hxxps://account-violation-signal[.]web[.]app/

Analysis

max time kernel
56s
max time network
59s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
18/08/2023, 00:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://account-violation-signal.web.app/

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
692	msedge.exe
692	msedge.exe
2716	msedge.exe
2716	msedge.exe
4420	identity_helper.exe
4420	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe
2716	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2716 wrote to memory of 4928	2716	msedge.exe	29
PID 2716 wrote to memory of 4928	2716	msedge.exe	29
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 2504	2716	msedge.exe	83
PID 2716 wrote to memory of 692	2716	msedge.exe	82
PID 2716 wrote to memory of 692	2716	msedge.exe	82
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84
PID 2716 wrote to memory of 2524	2716	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://account-violation-signal.web.app/
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcfff946f8,0x7ffcfff94708,0x7ffcfff94718
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5248 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2124,2493177076706542038,6482420139021290162,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1316 /prefetch:8
  2⤵
  PID:4972

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8411007bafe7b1182af1ad3a1809b4f8

SHA1
4a78ee0762aadd53accae8bb211b8b18dc602070

SHA256
1f274d0d144942d00e43fb94f9c27fc91c68dce50cd374ac6be4472b08215ca3

SHA512
909e2e33b7614cb8bbd14e0dfff1b7f98f4abbf735f88292546ce3bfa665e4cb5ee4418561004e56afc5dd30d21483b05f6358dad5624c0dc3ab1ba9a3be18eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
45KB

MD5
32eda3128ff659283f1b1e610de394ec

SHA1
2b7f4fc8b7012cae11a3a2df86086392c04a8a54

SHA256
6b77155b905275c9772e2ee299219eae7a92978f59bb2ceff4e884e6b971e097

SHA512
94741f7bb85eba1c3dca1dd25284a9a1480a6f7b4487a41fe85e36ae187d393b7b82ddd13ec3200f648d4bafaab9a625fae620e3bf452eb78ace0945e1dae06c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
227KB

MD5
71519b7c2938791ab3505b2da8929bf9

SHA1
8f8fe3251305d821840fbf5ae3842fbf6d9beb92

SHA256
7938dcaac7ee36618c65ca3ff8bdedeaab98dcf793e37d546e9002a9f9c58172

SHA512
0943033baef3ef68303dbeb0a77190bef6825dcfc6e5c8785a578dacccd6252e3d61f3bd85a1c287e90d32905a9857c6ad20008b83075b8867a4c30f6a1e70c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
102KB

MD5
bcde7cf24423e19eeec6c00fcda8cb3e

SHA1
a11ff037d385d6ab54c4efc8be6fa3e895f4da9e

SHA256
7de053523f81c86383497eb870da4b932c15219d8846a9bc00b79a7a78d6368e

SHA512
3bf56b47fbd3fa4802d0f4901f3a6008347f5fa21b8b6a5232eafc85178ea975a7104bc8257b9920f07e8801e63878393a0f2843c64d900888857054c64def70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
33KB

MD5
c15d33a9508923be839d315a999ab9c7

SHA1
d17f6e786a1464e13d4ec8e842f4eb121b103842

SHA256
65c99d3b9f1a1b905046e30d00a97f2d4d605e565c32917e7a89a35926e04b98

SHA512
959490e7ae26d4821170482d302e8772dd641ffbbe08cfee47f3aa2d7b1126dccd6dec5f1448ca71a4a8602981966ef8790ae0077429857367a33718b5097d06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_firebase.google.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_www.youtube.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
985102eff729d0f1779646a1cebd3de2

SHA1
23e8e2d5ef4cae6acd30ab12be84bc4372a45168

SHA256
db429eddf074f7495d91751138c33d5d4a9948c7385bf9c63d3062e4f9c4bd42

SHA512
78c7864720aee5e3e93fa682a51c41763acd8858d42bd3b638c145cde5fb2f6e16b027f599f01f62f1b942b6155cbfb2a3b9bda91bd8803e4a08c0bffb2f5ed7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
24310e24a14d87672b8fac63d17a0379

SHA1
f7fc9b8e081733ea5fd231800a8a71cd30a5effe

SHA256
8d6ddcf292c42b9f5fe15f4fe1fb67448c8cd5e719e29ff30f57d74cc41e4837

SHA512
b6fc2a288f510e9da8ae0ca47acec951a2e3c146b731f4f53007bb0271ffbd11e47de054ac06ae07010df90ecae2dab8d5e2555f3af30b82dccc8ae6c1f2c4f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a4708a07df85737d037ddd41bfb0402d

SHA1
c0b70cff913775c5f15bdd15474760b95dec36c2

SHA256
a07e6ba9c3564e1909cb102c834afc2a89204c4d93f3fce19918fdeacb333ead

SHA512
aa63f1980fdd8a08fec1239c250da5b34baa640c3ace77b3f633e35e88aae6d67cda89bbb16a0594c0c1ba77ef82a92dfd9134c77ae173b8aaa207349adf1acb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c22563c5f3010f3d226691d6f05b2a71

SHA1
922e73de8433a30eb4d3f306793b2a53f9abf310

SHA256
ed6ca67393a9c054a784aba0d7283232f369f3a42fa608ffaf60d88a34625084

SHA512
6ab402659b5743d905651ac35bcfd7cdedaffac880d24ede507dee2079c575ecaea5658525c197d3d9d18a747c9461ec188529fd0e1997134e0a2d2b4e87af2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
8caf4d73cc5a7d5e3fb3f9f1a9d4a0cc

SHA1
83f8586805286b716c70ddd14a2b7ec6a4d9d0fe

SHA256
0e0c905b688340512e84db6cf8af6dbdfe29195fefde15bd02e4917a2c5fda8c

SHA512
084ef25ea21ee1083735c61b758281ba84b607e42d0186c35c3700b24a176ada47bf2e76ed7dadd3846f2b458c977e83835ced01cda47cdd7ab2d00e5a1a294e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2c1f78ebc260f2b7fc89970309d7a143bcb8273e\739ce440-4e3c-4720-872b-c5e9a2bcd818\01e584411362acf9_0

Filesize
759KB

MD5
cdc95fc2ed6ae289f19c9d9cee262119

SHA1
08731c27236efeb61db4690270c746097f39b572

SHA256
082636008e8194b9b2d7ae4523d6cf8d6c3987c12e659fe96253fc9a0b197f64

SHA512
57e59e5f6c4ffd28f42d417779448a432db3e14ecc3dfac6c1d2e3f4a1b26e37709bf8859f72d638b3f475edca003be66fa0b7941b7949ee9009f977c40c6078

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2c1f78ebc260f2b7fc89970309d7a143bcb8273e\index.txt

Filesize
130B

MD5
6ac77f58e5e3b50f916354695a781a40

SHA1
94daf1dd42703f2c648c0b5e1ebb559319a97002

SHA256
9eaec48956c7d0188e9411b5d399c268c3b1eeb338680f710f7b4302b463bf2c

SHA512
ab801ef8f2a012888af570daecd12c2af81115ea9345f39191736df6c30715ad86edd82f203d359b1a45a0299cf29753d688434efb49e92c87ff0c6d6e151fbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
26B

MD5
2892eee3e20e19a9ba77be6913508a54

SHA1
7c4ef82faa28393c739c517d706ac6919a8ffc49

SHA256
4f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2

SHA512
b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe593167.TMP

Filesize
90B

MD5
1b2d5ef22e612ea265317c041e4f1c05

SHA1
3213605b14692e3aa5e4ba56be68ddf5b0222e7e

SHA256
a205b69fd677660fc43cd2a8a2b480744d49d85e88899be7db781310d087fe20

SHA512
6bacdd1fd5761a4c61570dbd3f0dc8b106da0bd90a08b01a0d6d7a7d1ef00cb00bf580c53ac2eb95fbd3768f2c9685ce2a4c4c6a354a5a591acd7b16c02db463

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\416f8821d00b192f_0

Filesize
5KB

MD5
47fdbcf60ddf7cc0517402676541c4e3

SHA1
37a51602ed04b7a1a08f36567611cc378dcb290f

SHA256
af92b94f8d79eddecfcfa22822056fd43bb938b05a4fa987ff22373897fbe2e8

SHA512
8029554f76e2fc8965bed3890fd9acb78e0a8de3a58c9d13710794b14ce7268ff1e62885b6ba97c56ae7046b2f47ffcafc6a85659bb5b02e9c85d621b048fbf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\488280dcb9f69967_0

Filesize
761KB

MD5
8434641d4496c622b4b3ee17f456de76

SHA1
477ba04c1dcd82b7a634f40b78145b121fffe9fd

SHA256
79223a8233cbe1d127651b899700342b7f363d7bb2ba301e5026ef6d17ac0209

SHA512
e4cd6861656df65bbeccf11a8bfdf5f6aae5ace259ae2b61526e0f50fc008f611e280f46c6e94fcb9e89b83e64d41a63739307a5d81b850108140ed06fee4c6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\4cfed8e0e4d02db4_0

Filesize
16KB

MD5
8f39a03ffa5e49ab3df40ea2463eaf9a

SHA1
6bff82973c0439d7055d2d57a9ed24203cf49df0

SHA256
a548f13ba0a81776e0a70686b026e0f5b3e25dfa5af87cf02691d08c1919847e

SHA512
badbf87d61f03d15c9cd55209d28d8b24835c7cb0f00717538ee7346768f223cc8b4f119f9bb069d5e09eaf6a741cc665fbd0b97d26a5e3e427e7ec579992a3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\9aab37ef8e35bc8a_0

Filesize
133KB

MD5
c8768bf691ef847b0f34f2773bcbfe6d

SHA1
888e6898176ce75727324a586f6b612fc9d980c0

SHA256
c309758141372484581d6c88a9fb964d61e89959ff547fe5aa1f8094c1f5370e

SHA512
964d420275388bf25609aa47757ef292aee97253b11cf047f2f825e885f983c53700bb4dbbdee340f0644740bebd0fc7f10909d47476de81b1a1d90dc85f06b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\ed24379cdc7b0e3a_0

Filesize
28KB

MD5
dab06fda8601f777b212ee66d7a84bb9

SHA1
452d7c1930f1a303d9eea1b659874a5423227ce2

SHA256
0caf635c9b25910a39dc8b886201e5d14103bbb557b73114bbe8ed81dad423fc

SHA512
1a19c91f3a269959597793733eecdf765fcbaaeabb584ba4dd3d1cee79a1207bbe14ed7fa6c632b36124938a7f35fa4e137e028acf09fe47892919eb14272136

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\ed5675d3604d6661_0

Filesize
7KB

MD5
80e5fe29f269a7324b4857394a2a5ebe

SHA1
244a219a5d1515136556cd71b94d01d537d2b65b

SHA256
5972201b31a9eec3f9c35c179cfbd95c9ddedf6255d658e64acd8b987d3bdda6

SHA512
4cdfd4728cd488288aa928ca4ef06fe8b42262b7c13a809bc3800f46ce837cc045fccd98f35fd8cc8ce7480192bf4ecbebef4bbde826e12454bf6382e0c4a83a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\18120062-39e1-42eb-b91f-8fc8fe1824d2\todelete_e30e30f379734569_0_2

Filesize
6KB

MD5
94b6beb0f376f7d46133cf70d32cc5ea

SHA1
b4270674e959c7c140221265d32b57b5e196bf15

SHA256
f633ccfd8f460eac43b3d2ec2639f3adf8dfa79777933716ab63f535bb65ab4d

SHA512
f2de9b27c73aab0dfef49a85217955fabc268d8ca54cede6b8b119397550180c253a9e30163b30e246de34e764ad6bc1c94a3ba15e72ea2967504eb2b5641cdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c03035750bb78718ecae3de22487a8433cf8bda7\index.txt

Filesize
109B

MD5
0e9245851822b5ed1dd3b7696d30eb8e

SHA1
88e119650b940d8d2b7401da4b0042a2cc56480f

SHA256
04840dd122154b3b5484e04a4f9b44fea26f8cea4a350dc6801c08f6f8e94b96

SHA512
eb7028ca6bd34d69c54947510d759a2bfdb3c2b3382b3572d8343c97b380fcbcc754c65cd46ee78c40e8c347d23c06c81646a5b549d1b1cad9f4bdd380754806

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
9f80804faf3ec6fea0baa5d3b24b8561

SHA1
c8372594ed9e4646bb1b61577f53672383e36526

SHA256
2945e6481e47a6dccb7b062ae609dca8aeba32411cc29866615fd2442ec97aeb

SHA512
2bf0ee3505da531bb322eee4c99a4b8b7036afd025a5d8226bc01aed652114eb3e48df9b861ea5fc55a7447c69dc0682411bf3e6d245b1b903886b486c669330

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe590d06.TMP

Filesize
48B

MD5
d55672a372a3f097c17f77cd4a4359f1

SHA1
e2602c021e5c427d530d177c1c3a7ea00490587f

SHA256
4416f662d3e87ffc8a4e25ced659dea4b3f8e1c0be10982c6c2b224fa60b5459

SHA512
cb16ff9d3f021518b64cd848f988d79aa90355e2732ec39e3bb48c9d1f5657182b5262af4ab69be10c1f2e96f4b2468245b64af33891d6f8f4c384cab1b7d7b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
8085ddb9f972b33b1386376c399e5217

SHA1
444323fb099e8beaaa782be38354cb26d163aaa4

SHA256
2686104c88b85469498769dc519ce1bd4fd72d12ea3a4aa4435d49bbd2096ab7

SHA512
9f4a86512ab186e9d1e67df82b4b9971b267de8114059ae9420dc5203f4fae8e16606bd3c6657060a43124f4d4ed1767765c13a8f216e52802c5a765ae2307b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6ad2b47140dfcabc816cbf38ef6a83fe

SHA1
d6dff83aabadc175fc524b50adbed4c3d46b10ef

SHA256
e1aee6e5c80c65cea8d6d858b4edd6703eb9cf3441ecc549f7f00c4d57086716

SHA512
0637fd20e7c044d48d26fce9eb9a6dcd254cf64320e607f36a18d5e70e776fb59c6c0c1f8049ba5c849594eddf819578df95afe7b30646677f8d39958ed2f761

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
66c5be8ebbcdb20a9f51f354b1364236

SHA1
ea85ddc75d53c3e9c9082f982c921aeaea96a9f6

SHA256
837b005a434c692120803f0185f3f3d343ba7e9dbb70cf9b6298dab1806191ae

SHA512
498b807509372d8664d538d20562fbcfa762898bdb46f1b7ab1a7669b2558e9d4f3d85d8faafbd89e464f4848eee4a51654d35df500e777108329e7967b09bc1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58d879.TMP

Filesize
371B

MD5
7367dcd8d3d6fd6d6d5077f947eb2869

SHA1
20ce8267484bf5b64d23e6f3f28e3478a92c2333

SHA256
19bdd31a808b0caf267336ffc5648ef075468a9bcc859768e9d6761abe88f1a0

SHA512
57ed16b806fd5ee7dc2e71fcf955573504ea14ac66d69f31c23df8f1626403ba781afcac2deb443564d95fceb43fb4b9d25874d8ada4587355d5c8e4c7c01a65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
6fbbbcea9b3c75cd3631cb74e48f341b

SHA1
3667aaac1fb0d52d8685aeee2e9392fbfb1fad2e

SHA256
bd5634935877761d3f228b47089b875045111cdda7d0e9fbbc7ab3612f84fac9

SHA512
8429d241a5d809e7a9fb5465c464e5ace0ea2985481540ca98ced188b13d4a7c29c5b73713bcc4df8ce80d688066592a8c8aeb7bec08e2ce642f6306a7a12b82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f47abffb-69fe-4b66-8f1e-45b606f5ddab.tmp

Filesize
12KB

MD5
4edf296394a6ba2199425c4448e80043

SHA1
6b555dc814b94a6cf91b12bff8c2c770a63fc3a7

SHA256
ddf59c21a5704650244b38616fe1a472fb31058d4e7e41859d40d45622780b30

SHA512
fed621399218acdb72a4c18ab84fa00a14d6d397d6fd9129a3ec87f27c087bb5a090630e2da5bfc034e8129803aa99da8556417c063ba088adf9d2c4f7520df7

Download Submit