hxxps://www[.]youtube[.]com/

Resubmissions

15-03-2024 04:04

240315-em43msfh4z 1

15-03-2024 04:01

240315-elb1gahh58 4

Analysis

max time kernel
150s
max time network
161s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
15-03-2024 04:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.youtube.com/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe
1856	msedge.exe
1856	msedge.exe
2504	identity_helper.exe
2504	identity_helper.exe
3152	msedge.exe
3152	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2896	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2896	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 58 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of SendNotifyMessage 28 IoCs

pid	Process
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe
1856	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1856 wrote to memory of 3364	1856	msedge.exe	81
PID 1856 wrote to memory of 3364	1856	msedge.exe	81
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4308	1856	msedge.exe	82
PID 1856 wrote to memory of 4716	1856	msedge.exe	83
PID 1856 wrote to memory of 4716	1856	msedge.exe	83
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84
PID 1856 wrote to memory of 4824	1856	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffd95d83cb8,0x7ffd95d83cc8,0x7ffd95d83cd8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1548 /prefetch:2
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4728 /prefetch:8
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4748 /prefetch:8
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:1
  2⤵
  PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=7024 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:2144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1840,5270858125366017440,5033139115356021051,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4160

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4372

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x0000000000000450 0x00000000000004C4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2896

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:488

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1052

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:1172

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d4604cbec2768d84c36d8ab35dfed413

SHA1
a5b3db6d2a1fa5a8de9999966172239a9b1340c2

SHA256
4ea5e5f1ba02111bc2bc9320ae9a1ca7294d6b3afedc128717b4c6c9df70bde2

SHA512
c8004e23dc8a51948a2a582a8ce6ebe1d2546e4c1c60e40c6583f5de1e29c0df20650d5cb36e5d2db3fa6b29b958acc3afd307c66f48c168e68cbb6bcfc52855

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
577e1c0c1d7ab0053d280fcc67377478

SHA1
60032085bb950466bba9185ba965e228ec8915e5

SHA256
1d2022a0870c1a97ae10e8df444b8ba182536ed838a749ad1e972c0ded85e158

SHA512
39d3fd2d96aee014068f3fda389a40e3173c6ce5b200724c433c48ddffe864edfc6207bb0612b8a811ce41746b7771b81bce1b9cb71a28f07a251a607ce51ef5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
215KB

MD5
450fc63b968935b5108d6d92e560526c

SHA1
8f5134e6a2bf5d04486d61af5a002a2e67aa8377

SHA256
b161d42c405531732c92cb8b9279ccf3b3b0f0dd7256c9d6954724a8e1edfcea

SHA512
c73b7354552872b2b90c4df883fafc9f8545ed23b71c45f1afd71c3b8320551f2dd9ba1bc2b1e3564befcbd86eb89416dfed232962682db61856b6c194523b73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
46KB

MD5
b05ec52600e755665171d1abf25e48b7

SHA1
056ee92e1ea021b59e128c7777404c456a6c48e9

SHA256
a62d96fe0b9b2c45d108aecc71247a7587aafaea78c780022a06b55c31e6a164

SHA512
6a73cd07872b7ef778b9b147627764b1e6422714e706f57fb3089b9590a954b56bfff627e8084f485a29e4d10d52750e7960fb1901ac240bad87fff6742a2c8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
780KB

MD5
a9640c7c0e59132fcf56c0aab7d9fba4

SHA1
923cf473da15f10287b1fd9ee8b51091ae747db7

SHA256
acaf98c53ebe793e1db1873bb25251bbc600022a8e98ad25944861debb071b4f

SHA512
5df8b5cb652c0a080648db80a9095c85ba1ab7f4d27675f1adbe0e521c779a73ac44b94667a95d9618499460dedc8b6827eb03960a8abde323873f9397e8113a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
31KB

MD5
70836eb2ee7a4d5dd8ce09a83719c1a9

SHA1
f3cb202d2f635a9146d592f100f53cc1b6d70795

SHA256
5c14c4515d6488b2d632ac9d204f0540bdd9cbd4a28a58d3457c2926c84c382e

SHA512
106099cac94e9c170ba04bb885f14ed1fbb1e86be3594b9bf42715644dac3a9cb95e45c5c78bbbc1976251d323acc19a4bff8953eabf647f7a8c06d872321bd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
32KB

MD5
729cfde0079608537e35131b985e0255

SHA1
1cf1675e2875bef768336dcb1a3210e3153e9767

SHA256
0e862065d2f9f78d4f7efedb2a6d9979de53b4a2ee0ac3d4d5f23486fcbc9658

SHA512
e52fc50c3d78f75b7e548c35c29773288a6effb2557be40875a2760820e462470d05636246f4a3490c42b5b8a37631ae6db51663e2555a00afea8fde6c6558eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
19KB

MD5
e6cde919e406d885d50ea35f02468cd5

SHA1
d3a93677e3844d2c5a6d44d139281d8a9dd96fcb

SHA256
a15ca5f30eb0024d39a88e11460590d93a8391187184e16803ced7704e38cda3

SHA512
fcb2f00923fcb1e80e794e32460ef67f4fce7a334de718c70d8c23df7d644b7b68c4bd44af4b6e43627dfe804724216e9d1f46b76c1a35483d9678448acd880d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
d799d6fb820f46d44a485fb89d96f7a1

SHA1
fe863f0048d76d49b6e29f3ec665a857919f9a3d

SHA256
50cddee991eb0a3af5247eb423bf8c72e7c5e4e2b0f650f6a984db1f855403c2

SHA512
8e8feb0e5eb98f98e5735fe1b8dcd88a46d5aeaf98b7a543c5eec569dc8ead81f4d4747db9862c1d8c3023b4c3fc2b5505da43d97b7f716f8df6f37f64b26266

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
9dc6147ef6b640ad389ad570a9b1dd1b

SHA1
e9598c9c43c6a96e1e82a584efbe60effbe5fdc0

SHA256
8d406b24ac5d2bada76f9153cb7a587141560f92b9c89fd74fb9211a61915935

SHA512
fb89e7090d8684b8b3726b841f95cae908b3d4c3b32d73e84034ddb5a68666f2e7f848cf0532a4bbbe946dd592e16eb2aafa2c24c4a3a2fec292df4f3a2ffbe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
36960aa4583a293d4a977e29b6f9c4fa

SHA1
62cd96f1e9e6ff0f8812a0651158a20bbb327524

SHA256
dbcffb14e16242825f8247e385eda38d4ce86a00b1fc6536650678b2c164fcb9

SHA512
e07e10f5eba841ceb0893834251dcf4c642a81f3600b660105fa90a3a5039c6dfd6fd6d8e022e1fb89a1d42fdd7fbe96a3413a2b3a5bae41f3081a3f294829aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
043002267d4af4e68d754204dc5b52c5

SHA1
1ffeb8dddb02a74e7711e13890475f9342a70d8e

SHA256
92112e398032fec2f591dbb1d14c3c69490a2466b04613728879ffbcd36ae3c5

SHA512
5948754f91bae94b79c2b110f21882726bd80a9033f7f1ee6cd9782e58505572674e5ec9ca38e03c59fd1888a10c701d48c80817c321cf8b2789682e88342438

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
cb6c4c3436d8e3ede332f5e6135e559d

SHA1
29b2692a9d4cdda3debdefed619ed1e9cd26930e

SHA256
ec91ed9e65ead0c6dd852b1745f856e05fe5993ade2f4000b223dcb54ed59360

SHA512
0147bf5b0abe5fa5e6279e004208133f19f2f394c217c12874ffbd9af25e4bf0faf4def0161259a04ceb33feef3479f57ecdb211a616095ae01df774d6b360f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4b31d67e85b907f20c9a3ec09ce56e80

SHA1
6ff096beba8b2997bf3bfc2d34730bc31c60d2a8

SHA256
2d73c7c4683143590ccdcd47108d463e2f47c5363c4f5307c57975ac39b8d9d7

SHA512
6035386427b1f7e4df4022db0bbd01fc1b23183f3b2a2602825e706bbe2d65712a4c48f5ba75ebdd6042f3a0ff7e8a9ef3a24b6ef27e37277039e677c717a2b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0df951a09a06e91e48ca642b4cd77b40

SHA1
8a1ced361419998ac167b1c9f3c8675e32627e90

SHA256
d4adda2b7045fcec017932b70e5d51806ddba30e05f67c2105487ce08cb6ca11

SHA512
a5d34a06d8586e2ad92cd2cb405aedab5aedcb2811381c76eed3f55355930b837a7654b6ae8189551ffd7c4fcbc6d80390e442926d975da65632356e276a19c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
22173361cee32f0baf7092a6aa3b6d51

SHA1
16b7039452fcab55d8792731989f845b5b3be9ff

SHA256
d0500a6a01250219c7cf0a427fd75b938a768615bbddffa46ff0ebd22da21fb9

SHA512
832072f6ee9f6fb9488861f2c2f2e7203d5fe139ec109d7acc98e9fbbd596bc912dfe9f3c25c36212aca52e6a25abd1308627c07ad85305f4a9b274995298252

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0bbf5b5e633a7ed5bdfff7b814eea149

SHA1
5a2368308f5f4a5d1fdb8b539dadd60aa23073e8

SHA256
bae899c32d5ff23568371b8cd69aa54cd31d71108274c898a8362a00537a8cbb

SHA512
6aaf7a88957b0354ec001219080dddd3c22c33163cfc565da16f45e000d35046940ce255e32cc5d7db2e1e2b723f7d82b7d6102a219821e185c3c8bb915636be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
04656b5539a124de1dc8bd6b4415c8cb

SHA1
53ae588dbc518ff7f1f71aefc7f7a2991d14c72a

SHA256
2281fc733df175baa1373bd2fee3e5dff86a7bf785347184b2a34663325d9d35

SHA512
c625e552ab13cbbcc5215acf503c5c8692d253273fd19671d42ce3c77b99b0836822dc6132634c858a5f0cb0c31a3d06c7fb1d97ad13d823301e54b82f2e7660

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0e61ce8b-6f63-4d2d-9404-2966a3227fcf\index-dir\the-real-index

Filesize
2KB

MD5
0be7adba4f0a3bdb76c926404798ca67

SHA1
c22fc780c250391befa8a9b0df10e48af09db357

SHA256
b22589a6fcd13b3852d0c72e6e1778a9f79b3060f4e5e0d3dc018c9ee8b450e7

SHA512
a5e3b73bbb8119232545166ebf803049fa35a009dcc26ac0c5fdaf6832fb150eafc505dd2eff27a440562a3998db2391cc060912e4aab313a31bf3c64594a929

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0e61ce8b-6f63-4d2d-9404-2966a3227fcf\index-dir\the-real-index

Filesize
2KB

MD5
dce6a89cdaf2a20fe115514c8a9e46bc

SHA1
23454bdd58a1694484c98d959903c749768e6059

SHA256
4939201998c482aaf1a697d3badfc944f377dc23f34e6cda9ae646e802b01b23

SHA512
d991dace4233fa5f1bd7d4764cfee5a8df0f04f0cfa9c615314b768592dcc0b990379cda4e960f8403e125775eda08083801dc6524247d426dab975940feebad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0e61ce8b-6f63-4d2d-9404-2966a3227fcf\index-dir\the-real-index

Filesize
2KB

MD5
1fe2ec528fcb3aafcb23469694a6d45c

SHA1
0f064ed8620d82db97d8577d0ddce99a35c0207d

SHA256
09d56e6985f5bb9309705402dd7fe534944c17e0a9e008751196ea80ec07942f

SHA512
bb76eda248146df9628d2c610d81df3a4469c5ce5afcd3143b6454c5742eb6ebea291a4d1a5d6eb3f3160f1ee99fa3eef827ff266b6ba2204b8773ab7d4a668a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0e61ce8b-6f63-4d2d-9404-2966a3227fcf\index-dir\the-real-index

Filesize
2KB

MD5
62a0da4f790d3e3bac6e4e3f85ebe09a

SHA1
462ab94a994ca46a2a88f5df588189b2a15e8515

SHA256
efb77d3b73882558147d7be0e3db7a094748779dea7a0d1b45c3bde6a54181de

SHA512
e26442109bae78b4d56b18058b78bd0107bc14ae77d7eea74b993e68b5e9eea35181cce0b6ea0ee11b7acaeef4464df113f550ca76d519fa4ae6f48784e31618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0e61ce8b-6f63-4d2d-9404-2966a3227fcf\index-dir\the-real-index~RFe57d409.TMP

Filesize
48B

MD5
aa9c6e225e76ee7aeda0ac600da901cf

SHA1
9bf1ea015cd1c65d4feb3abc015d569d3d204402

SHA256
284b09226f2468548184c76464147c41e139c4986abab6d80425685f1097558f

SHA512
3dd5d77916cd07669a397453e56ce9b4e9ae14dd1ea8d44cde52fca551a37ef54252d0380075457e538901fd4b6a7e0e5545b0022109320d3183345d7d6dcaef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\0f081507-042c-4383-a828-dabdf70ae31f\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\260f60d7-4130-4595-a2ca-8416b9d9a000\2c7dc7c01e6c7bd3_0

Filesize
2KB

MD5
73fb3462fed4db665bbcdd891dbb2026

SHA1
6e1cc2b95ae7e9d7e7290f452d3a90f89f56db25

SHA256
5d31f56a2f4bdffb65da81166cd2f6720a7c205c6112cdcd3d541b8c6c1062e9

SHA512
74618d3f2beb661cc79074b529de8841c0bc2af9e5cd6e39d116fc9115ec6c6987338af34ed21c06c9cc97990eb86a4de8462b010199d00d729cdc712d103f62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\260f60d7-4130-4595-a2ca-8416b9d9a000\index-dir\the-real-index

Filesize
624B

MD5
58afbd211703e9a0736c28325d119a72

SHA1
48c5408043c7ced975405c5fda5cb2b6a01ac9a8

SHA256
840d906f10c088a278fb16ef94784be6fdfcf8af9eb1e60f1f6e3eb83c3b2066

SHA512
a348f8ce49958a243e8237de3b78f855ab3401e19c473fabb36aa35b7b6b8ce7087fab485324d96ea76d2671d6507739d25c0f06a31f20c5891f34d64c5311cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\260f60d7-4130-4595-a2ca-8416b9d9a000\index-dir\the-real-index~RFe583841.TMP

Filesize
48B

MD5
967dba3e9d4189421ba5f2418e727da2

SHA1
6c7bbb29049d1bad1fac7b020320f3af6e2f04bd

SHA256
1335034a524b9dc4662441528f3c326295588f6e034755fbae5d0bac10743c7e

SHA512
d213f147aec119862c5be9cc313036ab25854795993630d3366a415e89a28fc960599dacd104ad69b702552a5bfaba78afafeee96513fd8a118a5431cfcc15bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
89B

MD5
07c4419af35293701c599e99225b6fc2

SHA1
a286b12906ab78bb7c772591990a6fc7c6aeada6

SHA256
68c717aa95bf63927f6bc0ff1e1053063edafbcd227f8bed19994211394626f8

SHA512
66a6f31d56766cb395d49d84864d3a8af9169eca4c901ce8e0c7d23b28769c946b7d86965435f8239b84f74e479b6cf253c78fbcd46c6477cc7ca127dd1bc6e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
146B

MD5
b3318ef8aa509d0c8690a29cea1a09e3

SHA1
4931120742a331de739c31b51753b27802a48ccd

SHA256
e8e9974b53ce508dd09bc736358aaaccf05facb7cf1e1bea53c69c3a1f06d9a7

SHA512
c4fb45d4e9dca4690d420575cb0706b172bf5292e7d7d78cbc69730c1784670153ca606931b083295419c701f32ca9e35c54857dd889ea8ef179505e7bbee256

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
148B

MD5
6eea1a21d6c3cfd13c7c2b0152159f44

SHA1
2e51ef26adbf1a9af11f26c312ab1d81a8db3c90

SHA256
1c8b08f3baa167bfcf6401a945dc1d9820ffdddcf367793210b1d696d9a24a79

SHA512
587ced193c1cc6abe8ef2b22129884f901848cef4d5081493e4c2062efc50b6e20a50cd46666e8b4a781515a9a5eda6b129a57472bc868c52e87e2adf976334b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
82B

MD5
8dc669b6728cacea505daa39ad2711eb

SHA1
81a90ab86449adb3562f5524ffde8332b1da698c

SHA256
1844b43b09d98fcea545cf96ae74262a689bbcdbcfaf456522407563db3c06a8

SHA512
3938ed03ae56931c049bfda30ec0bb2d2fbd1d39aab42fa5ad649744923a0336e4619953f2dbeab4b031f8386bbe08bef06d72dffd58558471a03e9bf06eeb2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
217B

MD5
e91f1077ba78f7c502ae407263fb95a8

SHA1
5740a56d2477ff28c40b89f94b663b4955e639f9

SHA256
f608b9000073eaca1449815c81b28d8d2ac39afb2dd22bdee6b44817cca959f6

SHA512
92866fc8a6ac10ec2f9fdd7399a2cf44ba12ddef8d8ddc1f3c8559ca9fdacdcdf41e280d1328dd9efff273d746ac41cf087fd1beae53d1c89a85f5e2d373e070

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
153B

MD5
1189dc12abf92c622d34985249005314

SHA1
5374f13fb731cb767545999b5c1475a162ef31cc

SHA256
3b68d4032accd0cefe2d0ada2927f0847b84535eb3986db6a58ba056aeced3c6

SHA512
4fa58c8a871682cfa7380b00b53b4cb45eb48d67dc02c1ac0082dd2eb3b25f4c9e25d2ece69004e24533ddc7e40a589f7d4d08be7c5c84c202afdcb128698bd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
157B

MD5
7d0e3c9a10261671f305c0d3f6208a9e

SHA1
c2c0c83ddd8c75a4c7c342259f39be876f2fa464

SHA256
d396ff09b217e6502e36064cb6ff44998609d24e6ded6faf6eed852e897d7561

SHA512
d58a5959deb1847412d5070b1c262126a1f2d77b8667601ddd307e08aab0d44bda253acc7e673066fcfc39c7693ccd66f9df99160c111a181f5e8043c92f2c22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
4427f4ea29fe48e6d5d7f80af1dd089f

SHA1
bd6c80f05341fe064cedd621749f932c16e6ffaa

SHA256
1cf1051ce2703a19d7a93a910bf31af11519123ecc91b80860c1fdd2bc8e48da

SHA512
80ce191981e9613342b508103e349ca5f92d32ef54dc0cde503142c72b05258a1cf8f065d856732346050c650a00a689ffb4ca65afb9e6794486d4bb1515909a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
153B

MD5
bff603fd81141977191f4ad44fd0fb9e

SHA1
9677e5b6c472633f345b72ab0554cb8b1dec474c

SHA256
4a00803de5cdcef12778e1751dacf9f707b19ef779dd178472d0d80513a295a3

SHA512
ee7d2dc0d3e2e64215835f72f69f4e905f334999c182e56f0cda9eb7c44c3accfb829063e7b232e3fb28e9ee653eab1079f3fc9ae6e4e8dbf84db480977ec4b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
153B

MD5
63708358fe0a5b8aa0514b636048436b

SHA1
86f5928147e3fb24606eb7586e958b637ca2efb9

SHA256
1528f31159b3dc29db16058ab5a3d515fda52ac9a96b6d4143347290811084dd

SHA512
81865dce6b488a418ba1d2a00edc56d0708c7990797b917736232934f5fdd4bd68549f3fe2879b0321c167ed52d6bd0c560b11471acd6cde7db19cd0a0dffaaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
5bd132bdb905c298afb3414110bf3a95

SHA1
cc5641daddb7081bf622094c5846e11fb4afa930

SHA256
a5586f126692dd10bb7f086468066cfc297de9bedddf769cf5cef1a9fca3d43d

SHA512
a8c7a81079203b15357d22b962f1733cdcb2627d0ffc510f7a2042c0639c66385f3db077a82b744bec0c68806e4332a00ea47cb9bb52af43a6dc65f85f765f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe582cc8.TMP

Filesize
48B

MD5
d802d09fd7ec74df48bcd5eb7dcaf35a

SHA1
cb20aac0dcb9a9f7c23a151ab8dc24f70fca53f0

SHA256
185552b6518a96c4a12a0a442e307b245907972e4444f70eb8473516fca594dc

SHA512
cda10c4f48fce71d4dd664a2fc9d8b62f40dee145752aea3f9633a0bda760c08e9e564203deb062e4f60cd3b6873edeb04382142b5ecbcbf0e314070739b5ce8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
702B

MD5
632366ffccdcf94629893c9b6f6f3be0

SHA1
0e0e69d44b8705e4be0253b28a5b308cc4daab50

SHA256
a3e133dd486d6a5fb0b8ab24bbdb552b577862bb8d6dfcb8d7f9c943700bb1bf

SHA512
0ef1862b008b6a59a03808cbb105da2ac1e7c00519df0b9ce97911f0fd8ca63514533468dea95b00448458e553c1a91662727e174b54191e67547248c4f3add5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
13969e1772614a7f83bcad36534d9204

SHA1
262ad671e3c201c4a368f1d8dd91b90b05dbcba0

SHA256
6221cd20e7f72ed2dc8b0ff8c13eee78c4332c81485b6b97dcb0030f6224255c

SHA512
ba4b427fef302561267af6e090a54317049470b6933319de6527afb92ed3acc9f779eff0441634560266ce0c3571106caeafd8a821f1025496099faa45bc3092

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
704B

MD5
b349f557cc8b828ca78739d66e4042da

SHA1
b6e6f797311d8ac3ba6f77ea5b7ca32c1f6e3e04

SHA256
0ae6e0889f325bfd52e3e2d211739798814210e9ca18f70bb7149f619eeecd38

SHA512
bcefd43d7e478a6ed9376de2fec45a8af7e25be896c01c2a31ea93064029390d8269d82a4b024e3f6676bba0ac08063e2b0723773ae97a87b0deb3e40833a84b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fa9c.TMP

Filesize
706B

MD5
56b868cfc6e99adb60e89afa1ac00b57

SHA1
6b4633b4b4b2bd4584fd8749fa9527dc20d33cf6

SHA256
da862ed1b95d39e21088d12565133a07f4de424c6a34434ea2296326c27a1a34

SHA512
05ba6723046921f4dd67f3a16cf5c0245c05f4e218a7232ba4b52ffa7b5f37983aa367e2202776212b41d054775456c9ee18e2d49218d10513ba2049e93e8032

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
95daa90f97a4e07a7e7584aa0bff125e

SHA1
0e26e3f9ea884997c546d2fe491f2067acad6ad1

SHA256
1f0326bfeea0ba17a28bbefdfef4b95a1ff46f5b8eb72644dde2ba9ee4110cfe

SHA512
db38f048ba04faf1352c424d2cba997555ad444643778b82a330424d69da44140b7e6063d0a4c240ed73a080a58e741f460eb38eb47e95709f28d041fe84b3de

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
12KB

MD5
7badb0aacffd13b9c653b4cbfd0b605a

SHA1
5ad133b8161aa46d945e3053d8b5eb8b7064c9e8

SHA256
a8b9065e88209a772edb5e11b93eb36c27634b793d4a69d2ce2fab1298dabda2

SHA512
964b9fe11aff4b083d0dafa968a7a33e36a6850846b048a9438e63e60772d16f7d2edf2f7dc7b52d12de1d5f096ec097b3c8532fede8b56b7e5ed44b556f8aa3

Download Submit