a1cf9dcfb38d5b46b404e77da2e9d6a8e68ee5058ad65e2007e2fcc334e883b1

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/03/2024, 17:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c12148ea8892bf6c34fba56c4e23fc44.html
Size

432B
MD5

c12148ea8892bf6c34fba56c4e23fc44
SHA1

63cc463b01502bac5456df00f30e62c2e8b50e6a
SHA256

a1cf9dcfb38d5b46b404e77da2e9d6a8e68ee5058ad65e2007e2fcc334e883b1
SHA512

91ce8a0dd00a04503e11ece7b63dcd0149c2a4053f3cba849a3b4c69390ef555520abb51349f95cc88f9a4f672e9a87d95e45ab73e16b9feb7c0e2667181d4c0

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4588	msedge.exe
4588	msedge.exe
3308	msedge.exe
3308	msedge.exe
1708	identity_helper.exe
1708	identity_helper.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe
3308	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3308 wrote to memory of 4444	3308	msedge.exe	85
PID 3308 wrote to memory of 4444	3308	msedge.exe	85
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4596	3308	msedge.exe	88
PID 3308 wrote to memory of 4588	3308	msedge.exe	89
PID 3308 wrote to memory of 4588	3308	msedge.exe	89
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90
PID 3308 wrote to memory of 3216	3308	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c12148ea8892bf6c34fba56c4e23fc44.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb33fd46f8,0x7ffb33fd4708,0x7ffb33fd4718
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3332 /prefetch:8
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3480 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:5124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2372 /prefetch:1
  2⤵
  PID:5376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6924 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6301772566844087021,11898796882070460419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1360 /prefetch:1
  2⤵
  PID:4456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c6136bc98a5aedca2ea3004e9fbe67d

SHA1
74318d997f4c9c351eef86d040bc9b085ce1ad4f

SHA256
50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2

SHA512
2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5c6aef82e50d05ffc0cf52a6c6d69c91

SHA1
c203efe5b45b0630fee7bd364fe7d63b769e2351

SHA256
d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32

SHA512
77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
8d90ff456eb832bd0dc8bed9e7b1c52b

SHA1
1953444a427fa0a7b6e7e8b23a6a0be03759f195

SHA256
836f2ea5e6dcc440899d797eea6c4f6f30ec2aa5f5810021193abafe02838a50

SHA512
ecbc79080e47904c6875d27e601e7266b43d5eef56d21e38ae97a13ae0185b2d97285d4aa1f7525f45dbcb1ff7f49135929ce8cf2a6533424e85d3064056042c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_worldfreshjournal.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
3bb40eadeb7b99f94846575c5471726b

SHA1
2f3b2c42fc3b16f182cff1933623f9c95e1bb76d

SHA256
4bf0a970cc975a73ff90863065e0c794bd215a5bb5068f0c1dc3cb8df4886c7e

SHA512
477c91a447d65bffe2c9ab206f089de8695ed842af0bb4bdf4f273d141781e02ea76d58e9e98571285177ef18fbc371b90a4149666e0dafe711291ce975b89cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5b22f5bcf76b006be671ed2867f94cce

SHA1
c71c1815d01d0efb96ed0ee87c28e2d278f62756

SHA256
a725c122a9f36bf5155514546956e6fab34ac513ea68da795241b8cf0ca7597c

SHA512
3288366c997d53e5fdfd0cf408eadf6f4693ca2ab350908ddae396bdc74617a1a82613d0c56e31833427d4bf3ca7043d5963ed702e7a1e3732f8ab6d49c4cd00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
beeef738a7b0ac161635de68c139ab09

SHA1
e700c841f4a1e752db4654839527ffd104ed2117

SHA256
a98a64a5fe6e9ab52894a3d71998844362734859074848d1de12a543c24b6ae2

SHA512
3c820fba1e88f9e5ef29ed2a3dd32077761078cadc0ea1c0a29cf7dd1a771086db205711c99e7914e2859df675b6b6697b66839b2e56e73cd4dd71ed6cf75cac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
019192eba8556504f1e7340ac6ba8ccb

SHA1
d6ecb50e0e09792423d6f1b390187a898fbab67e

SHA256
db36e8ac9c3dd03ecd28c6eef58b057224165c9df6d11591ac7997966ed06589

SHA512
e5588d2663466b0cfdc35634279c26dd6c4037e72f98a99e8e6093ec956ed5f2e12bd5bcae1c9a49487f77592c93fa903bf2ba835d27be1065de902eaebe9e4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
b8f6d54bcfa75d9fdcc7411123e32af0

SHA1
7d242c068a0b7553b32072555eda0bda6922f3f6

SHA256
3d1f43841bf97c81bdd64667b95211c0d02f8f238ac0b929846958519d4c8405

SHA512
4648b9af21773a01aedec6e254db225efc5260f0abcb10ef2fd109fd354849e5af803296c30cb30dc76379f630db339d4ab4201e7fbd4d2e060a987b6092c181

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8817cbdf9b8f8a48d40c68ba8d587f54

SHA1
4638c559072093707cf61fb83ff36db3331fdcfd

SHA256
2d40b9489b53810649ff8dd9d4b06f3dc536e43f40457ee95cdb4d41d525402b

SHA512
b399815098625484dd25c6b255262345df6526dba3ce18e60aa030fa78f990984cdd8323a284c9a7c60f6694964d3e2f4e19fa3cf853c72900394a677a038f44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
5bb6a3c0cd67fa615104b90b504d9f03

SHA1
1c4dbe1faad128d3f04023197925a7863e77fde9

SHA256
d9f93f1a1cc6cb8f7e32c19d8d9e6f3759d32374ec87f3171fd8106f530c094e

SHA512
302d18b7d03602775b063ccbdcacd679e4ada14b7f06e5d2206a15d283c70bfbe504408f958f97e2dbbb54f144252816f2c1c65a996478b53d95d7690622dc90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
4ad0544f415d197079c2e8f13e97d45d

SHA1
2e391907dd9310f60bb1f9bf26765be8384fae86

SHA256
388ec7b7d938421affcd795d34db9701d7488cf88deae8dd501bef820b885bcc

SHA512
d7e7741a23553ec6d85cdf2fed07a7b2c9621c7c822ce8da1034bfa60a62086f54cd4b602781ac2e83b6baf28fa16eb686debba4a175f53f7cdda0c9b5a82ca5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
49b93177aeed98e99a28ed985e38a892

SHA1
0093c36437b5e6fe281d6e965417655b40dbc3e6

SHA256
7cc1de55944389383c404f61193971815f7e52e7fdc68f386d225b188e430c20

SHA512
a2afb608cbdbf9642a8fc6b2bba9e10e8b172a37192fd0a058bba7267debf6be1744608590f4556edeec052c305a01db347d76bafb599fab0cde77ef84509ce0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57ed00.TMP

Filesize
48B

MD5
f5566a141710ede851b548e1da1df5e1

SHA1
35f8713e53c593a24494bcacf5a4edb52d954fa6

SHA256
b04f1053ac6b15d9240ff3ba8c83ca812b811b9d0bc6ab560c969b9abb7a4798

SHA512
7bf13bb70effdcafc7afccb58365590ee23adc72350b2160bf639ef3f14361e9ebbd8d5567572b393d284ab3bcecb05b4c1e003f41e87ccbf6e136795afcdeaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a931f04f027ab81e37e847593dd1a7a6

SHA1
ffb4c76ed9d84fd79f4b2d1cbbfd804c3f7a4ef8

SHA256
bb6c6f9e50ab7c7fa57c0c5d410b382c57bfd173518fb8a1277115e7ee5fa142

SHA512
36a8783f3e332d8124401bca25195150e901bac2701a0fd1ebd16122d38c84edb678c0b3c27616aa17bfc8eaa73cc61b709c615ee2575a615623c481d4027235

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d77c6c10b5f9f3369389e43dd0ce33bc

SHA1
ef50124ecb513507ffe020b24e42023757eb1be1

SHA256
cd7bec3b9339f9ec81742355f442383ac246d33388411f5bf63893489ee6af6f

SHA512
20271e9209bdc6efa3240aa3c52c2af1fbe0ef9211c3cf649d0dc3a8fef967abbfbac655d75af399a8e912fa0d3b69de8c7ba99c726ffc106a44adf4ef4b3081

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
387bd100a80b51f8238e64af472b4bdc

SHA1
0f848665ec962f4a82c3276ca70ff8b846ea4002

SHA256
f1f392a863219ae65af5537d358ea7c9490e8118a9ce9e1bc256c89b65007961

SHA512
09d38a1aa079f2242c7db0156936f339f7a481e2521fd17399050f190fb84b85decf762c7793b793207d910629bb62558df213c1e9fbe434188c04b6893d2607

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
a34ad08793080a64e1022f5737fe4c2a

SHA1
bdc35a4cfc6898afa103c28306649db7ce09b6dc

SHA256
c0d7944484a04ac138b3ad50556566a6495a148878db3acab401fd55fb2c3df5

SHA512
5a580d33101b9c28650102a35fb2ed29a9e7bcb7abb6ece32ce122b7a430804e8f36848a5f390cfd85703981e257246afc17fa7f3e4c6ba4851b413da6bedb8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583459.TMP

Filesize
1KB

MD5
9d9a88e3ca12acf80ee69fcc92b67178

SHA1
105007d8a5310959bafd060ac3a54a07f7c42f6c

SHA256
7c0ec94f8741804a186603744e150a7a4c03b9480b2f4af078b4c9b886aa1715

SHA512
ada4b34b3b638567e03bec795acb38ae1e4521624967f61d69ce1ed96411c23c77e659e107d37c5a13d8ec3307a2dafa0d8f1cc209de1a7635fdfa3b97b97f47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0e294480e88856aaa6ed4406ca4dc183

SHA1
b81680845bc8fbd7d33b4834b72eec78ff8c5f0c

SHA256
bbc0a100d7efa8a42035b358ae27f5693ee1169297023430837eff5d58886199

SHA512
4597a3362b6020c193859e088991f47c10111b184f6936bfe038653c6906644f1bf97fbbbbf935d5e19eb7f82a98f59523287321412892a86ba018c9ceabf9a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
86a723c602c035937949ede13936735d

SHA1
d974c46244f410b30da6c8503e19eb2e0422923b

SHA256
873234075d4d843d8cd78fd42a8a34c7b3d20b9fe9a6cfe728c6e3c4b3aadbfd

SHA512
c16739114f90b3c697ceaf6a06a0aa9b0e636bdad1d8874d24f32a062f6e8bef45ce80a2a52636a3caaf63729577a37632bc3ac281682e30d5a449f3a9386425

Download Submit