hxxps://discord[.]com/invite/ixi

Resubmissions

22-01-2025 19:14

250122-xxppta1rgl 10

22-01-2025 19:07

250122-xs1xaa1jav 6

22-01-2025 19:04

250122-xrc4tszrd1 6

22-01-2025 19:01

250122-xpl9qazqfv 6

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22-01-2025 19:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://discord.com/invite/ixi

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
8	discord.com
11	discord.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2437139445-1151884604-3026847218-1000\{AEAA978B-68EE-40B0-A755-E308FB73D70D}	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
1388	msedge.exe
1388	msedge.exe
3604	msedge.exe
3604	msedge.exe
3992	identity_helper.exe
3992	identity_helper.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe
4484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5184	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5184	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe
1388	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1388 wrote to memory of 4440	1388	msedge.exe	84
PID 1388 wrote to memory of 4440	1388	msedge.exe	84
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 1980	1388	msedge.exe	85
PID 1388 wrote to memory of 4252	1388	msedge.exe	86
PID 1388 wrote to memory of 4252	1388	msedge.exe	86
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87
PID 1388 wrote to memory of 1944	1388	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://discord.com/invite/ixi
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffefb2f46f8,0x7ffefb2f4708,0x7ffefb2f4718
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4204 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5772 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6316 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6780 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3756 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,5634931532854363022,16300489544454803208,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7112 /prefetch:1
  2⤵
  PID:2752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:344

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3764

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x51c 0x520
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
215KB

MD5
e0a1dc76beb05d7c6f1d386900ee17e3

SHA1
0e0c06a651626eb03ced02498b8f9b7c75a616cd

SHA256
d3fac68ca124684a3f4b9e230fd2c6aa60d4e8697851a7f6746c4e22b92126a1

SHA512
4298a0f150721712fa7b5a6d95fd8c9bd49f874f16df39dcd518fd6dab36c47c343b2bf61e6dbcdbb61e64b6ba570413f8047f2f5bfc84f1d4050839849c416d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
288KB

MD5
0ae4fd66ded94cf823ab9c128b5c4e79

SHA1
11ec7388709c1aed79fde4dbe1a208acfe6b6951

SHA256
2f5eeadda475d08a0483f87001f8d32b2a253b9afff605557f112cc1a8a94561

SHA512
7be36ad1b5e0121a74fa551a3f33922b28e354d0ccd2c33662ad8884b7d7afe68df6f6458e719db9edd874a03e4398b06c580d9e3a3ae435ba5b27451923185f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
3.8MB

MD5
b3a54ae8c0fd65a6bb5c5a39822c3954

SHA1
0646de939ba30dcc9bbdec2ba648bfa6c75072c0

SHA256
cc116fbadfeb3cc271af87b80054e09a6dd384045dafad9adb8dd35214284979

SHA512
beaf7de883ed0375b357fba1ca6710974588de74aa3c3668c1efffbd902d960b7d4d1ddc4201a3a08b1c1b11b9a371ad77c6e69c4fa88f4907c210fb5a1279d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
370KB

MD5
e26f5ec19d5bb17457a5f6ab2d701e4d

SHA1
266623a91295039b67a94afeaef81a74968ec892

SHA256
c71a919644e4a32f660176154aa2387dc3bad6fc3497bd50e1dcf61de9a553f7

SHA512
7a8d8c589f92edb0ba3fa700c8729d451fa4f0644d227978180b9a1d788f67ef53ef2736da34655f0798f3a90954009d2016c388138fde743218236723760761

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
65KB

MD5
6399c8f01b7b28200b9c1b62a480c454

SHA1
40f2cb15aa6ab7ff29643f3f76a7f321a5afbdc3

SHA256
a9c16f6670542cfb692043f19e2c8ab82ee37fd15a62b5f16c30ab981395ac06

SHA512
922cb1289ca56873d77f55e1e36078b03651f5481925b52a23cebe53434a19c72872da96bbc54025b89c009b0be79e00950502cd1494a72f9d4aa55d3145e3a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
31KB

MD5
413ec0d8b38b63caa71b36246119b709

SHA1
3d79213ce7a159174edd1fe2f01e0e096626f834

SHA256
6a67555ea3c372949697be105283e228d4c7f217f3ccba1cbb065c4089af7a7e

SHA512
6e98f13ddd55bb70e9bcd79a9273dab174303b14d6e02f2ec8271f2b211c09af27573877bad1ce88883217a4c6b218a53c62b363acb24bee25df450711fa2723

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
16KB

MD5
807834a572599674728cb0144d5b1b00

SHA1
95e26ffbc527dcae5ec3e5f5154193121da0f244

SHA256
2c1ec380e19f14f7fae2be5ec9e07e5c6e11eb6e999c26a6f14bc709772565c2

SHA512
1fc437f98ca9aa00dd9a44eafd002fd57d8b88ef4ebcf3c085668c6e3c6ed902a0852d74a07b1d3e97f31f77c1fef8dadbbcecb6e0bc3b67b7808a39f3fa2a67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
24KB

MD5
69f535485a0ae52d64120d6b18c719e4

SHA1
43cde4bd07050e1896328c65392efbfb135b51b3

SHA256
9ad266bf428140b5073c187cfc063b4b31516456bb47bc79aeae56f0ccf6c433

SHA512
42f38e0e83ec30bda103257d847b585f56f53db23103b92daee746418423b4e5499de850762ded0f72a0cd7e220bd50f2d478f98e252cb2c26805ce612de4fc1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
28KB

MD5
a08fdad16e1bf63bff0f2ddb8e5aeba7

SHA1
fda429ad5dd818939f0b515572aab54a46ca6731

SHA256
b63e0f1dc6caedd149abd0ced78e8b47aeb0a0622ef71f1472e9347fac45ce64

SHA512
09cd85ac62c9dc69cd374fb20d9497a3ffd2842721e7a92bf5a93d8669cf9685b4fe0c1e8fb964ebc986ff1d81cbc90a9ee202ca779b2bab31601fc75109f0c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
32KB

MD5
eb76548cb1b86f6465526682566b6482

SHA1
6750d7503c158a77dd574c7ad607f8d4d77c60e3

SHA256
c2a4cec08f339cbb85fa9838da943cab7929415831ddbc2c790a6f655c6e3b39

SHA512
27efd0071313da51568f522c58214e96b0b9b412144278690f97d96cb3ad55db8edd2ee733b27085b1101f1a7191c0aed67bf1d1f3915c3a1715a4737d1ec05f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
24KB

MD5
585049997ae77b6c872d01c199dcf2c9

SHA1
8ab740fb81d4fecf4768a040f5823d08ec255a11

SHA256
a953c3fcacf58a702a8c1ae3938c56bf7a33db75d138b94ddf1d12a74e5c54a5

SHA512
af884891fda36bf12c3df4de05dbe5711b0cf30ddd032f1e8cbca26bb1827977c7a83662144d9d780ab7b5839f3d3893e375a9404f0840afff1a523dfffd4e2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
48KB

MD5
d7f7d8697fba64df2b99248d5de75ed2

SHA1
6e8836b5485a2bc79ff13494edb2987672e70dd2

SHA256
c54cf5a23b264e23c3614948faa349afbae03d818fb7c3649ba78a787db51671

SHA512
f2a43d3b4c07d91732b3c51144ec7cab1fdd2c93486ee109849b84d328ec4f04a7adb4409810c8b7dea007120e2c25b873de1ee106138185219b490790e1b93a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
43KB

MD5
b6fe30ab61518a38f7cf953e9044cbc5

SHA1
843da0f74b324cb4eead7f80c50f8caa09f5ab04

SHA256
f2e67f294ad8abc71b3e5d832338003602eabaf6aa6b14f17930cfc610fbb937

SHA512
0ea5e01648dc3bfd97d55d11f8359e5496d4885a17858b758f9daca9f5000ff44d07d8788e3aaa169f22a123df2ed963c2bc88924cd23a45fc6fec3acf8e06a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
224KB

MD5
368f94751630beb31a7dd6c998c25d38

SHA1
bd2534d97163ae1707a91085d52279574405b6a2

SHA256
45cb111b75ee1ecf04d02ded05c9b2d0978a63e288404f7f9e72860ee7952228

SHA512
bc592f982954af2c90908263db0ac763d582682fb004c1562b8f5a0552c23f2a2c216763e2948e2cb54140a03fd9db0df69d2feacdeb6ac1e570148f32b707cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
286KB

MD5
f0db0d0ecb37a5facf71994fb390ae40

SHA1
c04ba88e09873c9c2a463f9f89035303b4ec2cb7

SHA256
383b9e29ff4d0b4a49545a2e7010275bdf0348f2bd7da26c8f6d18b5f322b0c9

SHA512
bebc626b47e6600350c0a6872ce1fe5bf6d30d614f66d8af6085bf3d6b434a6f42a9003f28a32eac7028c4ca20e2adfc14b27ab8ddba685edf24d14cf134f6ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
38KB

MD5
ff5eccde83f118cea0224ebbb9dc3179

SHA1
0ad305614c46bdb6b7bb3445c2430e12aecee879

SHA256
13da02ce62b1a388a7c8d6f3bd286fe774ee2b91ac63d281523e80b2a8a063bc

SHA512
03dc88f429dd72d9433605c7c0f5659ad8d72f222da0bb6bf03b46f4a509b17ec2181af5db180c2f6d11c02f39a871c651be82e28fb5859037e1bbf6a7a20f6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
44KB

MD5
d295c40af6fca08f8e0eb5425351f431

SHA1
1d246a1e54b3a1f2428883d8c911af73eddffca6

SHA256
5d225b25d66b30563a00f395476ed701130d3f749620a63531cea09fc537164e

SHA512
9c9f23cb775244eb10f83f964b36224ad2cd5152cfa5ab82928f68ed1cb49be4156f887cc40a857b72efd0833014e4366bf136689a717dd58828a1b195ed486e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
136KB

MD5
db985aaa3c64f10506d96d876e350d47

SHA1
aad4a93575e59643fed7617e2feb893dd763d801

SHA256
234feb9a8a2c759d00a4959506a3b9cb94c772186a2d117aed973347c7ef1891

SHA512
300d0d35ebb9e27d66489ffb3e5502a4dcd3af032fb0f672d4f004e3846fb795772b6938c99dafed6fad0c25da8412d6f6a7b0221eb2540e84527703db5b7073

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
42KB

MD5
281bba49537cf936d1a0df10fb719f63

SHA1
4085ad185c5902afd273e3e92296a4de3dc19edd

SHA256
b78fb569265b01789e7edd88cfe02ecb2c3fee5e1999678255f9b78a3b2cc4e8

SHA512
af988371db77831f76edf95a50b9ddf1e957f0230404c8307914f11211e01cc95c61e0768d55aa4347f24e856d226f7e07ac21c09880e49dbd6346d1760b8bff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
133KB

MD5
f9bf0f65660d23c6f359d22720fc55ae

SHA1
9fa19ab7ea56165e2138c443816c278d5752dd08

SHA256
426ae06cd942849ab48b84c287c760f3701b603ebcc5c9aaa4a89923ef5f058e

SHA512
436019a96e47848533684a34e3c360f516c29b2aa2473d0a05d50c0fd3ad19eac39df2de12b6ec1c6760493efb5abf58e6a54d32080226fa1765983435634d88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
175KB

MD5
7cf1be7696bf689b97230262eade8ad8

SHA1
8eb128f9e3cf364c2fd380eefaa6397f245a1c82

SHA256
a981989aee5d4479ffadf550d9ecff24a4ac829483e3e55c07da3491f84b12ba

SHA512
7d7c7dc08001079d93ef447122dee49abd2b7a84d1619a055ff3e7ec0009261ab6add018560bfd82ed22b29c1915bfd059f02cd83fed2e15e9af05a5d0654e06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
20KB

MD5
dfc12a4aa231bfa5a557a9621d79bf7c

SHA1
dbf7fb81ec72474ea57b3d37f2b170f21c197f6b

SHA256
d2eb2b59f85814a466fff6b10f5842c6f6baf24bab63fc94231d1bfc3ca36485

SHA512
d5d5f9be6becea8596522248fafd1699f9ccbf5292d6f0e9f854d1242ddf28870e148f2cf5e861ff67bff1dade49409114134663f07b71b939b7a16c966cc6db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
37KB

MD5
3d6549bf2f38372c054eafb93fa358a9

SHA1
e7a50f91c7ec5d5d896b55fa964f57ee47e11a1b

SHA256
8e401b056dc1eb48d44a01407ceb54372bbc44797d3259069ce96a96dfd8c104

SHA512
4bde638a4111b0d056464ce4fd45861208d1669c117e2632768acd620fcd924ab6384b3133e4baf7d537872166eb50ca48899b3909d9dbf2a111a7713322fad4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
38KB

MD5
71d3e9dc2bcb8e91225ba9fab588c8f2

SHA1
d7e38ee4c245f64b78eb18e6ecd7b9f53b3254a8

SHA256
ae99aaede2f373187a4fe442a2cb0ab9c2945efbab01cf33e01be517c0c4f813

SHA512
deda05ebd575d413aa2277876991ecc2ea238907390753485ba1b487ede2f432363c46daad5f3f240eaaf8d3258150829a3ae3d2d9c420ea59567cfd440361a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
156KB

MD5
3b0d96ed8113994f3d139088726cfecd

SHA1
1311abcea5f1922c31ea021c4b681b94aee18b23

SHA256
313818d6b177a70fbe715a5142d6221ac1a1851eff5a9f6df505670ddcd73074

SHA512
3d78c250029069e1850b1e302a6d8a5154f6e7bc5cd58f449b8824ccf418e80dba2d5569a9cff72f51ccc9de140dc91148f93ec4717f4a880e2ba94898fbdb24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
38KB

MD5
7f63813838e283aea62f1a68ef1732c2

SHA1
c855806cb7c3cc1d29546e3e6446732197e25e93

SHA256
440ad8b1449985479bc37265e9912bbf2bf56fe9ffd14709358a8e9c2d5f8e5b

SHA512
aaea9683eb6c4a24107fc0576eb68e9002adb0c58d3b2c88b3f78d833eb24cecdd9ff5c20dabe7438506a44913870a1254416e2c86ec9acbbcc545bf40ea6d48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
4b7ad9cbeeee2701664f040148627aaf

SHA1
f75f2c3d95d33e995f848325fcdab4392825fd62

SHA256
214ee33df52e1c0d84eb70574b1394e29bd444b44b870605b3afd828c1ad14df

SHA512
194b8988d6986cf45901164e4db3fe5c581111a67de3d83d146b69519d78878aa04141c7575287d0a6d315af1aed86ce8a737a8be73bd54f00d31fb2af0c9ad5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
e2f2cae50c8a609f5c5c444a5645e472

SHA1
e2525497408e24a38a2a076ef7798fce2c71a1fa

SHA256
fe4399b32448eef769865bf93417183c70f97e5c420d2fee7986e4b20906a585

SHA512
1511386d0e128b304c000fc55f6988544a96f9f5028637c0ea391a619409618b338141b36bd80b0128e621ae8aaa5f0219d8e4fb6d7736b9fbce2974a30436c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
478B

MD5
cd2d546a8d1e8b25b0277a9cd906d02b

SHA1
300e617903f831779280efaf7d68d707af83df06

SHA256
0d94f3d9795f861a6e15b58790b1d8723bbceeeb28b5e776009a64c519f09010

SHA512
95a84834b58a38bd858cfbecbd177ca5922dc77e10ce85457ccfea5bfb7b51860f78fe39de2f6616722edd604ab38241ed443ed6a6d5b6bbcedba11ec6c7d56a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e4484c7a740ebd13659d59bbd79951b0

SHA1
1af1980be284d4410a6cc2267f27f2283eb9fe84

SHA256
c4fd0ca583cce847c03120efd2cf3a086b52b5a3f2389fafdd0deedb21aad760

SHA512
c1396fc4bf45fe79cecefc8f9fc5c5ac0e1954d29d8ca9da2023a6dc9da1adaa21278c64e15da289bb0fe82f805522d28fb003a2e3d45f287a27d61aade7d5ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8d3744a45341cbd2264c900462bc221e

SHA1
c8da9e7ce91be446ba9daaa5d797f3a31c0b5157

SHA256
f03e84961f01c0f0aa15be12a81e2a3abf1dc9f0b1b7551014e452bd81ee879f

SHA512
cc83b5c4650e839583534064c85281a55d00852bed166d033e651ea8f8f1fdb8db92073845a74ee3d179017c8541b45d6ae528df3faaf9a3eaef855b4e9b17a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ecaf8a6409a033b05ad7115106ff59c8

SHA1
8a0cf7bee6a60eb49816633849a3e8da77ecea98

SHA256
958c9229682284292e48b8eed79273b0ef398c471347dbcae76d186352376bec

SHA512
85ece46a00038d0dfe8932ebdfe8c9422ae663cd416d68e875d00aa8eb576d50720a5242195f44cf9973f93a36df7264900374e57b56caaac28edd040215ad67

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7e78dc3e9edcc48a46ed82105b748572

SHA1
3e3ed4a5b6241af718305c66ea771a6342a3da31

SHA256
dde219030598336effd85ff97a45dd1634bf1892084e79cf3af02bdac075351b

SHA512
d3c29dd8138def2a68c286e4f5a96e86a2590ab8e6ed3d29d2253b04781f31352cc4897eb0b58638d26f7bc5011672c1e8cf024b632cbc4245c6f0e87aa9789a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
516914dce0b2406bc63cc64a70b7f8ec

SHA1
55602fbb63b10a8fbffbdf8e7a697233c66404dd

SHA256
7f16141419195ee1995c80ad79c7ea124dbaa13af964c714a4059cc3d6a89caa

SHA512
bbd0a195f0a2c66810ba47feb538778b5c688f3f670306b66b8f0014ad40c5eec4ed9c8e1c810a27f7e13237be6897edc7c108809db89c5e3ee89a0de66fa8f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
70564812a32d01d2bd0c63c2936eeb5b

SHA1
c81e9e23dc5ac35f57bd4aa46997c4c75154a5c8

SHA256
387e01943a2a4420cd984b832710a432b71883e21974dc6e2d033f95ca495a35

SHA512
8712998c9ed4b17c1c24662f01f64fd644574a0d029f7f0bfbee448252e7ab624b750a4c420475a6a60cac0ac3369009a9b5b27a79f3d1dd4582540c93e25d14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2c444ff54eb629565e4c6ad227f4285c

SHA1
9f5bd0b50f0ad108f0802c6114da141b1c808120

SHA256
49d52cc17c852bdb503edd8ecd6d7dd2752c00d1fa660ba143322bdea0922583

SHA512
eefde81569ce04a7d2fadd71660406520100d9bf093e042671d8f46d62a6722d24e1fbe484fc4b759d6010b0eb3371f96c49eb8bbccc7c2efc53246f49614dc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8f05194486e56791a9bc836076a22e60

SHA1
5650cf050fff95096e1143a9a85a648fef1a0903

SHA256
aec9775297f22aa9aa4b8282f47250b239fc94e8f49a5768d7cfa6aae8381b83

SHA512
4bb54d7a5f9bccd7a6693839d091d42dd32479c225a70f275e2e895cb5a165e0907ec7821bce1a095f5c043bae767bc8c530f4a70837b105b09b569670a95f23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
34141c7eba42b355edacea57347a501e

SHA1
9ac22230e9d91e4bb4c00ccfef616629bb22569c

SHA256
03b4a53fcf73f14124b9175d870ffb9f3240419208c589cbcfe9747fb57fcda0

SHA512
aed7495b8ba8646d9f01330e484cdc1a689a09d3de51ed8ac9bfe67a05f37237b88a78bb540392c48ecc0cab72dcb883f8ccfc688be9c55857e136386a372a6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
f8fc7c1a486a1d37feaf43bb525639aa

SHA1
6d15e3c4a4a8ca853c440bde62e60c258728165e

SHA256
752d10d40f02cec5d21d2b028c5864a273ad6f44d6e26d9058caea04b65c887d

SHA512
005386542de1f0a6d289338a1507c7d36d1f0a4e98ade14114e4191fc5e807f4c11e65e0631f03182e6be61f9a5beeee909a6cef49dfb1a0ed16dc6572373545

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
cd71c4b9db7b172e29c4b39bf2c91a94

SHA1
18397ef82b8b88b72a5e0cf6bcb6cac53504e064

SHA256
417093b4af3e7b10f3f610ddeaf80fefeb7bdb0f0d0689131ce56cff917e62ae

SHA512
1d67a57aa93feb0a1a2f0a08695c2f9d3a9636be698b01614e7da9b80f498efd487958d1451722e45f5499e9484af4e8e0d7e368dbfac19e1b4ed662baf2b6b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
871B

MD5
776515bffdd3dc8ba2782ac3e9d2ff97

SHA1
75d45f9c04c15b43e19b9b46cc7939b69933b4cc

SHA256
05976302d36f718c91934fcb479ad7904e8c2f2ebc0cd6d6a01d346c835f7683

SHA512
692474c1e14b889aafda5a5284df23c8e3a7289a507d4469bfa39f17ffe4b510a373528e7e102453ed2d2c94f6a546eac1f21f29c739546d343cd752966c1cf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b029889afd4cea8a60212b9525584acb

SHA1
927a7f0747eb0addbe2ea8aaca30c6b3b682ff13

SHA256
de4c78a0f97e187bd2adde5a9b17c75c472fb64c1d6151dc3020a84f7899154c

SHA512
119e18165651e4bece26af74b2d047f5c5dd2ab31b025d83b23122a642478bbe333c3efb606140b14c10d9d04b6d6da707badb2dfa97cdddab24f14802ad7cbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
483d71ac538e1fdd2c8b0bf078774512

SHA1
29105251d45af2e03af97dc48bf34174b0b7a599

SHA256
90a08c3439d6ae98c95e3b8050b13ea7f9e90c4d3fd64dd9f42bcdf6ed48a097

SHA512
504fb2b55f233fd7b587c578a0719d6f90f35c02066e9c5554009a8b7d28fe337518c423e1584cbc6adb565bb611345abfb13b9b3546495e49a19bea91d59537

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582bbe.TMP

Filesize
203B

MD5
311c247b1f5b13fad175429d39ca836c

SHA1
3f6aed8199b37c41c87bd39332a9b7455a34f1f8

SHA256
61a773c2263c1e7184668b754bf19506fb0d359c07fc3ae584131447685b29c4

SHA512
5ea38ee61d4dd06e24a651f0f0b4275c8fac1759ddc8858c979d963eb33e92ffbcc2eedf2d40ea19cb35f8e3ba0922fd2ed6bce67011d6f399110c5963397576

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a85b039c6945f5c958c2a40270263337

SHA1
8d8e44c81e51e5253fd22318c0e13f9c4b08d3fa

SHA256
a88ae4d267cc37842e4db0354b4949bba7e911a4c5f4bfcd0e7cc54692a4e6ec

SHA512
7ddde0ead0392c9da0612504132a3b885d54a96815f196a7a91921d151c045e8260505f526b5783152b0f11724ed93c2a0aa2042f79843d6e453c6a7e595b6e9

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit