db516e0cddc360df20755705756869a3ecf77d68ac1b8766b5c8f3965920430a

Analysis

max time kernel
153s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 13:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cb7966df3372abcccc9c13f56e8e3be4.html
Size

428B
MD5

cb7966df3372abcccc9c13f56e8e3be4
SHA1

a62f4958bf3f20b1587f8070fa3d4c1e8a80c57e
SHA256

db516e0cddc360df20755705756869a3ecf77d68ac1b8766b5c8f3965920430a
SHA512

94b482ec885bb235eab9f7a338bd78f0f559fa15e76907983d839c330a89f27ef14fe44c9c5fb23190e6e05987bb71d49f4fa163aea920162128823b6cd084c4

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
1008	msedge.exe
1008	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
4144	identity_helper.exe
4144	identity_helper.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe
5960	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe
1112	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1112 wrote to memory of 4792	1112	msedge.exe	88
PID 1112 wrote to memory of 4792	1112	msedge.exe	88
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 3612	1112	msedge.exe	89
PID 1112 wrote to memory of 1008	1112	msedge.exe	90
PID 1112 wrote to memory of 1008	1112	msedge.exe	90
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91
PID 1112 wrote to memory of 4892	1112	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cb7966df3372abcccc9c13f56e8e3be4.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ffd655c46f8,0x7ffd655c4708,0x7ffd655c4718
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:5432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:5544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,16326778390462683679,12635653730020236610,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4732 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5960

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2788

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e494d16e4b331d7fc483b3ae3b2e0973

SHA1
d13ca61b6404902b716f7b02f0070dec7f36edbf

SHA256
a43f82254638f7e05d1fea29e83545642f163a7a852f567fb2e94f0634347165

SHA512
016b0ed886b33d010c84ca080d74fa343da110db696655c94b71a4cb8eb8284748dd83e06d0891a6e1e859832b0f1d07748b11d4d1a4576bbe1bee359e218737

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0764f5481d3c05f5d391a36463484b49

SHA1
2c96194f04e768ac9d7134bc242808e4d8aeb149

SHA256
cc773d1928f4a87e10944d153c23a7b20222b6795c9a0a09b81a94c1bd026ac3

SHA512
a39e4cb7064fdd7393ffe7bb3a5e672b1bdc14d878cac1c5c9ceb97787454c5a4e7f9ae0020c6d524920caf7eadc9d49e10bee8799d73ee4e8febe7e51e22224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
81a5b5145753d1c1e2625959fde136d3

SHA1
54859055592270dc8561d8c72435cd21d7560c0c

SHA256
c2f63fdded7b817fc369360512e75405c4eeee4e35205f27606ba6a1867c0500

SHA512
eb6b9198c7261e175b473daac04211b51af7254fe4ac7efb223989dc05d4ee0641bb3f5e5c2bb1a41b97eff0f8e8fc0ac551fa59496d0e2d7c469dcf4b7f5dae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
f92bb31bb6a02389b3801f9c9810b832

SHA1
3ca24aa6643187124df06dbc7b48ee1a7e4b38c6

SHA256
422a17c69537e341ffee5a528860c2c0fa5f9d303cbe5378f693097c659d3030

SHA512
5774c2345b6733a67d55ac51158d53ea81e874c5246d282ae9058617ed76300e660b8e3c086921c64e85ad1a443af4b8b4c72f0588aeac17e6aa5888bf83dd8c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_worldfreshjournal.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f2bc61f978da568dcae21691bc0ffefc

SHA1
4db667a39000245b513203e22392d8b6879bfd68

SHA256
b316f5ea7692476eaef51cba8850f1c70de628ae95632c3180f6435e6b396d6d

SHA512
b2617c6c4c54cb39a2cca8c1cc8dab77657b288819450986fbdfbb95ef99d1553a7b8933be4265cf89e69cc0ce80ea7585a77aff419b06e5f7a134b7f4817377

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ac58cfb8d2f1eedf95eabfd28ece5b27

SHA1
6aafcfef0297f991257abb853a859b34269d4b5b

SHA256
2d582a5c3f956e46d16963eeeca54f9f41d204df45dce8baad156548beede798

SHA512
692c3405156d39bf171641fa5033e4651e6eea29922c686d1467addc6a62d38f6d5ec044ed8978152d3a96d8e51b6b234e72700e9c4c7e2f99262981c1a2b82d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ca7895d4630478cc60f6b09d3a45497a

SHA1
80b9a7eebd934a11d0d6b6b5315c304054608d2e

SHA256
c7b09e46a7a0cf568abe0e519a72ced4a6191a72828951d20b3b9387fe3f5951

SHA512
070cab563f0fc4f837440160ca30b61fcceb736f56713173488b5bd1eba41a244b941b75b9b2beb9183e25c10dd1b81fdd534be95d33e09db1d9e42250706947

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
d7c9c39a57c508187fb398113bd42aa5

SHA1
2155e2547bd617a2aec1795ad19de94101fae514

SHA256
cb637b3c4f7d0216328ca13f8c815aa56d91ef432521674ff1f6e8f616bd87ef

SHA512
b8fdd51404b33775e97dc009b24fc20d0f905ecc1b6ba34bbf09155ca4e94153075a15134214d3d7c214acf67af66fbcc24d9b9ebef7d984b50afbf0643769ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
444b566e26daa17b783f5ef7142352c1

SHA1
dc0097757ce18f2f7b1e6ec64b9ba0fe5635294d

SHA256
3ef43f5874a9f201ecbafbf05d425b10338375ba155940ecc29efe83c4473e74

SHA512
17e9a614c642898aaf542093fd580ec6c48b984949bdd2f0608861ed5783dcb86bacacde1accaa2ce7e679a07b4f1fbcb979077d1aa9080f1832d310ea931fa0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe581037.TMP

Filesize
48B

MD5
6dafcb54478fe053e70d949dfa4247c1

SHA1
9d16251a07bb742bbe3d1b9cd16d17291d9095e0

SHA256
f926ff8d35998b73dde25e57a90bf4b06485783a102d0848ae76e60c2c8e1c74

SHA512
93b86cba1d11a9ee94ea033e7775a13ed2bca8f28027540e1b8d13662167f0a039fa9cb0722f5fd460f0e557fdb7baf65939f75ce61434aa23a49c989d457d6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fcd409bf9cb2e49f273683e61d20b2fc

SHA1
17743a5f2d6fd5ebf71c8b0c7baa11c8d5f42f31

SHA256
08e9352d61e1b78f9ddd6011632228329a0a15c5447252507372dda156f2a240

SHA512
8ba040348437df853b3409d11b441e267d66936b67371526e809549c07555872151665d952d23ed77817b2df877e2b7c0aa077ba70ce24658c024c5796ea3bb4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
62f97cc68693a8d002b31cb6965dc761

SHA1
59b3f9cd88f2298e92c958eccdcaa4c13702800d

SHA256
819cd10604c6a68b22c0d0513b90f1cf0d88922809fb25d8a8aa226c3d770289

SHA512
0990b5b22db3365bbaccccf9a59108cda3acbf64e7cc2c12b2a01e07a2f60cc609686c2ab771c042b5ff42f5423db8bd7d968f47087fb801f0ab1d55440ae604

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
a45f7e8ba8c1f26207e0dfd8104a8003

SHA1
15ba11a9e3d94ff836456861007841d4f591ad31

SHA256
0f0054cab66c1c3ab0ddfa3cee65072594ae3ad10ff50c6c22f072e363c7bc18

SHA512
6835b3d425e617c00522ac2aa412001249106c2acad40d165f8c45447566e036ba7cd97e087bffda27e4e9baef521dba3d064e983098838fdb66a3e109437c1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5801df.TMP

Filesize
1KB

MD5
09f843508a662052129f2c116d5c0fd6

SHA1
15ddae8729ad4e0c25ca207589e72ec082b221f8

SHA256
7dba1aaeb06964775c09f831d8175438facc67172a3dff808e191738ba919451

SHA512
156405cadfbf5be13ae980fc4136611e53b81cef5bd5c2e8115169f93fefbb8c81a98e396b782e8a159f99dbfd31b3b1fee64e8519ab9d19df3b0056b286c947

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df783137-7050-4943-96c1-92a98a02c4b3.tmp

Filesize
7KB

MD5
050f23c7e8ccb4b9dde8507e84f1572b

SHA1
c6f2bdcdcc5536cc807465add655497086e784c6

SHA256
198f3901491b71fe92ebf7b93672a5d43d636510d408d5eb4265ed90e130db24

SHA512
a44c8ae48ea247c9c205a3230c2d1c8867075931b72010daaf3c9c770c5a9467a80c50117c3854880f330269e279aba1e3e60ac16f68d835d233d05e4d3e2003

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ca57cc3a049fb9cc4792f4c6515a8b24

SHA1
b4ebdd9bfae6dbc22f85ff6157fcdadc8a4d79e7

SHA256
49c7df34cc9c4da20bbaffa3a2bbc911c3bcd0f86da05d18f17170526a9a57b4

SHA512
127644c082b0e36bf36579649b08dd7dde83b6e2d9084960cbe7cb3db94fc797fbf0cb5d18235ced89004511bd23eaf1248dca51cfb2cc9d08659ee666b2c730

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
53f24318e63c4426a22a97618279582c

SHA1
32310af263962b19e41acbab6600d32cf64a69c6

SHA256
700dc636ecab07b5c973a1777cdb7eb7d3ad9e95e939ec180d31d59f93d3421e

SHA512
dc29206776950a77b21a0c414373ab78b131c95ef30323b4c58fd76d165a9893757a3423439792c9a845719c2cac05a479ddcc63a2b4b4cfae4371d762f3a6ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0dcbc25a1b7282caad68166e645a2299

SHA1
80300c085741559a8594d8891ccad54fd10c55bd

SHA256
8b37614bfbeaaf98991487a020fc13646c1b3435ce1ab65c40467411375d0375

SHA512
06b940ed5baf4e083782e645d74ff6cf475d3320276230113c3885f333acbc0c44b8c749852941f9902e32b81e41a35c771da5a72b2e4cfdc9a8cec31e115f6f

Download Submit