Analysis

  • max time kernel
    2695s
  • max time network
    2696s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240426-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02/05/2024, 12:17

General

  • Target

    http://youtube.com

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://youtube.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4512
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffffc5d46f8,0x7ffffc5d4708,0x7ffffc5d4718
      2⤵
        PID:4788
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
        2⤵
          PID:1376
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1148
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8
          2⤵
            PID:1340
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
            2⤵
              PID:3236
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
              2⤵
                PID:2020
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
                2⤵
                  PID:1664
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3872 /prefetch:1
                  2⤵
                    PID:4520
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3560 /prefetch:8
                    2⤵
                      PID:4028
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5652 /prefetch:8
                      2⤵
                        PID:1484
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4896 /prefetch:8
                        2⤵
                          PID:4392
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4896 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:1724
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2188 /prefetch:1
                          2⤵
                            PID:404
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1700 /prefetch:1
                            2⤵
                              PID:2116
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
                              2⤵
                                PID:2136
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
                                2⤵
                                  PID:3784
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,6790788882063221562,938388245255147689,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1360 /prefetch:2
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:3792
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:3576
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:1940
                                  • C:\Windows\system32\AUDIODG.EXE
                                    C:\Windows\system32\AUDIODG.EXE 0x464 0x510
                                    1⤵
                                    • Suspicious use of AdjustPrivilegeToken
                                    PID:3104
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:3024

                                    Network

                                    MITRE ATT&CK Enterprise v15

                                    Replay Monitor

                                    Loading Replay Monitor...

                                    Downloads

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                      Filesize

                                      152B

                                      MD5

                                      2daa93382bba07cbc40af372d30ec576

                                      SHA1

                                      c5e709dc3e2e4df2ff841fbde3e30170e7428a94

                                      SHA256

                                      1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

                                      SHA512

                                      65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                      Filesize

                                      152B

                                      MD5

                                      ecdc2754d7d2ae862272153aa9b9ca6e

                                      SHA1

                                      c19bed1c6e1c998b9fa93298639ad7961339147d

                                      SHA256

                                      a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

                                      SHA512

                                      cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      504B

                                      MD5

                                      3dfed971c6ac0680c9af1dcab627743a

                                      SHA1

                                      ee73f36aeb68784b52981508c5a9c6611c87d42a

                                      SHA256

                                      6630bf540bfdaf3cd847c344e8e487b56bab83f94e6aec7415f0295a04889966

                                      SHA512

                                      aeff0714c6d7d5748ada96a5234acb4549b334ad4ad36c5121b4ee74df6146737d19be20ba622fa20aaf4702ca87d7c2c7218459256a8b9e3ed1ac322fbf0220

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                      Filesize

                                      480B

                                      MD5

                                      f47b57545ccefa83f9c48d45b1794173

                                      SHA1

                                      117cac053f626696f3746853e6a8571c8c582d32

                                      SHA256

                                      0c55e4c6cf97517c1e645c67fb3cab4071d6ce0db839a745480661072b6cb1ed

                                      SHA512

                                      c5c28905bd1fc1807bd7029fe76c389f86729bf45ba188e026c3e3fb8b5d20968b924d1f80b537c7335e337f5a935c9b768af6cf22f4f18b57370e65049a9fe5

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      53e64789a532ffa672f96254e9e7b23b

                                      SHA1

                                      fd82ea878fc8d70422c455927839d449b5c04d15

                                      SHA256

                                      92a9bfacbe020ff49ab78b3f33d542ce404bf9a5e0c6fa3a5eb89ced92f00018

                                      SHA512

                                      5b88c9f2a9b51fc7652abd832474d9ee67be1ff5bbb34f5ec9558b3d9f477b4b3f86c872334336adcb64c4324f6bd49fb77e85c379831c15a6a4ea34b5068118

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      4d66dd7236eb024b1dd7b9f0736878a0

                                      SHA1

                                      30ede83233a86574d721d9ae20092bf2af6a738d

                                      SHA256

                                      47282ff55e0616dac3f740cfc045697affe4e14fcc8565982ce2f9e36eff5a4d

                                      SHA512

                                      86b52933e3777aba361d2f495bb4296dd79eb78ca3b0b7738efcd5b4042b0dbfe64986fb776f0ba458a4f2d005d7d3ed4337cc583f724855175c9f9c51016f2e

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      2KB

                                      MD5

                                      400216a20ccb4dfe3ad0104f167e0ecb

                                      SHA1

                                      5ceb3f112397517584582f07043f2dee46a86547

                                      SHA256

                                      ccd1f314e407713db8862d9f4a42226a35511803e757dae6d1a9fe736c980677

                                      SHA512

                                      d637072a99b01449b414cd56f5de280c5e0958c3948947e8fd1dabfcfefdfc1823586002c965d5941d5594a78bffc87fb7980cca6e59863dee8d01caaf5b7b37

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      c337c29b931ae3a8e9418de1fb4ec915

                                      SHA1

                                      7f8cfbb9ec255cbe6b6f8ea08de8e2b5bb501c38

                                      SHA256

                                      c57b9b9ac23eaff12c99f077752614c48979f79e752a332bb2831a701278e87b

                                      SHA512

                                      3ce4ffac76f2c2f2624c586cea1e0a10e7e33350d53f42d1977d6ba341288c965e9b463060b955c4f009f52fe9593e7a4eb28013b5900a9949fbe15a1ecde2b1

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      e11260fc9946e3ef86ed1786e2bac17a

                                      SHA1

                                      d855899771094e2e602646f6978171e40deea022

                                      SHA256

                                      880f90d59bde35a02736cf16c8d0a6cf84de254341eae1abe1e3ca1858ad10c2

                                      SHA512

                                      85f0ced87c61a3ca9444c3d99929b2878b3b6a9dd11d8318f8bba872a1442527385b4eb33eac1af36f62f9d4e5679085fadb3ad711fc78b4998c9eb3ed37880d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      b2be0f03f6d82d232e1397dc66bb4b0b

                                      SHA1

                                      d62688521f22d9c3fd99b6dc33c7099c9968d79e

                                      SHA256

                                      91b726be0e696f27f15f84e0439deaa449dbf3fc1c2b14a5c1ccd545f2d1c73d

                                      SHA512

                                      1504c49fd13c83733e2922cc47c8fa4d872c4657d138b47efc397d3bac4f361e058119799e2b120bd3dfee8dd90cfc3850d8ad972615b572eda09722a8790b3a

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      87766d78cb193f0b955454dde05ffe43

                                      SHA1

                                      85bbcf15256c8f32cdd7def95af90a7b2c3d385a

                                      SHA256

                                      927c9e87957220d98962234b22c616d6aa7644a6c29fa49d736284980e13f849

                                      SHA512

                                      528a8ce853bf57fb1cc43f7e45d7fce900d3e4abcea65bc43c38e74034bffbfd3a6314c594bdad6741e5d0eb846f349aaa8ee5777197e2abc3314e24e4f5d8d6

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      239a60b4efb0fc1a9c393e4230c469c8

                                      SHA1

                                      1f99a2acefc9bb17c373b02a3608d0e848ce3e3e

                                      SHA256

                                      f4d8800fa9dff2fe9ec23d760fc52b169df631a3a40ba9eafa48e0c83d6ba4ee

                                      SHA512

                                      bb762bd9a37d278e3ef82f5ac5d37bc4d5425a17fb561cb8f347d75d38bc7f1380bc97d05b0fccca49b28ce2b31e997de61e224aa30cd53cfe7e226d7cc0151d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      0d82023b71c2beb74f7ae1a54e19f2b6

                                      SHA1

                                      f878b4dd2825a1a9d657640758011284e9b8cb53

                                      SHA256

                                      e004117337e18f2e5de9cf5830c62ab416bbdaf4919a6c15357c3897f8aa9526

                                      SHA512

                                      13bd1c6a81b3421b8d43639e8d76ff86417971a240d0b349fb9d47723cfeb1fb980cecff67491bbd8a5b5445bfc0dae565adea8771403cbae48ac881f958a74b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      48b9deeaaecfe289e67700ff2d4fdf61

                                      SHA1

                                      cd69c141e31442c0abfc99913b1c07cac4834693

                                      SHA256

                                      9f189da8da26cf1620b29ea43bec4f03850789d908baed8bef4a37e9b9e243ce

                                      SHA512

                                      e263b85123ec66c7bf59078651b2a5422b3922240c41bd747763266cfb68de9a6757bedbf1559700930e520fa86f68dd6aa6fa50f602a6267d80bcc0d1eca315

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      570e50a5d8f33ff1851e764550e0d68b

                                      SHA1

                                      fd38db1b0790886c62a1a25e6a4dce701d0314a0

                                      SHA256

                                      1a864022b6b085a3908cfa17a0f6fc7cd4c2971043a092f98cb845a0f5667383

                                      SHA512

                                      6332c0c9833e5b47d587e1e00e6d261c860887dbacb27bc46d500712002d2527b6b5570291d01218347e044dacf22ff31116e4a0f680849484f5a6a39c59cc6c

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      070531b53d73b317ec49d8e4c7c223f9

                                      SHA1

                                      d7ae30c9dd45babb948bb2d4418f77529eb95061

                                      SHA256

                                      66efd645296be1b34b1c9d78b1df64eedd4862dad2e6e721d59e12c3c5e44a65

                                      SHA512

                                      f015bae8ecaf95c211eb6310746a91a5c88b190ca2c08b05f2cbdefb515c83419c97f232f639688002e38c409f24b3bd271fa51918d877dc462c8a6e12424e2a

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      d7cd129bf6598de38f5264103485f188

                                      SHA1

                                      1c39a7ad7513e96f3c570ce38699feb29d4df126

                                      SHA256

                                      df6af93d72edc444b4fe05c9824386e3d32ec3d8fa3681901b954db83eec0f1f

                                      SHA512

                                      c0fa80fbe15f5ea28fd7bc5fa7414850d315d01c0e8c3dba4fab9b0cbd59684a5be28bb597d68b2f78dc7521f9f2107452abab4d2e294572ffbc18194bfde976

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      8421832259b2cc39528c989cf4324b94

                                      SHA1

                                      aada7add85baf000cfd85778e3356341c19cfd77

                                      SHA256

                                      94c270c31e288ea9add64ba58829d4f6b402d4ba6e0184a78370963e4456c57f

                                      SHA512

                                      c35ab82dd17ceb1890e39ca74e59728a8ac99901c5bb3524f2af8771fa3b86520567aba8e6cd5fd8efb1077ba0e6bb125adc577d06d402854342ff25f992efa6

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      0c3b47feb07e5acf1069495cac6523e2

                                      SHA1

                                      6cb0a46cddc4ad0914d7b169dff9324aec408dfa

                                      SHA256

                                      4f1e3afd4654b3b6d0209ac03a4bd3621690dc1d940def13f44d2c536d308ed3

                                      SHA512

                                      af3efd122a7621f4577c9a1120a1601a55b85c409f689379403251a04df0d563f8998b338aa3d2a9c26dc4706bbf8a73c8ccaf30849054cd5ba6412690695b32

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      748d9f55d41e61b3efbd1b292d39bbb3

                                      SHA1

                                      f3053aa87cd4c0aa258de48650e9ad365e652bf7

                                      SHA256

                                      1a1d6c69285417740e4612e0892f62417021c02926ef5f54159fe6ede3b24134

                                      SHA512

                                      0b1cb82523b3e21ba31de3ce51aff54c2b049f062b54e39e05716af037488ffca4d16e9755ae1b36c25062b097d73aa1574b4884ada987e02692f1352f7a372b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      149d43a5f9153e2b1d9030ed1f0db553

                                      SHA1

                                      3edf0809e6cda989685a11098a07d56314d62d19

                                      SHA256

                                      da44657984d326501b2985fa6d6254ba37bd60bc4994f7d01f26cf7ad777d138

                                      SHA512

                                      2e4875822974d7c9ec66917d41643506444b6ab035e10edf8b6e71a1de6a26ba22a7040b565e999a6b37e7311c5f4abf39842114dde7ef271b212473bfc5431c

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      61650dc2dede68244658e5fe76e864e0

                                      SHA1

                                      ab6dbee1cd503eba16cb46fc212177b0977b4c39

                                      SHA256

                                      c9399b7f3db3bf7483f41da06ef6e1cd1a5e173918575b581f96a08f24d419ed

                                      SHA512

                                      d18a15b59f29767a548c866983d10bf19c64059d6da296406add0bbd65f738401bb1847760ec4b7722992c7519a901cf3fc7db913a13a7fd44b50c3ac8b47613

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      a5fe3a57045e11815be76da683ec6687

                                      SHA1

                                      700e9f3e1e6a71053b522a35747074a1349be27a

                                      SHA256

                                      ed3d7504ad87fd5de2d6183915cfc90e014320e1654b61fb66fb1aa37a02ff0b

                                      SHA512

                                      b88529b12a41d2812d5b90463a4f6d8203a828a8aa3288b5109afcacec3e20c04c5ff8a77f68e8c7398479b1fbc17e6c03904fffe79b8242f798247600a9d10f

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      cfba8b13a831eb49f0be568ae661e403

                                      SHA1

                                      d8ea84301b700cb020b7e02dfc8d686efb7b2e8b

                                      SHA256

                                      d09f312755fb6c5acfa6d6907be0205370159eeb366d5648737782a6ea0ff23b

                                      SHA512

                                      de9fd0433a5b57b154cb9e4ac511b65f3a23d5e3b1087087906fa0f5ac90804b2b9da220b802e99fdf31c6cecb26a9b0de75201e8e861868c3d1dd4ab7560001

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      b327aec3a2fc3adee6c22fe105db32dc

                                      SHA1

                                      4c6bb563e9f77aaf9bf5ec980bfa8d8f8e2a8c73

                                      SHA256

                                      d86c840141e677e57420e0ff4226857798ef5cf17d690392ca3ff7c728a95636

                                      SHA512

                                      3ae9f06500fbba189bfe0a352e267b5d5e8dcc0792ca4dc790b36ce93889f5c3a328b8fd9416834f5e7a851bef10e430eed5133800d80be56a46f0d7f3cf0d97

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      017fcc33768fff14bcf101bbe7ec087c

                                      SHA1

                                      e92700d36e2062a9bec822ed1f746531aeba4934

                                      SHA256

                                      8f51e6b5a7de25aa648964247383ffe8050bf5eb1a638e67095f607534f7c10b

                                      SHA512

                                      84be9cf9e03afe767af11f0e979b107fc8b0d10bdfaba669b96d42cfa5309944e0afba552e16e85024824dceae94ee1215e0b8a2b0edf56b19ce0884b4ee6d49

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      6ed7fde7cb86ddce7917b025afd8d524

                                      SHA1

                                      1859646063df51b5b6c70f39daf241601f8cabcf

                                      SHA256

                                      4a57b53d50075cce1a79aa2a3c2be473298f4d05e8cc60a866b31eff604039c2

                                      SHA512

                                      01ae17063c867c300b8a0cf547a14e54c94c98ce799e299b49afb8b22b84c07d847c5531dc843d1329899f366a2e08200979c7e428e41307f3ce6080c04c93b5

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      67a5b952c70c759a13fff9c026675f22

                                      SHA1

                                      2c98490ddcfb8b390cb8892d2c7f1c92885836f1

                                      SHA256

                                      9f806743d0f3051630004fa2636d868919a661bee6ce3c3a866bb835ab23f529

                                      SHA512

                                      1841cf08f8d997193127ed7b5b14f9ef4c51b3395c342382843b0c3ccb6a56e4dbf6aa670a8c3d473f7d4c4e4b7387683ed86c74dcdec0a934580b5334f2bdd3

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      e7ebc4af51f2f00e45afec0ea6b06e0f

                                      SHA1

                                      15f91e202933686f917dbbb45c33156e1eac8d6b

                                      SHA256

                                      bec2a6f90ae20c5ca2e98eb895df8f6526e99bc869e2208452b6abca0429adc6

                                      SHA512

                                      834c4b67a8512efb10d1c59b166be9face0429bb570085d9b7f9727facfc004df9426ecd7dc88d1901732b84c71c76ca22b787c7f6a614258c075b770b3a8387

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                      Filesize

                                      3KB

                                      MD5

                                      3d65e7589bc6479d974b2f07cc4ad082

                                      SHA1

                                      93061d004dab52885e33b4dd4cb2da3d2af15114

                                      SHA256

                                      95fa849f09565b517197d40a08c220e588d025ce8253d02583e717bfa1587142

                                      SHA512

                                      05bbb744bd37a449ce9381ad82dfd73976d5a00431ebc3040ed872fc8464d4d858de7552947785e19fa696862aded4c406ac3301bd6ed8c7d8dcb6d4d81836de

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                      Filesize

                                      6KB

                                      MD5

                                      a990d70f2c022f46df7562640fb2659b

                                      SHA1

                                      df70bd4b0bb258f99eb90d7a322d9e575f7b4402

                                      SHA256

                                      c2188a68f7effc60505ce9740a360166380d1da7143cce1e8f0c21ec1c9d91fd

                                      SHA512

                                      79298a503f9c6026f0d29f806a22b09156c578343c38bb9f1924caa42a0cf735f1e955be2ac5f18cf4de99ed2ed506c6831f6c5c2e1aedc0188be89a50b02386

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                      Filesize

                                      6KB

                                      MD5

                                      3718a347637647d69ad3dfdebbf8e85a

                                      SHA1

                                      d76ed751c3420c5be4b2b7e7ee1d2fd11ab70e03

                                      SHA256

                                      91d0f958eef21b82ecc4f53f9370b5b157fa5086b61cbf5ab678f2bc62de17f6

                                      SHA512

                                      92e348a23ab96a04d75d8c94cfed2af20762e3a8e565d698087a83bcb88838435c382a02bfafe44ed762b9abb264760afa1646cdc469d67def502b3f086b746c

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                      Filesize

                                      6KB

                                      MD5

                                      3233663e8fc528a83b09d98834ace93f

                                      SHA1

                                      1d8803209832222d3301494e8468058acb4cb22c

                                      SHA256

                                      c29106413a230d328483d683bae179a60e00a735fd87b71d7a982a3ad1366f0c

                                      SHA512

                                      88a897980a359e7f5fe859d8370812ce3def48c8f82cd77caf0e2bfd7e432f29fb718e3aedb514a987d485bbd7532a146831fc992e101735f4744a61b653d647

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f440ec3-0adf-4326-8dfd-a9f0e54c4aa6\index-dir\the-real-index

                                      Filesize

                                      2KB

                                      MD5

                                      ba89605eb58348de87001cd2c3f96944

                                      SHA1

                                      1463500932310ce6443315f847bb255d4b914baf

                                      SHA256

                                      ebc4674d07c170db0a428676b0cc0c537badf8aec547d0f2925228329969c3e7

                                      SHA512

                                      a638a2177b12ea00c594da73dfff434ffa5ff653fb159c1aff46659635bdd6a88d6274ec11565dd0217920a61b6b849e217540a478bdb2e752b390b364f3ac49

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f440ec3-0adf-4326-8dfd-a9f0e54c4aa6\index-dir\the-real-index

                                      Filesize

                                      2KB

                                      MD5

                                      8f1ac80aa3635c90752aa820eb56e1b1

                                      SHA1

                                      295356c7a055de8dcfc4f0747a9518b8d538a9cb

                                      SHA256

                                      a216a9a2f04d728f6e08076b0d33fe8698ed2a5b90e84eb1c0869f6fbf09a324

                                      SHA512

                                      aba628497a06c1883e74742a78e6f8d2fe1cfd918541cc3211f1294f947498cbaddd9d46a0b3a5fc3660167b7ea8ace781b6e139d7120f55913d2e7088ff7f36

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\5f440ec3-0adf-4326-8dfd-a9f0e54c4aa6\index-dir\the-real-index~RFe578ca0.TMP

                                      Filesize

                                      48B

                                      MD5

                                      4c02dba6644b23d7396c7a058b0fe6c4

                                      SHA1

                                      6d1ee7548b2450daf49b4e4cd311178de539ea23

                                      SHA256

                                      1815464630d52c358864995ab51b63a42c6e19c93e432e4d13f9ecca235d6986

                                      SHA512

                                      6538c5994985dfdc0a74e0794f95d7a90f9d82e4757cdc7e8164ba3c13fe6fb4c92a7a427bd8a7f1313bbb599f566a0d5ddb61357690e8185ca6c1b773888642

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                      Filesize

                                      89B

                                      MD5

                                      69b1241932e752815e5a144b26a47a3c

                                      SHA1

                                      0dbdffdd8733714965e987bd3d7bda57f6f9e591

                                      SHA256

                                      a8e6f3ccf70da13a044d9fac11cbcf9d1ad40d33fe1b44a4b16516d83e87b2be

                                      SHA512

                                      af797f535f0162ffd2d87152e25fdc205bad3fecf9de3d525e0f03cbe8acb5c91afc304c4a281f4004ee47b5ae27930cce71b8ed5764279da8ad7bb6d655c57e

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                      Filesize

                                      146B

                                      MD5

                                      a9439f359d696c108a20ae75bf58da27

                                      SHA1

                                      a3c31b3a12a28aa4b402303bf7710ce2f8444bf7

                                      SHA256

                                      1f2d585f4bfb73222a61a67b2f636f39d239cfba1b421a610a26412e122e9c3a

                                      SHA512

                                      0094be647116080ddf2e2a35fbf0765dc9168839efdddade5c5e01189b2ee5473bb22e06b61d4affa4cb791fff6a02b7772b0c3fa4373058288ffef380c54b1b

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                      Filesize

                                      84B

                                      MD5

                                      7268589c327c125003f9f02701f7435f

                                      SHA1

                                      705b95c463ed5ccd567a38f7d115892a67c3719c

                                      SHA256

                                      d3238a8739d3c4674dafaaf64f754090f7d1f2f0d9523112d4b541baa14ffc7f

                                      SHA512

                                      8cb04f647fe1eb36285a0fca5a54331863f23603f78fde93b7ad727e4f81c4aa86e05774c50c4074b9b54b40c337d97dbe6425d4730c3814833d3e2ab1ba3264

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                      Filesize

                                      82B

                                      MD5

                                      805f859e92b2e3a5fb11b5a272001cfa

                                      SHA1

                                      ad944ea376702a4543f218a7a18ea5e58b3a69f5

                                      SHA256

                                      f574cd45056a573b45e65bf807b47d1d8cdc454a38a54f6a2093ce7c8158d619

                                      SHA512

                                      9f3d427bc86ba1d931341725675835f3c522e70437df4b17597416e368e91bd4354a45e68b72449126225858aabeaf0fc173147011630ff4a7c9c49aa74719d6

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

                                      Filesize

                                      84B

                                      MD5

                                      602fa0aa889dcf36cbcf9f7c4f85e2d1

                                      SHA1

                                      6e40c35811896737841d6640255173ac73882f8b

                                      SHA256

                                      b1af0f4ae9a15b5c4b44efbabd5d6819c35b424ee53e24fe052a3fe6e8caec79

                                      SHA512

                                      a62567896004c7de68d8da33c2061c09b0176a3ac74bf69523730102699cb4d6f76faf06839cced07b7d2736325f4f4e70678d4583c3733cc0d5f160930c356f

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

                                      Filesize

                                      16B

                                      MD5

                                      46295cac801e5d4857d09837238a6394

                                      SHA1

                                      44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                      SHA256

                                      0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                      SHA512

                                      8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                      Filesize

                                      72B

                                      MD5

                                      1ecb4c679b1430d291bf3ce7a1fae97b

                                      SHA1

                                      b84c25c5c6dcfbc7267bcfe6c4886d2af834028b

                                      SHA256

                                      d7b5652723fc5741fd5e1a8d5cb87d7a33bc56983fd412d5537f421a9d1c0d5c

                                      SHA512

                                      469842322ce38ebb2c16d73100911fb6dd1f76e2e0fc4230e7fdac5b9f7393a58ba979901b7329ddccf13043f6ecd9d08453f493ddd6f559438d2331592ccf2d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57884a.TMP

                                      Filesize

                                      48B

                                      MD5

                                      86c537200f8810abb2118193a62321b3

                                      SHA1

                                      c4c1b8c142c98798f641534ea9b607c41eb4aa0d

                                      SHA256

                                      7fdce52ba89028077da28dc7ac1646dacd235fad6fa52c72cc4f966933f483a6

                                      SHA512

                                      e8f904db153cdf0de7bda8fc7417662b584322961bbef76be75a13e4c22ad787efd68ee36e5eb02fba87f6b4faf966df9246da1d03b4ecb8b4cb6c8d8ab1f209

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                      Filesize

                                      706B

                                      MD5

                                      7fa176d2b812e5321cf91976daf10cb9

                                      SHA1

                                      5d18eed2a9d636d685c8172d995a9cee469cb5ae

                                      SHA256

                                      a5aa080b228c772a0e90e3a471b28c584de086638eba3b0a1b3fc66491d62394

                                      SHA512

                                      bb7d039b87eae366814f1b4a9a63e306f69d19dff64ae032fc0a04aa7d12ea01ac750930b2c5424bc036a3693ffa2b37b8444f3a6f2f8fc1e4a5139fbad8423a

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5791ff.TMP

                                      Filesize

                                      706B

                                      MD5

                                      184f2d5febfd6d1640c1e2a4e6b4a086

                                      SHA1

                                      f58c159bea4157a5061bab6a30acddd4992572e9

                                      SHA256

                                      371e78d19246c33826d134e574275b41977cbf45c71fed548f68ba01c4eecefe

                                      SHA512

                                      586698921831ba6052a9e8801b96e531c79a2a8d28656a20200241aaa084b6bb1ab5942ccbdfa77560de843758357e57d2c503ff9a69aaff62d16f68d0fca81d

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                      Filesize

                                      16B

                                      MD5

                                      206702161f94c5cd39fadd03f4014d98

                                      SHA1

                                      bd8bfc144fb5326d21bd1531523d9fb50e1b600a

                                      SHA256

                                      1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

                                      SHA512

                                      0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                      Filesize

                                      11KB

                                      MD5

                                      8173920e4ac4bedeb0af7f498e9e84c2

                                      SHA1

                                      2c5389782487249f29a7a8512b714254499a1d83

                                      SHA256

                                      9b08f7a88bb61156b09a9cdb6d13a0990102053a8b691bad764667b1b6da3151

                                      SHA512

                                      98512c8acdd4816a5cff7d15095797d154f9ed64ce055b8f8963fff92b868f8402caad24b8843a680e30101a673f680ad9247f2793797e0e3fb657ab6eac46fb

                                    • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                      Filesize

                                      12KB

                                      MD5

                                      113892d585911e8fc42ba0487c04749d

                                      SHA1

                                      8fbe26ea34939d2fec45f6409764acded768790a

                                      SHA256

                                      5ba4b2b604cf9b14be1ffb7873719fa23db790db28041df1acfc81b3703f6100

                                      SHA512

                                      7bedfede2aaf301b5ec0afb441948966c22278dfaa37da33b92808736185deafc59b5d23c086bd6f9725689a15d98659629f3d39c0f476873b15e7f310197714