hxxp://discord[.]com

Analysis

max time kernel
960s
max time network
1050s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
26/05/2024, 15:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

http://discord.com

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs

Web Service

T1102

flow	ioc
1	discord.com
8	discord.com
25	discord.com
82	discord.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-3062789476-783164490-2318012559-1000\{6D7281E8-A6BC-4748-B257-32B28DF971DF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 14 IoCs

pid	Process
1664	msedge.exe
1664	msedge.exe
3344	msedge.exe
3344	msedge.exe
2104	msedge.exe
2104	msedge.exe
3148	msedge.exe
3148	msedge.exe
4336	identity_helper.exe
4336	identity_helper.exe
5048	msedge.exe
5048	msedge.exe
5048	msedge.exe
5048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	4648	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4648	AUDIODG.EXE
Token: 33	2460	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2460	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe
3344	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3344 wrote to memory of 3000	3344	msedge.exe	77
PID 3344 wrote to memory of 3000	3344	msedge.exe	77
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 4632	3344	msedge.exe	78
PID 3344 wrote to memory of 1664	3344	msedge.exe	79
PID 3344 wrote to memory of 1664	3344	msedge.exe	79
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80
PID 3344 wrote to memory of 2032	3344	msedge.exe	80

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://discord.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffdecc33cb8,0x7ffdecc33cc8,0x7ffdecc33cd8
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1828 /prefetch:2
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:2924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=5396 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1884,14780825225228525483,3844009508519231271,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2272

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x0000000000000480
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4648

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:872

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004DC 0x0000000000000480
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
de47c3995ae35661b0c60c1f1d30f0ab

SHA1
6634569b803dc681dc068de3a3794053fa68c0ca

SHA256
4d063bb78bd4fa86cee3d393dd31a08cab05e3539d31ca9f0a294df754cd00c7

SHA512
852a9580564fd4c53a9982ddf36a5679dbdce55d445b979001b4d97d60a9a688e532821403322c88acc42f6b7fa9cc5e964a79cbe142a96cbe0f5612fe1d61cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
704d4cabea796e63d81497ab24b05379

SHA1
b4d01216a6985559bd4b6d193ed1ec0f93b15ff8

SHA256
3db2f8ac0fb3889fcf383209199e35ac8380cf1b78714fc5900df247ba324d26

SHA512
0f4803b7b7396a29d43d40f971701fd1af12d82f559dcfd25e0ca9cc8868a182acba7b28987142c1f003efd7dd22e474ac4c8f01fe73725b3618a7bf3e77801d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\247ea527-5c1a-46a5-a0f2-1d9fe71d992f.tmp

Filesize
1KB

MD5
c76d782fb265bee7403a18d49178d2c8

SHA1
1d0a4ac3d12f2cd197ff86a7b2d401f94f879ff3

SHA256
ec90d42ccff6024f88c91a23c0bef02112cd5283ccb582684e2b3bdf71d2280f

SHA512
74e761dd40c3a3343fb0172a526fc28ea9b585a85b477d29fa041dd46531a39e65642e92d1fd8855a12e81d60330a49006620a209f2a7b9c8a069934add76dd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000038

Filesize
17KB

MD5
5db1fc3e1d0e329e47040ea9fbaa6c68

SHA1
3dc936e674043734c3e8345390febc1e3e0d090a

SHA256
15c24cd62e35d9279b7f58e06099b16aeaecd73bcadf14cbaebe3f7289b17950

SHA512
83e83675cd2821c1f7b2f9af078e9772b2eb4d01f5ef786ba0ca6dc0bb2987c9293fd9cec2b4003966e6bd95ac7d7876618388228e22f40b97c077e38e136ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003d

Filesize
20KB

MD5
272580809409b9a09f5bb742242ace34

SHA1
c8fac54c9ae1e8efa0cfd35fd391682a2f37f4ae

SHA256
1910884b90472f80a81241a165cfe826bd67d430804b8ce81f41fce9bde6576b

SHA512
9ab7a9a0a209540210c9a05085876a6669696440acdac9941cc972e2e5be0699dc61c88efacf2f611ec1df420f3edd36c36e1f757a701a0b886527967b19391b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003e

Filesize
97KB

MD5
1d4bb3fcaca953770426bef2fb3bceb5

SHA1
8299bc7dba8d3c736b30821f8a5afbee9383b54c

SHA256
4749d73562310017aed519b8a9c2c8fbb88363d14c38c4609d57c5d2afd2feef

SHA512
71b5a2d24bb131a02298d00d70efafb998b9019a760bd5d064560d81856048644f3eac1fab06b4e7a24fdc4cd179fae04cc3f303802be750effda22c8adbdefd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00003f

Filesize
35KB

MD5
87a8383ded6312a3cf5e703adbc4dfb0

SHA1
4d442553311286c25c69e7661583c46547ad9288

SHA256
b2b24787bd92094d2ac11bde6bde1f280353dce2b43c0fbf74e20c456258bc23

SHA512
177292f3ec2b94339af92102d13f220430023f252e0d631a4b93b108da93efffd3e3e75c121d7696c353a31b73c0f18a016103e92e5b23d49cb519cb6867478a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000040

Filesize
23KB

MD5
e60f6824ea223462a112e3fdcede011b

SHA1
d89854f2c2bb969915de44bde9c4f14c25360ce4

SHA256
eb2ff5617854a59835b0b242cd6504bd76f475242c65d9e0b05c222b34f606e0

SHA512
ca290caca2b33856e7766bfd80b68b40a6e750a0d2e3d80ef3cf6070a16adf36b31f561dcb9142e4b13760c1a6dd895d31d4f15a37e75c06bf5b107ed7337e45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00004e

Filesize
1.3MB

MD5
5b4b8d583c78660818a09d99c3ea70a3

SHA1
e43bacf7af2970f619b916cf8784bca07df278cc

SHA256
bf7bad34fb1d4ff6e4b552f6b56b89132e2336e9e63524b91d1dde3a43bbf3c1

SHA512
253abaa1641ddc89445719b5e37703fda9dafd1b4c3e4260597f1ffce935e9366322dc6f4e00ad322598714fc9b44578fa28350edd78bf4583ec1678ce45fadb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000080

Filesize
20KB

MD5
47bde7bcdcd343c2686554e272da9e53

SHA1
d5834864b05937026fbad266e14d55cd600d395a

SHA256
15d47fa522f780ae56f687b71d23d59457ad7d7a3cb5bc1f6ba78414dcccf9ad

SHA512
09d3db09f6839ee6b5284aa93519ec5aaf747e0dd180ee00c9d717d41811214b2cac7cda7de898e14ea9c3b203135acb4552d682a24ad81181d396f403217257

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000082

Filesize
17KB

MD5
dd920c06a01e5bb8b09678581e29d56f

SHA1
aaa4a71151f55534d815bebc937ff64915ad9974

SHA256
31ad0482eee7770597b8aa723a80fd041ade0b076679b12293664f1f1777211b

SHA512
859fd3497e508c69d8298c8d365b97ab5d5da21cd2f471e69d4deb306ecf1f0c86347b2c2cfb4fd9fcd6db5b63f3da12d32043150c08ef7197a997379193dcbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00008b

Filesize
237KB

MD5
71d1d774708d21cf57a3c57f4dcd55a3

SHA1
205df7ad1af31166cf9688e893f7292be105f040

SHA256
09873f6146fe4e3035294b3602bd9a821334e1405ff5d4cf0aa0b5bfa9ef6af1

SHA512
bcf33f8068f2d86cd8a55f06b3c347fdb3ea6b5ffd36f7869ccbdee21e7de2b5d3ab62117aa79f2316d4cbdda954b5b5963f7b098980247789dd56c0c61fb21f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
707e3fb3fb58ab09812675e8e4ccef6b

SHA1
0ec25f23f757d74e77091adfae9cdbfca16c3cfe

SHA256
35452b312abf45829107fcb1df28084b3083de9d5f76bcd0aa3c8d808a5a6bb9

SHA512
79d494edb4cdcb2f337eca13cbed811a1815e6d723ff0509670e17423e32db49cd3477c2ff5c23373ae169b56770c56f743f9dd39066d52844c823b328db3852

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
73ee3cc525a026cbe608522d6ddbccbb

SHA1
b617d9cc1470c4177eb73eadca5e70d0678984c4

SHA256
48e8220861d4f4d359769639ef5c8a8e1768263d9eb3fbd22b58716879d3e67f

SHA512
0d7ec4708e7ee96c2ec2a3b020ccfaf7f3a66bd0aa340d82f65fabf751dc853658f58699940e53723301dd10265ab6452f61a61ea8fe3ec1e7f07f7bec5c5030

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
151eef89f882a7c2138670b43095ce61

SHA1
fce1c2e22d2799c2003fc9b474fb2129773aeea2

SHA256
dc189bd5608c54240a1a298a3455006088064b3d7e5c4aa9226c4cc5438f99ea

SHA512
244a8f96d40d1f2da65170d7cafca4fa509147002293bf2e6bfd1135d0e78c098d3641492779d4ba1c02a037dae285f284781814b555dafbbbe5ef66394157b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
a1a763e9953d3c5a6b7293f9a1403283

SHA1
aee2804855847f7c00b29260150e57bcfc0b02fc

SHA256
e0d659daa4ec8ba1981e90a63c7e4b38e1c4fcbd9a9267b146e98b2fb47dd001

SHA512
7d015c7bfd4400dd537a69909a538784fa44dfbbea92c891f0bf934bc2acbcd0b0699be2599a5d26488832745e8941bf48b168e0903ad54b0fef2e8e2403f1b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
96B

MD5
d426c363f653d64277212d51b4f9cd5d

SHA1
5d95ad2e43606e79fcbe672972ffdefa8b8d27d2

SHA256
32f7c437715f62eeab37b390d89e44da209183b23062de5548767b6fb283d0c1

SHA512
bd14b3efcff6c0107f7b61ee471d0714032695216b0f843eb2cb1f25376e5ecf56063cfe87e51e67551428c4f552036ea907b6f22d9ff2404e59f9cf94f10254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e0abf0ab6f414f9c2b0a59451dd92369

SHA1
6d59b3b010092759037685b47009b9f6bd25f92b

SHA256
29e80259756796cce64750acf857ac993106c753d702fc0f4c557f79113e775e

SHA512
8045449a138b245b4c03f5a18b58109fb6c7be7032174eec7352cacebfecb486849e1e2848de3c9d6128fce3d10baacb9d8c77517e9a102ace69c88d182c7750

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c65ab9bdbbef4d64f3ade568628546ae

SHA1
9823f76c0a6fe994881451fd8c3e1e28d431ba9e

SHA256
02cc55111b4aae586f436e813e3cacff4450a3a7cbcc8092df283dcb1dd47321

SHA512
79a22a71a98f1178a639d419b4e89a91be559d3099bb6688c5d4d91217a80857bb0b275f8849dfb12c6b606cb99efcd555a588ac9cdcb497850b22beecb4ed98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ea25eb77abce8980582128626fe31e2f

SHA1
cd0853ffe1fdab6a8bf6cb1c1c399892d47af295

SHA256
4fce6bd5d8ade3264980a22b4ab6d9bd8d18ed516c2a32c606c2941cf771bfc1

SHA512
78158e809c6654073e580d699aded4f06a4724f79289d09dd96aff0be26418a3b5dcf7ddba2a5c92e35c98cd7f39eb15294d072c8ead37cfafb41c4c17066031

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4e4ed6dfd3de6c2968e560c517e6e3ed

SHA1
ecb34e031154b2da710ee3ccc2d78280615c1b93

SHA256
0f13c7c4c750e65e63c51f1393fd7040295c8ff82e4b923b01f894ba52111139

SHA512
9fb3e1b4cf3c232f1417466637c3c3333825cf06cd2adb9e5676f149db74378c1fb62a69d36b26c7e16d84956e956c0ec224c39d83ab6a959e23e2de8219820c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8d70e84271c5ae35d7a34eaafd9116d5

SHA1
9865242418a34f4458361143fa87678cd4757766

SHA256
c1946401a5d6ebb5cec65615a440d99a55f9246484cd809d4e911ba723ee85e9

SHA512
dc70a165abf39cbdfc12ca50e7f53db69f411d75eaf835283c37c6bea1a678dc8ec70b11f5660c3ecf8cf27ea4f69694edecf42f62f08c92be8c437bbd14189d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
019a8b96783718b8e543621f9b665a26

SHA1
13bc9b0b11dc7b20339ac20654f21054493d56f9

SHA256
63ff29f0a4589fe69e173938798fef6b8b036bbc3eb63cbcdb4c55231a078143

SHA512
dcd53f6c7cbae035d806810f61ef9ec2b6f3ea02178ad29c1a8824cd27d21f50ffb96c98266664f0a0849b8e7c1c8c86ea78a79716a65a75c7001188c743ab03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7d6ea651f5a67d29920805041f7c3ca3

SHA1
f68bc1152af8e71330a652536b41ec84ae3bb00d

SHA256
89136d8d223f18b755d03935af03070f7f27d7c1f6c8c1f57be5870ceabc4522

SHA512
49add3eeb4c50969da91354595e9806f69bf20d9ccd4148ddab8bc02b6e566f3359bfcb728a573a2a8fbb0319b417a0f644a4125b7a17b25b784d91f9ff32f20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
401fc6d0b49a116ed01123588435cad2

SHA1
aca78ed2f45a46e0b8e0155a2309afe7419935d2

SHA256
e1bc1da6a39f138f267d67413a5ea64c2ff047fda5eaeb021c10b6f5ecf2f294

SHA512
2ea6e1fa433967f7e1653de0dc0559232e79456758215b13f3fe81448e796618f07ed53b9daeba243e192fb9dfc19da030d7f08604afff8cdfb618f77a99b1ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1c10756e66fd747c67e10cab9e938e20

SHA1
9d437228e667ac69957868ab0159267a2797714c

SHA256
c1624c217fe238288512092c8fa87d0350ad1ff5661112ef0fe27826b71a41a0

SHA512
985e37c3b1e4cde9b68b5793138b5442cde5718e2adfe92c80a8e832e9e5556406f92e89e7fb38c9dbacfa084b2c8d1011ff298dc95bcfbc1dc62f17e1d4b182

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fda066a0bce2427988046a42b36a293b

SHA1
c94a40d3779613e7c0eee3f5fd12ab95183b9d9f

SHA256
cf94ec0568f89d96f62d0e616bfc7097b40b1b3c5136cfe83e6a6119b4d134b9

SHA512
cc959480e3190f03968a886a020f36d38568ba6d0d03444ed693bb7ef9515dc3a527b4fd2ebe29bf1477788ab17c9817aa25ff24686cfa3a35e71013631d7d1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
1a43ba0110b119a219d53afe79159b99

SHA1
15d93b83592c1b1a4ee9aa7a2abfafc8cb7f9eb8

SHA256
ab9ac745b2a530b1d3be08fff0ea2ddb38623de380afb3c2fc0fe47620ab8dc2

SHA512
6cd5253f7124311871a8c2846623fb9e681b396a6f0e66e19ce6c0a08185f2a3d0738e5414eab6afdec9352fe785fc3329143e7d9ef5a923e87ddc9bdc6987e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b9b9c6752ff43b4b3656096c8e171a61

SHA1
c6dd14a50124812d05fb3da90e99a97458319adc

SHA256
dc0caefee255956d586062e42b3d38c5b9f7d1afd6cdf6bc154cc1a0121c59e2

SHA512
94bf20013df3a90269bf7efb4162f622f00f1e05e879e2efb7abda1cbe11125acc09618011b6252c56b7c3b48feeab005aa0e33397bc1bc87d8f25170ef8cb7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bfd78eade98ac46ca3379425c943deee

SHA1
08e4e1045c1b1bfa3fe868f93ffd9df53249c870

SHA256
06352de960892503e0db42739f09070cc6ca286c40891113c39d07fb54bec095

SHA512
0fdeaeb53ff3cabe225cc9c51c2425382eb173a42c9bf441e19af6019c95e19749b1cf54e1a7725b0ca7c5c9947ddd9424dbd52ec2f11be31546b0011e872acf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
162be7633d4d9d96f51da109f7ccaa9d

SHA1
e18f87c09d6fb42d7d0e4141d354c47260d8e514

SHA256
059f8ec6d7e836ab8b2541d9b31c480892790bf514260740635a4a9bf06bb1f3

SHA512
e8581290fcfc93ff1b878c7015b5a98330243a155cc107d3d73faaeb97a15ae0b35ad4b93f133e42fe355108b85ea6316b1befa93afea659ab4224a59ffb854f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d7bdd58bc2affb0eb924ba74c3f93d14

SHA1
555ca721d872341f1eff3f162e23e8fc4b989e13

SHA256
db683670d6e62a08a7976c649fe250b03e5cd5de32170a4d7f37ac9ddc5c4944

SHA512
5352be4cec5da9bd11e667939602c32c81ab4ba7b05b2d56276279bc5ed59f8545b8652ac153ae68d2f30c4d788af529d814960a9a7354031734b5a8259ae98e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
83f5dd9f66da4f783cdb05209a40d96c

SHA1
7c3860afce962d735f5f669f59afbc07614f36c0

SHA256
8b4550ef9f9ae3a9bee17a1f072031202eac90d4c64ddddd22f9f1187813dd26

SHA512
b6a6a5ba7d5e52defdbf3f5e9bfbb42e58c5911db93db130a38b132344f148eb5b019f57f612cd42b505d073cdc025cb0bcd35e4b3f01684baa5f218d567e42a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2218dffafe4b510ca71a9e45029a7ec8

SHA1
d93084bf7295778148dd54fef4847586fa89e17c

SHA256
2e1a379f9b6c502b30bea3d30157dbc8c90d7d4aae19a47ab3931fc1e724b9ab

SHA512
828971906d350387fedd1c825cb8d60db2fa6867bd8701fd91df5d20d6b5acc6abfde19bc1ce1b3104376e1f935c2526261ce3225e6b10f076fc230a6c950978

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
022f9073fa38ff075e9f27764cb8d4b8

SHA1
229dde8aad93f9c80911693f901b1092d4ffa015

SHA256
647f982ed800198b7769b041c25f7811780d505e74bcaf92bd2a1c13c3afbbc5

SHA512
4e0d77ed971296e912f16d39d0f98e23bc580423c371e2c5e685fafa55fe630822f111befd8c0f878d7718b7f44c8eed0308daec62f1050c10a3aec1db0ad091

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d79f89851b648064168a1881f1eb35d0

SHA1
a2c9d42b53dd6ec1c9f0420c1ee47a377318a90d

SHA256
661b91340314540b0cb43fc5cf5cbb85e3c9bdaa74f8539a3df9ffb5ac479407

SHA512
23db1bc0a17ca711bfac36e56458925bb97167a6ca60c025435ee38d5cec1bc5e36a8f3586937e542c07f7654a797ce1241837315e11bd282e2c245075b745e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
aacb2169717969cba518baa2314c7150

SHA1
387ab15e601ed869a3b0812c019f57439e0c82b6

SHA256
9a847e3dd81953c54e32ff0fd86345fd63c44e62cb5488f65ca33a3e35ae28f4

SHA512
eef4baed8b7eeea823f09f57720186f47c41ab478dcbc19cb9c73a24f5537f150817756514fce1e36947369e987f4af93a611429f29f344480ef1bcd4b20ac53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7f98614282abe57be8e73477cc4e6504

SHA1
f8ac0468841f65ac3e1cdebe47bb760d97862e94

SHA256
2d502fe83d81309f81fd0acbde89e1120e1941fa64aeccd8a83b39b38390085b

SHA512
0fe43ad2f6538bb801302c75fcdf409df1243f9695633b18f4ab7a0369ead2dc375650fb3c86e1cfccc436fabf135b100ea42c6f59ff2cea0b9d4a688abb010e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
94c8091a641e68e15e6a33673b36735a

SHA1
56b04b0fd4786dcbad680a23dfbaadf7133ec778

SHA256
f90bac6144505906e0b96b396c0b00feb6e4324b0bb86e739b2a69d2af7dd4a1

SHA512
fd4c19fc01876ebe19b9b6707819257e5b4340744457fef2f45027c02598a89dfa65b93611e3d3328d6ffb00fef167ea420b4954cb4238742673d00191d4094e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
9c6673f70d5e78bb75768543f0c17a74

SHA1
3d0399db171e8248c62d691b71f4ee1f42bdd168

SHA256
1328171020270cfde8d3d344511a7a773b43f207d3a240723051f2c901bc3199

SHA512
55b4b1525b087046fbd23ffc996faf9707f6e2c80aa16585e984bfd57785687f5ebc7deada442ccdc372439031e0913a136f48a53d205d7120e63a64e67aa925

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c29e900de0aa37304a0525aa7c14ca0a

SHA1
80f6e46d57f5c9f551a2acde971646aa7507ccb1

SHA256
c1b06c245ba7898103cf5a8de7b4f903d9612839ff8fb7c8f4e84c3315d853ba

SHA512
fbf313d9b7adc20b2b5308abe3281c6bbd5873cccdb15c677c89232ee5041da38384de48668b605f4cdf7126e987559b4337681addb69362a86d66690dffacc7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b824b84b4df71a037f6c43ccd94ea7ce

SHA1
dc359b607943a80c9b978b8f5c3e5aa751d0a8ec

SHA256
44846f0f8b30eda6aeca4347887f4752ba379863afd5a028f163eee52a7cb2c5

SHA512
dc48f6a209c13af8a0673696d52164b0ad2997b7f357e8f736ca85761aa39b0249749b210403779a718c2a806bac783c41f74f5732a07275b10b1250e509a587

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
99eef4c4c2fae968af5b43a28f7766c7

SHA1
7e99a71a422da1946f1c8f96a937cbd5a3ca051b

SHA256
2b7572a9159098fbe0fc05e3b47582ceee0254f438d6cd60b6b177f3449a31a3

SHA512
3c91ac3122fb1835566529d165772819be59c128eb82721604a168e947bf7a31c642a8c17af1b22c07620aeac7aadeee46d99bdaf422f7c75bc1c76b9248879b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3a24f57668861bbe9b63e31a80dcdcc1

SHA1
a40ed73d40d4be200c0fb4f51ddfd552110219e3

SHA256
d6effacbdfa06e93719573a1eb7b34a76f4f4181d7406c052c3bbd1bcbdc00f9

SHA512
374afe3de747c8a7da2f288034cae4e478b8c287076262e2c55dd2d503d0971d6d3dbe3dafa39a95c10d75a159399cd8cc67e59f50c989600765ec8cddd32a89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7badbb43adeaa90f40feebc2634f367d

SHA1
f150a4e92926b03713c3daa5afa52967e3230d99

SHA256
9d7e931c1f2d904404e87dce4af7dcd49792af2f98e352da4743fe42ef09c9ea

SHA512
39cc1f8d2d7bffba51b2f1bca453f2b88a325236bec3e6e004c2223c46c2c6b47d2b993c70970a2519d5faabd6f82d80950420f634b33e9c4c8b1ec15bd52cce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d106020ad52c786810bd90bbc6aca42e

SHA1
612867c7166482b3de8b7ec2af68ec0ff90f5337

SHA256
28a28c31fd7d3783ec39fa60d99db30f411a841daa87ad8ad9ae9755d3884098

SHA512
5bcda6f3b36dcd6155e979b28be7ad0e5e1b4437a637b3ee560e1581d6811396743164d3155f82ad5d877fa47ed20fe80bfa1ea380cda5564ba1d250f205b81d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
08b81cd7428f29283e967b38bb48cef0

SHA1
abf1bbf201f20e435244a5677caab992c153097c

SHA256
f82513819a255b65af19bd7dfd928498809bf98183615812b6772934a8b151b5

SHA512
332c1aa82cc17fd4097f593b99f6432f6e5cfa757ff2fab73dbdd41d3624ee7710d59a212268eda77a477f5a7d6113bfb25094fac050987e5ee97cc33a7fac1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4c7fd990786ee9d193914c93ba90f86c

SHA1
680cf05f4a9c2e9f9a9e5bca434f46a557c39ae1

SHA256
ee09493966dcb2b6297558589b720553fd7b2da0b7a25354f391ad4bcc587d11

SHA512
939f4be9fdd88a19fea47ac72ce8b124a39a0712c8438ab13a817a6177b61e95d4592af3a71f75dbcf9876f7a2fb261386e69a21b34b27f7beee800b143fd627

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3544d8da5263c62ec3adc2fc2137cf82

SHA1
34e9f83581f966dfcb9212ed2ef63687134da213

SHA256
0d2abcbcdede55173f9f1edfe70bb02815138b3f662d842e51c61f5dcf849324

SHA512
228033476f9a5d02a58fa3b2484e213e679f554bea9645333a0b31c620950aea2e920ac4ec4a7db790060b020b39f872de84a26b869a71a8f29e87171f8b0a01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8c1a28791a8fe707531d01c266c74ccf

SHA1
a342bdd727f55d0a2146e1c09e4d4b0b72d196df

SHA256
0a3aef7318465c721a5f2c0154af22f4b8634195554a14149331cef2f00b67f0

SHA512
3dd3bacef14ff295d35024444c583c80c407c2ce61faf4119158004e00579ae29904b117857ab503356f4430fb84b0c0ad2c4e77301f2ed78615a53dbb388299

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ba9c6d41eaf9ca871779563ac1d82bd5

SHA1
638d5f64961fa97321320b8438f291f67ba2bbfe

SHA256
7aa96c0ba565f82768164eb111dfc61664bbf0c86cbeecec2bb8ac467db10db7

SHA512
71c62d1b06e05720dedeea6ed7264015d50dd44cd01b373dbab9cff88227ecf715b620b2af55bc43f2ae9a57a6b8b12d933f7435278eb4b9cdbc30ab08a8d38b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b2dbc9ad209966932c90e46bea842cc0

SHA1
9b5f81c7d74c1179242f5b58d9df4f17ce158726

SHA256
f4413525d2ae9646187b17351462f7102b182e3dd9c45ded76b084b67701e544

SHA512
518bfec0c98883e66d0a1e16f1296846a397ff280a44a9a35ef256d7071ad1b59f6ca119b9c80a552c14c8fe62f87fe375d70cf919dee51f8149d9f18b01b7ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
eca9e06568ddbccc989219f424d0c8df

SHA1
b63dee3a1c9e05d4ad83a484a20f7d6d4fc6dbfc

SHA256
165a9dbc8d46550d2a4ea1b7a63b38a81b64f53f244fe71b18b43b7838834ec2

SHA512
9af5b7bc76e28a010f7f1709d752b1ab6dc9e02954e2138f276c6dce312b7ecf2dd767451f6834fc041d582e5d0a50ff457d48acfa5722a68b2147f4a493a4e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bb6304f2daeb4a6d91861af37879f53c

SHA1
c54363ed5c09cd7ce84f0eed0d99a091ca08db15

SHA256
4a135de286e96c12990d1cbd1029e684806a7376db09cb31079fd9a557072846

SHA512
be3213115e37b8958885d2a403d656a62ff581868f76909f7370ad256fef81d9732cab65eda44cbd821ebc882e249448c6dbb91975d2261102b89900e184f514

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
e4fc86a0a3157a59ea0bb9e4d270aed1

SHA1
a3264f8377bc4b11c2eb596eb47e0a814e61bc4e

SHA256
4871e7a11d67018d9021e501616203030f86af2999e0b7348e3e3af32115e3b4

SHA512
cacda5646c94548eef7a549a78c4ebbe6fbe08a2179c7d13f8ef10a2cf4b0f3858e1b5b6d96d6693feadd9f7525aabe17e311c39d62c87b000db59725d308367

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b45c.TMP

Filesize
1KB

MD5
b283d7fbc87639d0322d14c5a76323ac

SHA1
3c3ece41f9cd70d880f9a46075dfb518ce2bfdba

SHA256
a41a4006747a79138cf0937e690b5a0d93ff899497e819ca75b1948908aae3b7

SHA512
b846d628caf7f97504768c2a9c25abff7b171ff5971c34401c496ae598f4f6abad13b48de734d33192422b9f7de45530e657164b9deb7ac4ea19bc0a470cf423

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ab139e138007cab9e945188090d52493

SHA1
ac8189979b1719f9d3b26a77bd88098dcb5fb3f6

SHA256
4c46b6768890f8ff0d8c36cc5aee003e5249f645df8a3f7f48a957a6a8ac59c1

SHA512
46419acfa839523171622106f2ffcc3b089bc9a95f787b0e43b20140996c9f9618a6b75a6f55f2c4cf3d64d3fa3add6c0f5461aed1d8ae98692339c1fed66f22

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit