Analysis Overview
Threat Level: Known bad
The file https://pub-034287c5f4dd42a48da8dfbc8add7d6d.r2.dev/webma1l.html#[email protected] was found to be: Known bad.
Malicious Activity Summary
A potential corporate email address has been identified in the URL: [email protected]
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Enumerates system info in registry
Suspicious behavior: EnumeratesProcesses
MITRE ATT&CK
Enterprise Matrix V15
Analysis: static1
Detonation Overview
Reported
2023-10-26 11:41
Signatures
A potential corporate email address has been identified in the URL: [email protected]
Analysis: behavioral1
Detonation Overview
Submitted
2023-10-26 11:41
Reported
2023-10-26 11:47
Platform
win10v2004-20231023-en
Max time kernel
291s
Max time network
279s
Command Line
Signatures
Enumerates system info in registry
| Description | Indicator | Process | Target |
| Key opened | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| Key value queried | \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: EnumeratesProcesses
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
| Description | Indicator | Process | Target |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
| N/A | N/A | C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | N/A |
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Processes
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://pub-034287c5f4dd42a48da8dfbc8add7d6d.r2.dev/webma1l.html#[email protected]
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa134a46f8,0x7ffa134a4708,0x7ffa134a4718
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5396 /prefetch:8
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4516 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2072 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,9928763264736757430,12228815323517951384,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4628 /prefetch:2
Network
| Country | Destination | Domain | Proto |
| US | 8.8.8.8:53 | pub-034287c5f4dd42a48da8dfbc8add7d6d.r2.dev | udp |
| US | 104.18.3.35:443 | pub-034287c5f4dd42a48da8dfbc8add7d6d.r2.dev | tcp |
| US | 104.18.3.35:443 | pub-034287c5f4dd42a48da8dfbc8add7d6d.r2.dev | tcp |
| US | 8.8.8.8:53 | apps.identrust.com | udp |
| NL | 84.53.175.8:80 | apps.identrust.com | tcp |
| US | 8.8.8.8:53 | 68.159.190.20.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 35.3.18.104.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.175.53.84.in-addr.arpa | udp |
| US | 8.8.8.8:53 | eu.starton-ipfs.com | udp |
| US | 172.67.217.18:443 | eu.starton-ipfs.com | tcp |
| US | 8.8.8.8:53 | ajax.googleapis.com | udp |
| NL | 142.250.179.170:443 | ajax.googleapis.com | tcp |
| US | 8.8.8.8:53 | 18.217.67.172.in-addr.arpa | udp |
| US | 8.8.8.8:53 | image.thum.io | udp |
| US | 3.217.38.209:443 | image.thum.io | tcp |
| US | 8.8.8.8:53 | t2.gstatic.com | udp |
| US | 8.8.8.8:53 | 170.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 209.38.217.3.in-addr.arpa | udp |
| US | 8.8.8.8:53 | webmail.bourbon-online.com | udp |
| US | 8.8.8.8:53 | 130.47.239.18.in-addr.arpa | udp |
| NL | 40.68.95.2:443 | webmail.bourbon-online.com | tcp |
| US | 8.8.8.8:53 | 2.95.68.40.in-addr.arpa | udp |
| N/A | 224.0.0.251:5353 | udp | |
| US | 8.8.8.8:53 | 43.58.199.20.in-addr.arpa | udp |
| US | 131.253.33.200:443 | www.bing.com | tcp |
| US | 8.8.8.8:53 | 200.33.253.131.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 103.169.127.40.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 15.164.165.52.in-addr.arpa | udp |
| US | 8.8.8.8:53 | t1.gstatic.com | udp |
| NL | 142.250.179.132:443 | t1.gstatic.com | tcp |
| US | 8.8.8.8:53 | 132.179.250.142.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 240.221.184.93.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 95.221.229.192.in-addr.arpa | udp |
| US | 8.8.8.8:53 | ajax.googleapis.com | udp |
| NL | 142.250.179.170:443 | ajax.googleapis.com | udp |
| US | 8.8.8.8:53 | t0.gstatic.com | udp |
| US | 8.8.8.8:53 | ffde.nelreports.net | udp |
| DE | 23.32.238.113:443 | ffde.nelreports.net | tcp |
| US | 8.8.8.8:53 | 113.238.32.23.in-addr.arpa | udp |
| US | 8.8.8.8:53 | 8.173.189.20.in-addr.arpa | udp |
Files
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
| MD5 | 6276613a51dae3b747451bc05e24edfa |
| SHA1 | 96ff591013fc8d378a9b37ea580d8ec6e98bbde5 |
| SHA256 | d17c0519716f5fa61ccf7289220c5e8917a36fbb29e48a86bb1122c9e3fcafb0 |
| SHA512 | dc84cd5df4867849039ecea2c98b1aeb435399b9503b1384159b2d08fe180b9f3daadc98f55c6ab28faa1e66dea8abfa4e702232a7027d933b0eca91fcf6b5f3 |
\??\pipe\LOCAL\crashpad_3032_RAKTVHTEDCOYAWIP
| MD5 | d41d8cd98f00b204e9800998ecf8427e |
| SHA1 | da39a3ee5e6b4b0d3255bfef95601890afd80709 |
| SHA256 | e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 |
| SHA512 | cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 3da518731ba61f30efb5a1b2110125a6 |
| SHA1 | ee2676cf11c7c6a831a67d0d4bd323202234f952 |
| SHA256 | 83a46a283f07d092c113f9526f932f9082da45443fd20f9702a7be4602e771ea |
| SHA512 | e3a3ad449b7bed9b10bf59e4ad9da13089b4914132a7a90b4a11f3d4ac810edfe0c73809d718e60425646b16c9d2e0f5871f776a6ef8f1ab0643d85a4b511d5b |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
| MD5 | 6752a1d65b201c13b62ea44016eb221f |
| SHA1 | 58ecf154d01a62233ed7fb494ace3c3d4ffce08b |
| SHA256 | 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd |
| SHA512 | 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
| MD5 | 4b1f5abec90ce7fa7ac0a073e82b7dfa |
| SHA1 | c7a232e0a6b4270673ea375258582bacf5ab18f9 |
| SHA256 | a5af3eabea20109000364beedbda8ba4a2ae3600be99578883f52516befbe8eb |
| SHA512 | 4dc7e0d480121dc473d2007545061aec4fe7403fc30bb149912900fee8de14d3d35fd5f984bc5c4dd7a93deeb0e4ed5c59fcfc08e0ff072592374bf99fb61558 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 285252a2f6327d41eab203dc2f402c67 |
| SHA1 | acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6 |
| SHA256 | 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026 |
| SHA512 | 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | a7ea032ab83722b5a5477542b682ff3b |
| SHA1 | 92bb2db260e8b2d8f1f9279135ed1d19f3f0bffd |
| SHA256 | 44f85ff91b51296143e3bfc29a419b7e41db9748f1ad40e776f5efaa5d22b9ee |
| SHA512 | d86cb558dbbeb809d786385c4fb52d63770170c181375973700c14f29723fd248b18129b4e4d50d9f85f55f7ba288731dfbc88a3a8a4cc149d3dcefb3cc91a4a |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
| MD5 | f1881400134252667af6731236741098 |
| SHA1 | 6fbc4f34542d449afdb74c9cfd4a6d20e6cdc458 |
| SHA256 | d6fcec1880d69aaa0229f515403c1a5ac82787f442c37f1c0c96c82ec6c15b75 |
| SHA512 | 18b9ac92c396a01b6662a4a8a21b995d456716b70144a136fced761fd0a84c99e8bd0afb9585625809b87332da75727b82a07b151560ea253a3b8c241b799450 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 05e627d698675159290d7f23d5d4c616 |
| SHA1 | 60b20b8bcbc6a396f75f4ad09f8f77186ae9ca52 |
| SHA256 | 4954effd85919c3ce27e2de1cd908cedeba5518d1058649823a41f68f66c7f95 |
| SHA512 | 1a6c2582476cf889651eba26900bdacbdf38e6158711ec9730d2299e949e7580962cd89918f0eebc260a9b493d87f2057b07acd4e4bd6d4585c891ece22a0bd0 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 2c16c15d788d0f5d05293c2854a91856 |
| SHA1 | eb99ea708a9cb13db8f9954fa216cdf92cc9b1c1 |
| SHA256 | 3dfe1f9273081fc1fcacefe966f658c5e54f65f36882e2c20fcf1ef453b2675b |
| SHA512 | adf8361f1a2bdd0b2e758eb14b6519c9e37f4310d0ab53f43543ae130185a62cd1e123745a01f6a1e30c5946449047cb42b467315d41c0e44640e5566cb297bd |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 139c06efb2e2ee537e466bc19f1d0129 |
| SHA1 | 0b26afb5cb99509b23af593f5c5bb90a023ad661 |
| SHA256 | a4d706bc07a1499a62807ef78db6f5d5940bc607a413ceebea648591bfdb0f11 |
| SHA512 | 5474e5b10ad96d2a8a6edc8d3768d89642636f3222fdaddcf0b4e4cd96410f97b01329aeb092866be09b8f3f33aeed05fba14acf0e92477a12323a89c230903e |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
| MD5 | 4435a5a96b07817a3f6e89f8ebc73c1b |
| SHA1 | dd061cb287ab2086b12f326971c8d1215c39baba |
| SHA256 | 65e715d9aa22b748f56365cad35f451f4ec7b8af4af3437834ecf2fc73ba1645 |
| SHA512 | bcc49e4c934342c5dacbcc1b383f3ca5dbd2d28859ee23772915d44773a62e863a77d29d7625cb195efcd6d292208f4372a0032ef53d6e0134122dcc47294445 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 2c6ff3ad20527fba4bcf3625aff3c52b |
| SHA1 | 6c54a16f3f1fc1a39a1503de76e5924bec0f6412 |
| SHA256 | 62a54cf649feb0362fe38f0b3f858146633f0a829656447d596c97fa71d79a97 |
| SHA512 | 889b4eb51e7acf0444d111b51e189bd34bb76fa5d211c5ad1acefe923fd78ea264538339eeacd40d75281232948b0e3731be29631c23f473affe54cb9b284344 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | e05252cabccc69bf58bc7f69dff2d859 |
| SHA1 | 0386d9826221545d562223335660c33ab4671edb |
| SHA256 | 5f788eec26362b3f407c78ef026b51bfd9b3ada9da6f6ba8a655305478ec115a |
| SHA512 | 17963a84279a87f1d6d3bf2b0af1ce059ad504216ab0d7e20e815490cf5838087110651126af74183a0ca43a1f5824111b0ac61518d5018aef9feb279392cacc |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
| MD5 | 1b9d3ea8950fb18241cf3a310861b967 |
| SHA1 | 7011082fcfb5edc08f9ea531be77542ca43568ce |
| SHA256 | 0e6946ab15bb94bda5ab6782b3e1d3a15e7a2a8c2d528b8197024edbc8eb993e |
| SHA512 | 7aff1b027e6c8eab40fcf4724855bc88607c5706680a2adb78aef8894ecac2081603f4a793e31f8a23fecafbf36c4b827e0b9f22521d4e9e73fd063337e59d22 |
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
| MD5 | 3ff87a19d16d8be50ccf9aa9f6d93f12 |
| SHA1 | 283247f6005fc99bcd290ad529e72111719becc2 |
| SHA256 | e18b347fa65b6f95e21377fdd75b731bfe83372a452046cc76234a41c990546f |
| SHA512 | cf59e55d1c29c76b0e39f6aa5390fc9f07a77f1df0f83a64cd22c88af838506c8577e8f414e4b72e11c5c8b8b7eb2b366b8490692e820ccd125b8ec41e87d2a5 |