f7

SHA256
c3e52f7683ceaa18c37f489e5eb4917b08bd0682ee9b96ace7800c8f7d2da30a

SHA512
ba932e79837550bc0ffbfef43c1b18ff5816a3f68aab1a4eba6edc1345ff308eacaf9cb4c0660c6f14c96808ee60d6f0418e340a9d916daa0902f59718942ac3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Top Sites

Filesize
20KB

MD5
f44dc73f9788d3313e3e25140002587c

SHA1
5aec4edc356bc673cba64ff31148b934a41d44c4

SHA256
2002c1e5693dd638d840bb9fb04d765482d06ba3106623ce90f6e8e42067a983

SHA512
e556e3c32c0bc142b08e5c479bf31b6101c9200896dd7fcd74fdd39b2daeac8f6dc9ba4f09f3c6715998015af7317211082d9c811e5f9e32493c9ecd888875d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
4bb2fea380d83ad6c18e4ba355e77057

SHA1
24eec84a32e52d829f600fe05b79c8afc463ffe5

SHA256
1def4219e104e0d11848ec93e7221c505ee2570c9ea477aef6984f786a189c61

SHA512
f58170f26864c3dc5bebd4fa2e88e81bbd72553c41cfcf2e116bfb39c40f87c3ea0d2b31f2d2a8d98af8ade6d039a3a8a24fe8a31c4dfffa4b6419da6adc573f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
96ae15dc31a7d6d87afee9082c60ca60

SHA1
05341c023e74e00e69d5baedf60b1927a01b422b

SHA256
6f054e8921b1488245fa5317c30e070d2f5938190a449095493a0869d737eef3

SHA512
3ce79152dd8e82c24dbfe6473408c0c492d212a7b86cbdc9497a8950def441448c47e16d8492f7f0f5ccb2aecd226d247429b0617b85e65c917e0959cf9f3b37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
2163af86a301c5b414354bd94190ff92

SHA1
1a93c77da1583861e129afe185d99224a36f457f

SHA256
c5585a94e6df169bae09d442018558725c143cdcc91b3c1852c0546db0864ab3

SHA512
e3f8e82af2e2a9a9e46ac12d100b724fa2278050a41a4e68a232ebba050d95487fc39ebd6cd7b09ac70f0e635198bc817e7e865991cd1b1626de8982dbb42508

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
54829ad6569d863bb71144c1efe91f32

SHA1
52eaf0e0fd00a61b23ea02996ffcd8fecc883349

SHA256
2595c726c9415ae02d34f2728125059f921ca3de942bf7eb2c1d1810b77dc906

SHA512
f8239dcc4b0a383c8aefe11731123f758fbe7a0e777a57703808bf3e930eb263ffd1a64eb5cc74a2b3d97d0d35058441dbfdfe88a15a73afd8bc99f67b7495b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
950056ae26c5994ed572223ff6cff9f3

SHA1
1d4d8985a38eb31c35f7c324e5216797affa6d45

SHA256
14d9abc89e036ffc11d99f08e3f9913b1e490181011d8ae23d91109183333b8a

SHA512
778e864f753362f13b999089544c14daaa6d891ec9c9fd83fa87fc3b0eb65a1427f26dfb5e3f6a76831750665f5d501e58a7ac677176d9627dcf39a55db526f1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
edb424141dcd1e53915cd213cb41c0d9

SHA1
010ec0c2aba0f68b0f0c95e206e6b7289b5983bd

SHA256
1543cdb0b42bcac88d96e417b30987e06c3bbceea0f6ea2190e5049aa1574ef7

SHA512
d1ddc0acfc90c4f4f8a1cc235a88d0024479481a70bd086ca5695cc353afa9c6adff3229ea777c60b24b7f3f8cedcc77b6a58965094465003b846384b7ba5317

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
f046524bf1d512bdcf5384021cf1bb9c

SHA1
e7bbcfeb2712d3c8bc05a3638d9b9eede872c9b5

SHA256
f265bf2e4b48531f32971cffda72c8b894c048ba3f9c58bfee0b908c2adb809e

SHA512
fd004d62e1f78f8a55f333ea7f93e2e8197ad029225c4d5dfd1dc007ef8619e6629815c4243b0f1d8d6ea8a05423c3dfe1e0acb458d0c7631c964454d05ce717

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
30abb634d0960b4f511cda4089bfc0b0

SHA1
9f755388d9a9179e607e2d34a9dfd503c403672a

SHA256
458299fcd4097596112656aefeddda0811044944029480d01e6d5c462a7db94a

SHA512
6a90c14947fc442fa91c81c23c4ae558a6920fb8e93a79660e73011d342821d4a153d4e1c5b000ddea5be9ae3bc7360f0226c399a2de64af11551a6def3aa157

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
4d6e738920508674eb2b9acdec8cf520

SHA1
4ce8cbfa2d2313165006532e811beef3bd55d47a

SHA256
8c26242515af4071daafcaad674a56c337958ca162006c895b267b01f644dc78

SHA512
d08fcac28c25954e9e6d484b828b1e26f561fdeeabe914a66ebb4613c3c14c0134efa84c38a52e8247adc051b1ab34884beb415df3e4553c5ee3aba47c11b2ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
8a2255263ac722ea0f32e16dfb848575

SHA1
eb3850244a60077f56e6fe298c585a9c84b384ab

SHA256
4ffb966ec63b7a2fa94c757de9847685e984cdcb4fbe0d3a6cc825b98c905d87

SHA512
2ce778d3753c0dbb4d921e20efa69a04e60e35d522ade5d5300cbf50ea0e088d1c0bac004f671b843e8aa97f99dc91340a865df3d4c7bf5712307ef43db736d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
0d4faa988d33fa351e908ac6399c6e56

SHA1
6c4c96dfc0207bb87a41df8df686699d3238bd9e

SHA256
372d374cf07cab62a29e74ddf6ce11a840dd3dfa4fdd5bb2b45cd6dfc5c32783

SHA512
f15980e506e4b82b30628c8870c7d4a4b1c5bed4553a2d4ac5179e7dc162a23a40369a099a105fcb872a0bd7d21caa90f1078436859deb9f6643e8bc3883c585

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
4014545be743286f806a39215c051949

SHA1
6cfeb84a61b3132c290b1114583cdf9060b6dd1d

SHA256
aa6b189d099efe95e16e5064d639475a8e5e8574828b32b41fdf49efdce0ce69

SHA512
3c2fe7156c7e67ee2d092774a43fb0ba948f76437f1ad69fd9bfe8d005fe787f3d32d5a74f4f993c699ffca84d2ffef0eee97d4c995b4eae6915f7985c4f6608

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
1c7ee3c67b777c103f1e4a29771ac033

SHA1
abc6f860a4814e0aa3fdcdf653765798b6695529

SHA256
2c55f701312fab73216a4c99894128a0667c773396cd06cd0d4f6d8bf8378964

SHA512
f46653f8cc1c97d9abeb9756397ff523e5f4731f6e23c91edb59fbf91a31b35ed56a97cf74f600da022a0fc0294b31cb5486b50e41716a99047d701dd4687bd3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
c601da7f9fd9b04b0ad00db5299f34aa

SHA1
657c9b6a1a6ebf35d3df6b64a91ce3d44357d4aa

SHA256
46c0072c2c7a9d30ed75b89b0a701d5ab26593be083935604073e7b1703723c8

SHA512
ee85921a32d75409c6cbf25634fb4a6d8111eeb154b5717a06088fb8aaeea21fa392c02c426f898f61de9c37fdcd841a531807f9c1dc870b18bc0016835879fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
b16832615f6836e5a9111f76ef5bc56c

SHA1
d4f4a89c8459341369cd6a53299759e6561c6ff0

SHA256
4c4cac9a3a30a74da7dab8cb13c09d8d12bf64b5bb0d94d5ca59dbf2a2b457f2

SHA512
2588986d82b3bdbcf67432c136d9b7f715ce7ca46a821cca1f7fd4a005e84469ac321aa8333de9808984d7e94fe1fdf556cd342fd19c735e5c107114ac66d47b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
e77aa348133dc3a51bb9348bb52c4f66

SHA1
d499496ca4b78a41e0e43e55123e91c05ffb5034

SHA256
08f722722557fd77c115deb5d6d38c478b64740e3faaccf3c434ebe0dd47fe03

SHA512
46d454eafe1d8e1ef0750d4757f5ed83fbabde9a955e77d88588346d8e7649cf378c08c2fa858648151010dbfd9f20399687fbe5f0838bf2959db013b621ab5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
32a86e87bf835a61f1a75c60d5039305

SHA1
1020bee49971eb60512c9f39367a85aeda18701d

SHA256
afadbf3ef572c1cf716250cd8846a98b09da666ae18b2cf32b8a869745f9f468

SHA512
4753eda3728a9aeb669f1be222c604a476385d734a52df33e6b20790484ac6c613eda857b2518466f0552ddaedc63421ccdf9b790c7526963b953511b4fdd4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
dd088ce1482129fad76526a7d14f6204

SHA1
bc6a7f05dbd8c562b63281f289caa9ceeff3b84b

SHA256
9c52314b0e53157d428c2694e351d21f55d9f5351d613773537cf07b1586347d

SHA512
02d4de0c8591b020dbbc6d7333bc4dbd4cc9cbeb92bacfad4ccfce98b184fafa21b27eceb8430baa1a45e26a1b62a191fe1ddaf8f35a45c272b85302f75b6520

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
ecf5525a0f95d67f931787e74fe7002e

SHA1
8b8b94e1028faece36aa538d7c5c14eb6bd0bda2

SHA256
45da465faf6a634369c9a8940aec7c4960e3f6e471a24062f8cea94417b1c4fa

SHA512
e4fd7f263d62d771cc945c5b6e1ddf0f4bb580e599d0bc78f13a99183c06a44a1971321709263e76626edf5f160b94e37dafa47c77fabff27e64a6f7ccf3cf01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
5554589e2cb7d0fc7743079376c5a42d

SHA1
96d703344261ef69d853dc3654b85916beee4fff

SHA256
5d560735a12daea3b77b1490cfeb28a0aa35ff933622c7fb8b6094a9571d56b5

SHA512
f70c8b386dfe7c0b551e639d81db01385a4b4982bf3a0906e6857a68cebcc5f8619b50bd84cf8c916e74a237792c42a91319808cb18976bd3e9a4d66e3221497

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
83302922e82cd99edee33255e81bb96e

SHA1
89f035d2be709f1c4cb9e050bcc98c62beef781f

SHA256
a516aa18aad8f1ef212bdea6abd00f4546b51f514c953b4d54ff38a2cefe9f82

SHA512
d6b60934895ec0199acf84fd86e99b0ad43d5d63d08cb9781dd82e8bd3aacfccd4234acf2438e73df93c7e1f139c35a06e7a2c00e0fec0a1db876680935598d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
aa83ef8a8336572db629eaea3914c7d2

SHA1
cf3a78f17a453f6ee265a59089c4580bd784f2a8

SHA256
d1d189ee9bf6e4f3b1a309ebd5d785258d49ee342c3a893b44875ced79cb40d3

SHA512
68d384d724923601a5940a9da857389cbad0885968b87445320ae3646f497c11752d97cd480dd5ae25e40dfebd979d73d5ac6525454b7163bf53337ba27ae6f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
426bbf7ff01a9cf8fba93d9c7ed37d57

SHA1
dcccf4e40c75e27fa47b52cdbe38eeaa83db3264

SHA256
fe0549a6c2ce954b58a80863600daf10dba5872b8356d8072d86677c64f45f21

SHA512
c32aefb086d2f2f5ff1fe2065698a25a17c31150074cc5d5c3bc65d50a19adbf61503694c8fb9a2d7b10c4f6566c2a5fa8c58e0a41114bc3b51c313589ab3618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
ec457b56c6b6a5fd6b2199593036f02d

SHA1
9fa7f63d1b420b73f47954d5cc7c1211bd704c8e

SHA256
0c4b91c70fe83c19dd4f72c117a000ed7465689b3d2d289e5766a67cd604fb57

SHA512
a7e248eed53f9687f28cb9e01eaf76373c1f9b6105c98305de8515406504f2c03f5d933eba17026c56131d161c354651722daa09bc04780e3948682f4f0d5769

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
ea699ecdf9256820a8ad08ed8a88caa3

SHA1
79b2bff9bb0a5f68586034745952195aeae3a363

SHA256
f780b05baec01fa50b0dfa3e65f32d5991d263271bdd923ebda34403aa746d8d

SHA512
b668eca1f76624d9953928a417b1e7a777f81f5f7ba7981da9cfdb66bde664a0bf3b46837244937a8083935f90448887707e9bee866c5d518b0b2e46f97ceff5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
384b03099137e6cf530d273eb8aa642e

SHA1
507ad8f26a9c57506e28e3f28b31d9f60ece67d0

SHA256
1ec383d332e465a0f6b80e9c2cdec6f5a11c19bff6d21ed338f1dce0bb3c6c9b

SHA512
7d9aed69acc76c95546a90fb7bb74ba931196802c7b830a48913ade983c3f534f90af950fd0b67922bc1ce533ccbd44910b5dc9949608ca14ad2f95fb2b48b20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
b9b4896a4f060064e1a0497005f13ae8

SHA1
199b41a6c3ca3dfb19b574b6d626953800c14c73

SHA256
5c718ebf104605f6d891291dbc72f854a7d491a04e501b0aea815483a8b4994e

SHA512
83ba5305c476773d74bb34499fe4ab0b4263a83b7f1be9edccdb1c8a8c550c9fd1eab32b88f73ff5162342c541a4ae5b02eb2c79675cfc446cfcee8918645613

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
6efde2d477e283cbcbec1f3104d6daff

SHA1
a449e98fc1ccc29bb15327afc6ef501e9b91057d

SHA256
623ee1369b1e761f6047cd9b4e610eb333e336eef1b4efbe9568c8197a380433

SHA512
ee11a102e1ee3937a081664018a6f9e331a9ea5771c422376910667a5ae1feed864c6ffcd473e559c1493936bd7a76aaae2b27be07309637f2debf0d8ac1909a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
1dc2260fd9be0580a562b775550748aa

SHA1
529a5afe282e87c087412a91d6414265f83778f9

SHA256
c36b487e34f926f333bc5da6591a898871ab529828ba30fe62032b0ae28eaf7b

SHA512
d386d98d4bab7143bb2824be2bedc5c39db4d34e2e09095dee5ce4a825922ad9e9a57f3db83b34e158613181dbd443efc1b80160f40c1ef9409862b4877b56b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
32638ff53c93f2cf946655b7402cd2be

SHA1
91d96680995bb23b79928665a362bb26413f508e

SHA256
1a63c91155939b37adc283e8bd7d4cb909696bf87f22c24126ab2e7c335aa11d

SHA512
af962d97cbc7e8c487580d1da6242d898c04402a487af165db59f3dfe8e4e3e24d9d5e8926b24a26c38ba167cea0e8c0567f95abf38623705982256f91e822d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
afba296ff2fc36931940f3caa658f761

SHA1
40c840da69fe0626c81e90a00eb52585d93dd1e9

SHA256
7135ebda0d6554e085940b46e852fde9f4ceda6e520a3d0fbc7d64e8864cce94

SHA512
61a088305fc36e7b966a4a969dba974573f722c70bb8869f60c27bea5f2f4bb8c076fd2be8ab517167eafe60e943f7d543acdf4414ea7d45201c2592cfcb04a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
758e6e4ae0fc1c800abaa6bdac6e5126

SHA1
bfbec334c8e24ba1eda0f30155e404c5cec53c5e

SHA256
a1cae55a8ad4b98281ddffd209a4cf8804612dd821308cd087e40aaed0fce3aa

SHA512
14afe4b16e6eb3cf4dc0e7df5ea6676ef2e9ee18e82b2436ad06e00339a303b042e9e7e6d1bf0f5c700e890310945e7d965cd2544da594e9d13814eb8af0a7be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
4bee4abda4421a8f52524d10bb98789e

SHA1
d7e7a2b8b6d3e9db80726aab3cd8d27798476bb0

SHA256
f924c4f63a9c08dde86e46accb68171c4537d49ef65de61076bc3a11690bf7d6

SHA512
0e0d22609bd9db0aff7c1bad9f9c2bd1bc03440176ff9c2aafa1c50035034cf8873378a7bf504fd4021ea05db997b15a3ff20e097ab36eb905e88f0bb811f580

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
5KB

MD5
baf41856f0f623193b63ae8a09095512

SHA1
55e3648eee12064889bf080f7771d51bccee68b2

SHA256
408801a20d35be54f7f12777064bc7bc004b1413686d6df1ba8d5a4018e92c2d

SHA512
d7475c7a510f9030f05ec7b1a7fb99082078ac4742cbce91d441678d83926db52c9985df55854bf4c5d2e31985bbe82f57200d315e049018efa9123b585ebe8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe56eed9.TMP

Filesize
1KB

MD5
fb26cbbddceb76dbd9f8a11c0ebf7597

SHA1
a6398be8f9ad77f48ddf2d371f07ffcaf07bca47

SHA256
b713b77a7cd8e33071e59af67822c179d9048a3037b66940e835057ea73eadd7

SHA512
0bf7d63d3c87e60f460ffedd454953bffd0ce628e8bc57120c53e73b97d1d5f01ae47239fef3e0b8ee8ad5abe1fe892f6d82be023c226d2604612fae7fdae573

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
f4887a782a1cbe1db93980c8b0a239e2

SHA1
4325f40115b87bc14c69b817121f8ca704457b02

SHA256
e0fe84f2f2d160a7fa10f426da5f57bd0958c8a2ab3f7e0dd58b567649ff43b1

SHA512
202ecd7fb7562fe1cb691a0ff4eb22b9836068b791487714b3f35b7049bb6920e4aa5f7eeb8d65723a77cd02149ef6c0afad7abcdcc5a4959bd93df2da54dc2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Filesize
116KB

MD5
55e07ceae37e7d2e91d892a60c90cec1

SHA1
b3457b3c5e7fa522e26fdf4f5210a388ed71297d

SHA256
957a173dcb5486040d18d04db62a7f23058a8387361ee322a682b61c4cf28862

SHA512
91c8565b5523259d63ffaf096960d72e7002774c8dea823f3120d9e7ceaf017c03fe1880043ea8615730c3b31d7a27b44b200bec930f56b812f72a1f98328114

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
132KB

MD5
a352c918765798a733a9edecfc20698a

SHA1
e14ff10f6375bbd0dc3a974ca0c2df444d4beded

SHA256
a2d6f0a66657721a88a4abfd3d80bd4ecb9947745fa14ce8e2049d07f1b00852

SHA512
4210e5f527fe913f105f6e7d0d0beec9fd1d3fa3d8e115407ba44b10bfb187c1da9d742ded22323c50b25745eb58e9cc1429cf526bde678330ca9d971bda7eee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db-wal

Filesize
3.9MB

MD5
21a4042eb2a9d5c58e48f4181c4cb15f

SHA1
8e9cbeb8ce2c4193d25269c8aa53e216d03686d2

SHA256
dc8feca09cadf1af39a0ca10523c04fa35b0c4b450c75820f5a459f754a82716

SHA512
73b6ceb9ba8733e2654e5b472d65626e37daaa1918cadad8984cf66a8d8761d790958ead8a22d1788653c877d0d39c929e85c1e521e6b5647f5282c013d94c4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log

Filesize
298B

MD5
b30830dccffb430621ef0bc59ad8daaf

SHA1
295497c69cc07927422729cc44d3b16beed0c767

SHA256
cc7cfd88ff000049b9b340437c3cccc23b16c707f36103793d6a3cde69e8597f

SHA512
c9a215a1eb6b86db25df3e23d9eccb9b81d6d3dac10d41a57ad18333e1da276fc8c793b20154326da555c1752f1916e03b92ed8c28b9c3cbdad487eb7f331a96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG

Filesize
279B

MD5
82d1acd55ed366aed8d11592ed1411c5

SHA1
63bcb6ae68d4df6aac7f7ef7567264cba7586969

SHA256
73f71d3baad874483c7b565b2dad1c903724277f06c317091c50d3daa5710b4a

SHA512
31405dd42f02ffb9080058cf0812740569645b9798eefdf085067a14bd2b21ccad41cca414c46346b84af3cf7ec9ea214f5473f880689f87d75b1e1fcc9e1f90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log

Filesize
589B

MD5
63b2dc1e66131a182fa02e224a1bac47

SHA1
9b6e9a24013bd71a582429af7bba76817e2de4e7

SHA256
54c6487cd7092a182ab5e4194861d225bd481d0f331ae55d9b70b3fbecb45cbf

SHA512
790c479a90c607c219ecbdbfa0959802d7b2c66694378b60ad4eec07d496c1f75a9582be7277d66c155b5a7605576311d32abd9a98518d61dc4079e30f8bf6e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG

Filesize
297B

MD5
96de7174012f7b313aee2e7336d067f8

SHA1
754b97b7885c3c76aa414ac54bb49c8911f1aa05

SHA256
535ce5940879f6f1890167a43251ce5e73c1cfcaf3721ee7ef09faea782edf22

SHA512
89a2e2e0682673b69320b36ed0a0a48ba484d32583c04a2a6d63f78db4254409b0c0e6923f309c5c4751649774998da4e552d5700036f77ac5e00e55ec232273

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\GPUCache\data_1

Filesize
264KB

MD5
5eeafe733ecb763d6b1866cca9718b82

SHA1
7dbfb8e150c90eb501549ce8d5039f4656ea70c5

SHA256
349db6d78686c0e2a0277f6cc5064d4f39da1bc0593f9acfce538ef99616dd59

SHA512
dd74d757de56f00b6317c8256b1c04709db6659fe7d9465106610a1c2c764f18a3cb574d2b76d4a38f2ade987b026d907da247fdb407af9ce64d7f76846b69bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
838a7b32aefb618130392bc7d006aa2e

SHA1
5159e0f18c9e68f0e75e2239875aa994847b8290

SHA256
ac3dd2221d90b09b795f1f72e72e4860342a4508fe336c4b822476eb25a55eaa

SHA512
9e350f0565cc726f66146838f9cebaaa38dd01892ffab9a45fe4f72e5be5459c0442e99107293a7c6f2412c71f668242c5e5a502124bc57cbf3b6ad8940cb3e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
5446da3fe58e9df46b30b45ff7b843a2

SHA1
bb3feef30af2aea227d3703f76eb72689d10588d

SHA256
3694107647393dd479dc90de0b4d47051d582989527ce25480dee3388aba3d5e

SHA512
81281193986952f89cf49d49662e1d06ecedbb8aa477e2e6125754fac5f5c32644f84601649ffd260e19e739c5141e21dd973e8f19fc63a8eaa1577660f6ebd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
11cebc8c5471f2df3e3a875b478916be

SHA1
a0be55bfa4068321ef3e39edfbb1cbc061da238c

SHA256
2456adc86636ce23dc895184ffbdc9f997e15c38efcb28b6a539173f9d5ecdaf

SHA512
2e1f48cc6f58a72460ef3e443cde31572b132c631ccd93bb9963a70cbe5332d140b2167aceb101ef6d62295687daf03cb0119737c2ffc8a6abf23cb4916c39e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
f88780d54fa6ef776cd5844186aff700

SHA1
b63161b56d1e846564962a6a1c2809d63ae3db07

SHA256
374b05b322796204e23944dea680df89736ae28de197241474f84feb25552eaa

SHA512
8818973eac131a15c41dc708e64e857a1a8c25414646f431049f50f70d7ea6f615a0f58bb9cf17db2f8bc155135fe04cbf682232e0d32aefd305ec40e54109de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
13KB

MD5
5446da3fe58e9df46b30b45ff7b843a2

SHA1
bb3feef30af2aea227d3703f76eb72689d10588d

SHA256
3694107647393dd479dc90de0b4d47051d582989527ce25480dee3388aba3d5e

SHA512
81281193986952f89cf49d49662e1d06ecedbb8aa477e2e6125754fac5f5c32644f84601649ffd260e19e739c5141e21dd973e8f19fc63a8eaa1577660f6ebd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
a4454c6ceeb56631d3a8b18f1445c4fe

SHA1
9214eec2826e2127cff0a5c275faef4a7cd06303

SHA256
f11bd5dc584922ca3ce7184240d5a519fa0d5321d6ff9bfa003314d9f954121f

SHA512
661e95c31a860f7f0bd296364c133e64a21f49e90dcd993b711aee869055528c0fef0546864c5450bda9ac91a6f6321291c14e234933adb9369049853c847cbe

Download Submit
C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_qk2m4ktk.dv0.ps1

Filesize
60B

MD5
d17fe0a3f47be24a6453e9ef58c94641

SHA1
6ab83620379fc69f80c0242105ddffd7d98d5d9d

SHA256
96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

SHA512
5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
3KB

MD5
48513594aaa5b081c2704909fdc6ac47

SHA1
e9d2c0c27664ed8daf9aa290f5dfe9a4c5068db0

SHA256
ee659aef8b168f5b942671841e721071d98326934e9e007f668e4e246dd490dc

SHA512
601f1c2a2539adefdc657ad6a804b6543ade5a3a5ad49726a50b49ae8be5b66e2f0fc52d9bb10cc253b62c05910e20d539c9b312dd9889b7fb9f95eb904a04eb

Download Submit
memory/4196-143-0x000002B1E54B0000-0x000002B1E54C0000-memory.dmp

Filesize
64KB

Download
memory/4196-144-0x000002B1E54B0000-0x000002B1E54C0000-memory.dmp

Filesize
64KB

Download
memory/4196-133-0x000002B1CCEF0000-0x000002B1CCF12000-memory.dmp

Filesize
136KB

Download
memory/4196-145-0x000002B1E54B0000-0x000002B1E54C0000-memory.dmp

Filesize
64KB

Download