hxxp://discord[.]com

Analysis

max time kernel
1198s
max time network
1192s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
20-03-2024 02:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://discord.com

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
38	discord.com
2	discord.com
14	discord.com

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 37 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e8005398e082303024b98265d99428e115f0000	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\IconSize = "16"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\KnownFolderDerivedFolderType = "{885A186E-A440-4ADA-812B-DB871B942259}"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1092616257"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupView = "4294967295"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Downloads"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Mode = "4"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	msedge.exe
Key created	\Registry\User\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\NotificationData	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0e000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2930051783-2551506282-3430162621-1000\{981E7041-4B59-4DDE-A869-8F3D5432B681}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\FFlags = "1"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2930051783-2551506282-3430162621-1000\{2878E9FB-9220-492E-893A-84C69D0F0F5F}	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\LogicalViewMode = "1"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:FMTID = "{B725F130-47EF-101A-A5F1-02608C9EEBAC}"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByKey:PID = "14"	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2930051783-2551506282-3430162621-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{885A186E-A440-4ADA-812B-DB871B942259}\GroupByDirection = "4294967295"	msedge.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\image.webp:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 32 IoCs

pid	Process
4340	msedge.exe
4340	msedge.exe
4052	msedge.exe
4052	msedge.exe
2252	identity_helper.exe
2252	identity_helper.exe
1372	msedge.exe
1372	msedge.exe
2448	msedge.exe
2448	msedge.exe
3536	msedge.exe
3536	msedge.exe
3536	msedge.exe
3536	msedge.exe
4400	msedge.exe
4400	msedge.exe
1308	msedge.exe
1308	msedge.exe
4800	msedge.exe
4800	msedge.exe
1592	msedge.exe
1592	msedge.exe
4384	identity_helper.exe
4384	identity_helper.exe
2480	msedge.exe
2480	msedge.exe
2060	msedge.exe
2060	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe
3524	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 38 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	3312	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3312	AUDIODG.EXE
Token: 33	4860	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4860	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 59 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
4052	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe
1592	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4400	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4052 wrote to memory of 4504	4052	msedge.exe	80
PID 4052 wrote to memory of 4504	4052	msedge.exe	80
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 1328	4052	msedge.exe	81
PID 4052 wrote to memory of 4340	4052	msedge.exe	82
PID 4052 wrote to memory of 4340	4052	msedge.exe	82
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83
PID 4052 wrote to memory of 4336	4052	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://discord.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff918263cb8,0x7ff918263cc8,0x7ff918263cd8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1852 /prefetch:2
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5728 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3280 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3980 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5244 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=2520 /prefetch:8
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of SetWindowsHookEx
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2360 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6580 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6696 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6860 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=37 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=38 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7248 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=39 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1868,13108495086715699566,6748407181946381868,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=41 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:4912

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3416

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3960

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004E8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3312

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4952

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1308

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4848

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004E8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3156

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --profile-directory=Default
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x10c,0x110,0x114,0x50,0x118,0x7ff918263cb8,0x7ff918263cc8,0x7ff918263cd8
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1848 /prefetch:2
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4404 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4376 /prefetch:1
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3688 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4884 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5252 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4904 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1844,6558479858355467202,8686594101674285229,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1656 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1316

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3100

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004E0 0x00000000000004E8
1⤵
PID:2844

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
96899614360333c9904499393c6e3d75

SHA1
bbfa17cf8df01c266323965735f00f0e9e04cd34

SHA256
486e4b4bb11f664c91c675e73cfeabe53b5009ae719459813be17814cd97e43c

SHA512
974735b40a9f92b40a37a698f7f333590f32ff45633c6e619500e74ec274bc20bf7dbc830b1685777b714d37a3ca103d741ee056f4ff45ef08c07b38a7895df7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2c5433e3aec0e7a9da9726637867fdc3

SHA1
7f93f26c987ce7218f46659ba777e23c5a68660b

SHA256
a3753cb5fe6ba511b56ecc69c08f93ee7bd6ccc6d7a89b5e6c68f5c2e0b9e8a9

SHA512
cf1c3e0c2b46433ecfbf98d0bc831a66a752a2bfa7df8ed336fdbf7220ab7cd6506c73535687271b9e261951f0d825e7335de36afb3967edd96f71161d744f62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
19a8bcb40a17253313345edd2a0da1e7

SHA1
86fac74b5bbc59e910248caebd1176a48a46d72e

SHA256
b8024fbed11683ef4b53f5afac0ff691025b7eecca0f6a95737da1585558227e

SHA512
9f8780f49d30aad01b28189804329aeca6ad2b7ffb6be505d40bb1af7802bb62622f518cb1c43a5815bbbb46638f6c52aead3d68f14fa957d18157edb42e95c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks

Filesize
1KB

MD5
8601a42fdb9b6af296f518983d5dfc83

SHA1
94a5a47e0d78cb3e02ea4c494aa9aed4ccd8c61f

SHA256
a492cdda219cdab5816dd566ff5d55fb35277658878e4d9e529ff8c6d602ac55

SHA512
95bb7a5dd1ec662de4caf6975f851eebdae0f233c900bd6881d278b2781c55c4e7698d4f7518629d77c8fd968fe8f137ec794b348fc3462b02d382c79f156863

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks

Filesize
1KB

MD5
48945587dc145da6304c3ec55db8d7d1

SHA1
733d595118a806be1148b4489677a13744b28fcf

SHA256
580dd068cdf22b06a021d7db644def8629606c6e0aaf5b94b280813e6b053250

SHA512
362cbcea80abbb092cf408540f2b43327ced8b48c4b79552cfb74a294c55217010f6c67ec239e5960f28d10f1c9d8c3cb6096dcc6c57884bfbdd9229ce93a027

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks

Filesize
1KB

MD5
b6e898c3c9e9aa3f041114000c8ea3ab

SHA1
d336fdc9f81a4a80d6b304511cabe8acc22004e6

SHA256
a08851456eaede4f436e3bac220c5549cc0e51d92b41095207166df90b3d836a

SHA512
63313d7b77a820f7d10e7a916499f633773155b02225aa8c8724fccf95486e54e3b74007a9035f3105d8959fd0146f86a3c16d3165fd30c2c62c18266bd265db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Bookmarks~RFe668592.TMP

Filesize
1KB

MD5
8759c6fb211ba675c21fcd93a352f195

SHA1
1c8950be09a2f16254b5c5792c6a16e40d858fbc

SHA256
6bcd3a7ff3acdab5b58b931a5efa60a994b7920d2dddff62b1346e52863e39bc

SHA512
2c0adb34cce265d7e462ae03dda07e91aa70de6b4d559a8dd4bcc5dcd9cfb3769b157bf8e636861d47e2a3c6c9f2505706153ed79e375bb03c97b8f900d292f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000075

Filesize
17KB

MD5
ed0732edaa5f4bfd8e055f4c5b521e56

SHA1
119e745f20e7bc49b7b94ad66cb76cffdffa9d81

SHA256
5ee3a3ccbf63e813c66c92280a78e68900bc4e231c30bc5fbfe29d844cc6d208

SHA512
5c64b7cc92b149cc3c7e7d65982702d2bb0c8d6c79199fd2b30d2dae893c4cf173565c58ba68d25ebf640fa4a20023245f337f6ac774424061ea8d3ff6ca6688

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000079

Filesize
19KB

MD5
e6cde919e406d885d50ea35f02468cd5

SHA1
d3a93677e3844d2c5a6d44d139281d8a9dd96fcb

SHA256
a15ca5f30eb0024d39a88e11460590d93a8391187184e16803ced7704e38cda3

SHA512
fcb2f00923fcb1e80e794e32460ef67f4fce7a334de718c70d8c23df7d644b7b68c4bd44af4b6e43627dfe804724216e9d1f46b76c1a35483d9678448acd880d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007a

Filesize
33KB

MD5
ce044f273566a41ebd13f4194e00d5ed

SHA1
03113d7c0c6907f786f89aec3fa147ab3fc3feb9

SHA256
d5c9440c4a62c72dd0f54ceb4411e674e9c8f158fcce381ed3145e9b70067198

SHA512
ae766ab169e5bbf2085c56f4a98d4f24627b7291dcac2de4cc18ad5681e038f6602e5cd5b5ff19492550bc3b1d028985c112b9671a57b39e0cfe8141b30dd95a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000080

Filesize
46KB

MD5
c96bb38ca6650c5dd7b91707aa800641

SHA1
f4239097cf6f56b5bb0b314265e958ef03caa8ed

SHA256
d7fe4e9179e39587edb7aefeeeb7f8ffa6c1bf1ae262907183b3f4b4cdabf31a

SHA512
f71460d2bd5c88a9904b4d36ec1da8e1132f10e1cde914402d53ecc3f1667c8f7cc97b47ae31c59425be986c7ffe560a9abf4005be5a32f62c5da7c308d0d553

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000081

Filesize
781KB

MD5
ad423ec6d79640148e29af1c496da5f1

SHA1
88403831fa182b5770ea501b4ef95bd699185846

SHA256
e41b60c6763e5d0a70dd3b031359b0b31f82e03c08390e854bc87c48bc7b8546

SHA512
74969e0b562e1466059b80220992f9c3f2efd3834373c6d31a2c02467196a5da8c1e415a5d93053e4b1b3b87cb59a6a16cf8e382579396fc41ca0f5d3ef318f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000ae

Filesize
18KB

MD5
94db184a11f9c365058716c81d40abfb

SHA1
e21494bc9c7b8bf9ac7d2aaab9d71df151b52281

SHA256
d82dee750451297d036d2cb8f7fd1f9014ba91d3e05f7d123b74cc0303df3091

SHA512
1ec927138e555effeb784498b33c23ef82207e0754bf7a8fcf5f389493b7d32477a30c0764eb796124913842efd578995341a9bcce5daa252c610c0e7fe33297

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b0

Filesize
19KB

MD5
1e8c248953ec2043d077de684dd896ea

SHA1
c3909f2c2d8a7230e20bf407c412f5c7365a1191

SHA256
30d365e9467ecc65d5defc5b7c4075e031dda687888396bfb62d2193969160ac

SHA512
97dc5f1cc56b5c8cd674c9a04eba2da1e25d0de8258f78b6b8291ee5187dc7a10bfbe802ac2c1b26e515a791eb2612b29e8f25392bf5f58cee78c0abea369404

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000b6

Filesize
196KB

MD5
813c1b41e435242e7365a4bcd7adcf23

SHA1
2d25e1564eaf93455640413b95646b3f88f9075b

SHA256
70cb2151ee4ef83195855d29819491a23c5eafee2e72b7ffd9041b35363d1542

SHA512
268c4fa1797700a205e37e716c1472592ad6242344645c703ab1ab8d4d68452c3ccce7cdc4d56a0b42d4061bdc793f1c79dffc397f038133387b94b2a1f4051e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_0000c2

Filesize
32KB

MD5
5935a3b84d16bfd55607cc85c0df4813

SHA1
461201d875da29e3dd446d64820b0071abc5e2bc

SHA256
f767acecf7d978d159e7838f888f77114c786bdd8d3de5181e4b71112bf90653

SHA512
2fd0c7f46bc45e084c827d1dc6abb406ac63b427a3ff155e97338766fed7c9f0f71a01a4dc852002ec16e24c5cae6abc8c2676d41097d930dc81b6bb4d5448ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
9KB

MD5
246a72c66569d7d19fc22c25d1667949

SHA1
c0a8bd17e5c6ee502738f2c18d8475172e440280

SHA256
f1010a493e3ccbe2dd67a76cf9daaaed2e5c14e0ac5f76173a9658e61981be1a

SHA512
5b5fa5f7cde932d7a1aa2552f1ef5bdac4531a91dc9cea7b373cc31b9f29c29dccd62edc8a1b0fbccfa1ba2f6c3d0e22606501e9f2ee1b1bc6c52e8087460989

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
47788a1070f646fdf8daab4ae084f907

SHA1
ffc1c42b63a146581b5e219ffe1fad011e5cd133

SHA256
ea1fef18d6eb82a172d1044a2979622ff9fd6ab8dd0cc47456180f3663e52422

SHA512
8dfae27bca265efb93182550a347f387ae8e8efe20a9317480a3c86f92ba05e91ba840b7c1fdbd797ed80678a5f4e87db19fd9e75387a9db114ac4094f2d047e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
3cbe11bdd10e29447a47a52d61b46d89

SHA1
7fd2062264219aa3b1c1fb8e2a7da1c38667046b

SHA256
db0d39eb6fdd56482e60625c240b2e32760dc3d30eb8c72d8cfbb1151371bd9d

SHA512
d6a2557c50e10bc1e1e7a1a01c94d9255b593c73dbe590e58654cae4d4f8e36204053f5edd441c07c525f8486655c0fda6548cb03d1c1a1bc614b191d1dc5a6a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
b807b2d05537f25dbfc56de4a05f9f11

SHA1
8ec4a46b66f323cb0e7113837223ebc1827c64a7

SHA256
4be744fa563f436783ff6b58258899faf2857ac3d9fc257ef2a11bb3ee4f81f6

SHA512
10bc27523d1491e66c2bc5995c3818298cdfc49ee80aec82e69eff366a2fe884a990aadb12a01882874d213f42e3ee5064342615b01ec803e98ff0bc45b05681

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
7c04c98389a4d7d7140b948894d07d29

SHA1
f7774f236ed8ec521127c91bd430c55ec8833d1f

SHA256
cba32c26d5a4328c83f5e17637b816cd218b35fe9dca5ede444b9f72850b3e81

SHA512
2c7f630323c47677a71e04a507dbcd557d42487a29096d4ebbb19ab09e046698034bc1e32b4eb9d6dc68c26f7a0b47aea68976c41064fd3f943bb067c97223a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
6KB

MD5
4cd1621aa36234f94ed45d0ca3d23d04

SHA1
88ccd0891d9efc933638f58379aa3bb90954e47d

SHA256
089dc6fc523996ecf370d2321407c7a6bf588c498b68e5f676698d3859005886

SHA512
83324cea9996d56f50ac51b66b47f704509e5685d0c41203093e31a7b88a0347688c6404eaa8c587b711f76ff77375ae6b1a1f25725c3e051cfffed6703d2024

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
c829e836196e5fa5cf5293eaef922420

SHA1
f34007ab85dbd97e06334bf64e67c82272a35414

SHA256
d472c236e5b75d3e47cafa92ff24398f76f1dd799ed3bf9b87853128688cab5e

SHA512
35c3d118b1e7e7df6dac867eb561d211f51005f993e9b0152dcf2251c6da3bcf64b9d4c07d3a6b67259c5fd9c06b562e7f3d1acf261d0ceee0d51b5727feea8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
9KB

MD5
920b946bacb3fa3b484d274d591b9e37

SHA1
a4626d1ff109695ab24cb20eeeb0f8bf5a0e8e7c

SHA256
9edf5e613ac1754cd737908049d201ce0eb180aa14463ba3ad880123a9bf9b98

SHA512
bab45497d96c268fe6e8160b6f5a7594fcda1f09add6cb0ddafaa4d900929d384f05ef285853a727b0a9977128402b6b569533511f359055ca97f1f387497935

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
8KB

MD5
60212abdb24d10275838ab63fcb8eda6

SHA1
bc683b512ba68e2807ba672749114597bb7169c5

SHA256
531d7279398ac1261656c6d7afa669cb5d8453c0e05211e280e67813e7db9422

SHA512
faeb171f946c53e635820fd0553d9e563aa051749190428c9e517fe0059217a71eb3800b2a6214a4c3493a20ad97a812aff79f975081e58f99b9622a03def200

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
96B

MD5
8d6f12712018c032ee8efb39090730ef

SHA1
696da88146b7f955b674ea36b27616e8b74db8bd

SHA256
45154368aef60b5db341cb974e55c7e8e9980effa475ce0253284a6ecfedb514

SHA512
18fb8e85c4d35bd640cee9c2122f5781f1a71ac7ba331cfd742a7e769b24a8a5600c854dbabb70243a7f1fb27b4f7ef593565ec85398f49b8f3fc8f781336138

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Filesize
180KB

MD5
e16a6185237418d0e099ffefc76881d2

SHA1
d7f7978de28c68cf57f728dd95177a6c429133e5

SHA256
7e1a230197c4dfbe6d58024f820b1c7d2228ece8021276d218dcd997cc5e1f41

SHA512
587c600164180dfcf05e43e41e67e913b56d9fe727b87d5105e2d4cc832ec33b99d47dd28ca225211ecaaf1be0dbc6697f4d169e7819c01c3cb7bd5d5bf7f26f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
de39e4c17b39f9ef4726e9e71759edc3

SHA1
c1d5517bde7e8aed149ce89ed350b70fd7c1c4f8

SHA256
5c3c56656a001ba48a9b32ed3d32158a256e7b908a2b7bfb5dab2628f0d73074

SHA512
7fdf5a73a732348455ec1562bac76b5353aa84e176d00df07ced63306762c4d956455643995d92ab004d3725a0d04210b47bb612bd7615bf054d27272fad2c78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
116KB

MD5
6461c7bbc09f7c2777b49e8e6302d662

SHA1
59b42c70c0bf60f049435fc7ced4ef6de30fc225

SHA256
c2e678ef58fab1b330211ef5d6c03b16fcaa276b0f305209238c9e6887540116

SHA512
2841917293a191fdd54345ac251de418dfd123bf6e57d50b878dd8c6ed5d38dcf4b68a1a2ac9857b3b80db54358c7324d27442ae96141337868fbef83d9ac5c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History Provider Cache

Filesize
9KB

MD5
88ee713d816718a44c1ccff57a9ac223

SHA1
c9cb52a78010589bf494e150964012a374800cb7

SHA256
8ab79fa6522d551f46e364526afc4e05ecd22be79807344fdff999dd736e6d4d

SHA512
a777768ca164a28914ddf68b25b8b2061dc678c9799d545c880d204720f06fe0d4c4aab1e1545f09794fa32e6efeb0b102dc41945c6a548b35c2a8ccc03be43e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_replit.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000004.log

Filesize
3KB

MD5
7613c4584b8672c8e64d5e19da5b68ae

SHA1
1403dd48c24fe5f4671d790bb7452505852dac20

SHA256
a1445a04de04b751cfd738c3eb8ba59c5a5b251ad078070175dc5708f9e9eb83

SHA512
04672de47f271259f0ba7165c521517638f4c1bc35877f629d9bd96893627367d43e4cd1781a1f9e1654abab6b51c35ada7d16c1559c88e64160bc06b08e5855

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\000005.ldb

Filesize
27KB

MD5
901707294d5cc69a0b65959c46c952b0

SHA1
1639e7ce87933ea1291c816702500adceba76cd3

SHA256
75731162abe0341b20644248cb4d3ce3d3fb7ef5cbd74c806004af7a50b5a030

SHA512
088df372b0fe634e0054e35c2038a0654dd7e41e61d927275a9a7ec0dc501b930b0476375419530b8ec2a00c0cd69c29c7a8ec6351b7d090529bce5223aa5504

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG

Filesize
491B

MD5
a88c2c0453b425655b72cc77c3b74da2

SHA1
3d51b210f0f270621b9de751582a6e63a75a1d3a

SHA256
09ccbc96f65658dd71d88e6c30c6b308edb825a9adab2f4745077a26abeca689

SHA512
3447012748e6e25c5ac83a958039834822024a6fbb627ed9bd36c503c228a49516e8bf50d4258c2dd0b54c6f02fb77e5065c4f8fd0a46458d84c947a2511bf6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\MANIFEST-000001

Filesize
168B

MD5
5b9c5d9698cc9321650e9bde4e8660cb

SHA1
6e5aab557f41ce692759a138a3e3979811292bc6

SHA256
5d6c2032ad5f99976ad9279d07447e10690f67b9ba23cea3f9d2f799c500340d

SHA512
f8976cc310262d328126d548aa8dd9fcbb4346133dd8bfe3ecba64c39678bb24d79e93c27b7c3bf708dfed8c25542ade35000beaaf36d64491ffbae52346d10f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Login Data

Filesize
46KB

MD5
8aa0658882cd44ad1f72e91b4549842c

SHA1
07749a66306ec20c973049aebf4d01392f0c8737

SHA256
815d0c796094bc1b6af57d617a167ef46f6489e604c5b60d4519c4b87b72c532

SHA512
9017ac0ee945944da8f6de69a03d490562df6f4b7d496267da7174c2e87cad35323626e75f446fc62f2ab6ef46945837cbfd330dbec9127054cee0cf4c952d1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Media History

Filesize
76KB

MD5
b842e1626950a110be3ed12f1aba3d16

SHA1
88f37d7975ef2d16b92a7b5a7002fe1b644eeb0e

SHA256
1f2f1da779d1fddd504a9158e6ba2a6037f4e79fc0e7c337ad08b3f9bbf8decc

SHA512
19eb1369c2fda441df4a6dfaf8c78b9bf4c1cf2e20b32aaca2c2b2d1f23c1fd3e6a015a13460eecdd89beebab113d7d3a9f6aa71f594d9ae9370385cac2b7f84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
31e592b31a75dcdefb8d82f6b8e16435

SHA1
a8c7b9446d760bfe54f2266e2affcd90fe55a246

SHA256
1e1ba4a40b11b4ebf1b508d0125b458e39a0f7cb9dfa187c443051bfcbd19925

SHA512
546057353c696eddf2fcb4eca4fe9a630ed6fc10616c4f9935f2256fc1593f67d76c712053b03330b8411591803380d72f6e2f4f620904d505ecbc5233f5b15f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f07de4ca989ac6c2f0ea5494d8163116

SHA1
f8a3ebd12100e49b154ff2c9f8af88bf531a3e82

SHA256
0d8a0daad1c56dc8891273d52e315a4e4eafdbe0b5ee4d4cad2d13668b863b40

SHA512
7dc5542f96dc743e2f59c5e29c104362cc45cc01d7f35e9f63758063defdf1f3fb84307a439f1c285a468ec0f4d40fae76bb79db330c5a665f8f82582a1e062d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
3aa52517ef39e27d85a370fe60b8c747

SHA1
1328423283819675b4dc2759557fd867b07b4e17

SHA256
1d28d98f9d1e114e8f37c2cae735c4cc8c110b5df3ecb76eb9f74de5239c9e41

SHA512
190090da470ef304604843e455091d9f046d1cd904ffe00c8f3184764a4fceab58be6ea456df6cfdf66271202d96ad7476c3e28f2210933558fdf4e3dc9324ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4fe96e0397cac5826036b7dc0d50d7f9

SHA1
c04ec72275a514a656701821aefbac030c2166b7

SHA256
7a2a9b8c2fb2fad80f8cd6458d48c48f56654224a83431ee96d140ee69caff56

SHA512
a2bbf256ed5f79baa90de77cd71e4bf45ff59cd2542efd5a0eae4c8bb55b3b0bc544025131ded2a15d667b237eb047e6d8aa6a7874094e20ef020d9eab502f7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
e361022e441224632d8037a21652f905

SHA1
50beebf6b1a0257f49124db4c85cc7bd968818ae

SHA256
1b9dedacb997e182764e7c36d4e63fae138c4898bda87d151d2ababaf7267cd3

SHA512
157e86239153e70be916080536bbafb400e419b8bd98eabdd6be1b4e0db31f5a5c529f49029088bbf3759f34504a35714f7b3c9302bea49653638cac393dab7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
c6e1b1f32bedca36da402c5ad2ad4054

SHA1
4329d40ff0c57e00b970153dda23bc92f39d6b13

SHA256
ec14f26332da6aba6dc726e1fefa244eb43c6a6451272906c80390d760f14527

SHA512
1ad016666b4cd5464b422c023bfd2804af252e9debdc418ebcb0b37d3999ea63c3b74b89d2ace38a81b9d754299d44a50d849981f25d2220c880f425a7a74b07

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
184781613081f11ae650d4a4148b2ba9

SHA1
1302a1646dffc00eced94220773ce86f907e09af

SHA256
51b0e6079ee788a45ab1de98924a5ac4a0ae609ff886d5453e38f0fe993a462d

SHA512
a916ff432477c05e470328fbfd91df57ca0a56c1437f0f73e76758c2fe1a3b5e784088a3a674f59afe17fe2daa62d35ab7ba625a2857f9a2b7d9ab927b8ee99d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
2af7c88181a0b117f198fc920aa2ca70

SHA1
56fe8d589b3b67f120242fed99be7f530c237582

SHA256
7aa17ccfc2162949ee7902bcb5a0c45b08ece182371b138e98b543ff4eb87dc0

SHA512
d4d67e35387e572dfb4f9d39f018fad245d3c36074d22bebcaaf396e1224ee9ec0cb850b95b9685e6781e29b8fdac7da37ea20126bd8748d9e7e4b7a3538bb95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
8KB

MD5
eb206b256f73e3ef4f4f66822eed4e5f

SHA1
2cb236cff6b7d85f4c68d107469b981d76047004

SHA256
62bd3439ff552cc54acf6ab181060cca616a8b75bd5072d4f585437c570f9630

SHA512
e4813b82691df26a0b90d552876e60679254345f598dd69a539e954d730b30501ca5db17f105e80d070716329e407e97e8d0b3e3d05b876aa8c3a287932b9b49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
9KB

MD5
f25dca4378ea82d3d89ab1026d4718cd

SHA1
c1caf6d68306ab121ec5949e5b3b2365e0d6345e

SHA256
81c1bf99acfac15a2a1ae1e8b2f26fe2e4491085f79e3361edef9c21acf63ad2

SHA512
29ee2e7c6caffac3c875132a492d2cbf823ffc0571b3156f49cc9fe89431390f40d44968dc3a0fc977a064659f55d6b8b79f2b32de3f91fffa08fc48f7537a51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
92ffe75ecf4dcd0bbb07c321a0c6c401

SHA1
3fb271f2200def7a6304d7668d25b8773e526492

SHA256
44e4314032427dd1a59e68ca4cfba7966a0e7c47882af8ded99da8fb9941da92

SHA512
c885b572ecd3092367b8146ae7a918ce7cdd7c83f236571f34d915ea7fd1d79208dedc9dbe0b4572a717f0d27f658bfe8b7479a82a0ed85a0175caa53e1ce769

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ee31a7d8c29449d15e3d6fd080ebb03b

SHA1
f7cf2fa64653838d394ac73cbb9fe30155009de3

SHA256
e56cbad2a9144ce746aef200214a87650012f7092be5aab79dc8ec2517b0bd5f

SHA512
81e3e52c1627056181a9b046bb248e9e0cb87d1205493db6938490965bd4f24050a501c753a7385a4438941e5e47244b6e0edf52686a2a76c81f5a74f15c8010

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8bf555cda51c6038b6b73e390092428f

SHA1
cf0e0c903afe3c9d13d14864b2b5b15547df4e80

SHA256
c96b6ad65832ca175b3eaf629bee430fc4302490b68405b02b2687d86968e0d7

SHA512
6f612569bf217473375d0350098fa15276c6e6db77c55f5659294a7e2caf2fdf0d6508154a9af570ed3a8774482824c85a2b921a8d42f64f03eb59486b9bc317

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
a9a4c57432619272c61e76814bcca69f

SHA1
6efa591808a48da66af026e7b292313ac2258262

SHA256
56b32607eaad06ae9c46384a8e567ec1950a3fd98b01669d1ff05e106e893116

SHA512
21e241f5c69da05ba681695a2be27772f065dd8d7dedee872d86de0ca7be0d01453238dc38c819e0dff5a6a2da208c577b2af1148b2047a90b1213837357c7f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
55e12f97d5a67c2070025e56fe0aae46

SHA1
d8f76d4f8a487358701c3b253fc995123eccce30

SHA256
8579dfd2e8177b673ef0af8c5b4c7b317b325e7ac2e514520fb30ce999f743eb

SHA512
a6e5570d5a58a641df968b2f6b76c71766c3a4519d8f167b9f111bb5b7765726c736ad2164851dc6e95a06548457c544a094f00e2b3c6988478a062cad121c85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
b8b5881d552b72169c5f5b6ac9a9d46c

SHA1
7b29c76a7eed2025499d09fc4e160a91183a8b5d

SHA256
87801ae035426812f01d72d7f5a4911f52c4eca62805c960fef7a4bded041e2c

SHA512
9b939a22bc2b18787856a793955b430b31fa50a20d1f86f448a9b9421d1b32623b748c165e6d7257c8740c4c8f743608479d658f5051711e37e7de0e1ea0c72d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
5d4bc164cf0b0e41b8b16e449921e51d

SHA1
016e929c5e55fa150211d36e583fd8e380606735

SHA256
b013d32da911b327eb0a159f0bed95b93499c1446952776786bd4ad64e40293d

SHA512
3fcc56e58fa8fa174ee2642d6fcd90cb975da8270fbdd470c73fa31d1e37d1adc9b7c5011e1859e4021956ad076abbce85161810e9f19dccdfa25b07a517bbd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
d995665620725afd0df8fe14149f8ad7

SHA1
08545ea5e4781c7c58192d7d97be8540efd647a6

SHA256
44e966ddc2a7e1409a74f179ad05c3bb68f7ef819394e2ff090d3d2c6089d67d

SHA512
22bc896a94a35e854ccfbc2051efadb04ff01de8eb1efc7c18b087958c3821369a7beac81fe7f5796424481c9b5782c1563ea851ac59bb56b82d3859a75c778f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
d0cec4c6d936152a21ee79f677f8ac81

SHA1
18e50d56a8356f0e06a8b47728dc10230b2cfe60

SHA256
0caf9ba8cb673af9f3580fc8e6959fa725a1039b016fbbcb010599b490139f70

SHA512
59c36818e889e8d9ceb62cd96977b7057a9bd78c82f705a9b7857d8199b4a6690d91e7cb14ff9f949de80a36ebca6f11172203f4e52fd60a2af8213122280b10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b4bd9c3e197fed5c2730033a2d27d270

SHA1
0221e1763081c8b85ee6f5e3b54bc6f3c0f16104

SHA256
b39c85d1acfe68040d070c5b22662a3a268f5a45e3596dd1eb9b437a8322374c

SHA512
a29d9f75116a4ec4b37c645ae7694ef82489edf1c2636650d8b5d848e1c0a2d10676605ce7b6535388556241e796895702374b641792e95921f75987b227f359

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
d0c7562fed6d34af3fbc3e18782ea4bb

SHA1
102b56f03835ccc3e3fb561fda64bf126644775e

SHA256
efe50c3df82890b77e6e6f9d4120456b658cbf6c3c536b331de25b597e287c4d

SHA512
0991c73f8f17cc1d650c6c3653ab9eb104a2683a121d9205bf16e2d94049b0cdbc265e22be9c00ada6b2037acd4abef1700fb68fb25cfbbc9675397eec4565a1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
ea6feb989d03f6e64dfb457872817104

SHA1
ee3084a8ac1124752aed988696ee3c67e02e26b0

SHA256
92a46da2ac580208f45750d414719eb1a7170e99ec17effa6751c1c9cb3dac3a

SHA512
8af93ba37059387076ad61ea7b7e624cdc5de69c952f54eced61dc8c7e714e109c54a35d0e94921934cf53f2da32b09bd1cc3473fdabd30d5743c76ceb4a867e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d32681e1d4eca185e2cdf406f80c5da3

SHA1
5ac0856e4e58bee31540d17b4e0b9511a55d7839

SHA256
948e75389ca084c24383094e4a913485f8db1a690a7340387d352b25f91fb242

SHA512
2b8d1ac7c188f2110e99ab33d4fad12a23e2d569b75980b2d622bb6ad6c66dce115eda668ae16e3fbbabd0bc86c61706de71c1054ed0888dbf4362e2a017239a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
601b37770fa59cc81ecc4619c1aa4000

SHA1
4063c9302c30e143865b26eb2a00131626b1ef17

SHA256
918af00b1f55f06bab10569c51b5ee8c81e8a256b4e3236d1e38733447661444

SHA512
aa3451a0e5b6c0978845165733584e8bf44dbc8ecf64f630edf62be3d8d51fc9c61422fb45a8679493a8613ee76e2148767e0951d5c91b25ce206a0dfcafb13a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4abc3f3867de9aee9bf99323337ee471

SHA1
aaf912f9e018b959feb5a5d93b66efea5bc3bc48

SHA256
58481685aa53b3e9ad1b9a600369770cc8b21747ddff672d572c39e636b229a8

SHA512
f9af9aeb25a741e4aadabc14cb5d1ec5bda7452876b1856a4a69a01c5f2db2125d70a848a54ab030e6d33f2d0fc4dfaaee124cb8cdf164e8706515ea28a039cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
9KB

MD5
8ee132f4379ee0c70c9d6580c61f8146

SHA1
45a78c7087de542e00592e01306f2d8884331e04

SHA256
a5f64c54546d3762009a03d5262257e152bee1fbcef8e704471dc90401824d72

SHA512
6b378f107fc62858be754ad7eb4fc243611fe99e03d32e80890aba187b26654b0b4e9b707bdc69a378e2a6cdfb746503d0c350f809a1ac38a819040261d2ed5d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
83a12bc0e2c04b8ef07519926f60c1a8

SHA1
4326ad8ad1869efcb2cb308c2e31d160579b353d

SHA256
a6919e89453536472d6953d18cf94be0315c26b6e95f764983b3e989f9d4b784

SHA512
edba88ad123709a4f1a86e11707b563c8848eb23dc9bc2fc289a1e7bd6db5144980bc0bba257260cb6a32801bd617138643e6521391d8e507d0303d458727266

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
6cc49bba82e1765ebf5a1b57f83cc520

SHA1
39d90bd3fb439f653a89c133da6e08bb1cb2e1e7

SHA256
d12eabdb01736d7be9ea6e342ecace7ccca8e637a612f045b1523a20ab2af0b5

SHA512
2f9d84d7b77a993ffc75dcba2da31ffd98ff54292eb1dce3638e2de240cf01f71f1c10bbce3f205b288f4e87d0e5e5ad9bb953dbb78d0c9f8b5cb1fd5a082028

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
10KB

MD5
80462a954516412401926d61946a0a9c

SHA1
97db24094b92f24438bea07b45587c223ded9a7a

SHA256
17b42199cfee61dcdc383f2fc26b91d8526a94222e388ebb016d6b6b228f17de

SHA512
4247ec50c4c6eb2dc95e66e298601ea3f34c5f4ace0841e44789dc943f6be641933d32e9eaff414a127b229c48b6c7585cdf570b6913cf107a3f5b1fc43a6bdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
99B

MD5
d4cb3de6bac24a27f589238a6aa44d1a

SHA1
421fb012067a27c777247c8e29c571a169c3445b

SHA256
5a8d31e4f640e6ce81e3bc2b00f9445cf667f6ace0f3341d4bad5d61ddc9e397

SHA512
c347c1e325e68922e49785fc97be8d08b30c9f8bf679451c92bd84cff5d15d696c5ad0e28687aff8703f285db04bb66e1c602f3bb4d05b359ef9ebe478e1c0dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
35B

MD5
343859b4ad03856a60d076c8cd8f22c3

SHA1
7954a27de3329b4c5eefd4bdcb8450823881aad6

SHA256
8c79b653c087618aa7395d5e75198da7d3b04c08654c39e56b1027f9ef269c2f

SHA512
58014a4e7f2b4b0d446fae3570196b8fb95d0d1b70bdab0dd34a74d6c62cd8d7ca494a486f19c1a829988a3af83a08d401f18d1769ce1799a02ee09807234254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e95f69f-e6e1-4c93-897f-1d0615c5e578\index-dir\the-real-index

Filesize
2KB

MD5
e20909a9a71740cd2755aee69937b4d9

SHA1
7c8ef1847adb644c9e5222b338587dcb736a534c

SHA256
ba0c005eaf15e26585feb2a4014462b59b4ae48d83693625a519780c743ec5f7

SHA512
4fab5de9d3ccc149275f84051485fe3a1133b01e12cc80143c6d3dfe321ba16fbec9a94f915a2f8fb601732f6a3da1276c338faf018490964ca7cefdfd3fb523

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e95f69f-e6e1-4c93-897f-1d0615c5e578\index-dir\the-real-index

Filesize
2KB

MD5
3c5a5037316cdfe855436f64684b9611

SHA1
ec6e08fb8aaedfa9bab874f0f99ac3aeb974049a

SHA256
5fccf52cfff7e23ea589b4e3950f992125937733c80332fd44617766bc7b67fa

SHA512
cd4e44cc60320a8a1e45a6c5b9b76170e55f74d87df0a91c85e9292460616ee50b154463843237f18b8c4185096e221f4db0dafe1a8d6fd3bcd3a603073b4895

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e95f69f-e6e1-4c93-897f-1d0615c5e578\index-dir\the-real-index

Filesize
2KB

MD5
4aac6997a41dd01996890d31f83ffaa6

SHA1
b198d6cce7ab4c5d88b2730c22e0afd3b1fe7174

SHA256
3981b8bb3bd1ee43c300f1e5b9bd85d310ebea6d845d915d5bfab6b83939eb15

SHA512
30c946acc6d404eb740871944e214eb937296e91d764e79d35a70f5ddd9f34a9bec88752d4fa663582ede0087d0bb2b0151b4cdc031fa6acffed4f0d6b48bbfc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\4e95f69f-e6e1-4c93-897f-1d0615c5e578\index-dir\the-real-index~RFe609167.TMP

Filesize
48B

MD5
f3ff1d9cd3c4673a19004a10c9df04d1

SHA1
db84ce07c6bdb871140b87e48a4203183fd8589c

SHA256
40d88ae4d02ffb0797802e55f2f7d4eb8c3bfa69cf645e7cc14ca6778f278985

SHA512
9550adbe64d7729b42000283e4c678393352034e27c93068bd6f7e0eec765500047a269f2e31ae467f8cb9b71ebf2559fefdc1d508982637c074b3e697ca2cb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e7f42317-fc88-4915-ba9d-26e4b1c527f4\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e7f42317-fc88-4915-ba9d-26e4b1c527f4\index-dir\the-real-index

Filesize
624B

MD5
763acf86c57a361a2b47c14cc437df18

SHA1
bd0fa1099e8e39347bb4495a08bff01643275362

SHA256
59629e1241b415d00393313a125a7953de659038ad9b4ab5a062e0ffe16be771

SHA512
9c13a70a76e38f1ae9761abc5d5d72a918221cb61f99ad1f0a3ecce8ffb16f2f00bf9ff49fdedb71b40b78c754a2f3bdd29ab343446070678a4f32566285425c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\e7f42317-fc88-4915-ba9d-26e4b1c527f4\index-dir\the-real-index~RFe6092fd.TMP

Filesize
48B

MD5
47c0f117bafb6378c066d18aaa2c92c1

SHA1
729fa66577d80d0a1c904c56cdea72e71fa69293

SHA256
90f833de9f90a90dd3566202f24484285f5469bae006316a87bd679f146fb650

SHA512
afd6937758965e2b16a237df05d40e36f3ef7d6e4582f117389467dfede181de5205be5da94b7d70a3c4d647d94999bce86c1adf0990b690a42ab1741b8bbabb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
146B

MD5
cf9682bd1e7bcf76bb0d290d5e3c4171

SHA1
8ce132c2146f1a7807f598d1b193d96be149f0d7

SHA256
5cb6c86fc37d2af5f5385eed5f38c2ad2c6d6a99f68805c202ddbec68ae03a53

SHA512
13b399e6bee5736d3d11037a851782a8b9b88bb822916b507ca34e69b8142ef220a3ea763de4375674f3e37ee76b4968144433cb15490d11403f16ff618ae814

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
155B

MD5
e9d2555ea5536371604758b7b2dc7fc2

SHA1
47be5af2aabde887cfd142baae27189cf0e274b2

SHA256
25e52e73c116bad2925f214ae0748ff7301601c918ea643c7d9e587a89a59714

SHA512
64c8e5eb544cc10b2d5a7f05879be3671e0c8519ef5e535a05d5414e7fb81125ed2d69a8af07fef20510af03694726141c905c6c02b96c6d43f2795b067c0022

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
153B

MD5
92c387daab3024609714cb02867dca9d

SHA1
57b0c7f4269efbacb58d13bc06896d07dbb88204

SHA256
701448615fd49872c16ae2f6495785e569df0016254a208aec0f924609142225

SHA512
b5afd59f603805e175b76d3d4e9835f49925800d7e098e0a21b34b5ba1a3ab805de1b6fbcf098061659a0024a2346ebe2f9013b0314d85f985f9c0fb4f46dfcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
153B

MD5
2f7c6a89d62fa11ab576c3c57b8a3295

SHA1
896026528f4bfbd6a7d84d3ca56e9005e33da282

SHA256
f8228372a5435b4e99fa7a3eee0a659a455b240e4a88e463692794840bafdafb

SHA512
ab938109bd2d4e59ff5447bc4e9cb632c99bd4040a949a46c9c4cdcec977b18bbe6d169e9781f202c81c32dea471634fa59bb5b49df0715dd8c9fcd5b32ab769

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
153B

MD5
ccd96854a3629a80e7799f0218e09175

SHA1
d927386277632946a3f8da0a21acdcbec336cdde

SHA256
c73ace6bd31d4f7ff3a68caf3e9f62a59efd0fbea2a4455146d417853108aff7

SHA512
7f00dc09e6b41a3cae33932577d85522d5ca0e7f016b361b5e0c3ff0b49b39e26a2cf301429a0b2714e7ebdf6e063757e5345690a3717c1e26a47f5f854fb4c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp

Filesize
82B

MD5
0389cea665b8921710b750d582fd1a41

SHA1
34c2bc41d3a151ee354ccdae4a1dd267e947e65c

SHA256
b43d135c346a40d7a6a45a94fd973f10961cba43e3a8d21030aa2fde9496ef1c

SHA512
06295b6c5e8edde9a5cca0df31c38e06db1463d97824a281e5d1a44127850379ad38d192f72c56f8f18bb308485b214d9e0d062ea23c69bfa8d7dad6844ff354

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe6036a4.TMP

Filesize
89B

MD5
c0a15a927e77b5bd7cef566c106b135c

SHA1
d07e32cae708c55974a21626232722fdb2f53b99

SHA256
e92ab356edf89eddb80e17d5588752c477756fb7e9d28ffe097447957a51cc5d

SHA512
f69a669a7984c79eebf186aef45c7e0f5b3945c393b6b6d6d36bad8e2860c668a3b80b24442361eb17f5329efb7fd4d66825154487b323d5a2f81571fc723818

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\6e728e63-206c-49a7-a8c7-d15c0eacd11f\index-dir\the-real-index

Filesize
72B

MD5
25ebc25c0fbce5e5238e11b6ec35a8b9

SHA1
89806d99d590ab9eb3015a7eb54f552d653097e1

SHA256
4d2cf339b8f18fbd9930411d8758f2237d04b92ee6287cd6c3b8713db5693a59

SHA512
19e40b8cf3834233f1c1f0fe06f947173293845e27b79699b6abea9f60d08079e6ddb5d09cebfa7a5d52c4e0c88ca9e8cc8722775cf680f92369d509692043ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\6e728e63-206c-49a7-a8c7-d15c0eacd11f\index-dir\the-real-index~RFe6320eb.TMP

Filesize
48B

MD5
cc38a6e4e5efac2acc57e91f29bcee4d

SHA1
a548f2b7ac838a54aad84f5d4039037555d37f38

SHA256
12c35a1d080842dcad05c62769b8b89b80b20e0b358695118ba4d5d9983f85d5

SHA512
287b15b47a5ccf986d31a3963ab0e351417c0e04f6661814a2ca296b64d2d613f812a1a7422f7fd9c10c36d2979c81fb8477b4ae134c9b7560caf357ec12f05e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\index.txt

Filesize
77B

MD5
7b457674cfce303c5911c5db00d45480

SHA1
31de89093c4f0b003a1c5f8ef525cfb3b76b2f0a

SHA256
bfbcc30e68facdfeef139d6d7fb925556b4074f80a3e4bc52970c16871ad8ee8

SHA512
adb4d7a6bcc6af2a7e2f0935f5428b2eb17d7095b5ca025e0c80e56d2f05441c70611cd649a4f84eb4cba5e654f6b51b028acb659aea5852648c7f963c9a8806

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c88326c16da025a4095d66138d90a725ead722eb\index.txt~RFe63212a.TMP

Filesize
83B

MD5
972e4133359aca0f78748dee41268240

SHA1
2c2957506a637d7822f3be984ebde814ed00d657

SHA256
29059792ff405b754d98d0ef9529c7dfc2a457ae29678b54bf03e61b23f9d467

SHA512
9c58c79e8b26305d4e5e7b323c88261c5224f700b8638a5f360dcf0dcf48b17c44b25d1a10f8dfef4cbd41882ae9d8eee3d6289bac305bda1e947a0fd44891cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_0

Filesize
16KB

MD5
7e1a22e64472804d34b3123ca78fae23

SHA1
51ea2c15b39a58cf165c591121c681ad08a56f42

SHA256
436349e583b065559d9ccdeddcbd96d5c13aee139506fd659b6b34e1654ee169

SHA512
b6ca8f6736e8cd88378583a91a22ec40fcfb831dce5a3d2899d95e895a94d452bbf37c4d97e4cab45a5bf24c71659a60b62afb30e4cdeaeaa9b495f0b9e9e470

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\2cc80dabc69f58b6_1

Filesize
10KB

MD5
90c19195421a661cfd3c307e290499d4

SHA1
d74554d890bca8f2f258bb35b94c84e2551b9922

SHA256
123168e079884f88bab08d4d6aa1e38157d8821e269fd63d0d0369eed9994a79

SHA512
8a96c4eeea5751a2887c0074ebfc3169c917098194c8c120eb6f10a18c0319ced9e4a7221bb051d87a43a288d8ca1fa0f1b55699fbfcbbd252f7e171ed069a46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_0

Filesize
161KB

MD5
81fed4f90b5153a4f6112e164bf0a639

SHA1
435a1e543dc02f03f1a3a8deec3f24278038e8f2

SHA256
4837e23e8b7b874681827531ccd3901e58bd1d0fb7bef582acc90feaf3e6d4b9

SHA512
476cdfab7c6856766478af1204b67bbe8e59fcc8da75bce116a29293cdc7a8654f584983111e860a5437249c6cd7d3666104169537954f7d088306267272abf5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\4cb013792b196a35_1

Filesize
394KB

MD5
b2135b85e174f2cb97775303136157ed

SHA1
db36a6e785af8a99f58d4d38a2c7127bdac4a4b8

SHA256
6f5e7075543982f163ccbbaa491fb7bf1d7d042fd3d35afd78294b789f862182

SHA512
7d51b5167eea4be0d521093beb216ed2535fcb87266d732869b3ec53a3c5f1823a3cef21e678e2e71b12edb322e9dd8834e55c1a1cf61deec16257742d8c221f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
6894f17b060d7d032c735c933189d33a

SHA1
bc53c234f0d41cc58964cd1859b42a1ee4fc2222

SHA256
63cc0b5c245f2e2889902950c09bec6d59c3983b19d797dbcd35f9089568244d

SHA512
996bfb93cbc0f66966dbea05f42cd5d41c01fe155901db15eee6f7d258223acdc67bf2747dcc790e933a95ade6141d48352a73a5a15636258490e646a3dc5e7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
120B

MD5
a770ba4294993e8e7147471dae289046

SHA1
bffdb12b26f43bbe0f4d1e5c9d4ce1ae5769cdda

SHA256
8400e3573685da4497036826580026d2918a6f58617dfa9ab935bb28691af52d

SHA512
2ae6c7345ff8436b7adb897a80d02fe98e3d0feba0938fadb104bceab0a27b3c2b7d000d994304bd99c04a3a54f9320695ffce080d64bad838f2ba3472fb6028

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe608706.TMP

Filesize
48B

MD5
ead1065e57428d56f21b8c985f45c0b8

SHA1
960700c727c9b72d940299e410fd81bacb718de9

SHA256
39fc778a5f3deb1c729b1f06b82d587192984c5b8fed82e99a2d218d1c017967

SHA512
f00d4f1058a51dc628162ff550df6b96e9f54827fe773550c31ae1361056eabe77e1bdd4d0b51f750ea2263b8902df3cd4e7eeedd7a5ce5216bb6d94832123da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sessions\Tabs_13355373686151074

Filesize
71KB

MD5
2b5693e559290e5a499ad57f46b18134

SHA1
7a48eae6fe4d8c8735d977df3eb3ea5aefde2289

SHA256
0e3c51f94ba180e3fb64fc6bd331fdb5e90ec1060bff26724d9244a9dab0e2b8

SHA512
9c653f664f592326a753df2ef9d6c2bc20c8a73d3a5ced45e94feb1eccac1fa7fad8b37f0fb2b153372b276581c0b2cf349e3c58370452da5127ef2c27f55417

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Filesize
475B

MD5
e64934e7b8dc2b53b17d1e95091b5a90

SHA1
5ba55f7786d62f021463a8353c464c69ddce28c7

SHA256
6af23ed47116edcf53dfa2bf863a095e3cbda975e2493d4aa1b901cc40ffb5bb

SHA512
3d03c4ffc0ce3197694e3856a539774c685b458c514783d047cdd1cd5cc64319911b7dfeb23ab1ffa9e929e4d3cc77a143cfbe5a739095ac600806ace6e748ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
8b94f0ff442600f38cd24f81f7268ba4

SHA1
88073b23add9189ee6c5ac74fa058da7c0283b24

SHA256
3275025e4b125cf58db6c6f8b66c01a16802a7b946ada472cee7cdbd77702d82

SHA512
ee8f75b5b8879f16e1b9b183c52bb179675c97fbaadc0e2bbe15a29153231b2d564b404f9f0915fa35746a57c069cf6af53259da70b7427640d89bce120228d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
326B

MD5
546e21e70c12319484bf878cc0abdd4e

SHA1
7e2d37ad05e141dd4ab0a1abbd047f9be0e78757

SHA256
a98485b146cb3a43ebafbe2945c7c3206c53d049df971779ac9b663624cd7f4e

SHA512
b077f7d860079aee36fc7763c331a5f4c1c26fadf291da46dcc478956c5e9c37552f88523162c83612783b7b1c5cd815d3c1fc779e8b837707756982dcb257c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bbb88a64b13ba97c63ea0de0233762b3

SHA1
77ae5d3bc399e24675597c3ff937e4daaaf3664b

SHA256
42a3bdf9c19182220c02f45af4cd987bd0d669aac9930b9b418a979f88a13429

SHA512
8f76326355544b0748d5f5d6b32214d82a555eea34611c47fb3e8898cec08598ad9f42e38c93e64a0f0418fffe888058230f884116198c8f9b47794bcce076df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bd1187787472c238048ca66ec8667f78

SHA1
0c3c52acad50a91cb0fd88bcaefa56c255d807e1

SHA256
6e470fcafca41d45236e1410a9541dc3ad00b148241d3e7cabb878817804b534

SHA512
5dc48e1f6d49ea4574edd1eaa8d4a6dd996c353dfa21b021af88d3245009311a1a9a838347995e10d01a76d104fe04d3f798c0b1329102010fd585648764f844

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b44a6b5b849c2e2ee045555d96f2bcab

SHA1
213af37fd6d7afa0f593eec82fe4f64d9c053108

SHA256
d1094a312b6692beb74f95956eea4ff65619914197b837d91d5f4f7f4cd8ea3d

SHA512
ea455dbf1e5457445a590e108f021fdd85941b2a7d9d38e3c3a31baabbe8659325570058b0c1583983956b8654766a7dda9a9a5a5252af04e53277e4e5f177d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e4be7e410a889272f3ad3f350a79ce3e

SHA1
debce94f1931eb2a8b4acadf146f85b6000a1e7e

SHA256
870ff99e3d8d2db19895be351f76325530a119c7482e7ed89ff643756b710794

SHA512
4fd28cc59f5d3bef14f431581fe30b40954825db27750c9f8ae61079b9991812425cc2f07233040e74e70c8fb8758b4af382b5cd6a9c04e8048609c119b8f8ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
bd75c11b0e743333bdaf1b632deea5d7

SHA1
22da4290c67c55969860d3fde0fb1a1943b83423

SHA256
9b2e8bbd78dc85da6a5713a31893250a6ca1a6b24dd3a82f7a59ef99ded6a66c

SHA512
718dac6d0ff48e4a7c6200ce5245c12236b4f3f7c99f999fb8291d0707bbcf0f55e231861f0b4e1c9ee343a5007ce68c58d3a6c0d745795091aa7cc23341ca00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
797321f813530269ea019cd598752f63

SHA1
a6c65ef25ae8db00519d8abffafc83086d4ae2e3

SHA256
e88a6ba9f3d21daf0823b6d240271d90745f3e08d2383f2e84b63229aff07c46

SHA512
3c4ccd86212330af9402207721e64a59f9a4dac3d6a4785869a6e06235f1cc0b215d19827d7db0cc08f65f74da8a7fe57bbe01f847ed58df47102e02a039186f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
946e7249d5a69f49acde1dc0ed42f8fd

SHA1
98a9c0f9a807bf4b986fab7a5963b7a606acd02e

SHA256
85193459ea4047364c02b61b64ca3df5590d20b592205d4e0e66615875a98460

SHA512
c202c7eccadcc17cf2a5170316b8a78101f3c845b250d9d73f246ae9e4c335ed24b3bae8f0f98beaf43ad86a70f02071d818328c88205fe26b529a3e80075dbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2136b58da1a44676931a254d7b64a190

SHA1
f59f6531eb17b0c0b2d6eb04f7f694e688c57e8f

SHA256
22eba1a62e8437a4ffc55516c675aa9ab73ff2dff1dbd70f57f6adf9ac799a8b

SHA512
a32ce612238bac797f60b5185e5062a178d3e1141156e971262ee9774c4e4118397c5f9ab499a3a15fcc6d4cc483cb40df75a9a95b53109bd1b39173d668bc4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8440fcfe7d650fd4a27ea510663f489a

SHA1
66fd4f73661970312a76c5372bc374ffcd0359c2

SHA256
6462e8b5f2eafc04ae337818934099bfd3128038412c3ec2bdb1671044f71547

SHA512
47a70df429e8246f4861423a881b41bd9577bf3b3fb5a4fa62a70a4ffecacb2294164d0d82af8334a6e57401095e5c2352ff37f01d714fe3db965ca2b7540bfa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a91b85a696159bf5de43b646f4f228b6

SHA1
13e1634039411cd6ac6cb69223a3d75fc904fe96

SHA256
2e18c22827f623ffc99d30a7c3c804e1506f72a992cc58e86d191d99b268b21e

SHA512
5e5b47727c6d1808b04279eedd3686ba8ca704da9c1d5f27fa7d0e065c8c1dd508da04bb24fa634558861d4f7951535ccc749f17a0866faf5493b06c7d25621a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3bfd8ff9517bf7d8fbe71d1fb4f9fd09

SHA1
4897edd96d84a4128fa0b14efb5ec500b613f7e3

SHA256
4165661060507e6ac671a67d14572c39f66a564ce37b6db361b9cd4e373cd53f

SHA512
44b2ebf96f31d70af4a09b7d7929d6609634ee3f3ed65958fe4e8ac090177c899981abbec0c52e0c18b6ea050b75f11d4761ac991c9344cfa92533f8f1f65d42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d7a512d010dfac8c3729f9480ccb45ed

SHA1
070a46a948bf55535fd4ad8841637d05452c10d7

SHA256
fe8a5c4bfa3c69937275be3a399f3a987f35b7beab1eca606fc03db34fc57675

SHA512
d6ea19d33dbb837dffe43f55609cc185c734950716c38b0afcc1c859e1c103f55c90e160399cd61097e47d31194c6cb8617a96fb9bd2efc12961a1f2852f65d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
13030c0c95352b22f8518ca512d0b5e9

SHA1
f1b821cf04390ab9c467a567927143d6882d7adc

SHA256
1641e23c4a444e8d5e4ff75a83f8e5cb500ceaad08192cb5131058a91621a0af

SHA512
0f1ca73617644f6d8dd487008c872c6a6819ef2df9015e36bcdca8591d1a34bfa74146b7af6bc9d67eea7263d2f7088561a4497983db656a053b42ea621860a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0bb3b42f3f7c3f23eda7c53b44b31c2f

SHA1
034a2fbb86b31b156eb9afb6544d68dcbe3e6920

SHA256
8aad2c6ea239f9633b30b3ed636ad6614854e384bbd595c0f87f55b316a7dc7b

SHA512
adae4f4aab79b419b33950b51694e543cc92b5497d32e4d5b139860182768c18506b07e1409c80eb0a859c402294ffd262e2c98702c518179d248f59f449d69c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
44d8000ee2cc1d5af00b62acf2c56b57

SHA1
99700468dc57391cc13dcbaf5d6130ff8359986c

SHA256
08d797882bef559d83f23f0f38e8e0717ee29c2f74c8b306cd5e3972d3d2e152

SHA512
7d333a77a42962d0e6b4ce117cd48e3ff60baa0c13a31f93ac7c196b8d827e8bc583931e8b086a3dd854182dab1a6bce76275819ef51b6679b11958b667f4882

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d0dca473f3ed035752b7ae210aed1c8f

SHA1
6b40c1ee16437280e09f4fe347b1affafa78ec10

SHA256
8a1ed22c4ffe20dc661431ea676177b4a80fa0debdcf222ccba46627e3fb87ba

SHA512
66c8ac5edabf6d1e499e9785b6318f75fd7713f951f969fabf41115efb2e35820ffe6b71e360ec313115169171c9db636d00d9d98cc6b001e125841f147f59b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
2e0458324852a38fe9b08cfe78097c09

SHA1
158f7208c30a20dd4a21af82edaa30a8e584e3b7

SHA256
0ab5b37c8da9fa7b485ecf5a4620254b8e016b70e395c44d4901f99032c3d59e

SHA512
3417ffaaa436fe929565bfaea1717e101d5970fa7cec1d60d17e7c358c75bcf5457eb4487cc789dc67e5b2aa7609a281342f9466679cb71b2f5f94263f7e2c17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
5653356477c34e97cfe3c1cd702a7a1f

SHA1
3fbd7656ae42f8660abe6a27b7e2debde626c39a

SHA256
b18b54a5f1119e5dfec00ddd77b87f664cd650e5505887c18c80f703e93e95a9

SHA512
0e78f15daa7ed9a6cf97e7be5b2a3379f707e675ce24b20390b006934fee4d2e5f1ce7a88b483acccdf22d2e56774f4900aabe99af0c7a9da663ea64575c0abb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
7a009a040483944c4d18fc47878622dc

SHA1
0ca2dd65a0c851250d9f1d536777461de40f1ddf

SHA256
b1b6c8902ae05c9ce63fcdd75b69df6885e695cf68a88b07ff5892e97d8b1774

SHA512
834adb2d701b22be38075c34b1ddadcef6c73ed060367d9e8ae18f4924af108db7b7e6e8e28ac2b725550d63d86bbe17f639c42e47969a9b80d5fed8367f9055

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
a567b768fadbe0a09f7b018413e163f5

SHA1
5e7c9c1e5fc24fa23f9450d0319d671bced20cfc

SHA256
6315b58fed318939c59637ee6796609af0efcae2dff6bd2c4fc7e44d5d8f55ab

SHA512
764c1f7b9cbf12353bc66d6414cefba2a4fa0e26a61818db57ea697927a5ec694cc67d3d8f94b4701a7b7ef7b7a4c2b522e58959aefa69bdc473b60d163bed5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d87f224352a87b7a1480f49a3d1f3bda

SHA1
398f1602cb8bfa33498b1f0c326cf173f4cce895

SHA256
9e533b965bad4faf1144a32455f14c0bb63b906edf619198fb1d4364c68cf3f8

SHA512
d6643d9f2fd2dc91fae9c75db75fdca0ff75f49d086a2c17133357ec68528a742f2230dc4834148a5ce43fea55c477b58d9b7e4c3b1df9fac172b5704cc3cc6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
24dc8857a61fbc1c9a702eb9b6942cd8

SHA1
9c477ce3e6b1420b24b7ee22d6934150418d1e3c

SHA256
727da3a357107e0e8211ad15499cb7e4a870b83412c7df93d4c0d452c790cf6e

SHA512
5729274b042d5d3474a88f230fcf2177c92a38b2e1f114d0fd253684612d9ef54892090d5d4ea32a5f362c7261799042935900b26450d98b12126b454d756b14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
dc44fd61e488b9b0a2332e327185a167

SHA1
14c1345842caf24a7c78ccc602a8151836079dfe

SHA256
39fb677fc7b1a6a6d82840cd10a88ea8f4336f91e5ee42dde23e7738e8d8cb7e

SHA512
d7eb08a91a26a438c57c5303c092d119d3605430d81576368953130034bab285e7f299164d9e8ecfdef8874fa58e6787b447cc29c3287712d5e2a0826d0f78ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
90463b4aa0846b1d330b7f4f5e332b04

SHA1
2535bbf020b22a02fc5cd3216988a976ab4e060f

SHA256
656f6b825f4c4933d01e9da5dc5c55d0df43822d8ba17b2216ed3c5b36a317bd

SHA512
b4aea71e1c163edb868962345380e2e155d2a461df4c36941bd2f0561f9684646ee750eac2c7724f3eece2b6fb66266314d81bba83b72971a28abfed7eea6340

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
626199ae66a420d4389e4fd4c3cbb084

SHA1
a80391a6b5d35a972e15f069d865a04140c1436c

SHA256
6ffd62558416b82303ca5ca1aafdb0e2806bce30c9e3546f9ece09ebe724308d

SHA512
cb89d9717d77e7a76a38ba2949c924f99ae9dc1b2f5085e514c93ccedc1ae9ceac9f9efdc06af3007063adad17252497090db87cb2abd523f312468529827dbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
f388df0b6abfe045093424768455b645

SHA1
c7e3064daef8728bdce6aac5e721520280238f05

SHA256
479f182058084c5483d5fff92a7f10280ccf41153c70ec29589be65e09275876

SHA512
2f95b39ad426975b80d30a7a84099b11574d726be5f37b869448b0655e13eec5279f9b95fcf57f9f3ea4a7d71ea988982cf85f027942e81d6d11b893eaf45306

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
71c6bb5fb03cfca6a0d801582f5feed1

SHA1
c8efd8042d23838c252a05c61538bccf3f136734

SHA256
7093f27098ce95eea0beca9bf9fa5e7a9add47a1fba37fe139f28ce2bfe31051

SHA512
95bd1a20944c582f71aa4c3cf0f6f80168ad67a267a7eecbaa8559eb6ec916497f81982b7876b5f38de426cfc75fb8ca9964afbd3d8c434bf61af701a9c2987c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
374e871257fd2cd90eafe8da60d10c6b

SHA1
e3818856ffa2bf4dbb9762e893018971d855801f

SHA256
bbdc898c60f7f7a793de0b2d554be9ddcafa32e079b7aff9942722b8eec89b55

SHA512
2396ef60b3d4773c054111f82c784f343d95596dccf0cdb49c34bcb52e1c4c2573fcc17c1a63f36a0a80f6e1cdddde37e5b1e71a02641e84cf5f6179becd41d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
67005f3796ad838acb066ab898567fcf

SHA1
ef3e3d792e3bd6d51dcd7d4c24c55d6ce88a284c

SHA256
bd6cebef8fae047a24127005ce8533024b46d6c3ec38e6433d26ae1d67c12777

SHA512
09992c425401f8599ba1600871285032fb0a4045c4c2b8767362d96701f84fc558940984f656ca0de144bf459a9b6f545e6c8ec3deb5c9149b0835f27afe2a76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f71e085d06f1402e29f4d6a239290140

SHA1
6dc2490f8cbd02007402f2f2ed88a6cbcc861d66

SHA256
33a2a045c95684d6bc222df9c0f1cc388903a47bbbd5e4cd12fb99d2ce35c183

SHA512
0ce48822d62ddd8e4ec93b95c7cbb7eb04050bf4a87f325d0119a9e5c1567a3f31d6baa80204a2d3cf538f8ece9313a9b0c211e0d32c6fad6d93e23cf6cec720

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
604393d150d0b2600a71d906f5d4a5c9

SHA1
0685c37acd413b56493383be9b635b28f6be0e94

SHA256
4fde1bffd111ae075a424645dd005ff6ffd6afbc41947aaaaef2e87fca510bf4

SHA512
6b6335f74851fef8e279e9543c27b608880f1696b953d21ab5c2c5e7153db8d23adc3022b6901740d40b1536f7a8948068922234bacaeefd68d11759372a0c4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fa4ee6f2015aef9dfadd8f0f0e151065

SHA1
88d21dddf775a2da1908e3e59850e22aa12967ad

SHA256
e5121b8d75a2cd9a4ee758a6beeb70c4347d74fe5afe1789bbf9d80b17957fe4

SHA512
0a57f238c68e31bf30af55c5aa81c65d55b1cd587d1df901f1839b5dc8661b14f77bd332ebeb9eb0405d5b89974f3dce161aacc6945d5f061317515934020f29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a986479e3fed0db4badfaffe58e0d023

SHA1
807d671cadafb3129fccfd727b2ff97c8a8aabae

SHA256
d83c3cc4b9bee7b23e8627e61debb3bdeb7f2cba66b4a4212f24abbe3f0247c0

SHA512
3797967da8e8a02da93449c40e6d0160823413e1f56783355d7a5659c0d2f36409f1405e2847cfcdb152110c71182a56be93926b540c7e262e2b5e39656576c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
4KB

MD5
f864bc4231c8efa457ff8e4bdc4b3ae4

SHA1
ed78632d297492fc97b3c2a382a748b920d784b0

SHA256
bbdeed870cc63bc8123087a70c98e732323e26638ac7c72f5a0090bb8c25c010

SHA512
193bf3b22abaaccc63271021ca5b3e0cb6cee659a4c2c212a5faca707b8cf0917f061e202ccf180ee9d8602b979a5cf55af66edfd70edb18fc1deb062c2c7fc9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582769.TMP

Filesize
1KB

MD5
83263b2cc97061e27ecf7049d5596ac2

SHA1
5cb4df4f281d949515ff255cf47339b948b273eb

SHA256
79406fd9d30c22ab87acce52b41b08abefb0ce3fc1705cc1c0a5d6c9431e7ee0

SHA512
179836e66fa2b152390d17f347cc9d0cf783b37b36393e9d30187f0881e3a6b3e500aee0583d150adb1363d434dd2d29dc5685441b6feb86155befbba6a8b77d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
b52f92d9728a244c573616f22877ca73

SHA1
c607c2eff39dd1ad858be1d77830fd72a53d76c4

SHA256
bba825181096764aadf04f85e93b08d38bf88fa1bb8917bf697c37666dc31e56

SHA512
9847d8f864bb77a870c59d55660496fdb39feaca4f891aeadce73ffd143075d1538c3347efe6d8b9e5d04198c43bbc3e21be45af20d0df5584184979dedb7a1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data

Filesize
112KB

MD5
b910ca6cb28555b55a0139eb4a0e7e14

SHA1
7bbb4a31887e18888322dbc4536c58b3f2fd6b9d

SHA256
058259c0821ad73a6c1bd4eb671343cf2384067f81e4fe171f9deea6e0a60d72

SHA512
838db6da2657008c117f4d0dd4d7ca7cd4c070a471ff9073e8615ae203f1af2cb660594ec2366eb4f74db3d1b9cec5c3428a7d3e93b68aa0049d20d2b88b772e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
aefd77f47fb84fae5ea194496b44c67a

SHA1
dcfbb6a5b8d05662c4858664f81693bb7f803b82

SHA256
4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

SHA512
b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\load_statistics.db

Filesize
184KB

MD5
bcc3c5638a63187ffa35247a6931b2cc

SHA1
601078c1c4105cb6d8daf47f4759b4182eaff68b

SHA256
470fe9ad806acb020f4f2e66f6df4cc2f8ee95a5c450c440a827463dbe11222e

SHA512
9fb1fd26058ec5ac64210f4cdcca78ca93b03b5d515a353b427b15f41dc1ca5e9e03a8a94488d2e155ed8fc599d5e6e089b2f6159baa153949f0aae27fd0a9b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
11B

MD5
b29bcf9cd0e55f93000b4bb265a9810b

SHA1
e662b8c98bd5eced29495dbe2a8f1930e3f714b8

SHA256
f53ab2877a33ef4dbde62f23f0cbfb572924a80a3921f47fc080d680107064b4

SHA512
e15f515e4177d38d6bb83a939a0a8f901ce64dffe45e635063161497d527fbddaf2b1261195fde90b72b4c3e64ac0a0500003faceffcc749471733c9e83eb011

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6ff4edff40365b69174918be56634318

SHA1
e7c76b890591aa01ef515f456c1ea8cd4196f537

SHA256
dc7b2795f4781245ba3a43ddee455ee864d1407e71e8ad1f7322387d3dfe7374

SHA512
ab757faff302fb028d3c2651b55830e08e46f12e293d61eb64bafe87b24d7b2e33c1b3adab7e53f01a2c532f74784226ca74baeecf5a36b0e4f182dc4c5dfbf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
9f9193a92f98537bca46e052f5d495b5

SHA1
653f0ac2b0d6a4530af56c938042b124a2801a23

SHA256
0155a72f40fcd2b74d9d3604c021f7b3705afe049c021495c1d38750e0d1af2d

SHA512
c6a7b1b582a9e2631f6533d0c95a2baf271f7284b0302a5c1353d2922ea279406fb2262bdf6ddd68d9fcad87e374cefc7e9f34119cd93e32298797cc00b6a24a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
6b3c936cca3efc8786987a11af43a6b2

SHA1
d122c771ee11377f4d7af579aff93e5cf0ade414

SHA256
4ce5ad9c2c8bd0990180a66aede3c103879b0767c8e5abbbcb18438893f08f82

SHA512
21a93a8622a0e9fc84b62666ac97938a0b7b4b51c54b8743ca8aa59628891c4a7a6eb938812a11c126aa93bf265ff241a3bdc350b63ae7deb36b17c16083ae19

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
98b3f5ae2907aff8ed470c687782f357

SHA1
e50d6993efc51d3c3ca0d75836f42c5aa2ee0872

SHA256
3fe4b81eab9666cb92c8351757760cdaddd07fde5c461daf7176f541f306c655

SHA512
2c633d4eabc216ea6036660b47715f633abc9a769c96870baf6bbb2696518ae18ffe9e035f91c808f15208a71c079209ebe7727e4494fc88aaaab805077ceba1

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
ad2e8ec814dcb6eda8395c40ae253782

SHA1
bc4918975e78970bfbafdabe68e99adebf473263

SHA256
298bbc54dfbe22f0652fc14ebb96f965f11d8e6839481f7c1c608c5ba084ad22

SHA512
6538a0441cdee564fd0d7a2c9118b419a5faa557f410aeeb1fe58ff5a289f78b2e6816c2dec009d414c39d8465b488e3a731c2d35f12f151a6f5e112e01d7d02

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms

Filesize
10KB

MD5
4ba6f3db12102773ea5242e8c1915f27

SHA1
21b496077f38fefd5c1f54620b28d0859d75cc75

SHA256
2783a8e18186618f4f41c5c91d25754354a86c33094d7dbe7d64ae9abd539cc2

SHA512
1857e123fe934faa5872f37fd522e88b87032af0d397df0c150b3a87597cbb2ecaeb4db68d4442d2fd79c73c22c14e3a939c36672a535c03438942582c666789

Download Submit
C:\Users\Admin\Downloads\09e30945-435a-4653-931c-8df9c2816036.tmp

Filesize
169KB

MD5
0aeb1c2841067f275608ecc583f74a8a

SHA1
6da8d2962c0a4dd3ea53e9b3e9c6e69f6b008d80

SHA256
9b93493682c252e3db4d861cc5a3bac52bcb82fb2e704442c03122e95176b44c

SHA512
2de94016f00552ccde802093105c62ef9508fa72f5109bc2371a3055985d3203a077c05411655d723c67c07f8a8ac3380ef6629fdb7ef91398346f7f27e8abd4

Download Submit
C:\Users\Admin\Downloads\image.webp:Zone.Identifier

Filesize
304B

MD5
cabe78f5368255b5e8cb1c7556f231c5

SHA1
d7e431e7d04328e624e60039f89fe8eb2ae6f2b4

SHA256
8f51a1356097dab2d2655b8b4bcbb13175f9540e54232aa79e1126ade12bd99b

SHA512
6f92a1a3099f61b120dbbb2065cf2446a2aac3d9168e52955e99f9de8ae72b4bd608d489251be3d96e54ebfcd263af9739936055d23cc2eb2eaee3d97ca7a20a

Download Submit