f35e21b543cdad4b21408918207886d391609b8c55dded9476564b270faff68f

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
14/03/2024, 14:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c8d3bf0cadf1c632914f7977a2a7b8c0.html
Size

432B
MD5

c8d3bf0cadf1c632914f7977a2a7b8c0
SHA1

108cb5cf52c68a634db6933f04d35fec88705f26
SHA256

f35e21b543cdad4b21408918207886d391609b8c55dded9476564b270faff68f
SHA512

6ecc7fef274cd52edd2ec74facea907490fa214494694e364806f08275c3b92fabfedf96c2d5d9ea85ac2909b2988365b08cf2badac0ef3e8c6351b2b20e4b0a

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2444	msedge.exe
2444	msedge.exe
2356	msedge.exe
2356	msedge.exe
844	identity_helper.exe
844	identity_helper.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2356 wrote to memory of 428	2356	msedge.exe	89
PID 2356 wrote to memory of 428	2356	msedge.exe	89
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 3332	2356	msedge.exe	90
PID 2356 wrote to memory of 2444	2356	msedge.exe	91
PID 2356 wrote to memory of 2444	2356	msedge.exe	91
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92
PID 2356 wrote to memory of 3188	2356	msedge.exe	92

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c8d3bf0cadf1c632914f7977a2a7b8c0.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb073646f8,0x7ffb07364708,0x7ffb07364718
  2⤵
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:3584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:6096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
  2⤵
  PID:5424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4936 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3964

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4124

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
cbec32729772aa6c576e97df4fef48f5

SHA1
6ec173d5313f27ba1e46ad66c7bbe7c0a9767dba

SHA256
d34331aa91a21e127bbe68f55c4c1898c429d9d43545c3253d317ffb105aa24e

SHA512
425b3638fed70da3bc16bba8b9878de528aca98669203f39473b931f487a614d3f66073b8c3d9bc2211e152b4bbdeceb2777001467954eec491f862912f3c7a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
279e783b0129b64a8529800a88fbf1ee

SHA1
204c62ec8cef8467e5729cad52adae293178744f

SHA256
3619c3b82a8cbdce37bfd88b66d4fdfcd728a1112b05eb26998bea527d187932

SHA512
32730d9124dd28c196bd4abcfd6a283a04553f3f6b050c057264bc883783d30d6602781137762e66e1f90847724d0e994bddf6e729de11a809f263f139023d3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
d97943a53bc55a4df2085058683f053c

SHA1
38ec6a571e5df553407b2d61666c28ce5758653e

SHA256
103584ddfcfff190b8fa29c37276de45468c1432a73aac338f77edde0c90c07d

SHA512
7c32c2388a3c3e153af2564493797174cb7ab7e81ef09e52c270be45a4b629ce9060485c5acee6c3f12f875fde9206fb94a6867a26e629e3b5c8725a33e7988b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
bbea1a2376b06f52d9fdcaffb0bc574a

SHA1
82fba6d18ddb24301f22d08ac8a31d27b1c01115

SHA256
89faa309bf54bf3321605a9e03bf13655a9fb3542950bf205214159c1e4021c8

SHA512
df7fa9ecdeb97069e363ea4560e4b7bfa807a7c3daeaa71f788282515c5225c9f31e0b35a765438e2c733b6794b341d0e6d5857344a6c8666f64a9c27744b576

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_worldfreshjournal.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ac0a93d928bcf1c63fc47c131b21a439

SHA1
e27b2db2914e10b7d78e5c49145f9965163a9b67

SHA256
ce6c5613a5e7b564f0c73eca15e0bfbca225a2d812da4e588e2826db06d503dc

SHA512
8bacb570b2e845cd92e116568456f2ccc8421454588bb5b18c0f51f2fa27bade0e1900dd8994b8510d40de375a625815e55891f0f6a3abe23be5d548d6fa8063

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
51edf0bab8ec4692b96c4a23bcb39e09

SHA1
3dec144e3c0a934ccd48fac1a6727376a2b7ef24

SHA256
7c3e08f58c8fdb7da6c97b11ebede1a01cd4ad1bf394e7e7dfb914ee6a7120cf

SHA512
da2dfbdd97d30fa734d9bb86bb80ed6105151e264470405553e093497c94f34948111ead404e28f3d7bd2eee7d9777bfab040ebc3559d7fd51c067f4d2c0fdf4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
63ded485be1fbe23255ff6f27a868196

SHA1
29b73ca78b2c88d7f2dc9868570732a6126cdf2b

SHA256
99d903e36e2f0ef8f28c7ecac0f310522bcbf29dd4abf098cbac3115e373440f

SHA512
b63a8d5a11763f02de80fbfb34d869b95b4d41fdd60ea335dfd68ed0f015e6a63420fd47918f1bb2b2d3c663f304c4f1cfeea3a013b1218371228ea068d35319

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4ed7a2e423d0160c36fa13c352ae512e

SHA1
69fbeb550376414becfd090bc4c8c5c8f3e02415

SHA256
299df44ef7c7df1e60b860cfd58e0693519066ee913f45817575d39dba58046f

SHA512
9146c5d6c249ce1d8a7b12facf9c002cd2a3908c6a7c98c02304e50bd0a7036691ba42d4d54d3694562422a16048d7b17dafe793d0b7389032261b63e5256330

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
33769ec1b190babab0175260ebc93c1e

SHA1
5135b5e7574ccfafe1cb190200c3f1118dc8745c

SHA256
d3593d47bc88d39032fc92f38326fbef5f7e019ea79d91f1f520ea24288aebb9

SHA512
9418c2a87583e8fb9f2609031f9bdeb5d5efccb0f33afd9479513cd07e544678fe601c343e96c71b6da4aa3824f211ade6011d08470c5744160ae656292603cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
ca1b220e5728e02d15cbbf7e23f871a2

SHA1
7d2fadaef856e9bfe992f94733f4384b59983b9c

SHA256
92f945d6ff28c457a739ce2384d841aac5a59d6ac4782048aee26f88ff33335b

SHA512
58de6e24d4849b4db70d1f5afd71638779203f03f736c490de74aab7b0fe824c148d8616e363939f60675caab18b70ea3221c99466747f155c522c9c5af64333

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe578e36.TMP

Filesize
48B

MD5
bc467ae7fed95094ca0f413d7976ec97

SHA1
bb00c39f4d752621c936731126a3c97c7c791d31

SHA256
011bc2b8042fd9b19a7b706e7703685541280343eb19e4a291b2a3c3cf22fe27

SHA512
8245608e332e5119977de27968284860003f240c08d97e1d22e5d2033141d1757466eb805d27f7bfd332379838984484635e745cb3365c285a9895850b2cf6d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6c7ce001f884d9691c4b15eafd273da1

SHA1
36cdd1a49bad011b2425101835a4af94881feb1e

SHA256
693f85a809eec532b9d51a732e9ebcb939023237d1a793ee6339ca31c667e269

SHA512
c4f43bc08fb4e1e4af518a81632ecbe6b5bc699ff355f12c0e61a6b7d37b1d528db5b4f0d324ab9e344c2827b6c41f5a3ccdc5bd565517955e04fc53ece47bce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
328cf1d7b3f5b36e59ebcd5c68c44e46

SHA1
8031f0f1f1d827bd1f8c0928e78271b4c1527401

SHA256
30d195d9becb4cf83e3a2f695b4472ccccb0647c0f1525b2aaa5e290cc38c4e7

SHA512
6ca79418229a864b1618c4ff0378a64a9f5cef3b7fd72312b4f1210cb9d74869d91d0281fc83b6ab258afd42e80d95beb379d3d3c8ef59927ec5223d5f65d971

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
494879e5f92208ec3a233689dcc4516b

SHA1
e142a6481bc5927041ce76cb5aa70f1e635f16c8

SHA256
364ac5bccbbb8a09061eceb853be80cbbd5913a74a949efcb7ed0f6da026f5cd

SHA512
fbc7872a6c368f0a377f145e72365fdfd4a7b9c408bfd009832208a661405427f1349a453a7f35a708ebc1bb62f2ef13bb897e35b542bfb3beae3ef76df964bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe578d6b.TMP

Filesize
1KB

MD5
1b0010a80e0f4ef0d0139f75847e494d

SHA1
9860901e96fafa71ed49fb1ad35896d0b5008420

SHA256
874d1049fe2c82036e64d9527643bbbad83851fca3d8360aae44a549ce180e8a

SHA512
d3cfa73d3d7dd9c283c971cfce0126fb3865b01a41d1b14f54c60af20a66cd5c9f3078d504d1baef5649e232d7977e2f9fef8d1627e2e9c0e28d71eec7d5850d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
83627a369a0c6d309c99ed8536bb0233

SHA1
b9461ebc2d226505b9aed8ed5417f57a71e619f3

SHA256
cb03154c31c49d831bf32879117fadf31a21328a63dde6a6afca468b7c725b5a

SHA512
4eb479f195f392b3d01b2e37bbf2c36c41ab6aacbf5363b0cbf1ef60eec2809e72b68a4260761071ed6f097747831534ae598e898b840cfbc528e45e14e4c485

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
8c4ef4ffdb186631b860742bc6d5b165

SHA1
9e28f673d155df25435a6a870182a4f586fe22b6

SHA256
76bc2e50787e070716046f70d14a4282609607180450ba64acdb672d9811b155

SHA512
9c6a4aea33ef9ecdb21056cd855928118aaff7c0e07394d005f685c0f1f8e654098c8a4c3bc951b100b80c01069bb347588b5f1e64bbd9cae3dc8a45f50e616f

Download Submit