hxxps://steamcommunity[.]com/linkfilter/e[.]vg/962924623894

Analysis

max time kernel
72s
max time network
75s
platform
windows11-21h2_x64
resource
win11-20250410-en
resource tags

arch:x64arch:x86image:win11-20250410-enlocale:en-usos:windows11-21h2-x64system
submitted
17/04/2025, 13:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://steamcommunity.com/linkfilter/e.vg/962924623894

Score

5^/10

steam discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand STEAM. 1 IoCs

phishing steam

flow	pid	Process
172	4892	msedge.exe

Drops file in Windows directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	msedge.exe
File opened for modification	C:\Windows\SystemTemp	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "133893696932431565"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 4 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1492919288-2219487354-2015056034-1000\{E0686E47-B1C8-493A-8997-A52280839B93}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1492919288-2219487354-2015056034-1000\{4D44DE66-DC9F-484D-BFF0-72F027DF30D0}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2220	msedge.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe

Suspicious use of SendNotifyMessage 4 IoCs

pid	Process
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2784 wrote to memory of 1432	2784	msedge.exe	79
PID 2784 wrote to memory of 1432	2784	msedge.exe	79
PID 2784 wrote to memory of 4892	2784	msedge.exe	80
PID 2784 wrote to memory of 4892	2784	msedge.exe	80
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4960	2784	msedge.exe	81
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82
PID 2784 wrote to memory of 4984	2784	msedge.exe	82

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://steamcommunity.com/linkfilter/e.vg/962924623894
1⤵
- Drops file in Windows directory
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x2e4,0x2e8,0x2ec,0x2e0,0x350,0x7ffc4c7ff208,0x7ffc4c7ff214,0x7ffc4c7ff220
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1872,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:11
  2⤵
  - Detected potential entity reuse from brand STEAM.
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2160,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2424,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=2448 /prefetch:13
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --field-trial-handle=3348,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --field-trial-handle=3440,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4876,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=4936 /prefetch:14
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4864,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=4900 /prefetch:14
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5500,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:14
  2⤵
  PID:3384
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1128
    3⤵
    PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5540,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:14
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5788,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5788,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:14
  2⤵
  PID:592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --field-trial-handle=6084,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --field-trial-handle=6296,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --instant-process --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --field-trial-handle=5920,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5688,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:14
  2⤵
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --field-trial-handle=6540,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --field-trial-handle=6828,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --field-trial-handle=6752,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7096,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=6996 /prefetch:14
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7116,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:14
  2⤵
  PID:6028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=7112,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=7200 /prefetch:14
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --field-trial-handle=7148,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=7212 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=6236,i,11333193357143589889,14514883247892797290,262144 --variations-seed-version --mojo-platform-channel-handle=5956 /prefetch:14
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Drops file in Windows directory
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  PID:2220
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=133.0.6943.99 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=133.0.3065.69 --initial-client-data=0x240,0x244,0x248,0x23c,0x250,0x7ffc4c7ff208,0x7ffc4c7ff214,0x7ffc4c7ff220
    3⤵
    PID:6068
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --always-read-main-dll --field-trial-handle=1704,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:11
    3⤵
    PID:1176
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --string-annotations --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=2136,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=2124 /prefetch:2
    3⤵
    PID:1168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --always-read-main-dll --field-trial-handle=2472,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=2488 /prefetch:13
    3⤵
    PID:2288
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4168,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:14
    3⤵
    PID:3472
- - C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4168,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=4192 /prefetch:14
    3⤵
    PID:4664
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4452,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=4172 /prefetch:14
    3⤵
    PID:4996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --instant-process --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --field-trial-handle=4588,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:1
    3⤵
    PID:3404
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=5012,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=4824 /prefetch:14
    3⤵
    PID:412
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --video-capture-use-gpu-memory-buffer --string-annotations --always-read-main-dll --field-trial-handle=4460,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:14
    3⤵
    PID:4340
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --string-annotations --pdf-upsell-enabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --field-trial-handle=5408,i,17381625916093457445,3831859245310102019,262144 --variations-seed-version --mojo-platform-channel-handle=5448 /prefetch:1
    3⤵
    PID:4652

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:4872

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
  2⤵
  PID:5068

C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\133.0.3065.69\elevation_service.exe"
1⤵
PID:3348

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\4a8d49b2-1896-403d-859e-04b4309ffa86.tmp

Filesize
41KB

MD5
874f4675333903059169c3f5843a5669

SHA1
cbb6f290a8fa1100c7497b37814466b3e7bff72b

SHA256
d246663e17800c68c2ee746fef8038d8d3c7086c9b36324e3c461467d3c8930b

SHA512
23973f2b3df2d19120456ce067534a3385fcd5bd91725e7a0e83984031ee409e1c98898ce13dccf960121799d22a660b5caf0a07e4820b2ebc5f8c6c1a1c5722

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
fb012714b1231ecccdd0a6fca55db4de

SHA1
76417a4d815aad0c66e1cbd47b9df86d5c59bed3

SHA256
fa9a45f71c1809481e53dc18b4ff4a31f8b31132aa7156e014361f5aaf9bded6

SHA512
c216c2cd18c04b134eefa190403f1e7d720eedd06e92fc934f2627bd45ff24e5de1ba6945f2fb237d962ce9888ea62f585cb37ecde2ac4c12c275b7654ee6871

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
280B

MD5
cc75c748a8b9b79e398552f29c9570da

SHA1
251f0064673a46e2f1233da3cb320c996d1d708f

SHA256
18492d42cccaf3f568856e7077ff981ca1280e41cacde87c7868da17dd055099

SHA512
d511687ae1ac3dd4144ed0e6c9a6d0182413bb33f37a1b921c0a087423de27f1c501ee78493683c3db1eab7bddcf5e0d0fed329156b116d386c95f9021b14b5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0

Filesize
80KB

MD5
31b500b8918e225c318908617d801f58

SHA1
83814f00514206bf551dfc59e1767bb1549b53dc

SHA256
997dd4626cb98b6b4a61afb2f8fe05897546e2e84babbe74d07021d4eecf4a91

SHA512
d112f00951a70aa8a526ee35eb0200a3f1df33e4e4b1ce687a168bc353b9827a9e150fc1f1f8d8e4f829ba0af8c5976925a494a748765f22b22ccf5abccfa7d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1

Filesize
776KB

MD5
5a62f6e3bd0494c9158f06a40cdb83b6

SHA1
abf21c1ae586d6533f3b2de098bd4ee1325620fc

SHA256
d25492c139b7e6061253dcc049048bae1a64ac3c597b2b9fec5959cb641d5159

SHA512
ea751353716717073694cbf7b283f024a316bed8f4618b5174e3bc8c899d94c9bdb4565f5838b04ced0f99ef5c247e66d040c313f529f1ae9b6fd4d7a9adc264

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_2

Filesize
2.0MB

MD5
f1a13f926adc69e4892d5b562790acba

SHA1
686eaa647891fbde8d95c5e62d3a611c1d0b1bed

SHA256
98e5f8dd01d3a9efdea0ffae90434f20a1bf5674003f3c5ecfef1169a21b94d2

SHA512
7dc29566f08586d0f3f677d865f905846f8611ebcad7ac1ba0b33b04583e01c2e44b2ed0411858c664274a012b5701c32ec2eadbd36a4ed68165ab5ce99acdfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3

Filesize
16.0MB

MD5
192fadc70353974d2a0bcc19e120d4df

SHA1
7fb89ea845306d5832d4c8ecbcb47d3dfca3f0ca

SHA256
336f06f74a089240d17f8d2e0165ef1ca7e9568112856452c82b9915b5e411ed

SHA512
fbd97d379926fcb309ad85f3c816e69e36f4e23eaf6b41f46df90c6f74bc13772510a09727018b7b0754dee0975e4a8d79fd42c4dfc90f46a5fb8d6e772cbb22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008d

Filesize
19KB

MD5
3e7e1e400d14e56197fd989b2f2e1365

SHA1
8323a4e76e7f67a7a250b64f03aecd5eedb8bc48

SHA256
174a5fd4947101492926a9547cb568a9827807bc61dbf73ba3624a7c07a41152

SHA512
f3632feced2de0286419d29d99d59084de8fc48a76140ae255d029b29fddbdf9aa33f97b7cb403e4d26e13573cacbc4a1da1bde48009da5fb8db0f178043c85a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e

Filesize
27KB

MD5
1b426a95ceb50d255df9458733818c61

SHA1
7af69a7e2c5bd92650e794942d9398614b502fc9

SHA256
8b37c74dad1ba4db120faeffbdb3fe0c405bf9d8b2b488b81332cd564f88ac1b

SHA512
40f9d2c1f86474a951b5dffea502b2366b2cca4276dba18183f36b33ce9b72557020a7de2f0f467da7b2063445807c3724bb43b4a069d98e7b2b17c832d289b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f

Filesize
36KB

MD5
fa88a6b7d76d38dbcd1b3dfc8d8c192f

SHA1
fd6341788429d858a0ee8f466668cce580a3c0ad

SHA256
b14a017f4a21fae1d261b61e884ab1a22a2b7aa1aa038a85b176c73a601aa1e3

SHA512
53626b9cdcd08138391810af0cc7bb8990a0a3354bca05db6065930aee616f4b328a4cf4a3ff667461d319bccaf713d6e79f040bc5867ec1f503e2076f2bb49b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000090

Filesize
32KB

MD5
ad6a2101f96364c2d3ee3c271b3964c0

SHA1
1e26ed208a7aa4f2f5740cef06feb2c13d719938

SHA256
f579e2672bb674ccbca8b5393432b3e19ae0bd162e812f8d59e15467a993ab67

SHA512
09cf9880c1dff13410e0537b6ea6f9f346315ca1dd3858f90a00bb01d541513e42af9a175887bfe414090ca612fdc8fc407bea3e7e2950d50f40a97ef2cbf66d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000091

Filesize
23KB

MD5
99ac50a1ae18a48efdb249532fa19ff0

SHA1
c057907d8c800ea4d03bae8793b2aa686006dcf7

SHA256
590c8da5c8db4ef7e0906830a04188636d1c9b3f447f8fd270ba5431f7aaa0e1

SHA512
42233810ffdddac0bb25897a026d424f14ed4526f629250e1ea5aa4700460c6ae3bf1252fb42c2ca391db71093f4d154f69eff178c8b9aab4fe660ffd089d30c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000092

Filesize
36KB

MD5
21f4955f4e7a07d5cae4a46fc74ab263

SHA1
3e3e25ca71bb03ce2c9b2a495b346b9653568b1d

SHA256
0870954849b1ccc0e6a9754cfbd3ce33f791cde77156d1f84519713ac47c37c5

SHA512
ec857db1522f15d6b769dc775550eb0023e27c080de45f6c091bae25b8524ed17fba0ca84af38459bb1d772bf479327b031e5ef677d3eb7f65c703c03fc70b84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000096

Filesize
27KB

MD5
638a4990025383a0f83ebf29bdb84a68

SHA1
153e8818dc42f598e47fde8cf398f1447649a4d0

SHA256
878e34b89800bb271d3588e526eb3598eb3822e263f3bdaf53645847d39d0ad6

SHA512
59a505fa1a3bea1511e8fed16dced733299928b4081665d3e3fa4fc71d6f0ed0b09934805f442bf190c9093937e1494ac938167f9beaca0223243703f73efe87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000097

Filesize
111KB

MD5
ece822ddf599587ef262b1b22bfeaa47

SHA1
d9a8d480342a2a675c61452df0957fc6773f02ce

SHA256
199b281472b5e03f92a02e91d4f0dc88b91b641f05670a74e1b3507e09b0727e

SHA512
910fafc0f1915a64933d649cea2b80fef570872f792320c49217b6fe60e49e2d32a7b0f698ccc7f91bd444aa62911ac2cd1da6897cdf3c0a27a3c54c8aa9d638

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000098

Filesize
491KB

MD5
eaa918479400786006bc5a37e77075a2

SHA1
cb892a61d8643b235ac589d9e0fd7a4a97ce56a9

SHA256
69a47ea33e7fa0226b9f23b5837a9075f36a0ffc2e7adc2f5b30f564e1dad09c

SHA512
52bcd20485323c7451fcfbacf51a3e5366031198177ce53815ee031a451219755421da894edeb8e26a83ec84d7e52217b26158ddf5b0449bffe8f286b2238942

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099

Filesize
22KB

MD5
cd9956d2b6201b91899207bb167832a7

SHA1
d446c9a6b7eddfb458390d760ef9bddc9b251139

SHA256
e357f17301202634bf112fbecde34147ccd4e49fb8e973831195a718cfacf770

SHA512
170ca2ec9fe8bd68ab005fb965092e20899d4b2a3becd84767e3dc49036a2e3af571c4a7fe3840d2a074b9960d2e9d0b55e26e87523fa297efca093718a6fd85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a

Filesize
22KB

MD5
b129dd4c4dd1fc434965e17db982296d

SHA1
dcd89f7b41ff357a65d4aebbfb1eae6e0254eef9

SHA256
6660d544292d6f8081c0dfe08ea30d9ce91259ab8ce3fcb063730de193ef6e89

SHA512
ac653527b5ffef02b53862833916e288ff01ef286b378764f298d31befe2d82c05ff76e5f1bc35e4973df4cb114f2e647b97899c3a1537320f41e23dd1af97ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b

Filesize
23KB

MD5
f9e969a5ff052424471f3b3c656fd229

SHA1
516b9c1e8bdad02de157b04e194f8e0ebefd14b3

SHA256
0b6875ff3955b3f51370572fb12e0f30fb0581700d2897a107168069c36cd70f

SHA512
be950779d942725821775586979c28f5cd24b8490ca6a30c62ede38a616c1b4d0bf009f919ae432b833a34b63880017c8ec09663f9cfd24ba1f63f7d91d178b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c

Filesize
23KB

MD5
4d5d6db17933982faf2ff0c6180a4b21

SHA1
5417a7622e4363101c28153d0ad3984651297ce6

SHA256
40f46cc932f1c2f06f7d7929c462eb7969f3f06b9bb179f33342f0b3feee139f

SHA512
db2b507631c5395c865ae8d0c0fffd50d7c727bad935b81ad4a872bd8577f97001dba37a183a4ce67106f9882b12dd8d3e3efcfdb9936ed9e249c326d8323fd9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d

Filesize
42KB

MD5
99a8561ca96c6287c8e2963ac7566b3f

SHA1
29b75a3f294ebe065568d039f1f503ff83ec6979

SHA256
d8262c7d272144d33006ba13905b8924671b8fbcfe9106c6b1f668e242076c05

SHA512
9af2f67ba47ba1cee3cbd58bb1529c845e6b4014d956894a019a98e6140a1680f2b57a0e2a187796d5a071c1b749f13831c3174f9f37d1821c5f55c3f23b0942

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009e

Filesize
28KB

MD5
4d0748c0b99564cc4fd1e8c72bc45f60

SHA1
fab0a1e66cac16ea1fed3f7db33d055860925f63

SHA256
e04a35523ae2bb07aa0c4ba19bd9388e065aa8810f00e50f60c58543097c8eae

SHA512
c84f213e12df5640af46d2eb51d7d0d7c9623007d1414dd646a9b5303f0d1d7e2412fea406d47da395110f5787a2be132a7dacf17513b4cbc6af9361750ac9ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009f

Filesize
35KB

MD5
5856baf64a567ecfdae586266f3d61eb

SHA1
fb57ef6616170c637d43266c153bdab736c8bca6

SHA256
1e444ad555e3f20e67f505e40f30ed3e67d5906610ee677281b367801e51ef66

SHA512
ea3b64075973a0dee0d50713f0cd2d961c8316ae8f2184dc02744b9b0ca2881b9479cff88137671046a6f64824e5c89dfdb9cfd973cb856c22225eeffbb12638

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a0

Filesize
41KB

MD5
14f91cafbfd4e524f311a37973e6e481

SHA1
d7378905f76f7eae02779e050e34edba7574eacb

SHA256
5a6dde631ff5fc56d2ee4b0717c9770a07051de1a1d17fcb5b7d772be576e9b9

SHA512
8fff1e0c1f07d03bce5210a2d00e7947029134c1815abb6addafbb7761b29bfa25f8bb40146e7f966d77e8eb659ad19e898925368a1c1e033bfad5bf149b95dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a1

Filesize
42KB

MD5
e5736576952a2beeee9b6ca644e38df5

SHA1
0c068d8df1c6c718bf610671febf56856f74a412

SHA256
c2dc9932413f78a27ec4caf916bf2e57fda0d38125ffa5222ed643ceca48face

SHA512
b3f4d4216af1f85ab66a9fadcebf25fe4f8b364f19cd08251c0a1a451b0e8c7328eb4cbbcf0f90c31b6de87abff2087c0173379e7df189546cc668c6bdc729f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a2

Filesize
332KB

MD5
7ccf85237128bfe2f315a6ab6c2e6ee2

SHA1
225fdf1a91654454e80eb973b7faa10da109067b

SHA256
5123aeaabc97c57a984be8710a2f09cb67ec581b122a11d5fe8ad5e6b4615881

SHA512
5195bd9a1e86c68fa369a67390bd312ebb92ad7e672464a11a9708efe6cdc8638439d5d1e8023fdb6d109a3b8f9457c7b26d339f25b01afb1e2c0c5bf6116f63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000a8

Filesize
37KB

MD5
231913fdebabcbe65f4b0052372bde56

SHA1
553909d080e4f210b64dc73292f3a111d5a0781f

SHA256
9f890a9debcdfccc339149a7943be9aff9e4c9203c2fa37d5671a5b2c88503ad

SHA512
7b11b709968c5a52b9b60189fb534f5df56912417243820e9d1c00c97f4bd6d0835f2cdf574d0c36ecb32dbbf5fc397324df54f7fdf9e1b062b5dbda2c02e919

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000ad

Filesize
119KB

MD5
57613e143ff3dae10f282e84a066de28

SHA1
88756cc8c6db645b5f20aa17b14feefb4411c25f

SHA256
19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14

SHA512
94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000af

Filesize
121KB

MD5
2d64caa5ecbf5e42cbb766ca4d85e90e

SHA1
147420abceb4a7fd7e486dddcfe68cda7ebb3a18

SHA256
045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f

SHA512
c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00013a

Filesize
115KB

MD5
ce6bda6643b662a41b9fb570bdf72f83

SHA1
87bcf1d2820b476aaeaea91dc7f6dbedd73c1cb8

SHA256
0adf4d5edbc82d28879fdfaaf7274ba05162ff8cbbda816d69ed52f1dae547f6

SHA512
8023da9f9619d34d4e5f7c819a96356485f73fddcb8adb452f3ceefa8c969c16ca78a8c8d02d8e7a213eb9c5bbe5c50745ba7602e0ee2fe36d2742fb3e979c86

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000149

Filesize
34KB

MD5
c6975c159a1f5fe625ae9cc86f0eae55

SHA1
8d585360bf715fc24a220f6b3e9cb79943843679

SHA256
54ff81636bf6da76038b97e76a28eb7670d2da02f0079d37683ef42c62e75a89

SHA512
6aee047af22ef5055e9bad028e8cd3c16ab75a23f1975e2b3ff4c7e00885962aaf4c6393f588fe2a90067e265bc4e3d79c2ed3343e17542c291f5fa9007f3325

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014a

Filesize
100KB

MD5
f989b3df1da7e8451d64c0ffe01afd82

SHA1
6d40a628150a04b2ac77118d21aa0d9c390f9d8d

SHA256
b3dd5fa06cb6876e60aa8ca688701fb3d3632058904efeb7fc68ce8fe160aefe

SHA512
544d93570f305f9badc0ced4b257de50223769c779094e7d279d1270d8e409224a02eca6d2a887cad337371e43928cefaee10cb5c34bf43c6d1131364360a7da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014e

Filesize
72KB

MD5
d4b6a192b2d1233f3404c8835b932814

SHA1
9170daa2e4f957836244d7456953c87caa8e361e

SHA256
bb15ef2a79bda54f1edbacd76a506b25770b73cb46c6875094f7e0b056685c11

SHA512
a141fbad38ec190858d138ef8cf55df430115d49dbb343e29e3975996f159367a029d8b6abc503f1b7879a5118d82f095c58f5f19a0474bd9ba97b52a8e6c6eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00014f

Filesize
26KB

MD5
30a601af0f9bd1aa668db35bc945329d

SHA1
53046dcc67ea0559b3c5d26d6e384588e82c67c8

SHA256
1e4987038d24d8834ab7fe42193b3b4a93b62cdc081880b2e69f3eae726bb2cc

SHA512
3359c4546de3d69a11e8500820a05d5c54f21cbd39087406ce6fab71be5cc2d25c29d7bb5879b98b328ccb71cd5f45a32eee0f1cbbae13dc7384bc065817a8eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000150

Filesize
67KB

MD5
381773a35d5c0b658164c3c0e7cdc201

SHA1
35d8f6624892539498d8ab29c13eed5029580aac

SHA256
6c63fb103610233237afa735096bc135ea53d92cbedb85070d0a44123b714229

SHA512
ac21a27322054b09011743019b323762a47254675e4b74b86ab27623944770acd7c8b8bb4089cd324ac534f6880635d1989dc2a6b4edca4175c95099a70f0ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000153

Filesize
71KB

MD5
363ecda132d91979e736daa6c965b3dc

SHA1
cc49d1554f27cb23c0d9062cb5b3848c54a683aa

SHA256
8ce1aaa8f01fced9b155716b6ca1c71f03b3859daa118df116cc1320d1e4a3a8

SHA512
f2877cf18e9d9f70815a145e2f87d157f83ad1feb8d960588b507423428155bc59a9b0afb8c25f7fea58a5a86f7eb9febe0265baf834b3af3da46e0d5a0bf885

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000158

Filesize
25KB

MD5
198692718b4a90f9cf7d4261f7d1a3d5

SHA1
e11ce0ba79d0f041e74d81c129ee21ff2c5be38f

SHA256
285000a1ebeddaae0035f3c2fdcb7c4a4a0c5d6cedda3194b90d495c36b86f84

SHA512
5183cfe8ad31f197242478cc0bc20ceb4ec00a4113fead77d4bc9dcdb45f0bb407fc182db286a9cc1e3e47418517a56ef6a9f90ce456603db89d345f9b971fa8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000160

Filesize
29KB

MD5
3343135c13a9bc33eb426900c57db8fa

SHA1
ac3a86dab67d7107e50297c7af1764912f2e9799

SHA256
e7c905df22a8bac904d03aed266da6f7c57cbc4b226fa898eb4ae9fa2c19cd10

SHA512
a63b2f21a4953e49d330990f371443f329b679cca37618181498490a61fd04480534add2deb5e6731b6f0815b2e596ffebf3935d50a3916551b9a457c083506f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000161

Filesize
27KB

MD5
30a8964f0ca165e25273abfd39a260a8

SHA1
66838f39d45b3f52c785a6ba5a210311f9a18474

SHA256
1c88f8821c5d3f77d63829ea9ba6cb42d9da89a511a1650b55ec51215d44dec3

SHA512
1052a6e0ef7a9247e8c049215590467c42845c5eea22300462b9944a21d4c8a44e85cdc14f15daed530654a6fd60fb7255aa3e27a383ae1c4fa1107d06763f12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000165

Filesize
22KB

MD5
a611ab499a2b426a50918665e2f1e4ca

SHA1
74e49dcc6abc0f34252fa107e7c5a2b5910302f1

SHA256
b205bdf40eee6c831acc70752e4bb12f8f00be40ca8fa6dbc7c5385381e861f0

SHA512
543b87d54c1a064394a9a26b68fb404bdecc56822d30688d824ddab319e5f69461b4a6c4e31e59c63518c9be0d558d8cd35c79f8501ef18c5cb308a1e3af8302

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000168

Filesize
165KB

MD5
26147734558a47868d8674ef19d092a8

SHA1
bced2b553ca44345237774930bbb3a23ac137088

SHA256
6cb9071c8461a4d300b4ff05133d7747e8b99e708c915a3e373b7b90b53ca26c

SHA512
a26a243c8a1b036a99ec8d56848e97dd39d0ac2985efc66f674baf2b228ced30366110c92aa8520fbcf5fe67b9b6d1b4e638e80f371a3f8121d03fdacee7c1c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
9KB

MD5
2c1229f20baf013cedfc68b05c2bfabc

SHA1
d532fb6c1ea84c9892f15537957ab190e55313bd

SHA256
f69e15009b8df28cae2a6608126cdb8f411175d01a3d5d1f7d8bc914bfc50328

SHA512
334e225daf557dcfb95eddea0b424fa1b5e9aee10dfcdeb6f7725a309ea5205b544b9269f9d85fb16d262a99994fa8d3981dea1e44ac8178e84051d507ebbcf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
10KB

MD5
26d1b3aab88989c2e98974473658ee0f

SHA1
67f5006930447ededd7ac8923114d3b2855b8025

SHA256
a5813f722042f37ad6bd22dc997e872ad78770b8aa21a175103dcea24ae03bbe

SHA512
7e10b5bb857e06ba7f7455bcfe73ef72a404ba0b01bd8ae3343ce275b82aa90b588bf087c6eb6c169add2d47774d2e8b3d200fa71b7fddb25283d94a96a27c5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe583505.TMP

Filesize
4KB

MD5
f6010a9795a924143f7fdbafaa1e6293

SHA1
cee9ca84feb0538e8986b7a675dfddb162a54eb9

SHA256
9d0ecdae714b90195696dee5c8e0ac3a80fbc2e939cf3df37548b25e4b874910

SHA512
d733d2552f31e970f7cb5bdd01d9eae151c18353241e8010dd4afd65eafa614b98db159aebccd6790c14e8de67726ca6d2f997979206e474814cbd409b3b83c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnWebGPUCache\data_1

Filesize
264KB

MD5
6eff9f3168b0d306f6e85584a8d48689

SHA1
128409eabf9190dc1726fc8b1bfe7593b100e3f7

SHA256
2b85caed0cbae37a277315475881250e4a444353fb778e4f72ff540d6e9b05ff

SHA512
a9988ad0ef2f87f654669d67851f57cedbb9a51f5f76e608cc58f77b5984bcab5a62788b1e3227231790bb04db004ffd7aeaac24d53c45a3f56a24434d5aec6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Favicons

Filesize
32KB

MD5
631219ea3f78e0b77c182a9ba5e2b435

SHA1
c03bfe6222761c27c8ec4b5dab08a197633783c5

SHA256
fc70df0ecde3030829f7aee4edb73733eb9b551845ad45b6d180613e4afd84d7

SHA512
f3da17400b40f3ff49d43bd1fb94b133c84f32c3b99c8d6a9b0968213355edf95a71384ffe31b7ad43739a1e5fc1e38261c0d741af00eb6b6fe327ce9c5ad4a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History

Filesize
192KB

MD5
9ccbce327c1dbfd5ac1a89558993472d

SHA1
706a9948e653d8e9052503e319da823da3dded7e

SHA256
f19161c8436091011b38fb811d938c7b39973c5e3984e71c35d0f758698aa238

SHA512
4e2f8d9d087404af0938c564a7d4077af03673c7992f2fc9b4c836da57243a6afb0cf197dbd18a708a1bf18e05d4564d3a6a5742db3a37781534cb13925f9eb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps

Filesize
107KB

MD5
2b66d93c82a06797cdfd9df96a09e74a

SHA1
5f7eb526ee8a0c519b5d86c845fea8afd15b0c28

SHA256
d4c064db769b3c109da2ed80a53fbab00987c17421a47921e41e213781d67954

SHA512
95e45c0aea0e704be5f512dffaae377d4abef78da99b3bca769264d69be20f2570daf2f47905645217e1b2696e42b101f26149219f148b4d6dd97a6c2868b6f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\000001.dbtmp

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\2a14423a-62f3-4280-ba05-b7a9cdf3ad55.tmp

Filesize
40B

MD5
20d4b8fa017a12a108c87f540836e250

SHA1
1ac617fac131262b6d3ce1f52f5907e31d5f6f00

SHA256
6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d

SHA512
507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State

Filesize
7KB

MD5
6f01ca839ddff4435f221e60838380c1

SHA1
2a9f32547dbfccd6522135a7a2c99aa0a41b4621

SHA256
99587c37a9fbe1736ce7e758188cdfe28e2fd415d821aea6027eef50333964e0

SHA512
44f6cbbea27792bf94d1153907e691e01249b18f433ed999c7a990c78607dbc7919261dd10ab9bea57752884a1005af5ea032d02419df16c01ce90ea276300c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports

Filesize
2B

MD5
d751713988987e9331980363e24189ce

SHA1
97d170e1550eee4afc0af065b78cda302a97674c

SHA256
4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

SHA512
b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries

Filesize
211B

MD5
70783608aace29dda563edfe239b21dd

SHA1
0cd5dc885f2b0c688d0dee2f45ad200052ac0668

SHA256
2558ada484c8339c13eb962758fd3c1f6d000292ec55dba6d89c5b32f9c27193

SHA512
998a7a4454816f6b78493ca87e467e3288b26ba2468e4a3f25f17c114b398117da67edb932eee718424435fc4e3243528b1c0776d9b75f3f7927b67e6cd04276

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
20KB

MD5
66c3fbb2ccdfe137b22f477acbab4af7

SHA1
c3c7e83b46b8f17cbbda6739f4ec9efb4e25a9ed

SHA256
8b9ab88c6fd00e164be4002cdbcb6433343be7d21a9c1a339b6a6f349a6d4ca7

SHA512
97cb670d71790fec52b027d2fc699b836b505576dd82c7c166fa8128379036ccff75669bb1eb46a1bcac167caff9e2ce78fd8e79b490cb6a4222cbeb430d9bcf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
16KB

MD5
6781d2b16683f10656c0c90d9564c956

SHA1
6486b713ef8591a25a4130997bcc85c9035ec941

SHA256
e6e7f80cc79d5edfba7a44f99332e623cbed85685655dcef3a216eb17c932a92

SHA512
f543d702109960df6d7dc055931231f38703657aab6a76c2c8c35c45d1722698b3c326b88d9eae13952af16e8ad1458e3eb4bcdd2a310f2e638e58f3bf54558a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
18KB

MD5
48c56053b042f0d5265d32fc85e67c9f

SHA1
6725d046a11469903afa1e94553e5de7842a532c

SHA256
0249c0c2277f965e4a44be8f1a753959f784455838c1c654a043c47ee49d184e

SHA512
1fe210f84a8079d2723b3a5e23c53b318196b1ce6d7f142e3cbedeb276b92fc2bfeca1631f42902b435ab4b81fd8f62708b3aa93de005cf6eb13163c242bb623

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
37KB

MD5
c4ba500dbff79af98fa8451732db0903

SHA1
37bb4e86c0e0e69fa5fbf159cd15c78d2d3c17dc

SHA256
7394944c1a5f1fc6d128d034a6d8833a48f21552b65f19648cc3941c09d915a5

SHA512
e216d0a116ef10417322424e1e87cf37468c37317f9dcfe6e9061bf2ec47ce024db19af292e1f33d09beba45ab00ec58d6dcd1ef31c83825265df3b30e66f493

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5183c8f0-0a78-478e-81eb-7edde277c6cf\index-dir\the-real-index

Filesize
72B

MD5
2307c1531b52b6079edf053eeb3cf1c2

SHA1
75cb75f1b709c22f6102e7042785d554dcc61666

SHA256
7c19cb2f802879162c4043da0ba809c44ef3437995e484a837110237c185223c

SHA512
e0bc2c3fbe0647672f53843d3e2633b246665a8bfa451e01bc59435b5691c922e0e398318b68772c4c105d4509f9a953baa7478acf0b4cd34af365ba8dec27e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5183c8f0-0a78-478e-81eb-7edde277c6cf\index-dir\the-real-index~RFe586fbc.TMP

Filesize
48B

MD5
d966978fd69e6c6b32dbebb71995b0fc

SHA1
11e96cd9cb5108f36b528cf10a86ded8bc744fae

SHA256
1775a0b8bffd690c6d0e0ebc90801b5fb7620b89c8ca50adda133386654bc223

SHA512
1a4f73329c6598011d4b10edf6230dc7bfab63508092f372c95621ecf5e11db7d2bf754fb87d788f416231077b4afe05900444806c62a05d965a939f5fc8215c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\5a141636-5064-404d-9593-5839805697c9\index-dir\the-real-index

Filesize
72B

MD5
0582054ca6e4e76329928ad8b266ff64

SHA1
3f1cfa6428f862f397d6dc2d65ae7d24499dcfc0

SHA256
49fbf491197e9a383ef1172a501d99b2b2829e675f265928f677abebbf582024

SHA512
663c1e35b9b9bae8ca7d4a10afeca7c26de6e4117f29db99eab158180334b948ac705c9d1e916be6c8c9a22417191f1186ab314f66f54c796ab177531de78b63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d422f983-c877-4807-9258-8b5d4afcf23c\index-dir\the-real-index

Filesize
72B

MD5
f58f41546a6639a949691b0fe20a1f9f

SHA1
2d0469e0675fcc8f2c02a85a590ae428e54e4e56

SHA256
f0edee9f1ed46a2f29f709a25721145051df14043941489740611712a6fc9e7d

SHA512
e4d05dcefb838f6e7926bdff4f72ad7ec8b9681a8eeb22116eb9b157148256ca0782672e055a90d069f143aa2595be33b7fa2ab79d42640721c269949ef8fe2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\d422f983-c877-4807-9258-8b5d4afcf23c\index-dir\the-real-index

Filesize
72B

MD5
1c3be904c66e3ff1b740e16644947e03

SHA1
5f4c3cdb9a48124239e13002f0ce199e2decde2a

SHA256
88a718e5200425f59eb1725b7980e5b1b61fd84afa72975edc51c093ee52db6d

SHA512
393da0eaa4de9792e5922e99f57f9e2349a5794bcdc3326d7cd09071ea0a53f66041f4a029833784fdcc6f9a8f66d5273360831523c65318c06f9157ee651115

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f056efb4-df3e-46b0-bdc5-38d13a48e99e\index-dir\the-real-index

Filesize
2KB

MD5
b3bc29e6817858ea28bd8d79b84d2fe5

SHA1
7218f1319bde1855a7e986ba432d88fe4dd80f35

SHA256
6e203aa23397a826ea6606b03437b15dd9367fcaf4a197ed756616b4cecf6ec0

SHA512
88ab5be8310ec0c1bbdb47045ab6ec9c647590cdec270b2fdec0228cd46b8743b67fe094f0ec9530e54ad2a721f6c7447d6bb38dc522e0e0965cbdbcbc4e6491

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f056efb4-df3e-46b0-bdc5-38d13a48e99e\index-dir\the-real-index

Filesize
1KB

MD5
486562d56cfc0a2fcb276e2c4be513cc

SHA1
b2a368ffeb0c5c5002afe5caf884ddfaaa79855e

SHA256
75aa1ded639a34c5aa13bd2052ae4706d9b84ffb520d91dadc5b620f2d3bc806

SHA512
513ee204f7e9e1f66187463ae2b1912358f44d883806b522679a38ffdfb85e2296ae4843ebb4d62e95cd508d98f79748f00e8923f23f5552f022256b89870356

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f056efb4-df3e-46b0-bdc5-38d13a48e99e\index-dir\the-real-index

Filesize
2KB

MD5
aaa9dbaf00f00c5af1a3870544d55732

SHA1
25bbb9ad3c4fe20470fd6701b365a108011e62a3

SHA256
ddb9598ed1e3d9611bcdfdc618a8047d86ffaacf214140ae55e139a5b0c762fe

SHA512
1764810878bb596e61a8ba41060727cfcd287e28eb02335ceb0b43305a51304076092e5b97fe01fb75a9fb3c566c2ccf7a7af37b2b0fd33c0659a6dbbd3c7158

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\f056efb4-df3e-46b0-bdc5-38d13a48e99e\index-dir\the-real-index~RFe57c208.TMP

Filesize
1KB

MD5
d25a851a608f42e5a85bd5da58f1e97a

SHA1
f78027d017e70b99d25d374d0ec1d8467420aa15

SHA256
5e8732729626acda713f0970d1d8388c90f7f7762d1029cd9d261f406b36cacc

SHA512
9881ca30ea0ea1bd2b89be96e295fb2e44b82f8a5f57f1efeac5c5b2ed620b924d42ef66ef264d52b9f2b93bb3ba081f69a9be7cf8d5244cf764a8dd2efda1cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
253B

MD5
a063a2da59ed4e0deef6e58b2f8f32f7

SHA1
41013ae224b2e9879b46258e0327080b81f3e55b

SHA256
ce9c612572f6f80b2f2dd122c4a89cc972b5eb6955ac3275910ef0992b4b4342

SHA512
8fbd9a42bc5bd63f8e4ceb5b3870d665f86b40df3b2b8efa353c2b9000be5d5ede71b20354456fd616db501498901269fe1c2ca780b0c80a15e94c1213fb63f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
327B

MD5
4cee0ebebf970ac2ada63566a231005f

SHA1
782da4392d331bdf5485e016314fef90ee5f9a8b

SHA256
44d37e052d4e898f793f3301cc0830181ad61b4ce434e95df6832e6f141da1a1

SHA512
255a3c074b62a442a9e98ad88e424e4d54ea8a6a16cd196ad1089dceb6887fbe086c56f784c2a644867aa9a62e8d06f6ef7bea21c32bc7ba4d7cdf4f05548af9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt

Filesize
322B

MD5
350aa333e5b0ee230d2da9d2e35eab12

SHA1
a840848edff07feb80a32b85a659fc6a1524bb4b

SHA256
a8c5b25bd2a5e847a5e3435fe8da6e246d276b2d875fe966a302f7e4fce10c4c

SHA512
940c27792b1732d782a374b5e5291794a2c2966ee4a17f66cfd7b4edd9effdc1d32117df164a112006fcf235062152834e489f2010d07a620f93b6bfaa5401b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\000003.log

Filesize
3KB

MD5
93a87f18bbf83bb039d9c25b8ee47204

SHA1
bdba6fc5fcb5dd485ccc021fba81cd3ae1f20333

SHA256
a08374bf3adb93a6c04667898d875b2e7512c9108d974aea491b0d78ff77abcd

SHA512
caec5579a7429b22ab8161428b3428386ff943df7d18be1552760a2aca40768075b7348b082d0d68d98c58c742f760a044275e7f62874c3a8aa399fb3b732443

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG

Filesize
338B

MD5
0500f26a0d54abcc67b082059611d453

SHA1
9a74940452d9f53b4fc5a7a4cb536f43f270f86f

SHA256
e150992de3c9760423e539a49fc47212ce3078e693ce48be4ed3dc9f151c3ec6

SHA512
16d7ed86582f01a1e17b8e03fd396f298fc2ca0094623c1688b7eaac27ea10925af32dab6b7899780095cf3e3fb8c1e4929a982d8759df87f2fe8b610e21b35d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
e9aee94a356d0857f831a538497cb69f

SHA1
0369d3acff526c908da99122e7420b649de45d03

SHA256
b8700d073ea28de64e4157109ae75f987ec26fb90d7692a97ed27f5629d0b34d

SHA512
d83e93d407dbd3686a8dc253f87a0243727d23413a1f3a9abaedff1dac555f28111a0983dd385d72522952732a766816a46cb260e64818fb63a70fcdd8ab5c85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
f275c0bab8bf89c6f4f1c30128a62e80

SHA1
6cce7c704e2ce49ee55e7ad41ab43b0d3c9c6f5f

SHA256
4d5a7c78fb06884da89dbb313bc743d27dcba46f868f781fd1f2b19956d7ded9

SHA512
cf3c4a9e9e0187d676f92b1c7a1fd5d75fe10b7de747be96c8b56fffc3953c1c79ea4249586ff5e72d21ad16ae0443f30832b0468ae23ce247e08067f1f9ed62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe581642.TMP

Filesize
48B

MD5
13a8823ca0441c5d7b679d7c70574901

SHA1
8c745bdcef1dafc9ea4374d2144ec0d308ccc8fe

SHA256
9bd38645cf20eca5a4898b0380330d2006834bbf3fe476fd0fb11eeadd1eb29e

SHA512
6a8df2b7c6242563ac00321d5dcaf9ed89d8240eb78fa18fc13d84bd6ebb8ac56f592e0232e459103076604ec41260818df53f7b76c379782e5f91024c9dd3fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\000003.log

Filesize
316B

MD5
efa977f9dd0cb98fd3df0e758b9e20a9

SHA1
add690ce8c4e7b65efabc7349c961fdf4bfa7ba2

SHA256
52af6eb354800f6614b6ac9802705af2e15bd567a2b3db910a75b7abc1c560c6

SHA512
217b1e311eb2de53b03a0c8593f63628fb625edd694796fdd66e11fddfd921bcd12965a2895d26dbfdaca5311f58955dda586ecc426d45a8f77703be18d4568d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG

Filesize
347B

MD5
3d20979ebfa72fee8f9c6d8a41cb381e

SHA1
1303cec5905bbac7d283a9794d696b91a4fc6df5

SHA256
fe99a17d225e27f96c9a3e434e3f386e806ecb74573968c425a2e783dc1aafc9

SHA512
92a8a1afdea486e075622d87540a02ab9d5859dd1fc351daec57e6e87da1a0c2d5c91f55385436f47518fee4229ba83504128fb6842bc1c7f9186b2093179d01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG

Filesize
323B

MD5
663c558baeb9de0a9199fcc51cea843c

SHA1
66774facb17b6469681238aeab21455fa68419e4

SHA256
9f0f17ee14e46bbc2cbf46c71d84f101c78b445321b6aaa8d2cb68b99eb1f7d6

SHA512
9167b99691411166b159a225d3cd805a48aa20c289520efde2fbe72beb313770cbce579094fb08a678cf4d16f5f132cd38732f9b3ec24c61ff6a30b8403eca85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log

Filesize
22KB

MD5
496fadabf65872d3bf55dc452076dafa

SHA1
3970c62342197f2f1060098e241368d485112ac3

SHA256
1d05d2c9bd8b9a9953c3ab845767b6017138a0174cc50e10c8e6f5dad8a92401

SHA512
36a5cf30d7b4d689716610d5225bd8de9ec2bb647015b1ebf74c2cd4daaf80ede265bcd3b5236bb06fda8c047edaa3a418044f26a25618e5cee5fffb91b11ab7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Visited Links

Filesize
128KB

MD5
ea90883b7a97226fe7bc94895806be2a

SHA1
8ec2ed155482f6d2f56ec3dbce866aff5245e6a2

SHA256
8fbd767f1a096f321818aeb63e5dbbe30120ac91c0c618dfea698ecab3315f5f

SHA512
171e0ef352c8d5c3aab106ea1841c5b053f351f19c65e292a1dade14ca959aaf370985d2da4c67673df9f1df7062372af82851c99839359a9d39145677055ea9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
469B

MD5
36d6d2e0eb1b2a036d90cd515dc7790b

SHA1
d395aa69660782696a3248a1551c79a236161061

SHA256
867c71dca4ed4d1735ac6b9e7da025b905654bcf4713b30427d4f8e65aaf1e5f

SHA512
163aba0b85061492bd8b2748bd64f313bb8ad25bee52f8f99e713caff2f3115825bc9750982040ba9a97fa160d676746738d818ed2d4d82a8ecd3ab67c2bfe0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
904B

MD5
35e9dc7f976c440d72db3632a2262da3

SHA1
c9158bb55ebcd8b0bfb79c257a6bfe83bf0f4a38

SHA256
e1c1a76047f4ada480d29991b33bb75b388c7a17bb66c014ba86678589235d83

SHA512
1ab9c8d225e8e9460d25c9c2192874b419d98b16ad1b602dd133e60090ec62dc8aad2047da8014196d8eb3d647fd6297abd1336a7492b2f20cfed1646fa4c764

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\CloudConfigLog

Filesize
20KB

MD5
494f1a3fad5a24e26f048ab2b9334750

SHA1
38a6e6df54d6efeb9391054e7a1f2873a5875658

SHA256
d97b6f3e8e5e489b2617bb824219fca7d3935aab2542bfa05711953073ec0573

SHA512
3c874b5ef79ca3d719b682b14e3b8d1dc7908e8def673640f90cd1aac31e289f030f12aa28ef823a4e47a0acdae2c1ff7c098fe37f0a3eec5006763e8f105917

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig

Filesize
22KB

MD5
3f8927c365639daa9b2c270898e3cf9d

SHA1
c8da31c97c56671c910d28010f754319f1d90fa6

SHA256
fc80d48a732def35ab6168d8fd957a6f13f3c912d7f9baf960c17249e4a9a1f2

SHA512
d75b93f30989428883cb5e76f6125b09f565414cf45d59053527db48c6cf2ac7f54ed9e8f6a713c855cd5d89531145592ef27048cf1c0f63d7434cfb669dbd72

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version

Filesize
13B

MD5
3e45022839c8def44fd96e24f29a9f4b

SHA1
c798352b5a0860f8edfd5c1589cf6e5842c5c226

SHA256
01a3e5d854762d8fdd01b235ce536fde31bf9a6be0596c295e3cea9aaf40f3dd

SHA512
2888982860091421f89f3d7444cacccb1938ef70fc084d3028d8a29021e6e1d83eaef62108eace2f0d590ed41ece0e443d8b564e9c9a860fc48d766edb1dc3d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
62KB

MD5
cca44b6715f2def951c134fdd14c5f7e

SHA1
e730c7796e42f716621bce1fd82a35499bb1db9b

SHA256
0066563405a1daec03548661f1d3c3f13bda35afd690b67e3a484798ca7c7560

SHA512
dd741b15b05ecff44d6bb01577100e9e18a1f30e717fee5639ff1e5a267238eba9838bcf4a12686018f19b061534370d8eead8e06465e4d60772f2757ad0d907

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
62KB

MD5
1f5842a8e78f2d484e22c48dff3f57d1

SHA1
2a5c54b2bae84a9b43339fe395b724d4efa67e72

SHA256
1bcc1ace18c613d8181812109d6c721f04993d03133d449c5582f0cf0186180f

SHA512
b6b124824c859c7094ccf830d1e8f2c38be3959d5765d054ad57fc82c29219888be081dcab38edf788b86f1b46cca48e8901d0af0d15df2bf1ff205971bb0aac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
40KB

MD5
b7033267698c76125fa4493c4845d397

SHA1
decc55fd42fc4b404723434a5501d0fc0df6adf3

SHA256
a940711c72ac9fa527aec4d1fa4307ae16306f46a0d4238485cac20c6d412e8b

SHA512
852a4ba3182803b2641cf5fb0177ca30dfa6d1e23add930872748f8dc485e8d19ac801711dc713e5b8f655927822cb6492db8c21e80856eef94f966391f48958

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
acdd34e6a7fd035f18723d4805ece56b

SHA1
e171327080574752997be3db4af4dafdb33a1937

SHA256
89cb9f452ec5cd9c0b328cabcace02040417180187225691a7def1bd8513f40a

SHA512
41a7a7f7e9a89cb688088874eea8cce6117b7fbd6840027f03d39805b2e7c09b3512a16fbc5d1e04b035f0dba4c385ec32941cfb0170d7e44a8625fa2536598b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter

Filesize
392B

MD5
2f74323c6bd0b77b726c05602226ab62

SHA1
10c6593d5e21862ba41d1f34ac9775b3cf96a831

SHA256
da01e320f65a759c8f7badd1ad980398493af8ebcf19c35fd130741deb7c312f

SHA512
0495a53fe98828cd145ec23476e66f84220041eca0711bc6d9b7b9a26f5050efa8067c7e38c282f8812c3c3c4f8ff855cdeb6c9ed827b84e70e33a237c949070

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe57e58d.TMP

Filesize
392B

MD5
f9826cda364e59d68e9f3de066947261

SHA1
8aa19d0ec9b98f5b5ecded1565c3532e2cf97e5b

SHA256
088178924859038c12248734ea163778fc1f8828d0fde511678435ae9cacf33d

SHA512
43ce041fa461df789b4bc06c9039f799f594d9aea3e247f0a96d08dafde45cd2d7496e87df99bf0bfde4adff405cf35853b5d7037358f3e8551fd200d88f341c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1

Filesize
264KB

MD5
3e206445813f56faeb67928fa6eead6d

SHA1
b86edd0dcd1bdd1eab6d8713b91dc1e3876c7d32

SHA256
6bcf8bab9113bc9099e87566e1a720342d9dbc24ebfc50438a95deb14aebcfb7

SHA512
050c6819d24a5f283a795d7b3063b2efd473578023bfca09e61bad75b3306f9b4ecd8921e2c42ef975d4cc95f2441164392e4e9a97d15e2d2385edf4a20889d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations

Filesize
86B

MD5
961e3604f228b0d10541ebf921500c86

SHA1
6e00570d9f78d9cfebe67d4da5efe546543949a7

SHA256
f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed

SHA512
535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472

Download Submit