hxxps://direct-links[.]net/s?vBe8

Resubmissions

12-05-2024 12:38

240512-pt9ltafb5s 1

12-05-2024 12:31

240512-pp8hyshh56 1

12-05-2024 12:28

240512-pnn3xseg9s 1

Analysis

max time kernel
41s
max time network
47s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
12-05-2024 12:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://direct-links.net/s?vBe8

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4736	msedge.exe
4736	msedge.exe
900	msedge.exe
900	msedge.exe
1948	identity_helper.exe
1948	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe
900	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 900 wrote to memory of 2552	900	msedge.exe	84
PID 900 wrote to memory of 2552	900	msedge.exe	84
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 3836	900	msedge.exe	85
PID 900 wrote to memory of 4736	900	msedge.exe	86
PID 900 wrote to memory of 4736	900	msedge.exe	86
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87
PID 900 wrote to memory of 4476	900	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://direct-links.net/s?vBe8
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8354246f8,0x7ff835424708,0x7ff835424718
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2020 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3572 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:5484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5604 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,16997042106866194561,7296549050554435320,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3448 /prefetch:8
  2⤵
  PID:2452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:976

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x520 0x51c
1⤵
PID:5624

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
792B

MD5
3cc0cd6f793434f4261bba6b8d3c7956

SHA1
779a1940628c7c8f9ce2711c8268412846c168a9

SHA256
6651bfa1caf6ff0c677edf1f501405a242cdb4ac444800a62a194934cf57ec5a

SHA512
67f531a390c922613ba5a66b362a833fc8ea310f9962dbe73451385d175bd6173766013676d7b2fb6add3a89a601e5411d1c266214316188e897a89eef2c2f0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_mega.nz_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8a497458502dec0e59a54fbe9f48ee0f

SHA1
3303952a80c5321538d989d4382eea6a0675de67

SHA256
ca839c3bfdf0ad8b99895e118a71ca09d1ee072e7d4b0c286e0d164699373c57

SHA512
72599cebbafea2c61f64812e0dfea8e3ed09657be4ee8fd9b66bd5b97b22cba160f3ea53c1ff0d1e3c60d1a19c73f8deed52f9c2a5721c6d086d9ee2821c73fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8404fa18106c1735bf2ad8f91db9c5de

SHA1
acf91948a19e16907ea78faa09236e74358d53f9

SHA256
816bbcdd6fea877524ab371023902dd891bc8bb3f59df1d43366d7c23211b415

SHA512
f92bea0612d06fd4c015df68fbaaa9915292f571d0e692c39e2190118b4d81541456e79716c42afcfbe279d55c2f48fe1c041d1a0d746d3b66a3fe00ec8c1681

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4ef7ba5263fc939f3d2d56f06be341be

SHA1
1317a1d2a7325bd67056c05875018ed5e1ace39b

SHA256
c44813afaa58b62e3cb353e81bb37255d61c5b2ec528bd2f0492f26fe6d8fa6a

SHA512
84819f6073cfec687294e5eabd96ca53e02acbe81b154ae6ef2b5cdd5d6b68ad3bc4eadd71b4b7e73e4c1d2b570548089ab45c6709ee58f5c0f3de350974cf4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c1eb0cde2406b6af565f825dcd492589d40ab644\index.txt

Filesize
93B

MD5
d31bb9a585e80e311d590c70b0eb00a7

SHA1
d0395bc0ee5d92b7bd543c278bd1aaa8095e673d

SHA256
729bd07be1e2d67dddbee152c1d4d38331b6d8d5b245fb874e85737b8c787a61

SHA512
524c324347900c90e35219e4d33ff81819c06c7b04362c6dccc4afd3bd7be9e8f962e74e4af485affba5ca9ee142c04bf6040e4da2ff5433cb52bc9f0366837b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
e85427e3544f1dbc8716d1048f541ada

SHA1
12d1997aded03d793003b9ca322627680474475c

SHA256
210082b4770a975fddb4f1382794f5e44bae8db60b582cba104d79c377236e3b

SHA512
36f5ed9ebe9704da0ca2816d3c6f43dbc1cdc1dfa93c0a463b3922f6d99f280024e3a9081096423cb64ead1ae03ec11b340ede7c92d2fbc4289ef435c5b7fbaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57e60a.TMP

Filesize
48B

MD5
d0ce3581f3f295d05ceb3bd5b8c9e06a

SHA1
6d3da118d6285344f5542ac99578483bc4016ab5

SHA256
781bfd4caf6449c67108a8e5b05530d1e9f7f8a5db064845427d4a62408f73a3

SHA512
97d049d7ef1a6c79f1b62203df4b49661b535be3318bad46af2a523fc612ed636090ad6de66b4c724a12689f27e073dee2dd99398bbe51d0e01160b7970fb982

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
745ecb573b2edb828b136ccfc0f17c57

SHA1
62c5736f5f7415c1009747eafcf660e858d26150

SHA256
77a407bdc33f59b14e8c0e4d214822b04748d21a0e78632dc91d861308be0651

SHA512
d46d9d99809693a08a8bd406d09a0354fd814a7e3cb6f0707076a97505f738d5b225b65110ebe004ce79e03db499b417521e37d931e8bc9b96d92e6f1818f497

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ab53.TMP

Filesize
371B

MD5
02712c763dfcdb86c12cf975f490c737

SHA1
89057d2b1487145008776f0e8f490f7bd6869b23

SHA256
2671b3b6ce4ac71c9588e086abf9d13626d3fdaa02522df5f9adc5d2e49f0580

SHA512
84026f325e0cfa857ffd1a004049b75071908bf5c10f15f67b66ccd2b46602f0a9a35ebbb550adf8d2c039b0beadaceada1438aa6f93e4ac9958d109ca725c12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
38a00edf75641eb04bd3bf857bdb1733

SHA1
da091111c6b947c5ba91d898f95e419dfaaa9214

SHA256
062f9b162e0c558dbbeb80d3c2359dbb035e159ea6dfb857ecb8fc00751e87c1

SHA512
33a7fb46cb169836b07560de228ce3ce0b232b140a51ed97a054671ec51c9ec5f03fbcab9713f1d78e9814bcd5e4405f80183ab6438326a565f25dac6366aeea

Download Submit