7f03142f8b41448d6ab2291d11c6fd2d7954282f2b2e85ba7756faa841423e96

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
25/03/2024, 16:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

de6e86cfbd91ec6547506848fc757eb3.html
Size

428B
MD5

de6e86cfbd91ec6547506848fc757eb3
SHA1

30096c674e3bc3925d474d5f78943bb9c017eec8
SHA256

7f03142f8b41448d6ab2291d11c6fd2d7954282f2b2e85ba7756faa841423e96
SHA512

223d38a1ead0745c9a664731e2420de56d06208916b288e73a6e9578934db7c5cfbe9dc1cabfad8010c3955b79cb05fb36944d64a27fa13156383a42b2575a45

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4812	msedge.exe
4812	msedge.exe
3572	msedge.exe
3572	msedge.exe
4956	identity_helper.exe
4956	identity_helper.exe
5940	msedge.exe
5940	msedge.exe
5940	msedge.exe
5940	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe
3572	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3572 wrote to memory of 4864	3572	msedge.exe	88
PID 3572 wrote to memory of 4864	3572	msedge.exe	88
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 2756	3572	msedge.exe	89
PID 3572 wrote to memory of 4812	3572	msedge.exe	90
PID 3572 wrote to memory of 4812	3572	msedge.exe	90
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91
PID 3572 wrote to memory of 2328	3572	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\de6e86cfbd91ec6547506848fc757eb3.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xdc,0xe0,0x104,0xd8,0x108,0x7ffd345946f8,0x7ffd34594708,0x7ffd34594718
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3928 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5020 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:5348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2952 /prefetch:1
  2⤵
  PID:5584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3004 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5316 /prefetch:8
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,14072953339290856786,8824137730344095512,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5084 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5940

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7740a919423ddc469647f8fdd981324d

SHA1
c1bc3f834507e4940a0b7594e34c4b83bbea7cda

SHA256
bdd4adaa418d40558ab033ac0005fd6c2312d5f1f7fdf8b0e186fe1d65d78221

SHA512
7ad98d5d089808d9a707d577e76e809a223d3007778a672734d0a607c2c3ac5f93bc72adb6e6c7f878a577d3a1e69a16d0cd871eb6f58b8d88e2ea25f77d87b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9f44d6f922f830d04d7463189045a5a3

SHA1
2e9ae7188ab8f88078e83ba7f42a11a2c421cb1c

SHA256
0ae5cf8b49bc34fafe9f86734c8121b631bad52a1424c1dd2caa05781032334a

SHA512
7c1825eaefcc7b97bae31eeff031899300b175222de14000283e296e9b44680c8b3885a4ed5d78fd8dfee93333cd7289347b95a62bf11f751c4ca47772cf987d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
e411987e506a236a0a4b8a4d91eefea2

SHA1
5b8d24b28ad2dc95c6f91a378f69442c461ec22f

SHA256
54477adb30be4f6b61998caa9f5d75603fe637128fc328d93a7950a795ea10e3

SHA512
e85ce50f3d60b669b5586dae2b4e0fe3200942dccbc68472f6f6850174dfcdcc72b5ce35b7d183982e9141c98446b6021aa650e5e7e209f98293f749cdd1f0bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
9ede0ebc9fc559c9fae42604630981f8

SHA1
f426d5f922a491c87fd9de41428c64021b7aa378

SHA256
3494e8a1a12807cd369eab03759b3b8768d4c422566ba976f4430ead1ac3de6a

SHA512
84a961345d1f479c6c5040b1cc310b0b28d0672a8d998ec8c4873f12d531b395b8c077ac780b4da39b0daf9be5c1746dfa58f1e447b5f8e096327c267673c697

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_best.aliexpress.com_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f3cabd5efe9ca55384045a4d35d75791

SHA1
229433d5ce964dd48eb6c0409169878e25562c30

SHA256
754571e8ae39b6ba344ce0762c626537a1f46cfec79fd6a2044765cc8cb2510e

SHA512
42f03b1e582259280a4fc6d6ccf183397f115f481b62c8a612a89345cfe9625a8525ead4c4588cfb62dfbecf650a1432c2106fe03814d76728a5ce73b7e4a715

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
550a8975478b3c0f4350cf28d94c6e0e

SHA1
12e26c6bf625942bdc0051ef80e54e3aa33aa1ac

SHA256
d491712bd896e28978579a23afe797b530ce3157c904fb675fbcf17cc114fc9d

SHA512
1215e657851eec0d31179e6c386fce5b70f31d1b7f41fca7cb4e92832421b35c05d6f04f6da8a885d24d9cb5c0bf10fe3ec4885aae2665e8788d7b2da51cfcb8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e12bb63652adac2d29bedcf262f2748d

SHA1
6cfc0fdc2bfd0ae6caac7db2d6191baa9c20b242

SHA256
7b5ebe07a82558a949edde0ec5cb4b14d13da1841d955c13d06d3eb01f759bf7

SHA512
767e8837f888bca53a3f02e20cb0b7e2f9110d020764a57f826fdd312ed137110c9d211355f99ccbf987a69be709f3d93e217b6e752a6b7509f3ce6c80044227

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
88c0e9d3e8ecd267e5cdc8fa989fb2fc

SHA1
4d4c3807060edfe61524421bffa6e55210e48b7f

SHA256
cd0677c21d7227c976bf92ccd86b1fcc1a1a48695ddb34bfd12afef7245297f2

SHA512
f10ce7ea23c9ea7182763db78ac2a471a98c131085e1b0451cb3dc57f1983c3af243cf9a7dcb9a4f50649734ec29dd7314c9042c14c91c7d0717e6abd4457834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
cb81407f3d0e5cfabb3ebc7bb9f71661

SHA1
07e3da5113d0068715a90f60ef93cd3ba84aeef4

SHA256
3191169ad280928dc3e5e4877706be32005994ddc3ab161e72083ab7b673ed30

SHA512
5d5bf72a353a2624d68671a2848b0290358f1fc8ebc6e0da8bab7ce0f514b7509a4f0aab49bfdcd8cf8ce17b9e661c959da4d397c0fdf368d4c6a154f83ca1e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
0509e5ac4a0065af436b9b78807f7a5d

SHA1
dc5b37511e94a0e5d4fa72373c6f2aa1ac55141c

SHA256
1cb2f331bd22fd0910ba50dfb66d33db62257fe2d46306234afaa50bf4bb4c98

SHA512
50e5ff6844b49ec098ac3c6089c88e9849f6ad465365c5b4f4d7b843c2e7a65e70fc28a2ba2ea4d7c2a520452492cd77b6f5f9f9ff35787a4f4535f5441eeb0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
ed314add4f611a21b0382adfede1ffef

SHA1
5f56597ac67a6975af65692693428de7a434a3a6

SHA256
4bc57c3d221a38f27046fc0d314b980f940cc5089e2156f73c385b6d68385b78

SHA512
2b129aa4df941b54d367ab6b361ec063b949c42d1c29960e856f7b94eb3e7c459046b3c61edcc9ffe3c66b4067627e0c80952182efa9638228f7d11dac4f59f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
264B

MD5
39524c8654eac0858f377f8c5f1dc5d4

SHA1
247b9f93920e1e82383a5bd50785cdd901d4572f

SHA256
598db82c4129ef28ba95fa85db6f347bc451fa8aad83d0bc75c71b250c659935

SHA512
5fb881110f91df986a50240da15e995d0455088d4ed16e43c081fc10ccac5f5c05ef1debc56b22f35ca8324d6ac546d98ebff662e3fbece91c039233488f1b96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57be10.TMP

Filesize
48B

MD5
3d3318f0a5bd34fbf6aca34b6bb5b697

SHA1
2bdad662ba875dcd1b7221770a3fd0ab0979a327

SHA256
ab5c22883a768d7898ca802337d123963fb70ad454138cc2276bc7a93086ccad

SHA512
a4c1aca85da87c681fa5c0dc386c5959c17c0a86ee2cc056898efaae881c5148d8fbafa8e8225501b13d96c090aa033e03f7e5dab173672bd8ae7124504a8fe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
161b8f69804c5fb4ac7d96192ecde36f

SHA1
e825613c21df89551fc737ec2d6732def69cc794

SHA256
eeb02bc5f265e7537400f07a8fda0787bc2e743f8be94289038ed4262956ec39

SHA512
7c49a849fd26c33f3fe359abff3d678c5f7dc04aef350a7222cc3110926463fd32d8471c38c90f0e6372bb0a294b5c37ad4c19b461a64c28a7c14e3e4cf6304d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
6e754a6d3fb38269d5c53dedb53edc75

SHA1
3afc42fe1196a140c07a59c5222a8136c81ca347

SHA256
ceb1accece0c85b70ab14fc4719b6997991e3562326e171ea189f146fccbc56a

SHA512
8a0d1a33d71b7d53ebe0e34e6733a6f93c0efa6ac7feb50362820b520ec42edb12c7e91fbbbfc8ae346bd360bfcdde718c422711749bcc28cc8d1106dfa71759

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
66ea33d3b0b463b27294472c6c128419

SHA1
cc60eea9a316e340e482df99ab4c14b2c4dd4cf1

SHA256
da03953488a706586aab4d72dcd9404853f0264e21cf94a823119b5187093803

SHA512
6a3d65421c84c8890cc5664a5f08b281c50017c14329ccf526b0b49570deec305d9c74c99af31dd51b40c3b09f05f0e49c903815b84b668e63629adf7520c633

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
3KB

MD5
a87e53ce17fb0b7862ce2132892d811c

SHA1
8b2c463fadf583d474757af579741829518c8ad0

SHA256
52645d6275cdc46340dec0ca9ab2577d77cec9768c444d28918c50a087c2dee4

SHA512
a8b2e9f2109ad1e4ebb7f1a8f9f97e82754da35d7e41ea0efa1ebf5432eb84e29a621a4f0d55b335bc64bd5ba174aba813182e2bbb4cf86d0372f6a8e9c17291

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
c7d9bdfab327ad42a59620e0056cb59f

SHA1
a9a890166e1a5135d375938202d32881023a8dc8

SHA256
40eb5c3d4e34f5a3cc28664dd48cd4e7b00bfaeb81e59169ee19772a6d440fe1

SHA512
f23651ac0b96dbb3458eb564039f4bd50d60daad566256471ec4e3939c2c11a8e94dece6fdc26fe5507bbec06751c6874205e0770eee4eb009be2cde34016c5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bd26.TMP

Filesize
1KB

MD5
fb85b9691eef23f587bf2e4c511367a8

SHA1
1741ab3a817f01912bf85f02ee7b2d193dd1cef1

SHA256
cc3458f5116f12262bcaf1ad510852402d449199619e697adace3d7ba9cbdda7

SHA512
13e09b326decc9c35599ea7cb3e7957feea2b0782a2c19387584ddc9fadb25e1d898c143f4f45266e83020898107015f24fd7a8835d95885d0f1a2349c55d354

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3e24fefff5528ec88be4ac630d7fd72c

SHA1
82c582c86e236db3a687660ae865a482a75ec1bf

SHA256
9475f078761cb14929d7a89cb7da2dd2b493c8277b5fe0969b8b689585d2ce6e

SHA512
f208a60bce6fd926e0a72eb126f0d5f33b671f3c82ff21c0cdab4c9a2f881381fc8b5f612869fc99b3ed9863a7fef036368119155a09149b8e435d9e91b24fd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1e2aa574cdaf086cb969da7c6f079c48

SHA1
85678d10f1b4a2e7bfc276a25d84f226d2b6188f

SHA256
390015be8ff282dfbb3ff03e71a11e86ff53d9a098976be2830486e649b408f0

SHA512
98e2b4c75157cedecad68b8d8bd7a2ec04427120b45dae8a67bc449c3c8dc78e6b030306cdc2de0a3c957761de97fc594128307938ad826959f3c52b71a0213a

Download Submit