hxxp://is[.]gd/JUV8ng

Analysis

max time kernel
147s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2024, 02:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://is.gd/JUV8ng

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3408	msedge.exe
3408	msedge.exe
4936	msedge.exe
4936	msedge.exe
1936	identity_helper.exe
1936	identity_helper.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe
5976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1976	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1976	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 856	4936	msedge.exe	83
PID 4936 wrote to memory of 856	4936	msedge.exe	83
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 4496	4936	msedge.exe	84
PID 4936 wrote to memory of 3408	4936	msedge.exe	85
PID 4936 wrote to memory of 3408	4936	msedge.exe	85
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86
PID 4936 wrote to memory of 4184	4936	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://is.gd/JUV8ng
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdbd5146f8,0x7ffdbd514708,0x7ffdbd514718
  2⤵
  PID:856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2168 /prefetch:2
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3980 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5032 /prefetch:8
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:5156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:5388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:5396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,5325057342978168298,16510078791409999898,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2308 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4376

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5000

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x510 0x4f0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1976

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
5ca6ae893e12e683b24ecb685c1bd774

SHA1
13e1cd61141144d2c95af011c89c5fe818d21837

SHA256
0d22e3fa4a1fc5b73c86f7eab7426e694ffa6496a507fb15455d624035c61409

SHA512
2cb16767c3a9c5ed96cb8b45f37d6d26ca205a0f70841980a336f6c29c1fcc51a438be8c14eef3e7146a764c992c9d98e60a1eb34ff16da209cef7ca721bfd7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
840d47d1019012810703477c3e48bf31

SHA1
5daff0f69eeab73fd54dd9c794a2c514effd460a

SHA256
2732d24a1f35ec4df23a9f81778989408855975139c6e39d6b0a3896f7201c20

SHA512
3715993ba3bbb1216c15fd939630adc621319e875b3fe8a2b984687d24cb15252d0a1001724e8db4b09a99f081a7614bc08cc6134a1828e6db2f4afd259deb30

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
40d4d2bcceded6e3818dc65b73b74189

SHA1
83596103ebc5dd76490acd0168b68e4b9c7124c3

SHA256
85d630186b135e45499abce5845a36fadeb7ed1e289d4a9ee563fe08003f385b

SHA512
bc336520b25db616de40aad141f3bbeb510a6bc02d4decd5ef3efcae2719b15655a897fadd214459696076d36002d68b9f4941a5efce2409058beabbf087d90b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
361d8b224461c81d1c2224b901697a26

SHA1
3bb230be59ce756dd057e8ba63533cc7d3ce3b16

SHA256
a97080d227150e97e1b098faceeeb78f008f92aa0e8b068f7dbc3fcde602abd6

SHA512
ca88500532914b500357099e7b748434b81afa1e3ab5ea08352e76476b19ca135d79ed5b78ba4461f99aecd3e742b4949a1c967c510b06209e9c128ad29f7a7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
779c579ef6cd2d2a8df3c965173d47e2

SHA1
b57dc7931ced73b60a2c737ba50b0d5c1cb9a399

SHA256
1e60a1715e830fa37767df66ba31779ecb4258cb1311a16c360700790a0bad0c

SHA512
65678afa2216bca521065fa9103962c2624453e7f72c6cbf32af17238358819559a48486ef07bf1057d5625b1b86fac05d87172a20c9c02f677ff7450b2a67a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57f2dc.TMP

Filesize
48B

MD5
032e2cfae35a3f6b4d6243481039da9d

SHA1
0bec18c491fb40d71c3963e3df046b604b907879

SHA256
e80e6fa0a3386ab289413f7ebaa04ccbd7bcc116f5ba1024ecfb44df70252bdb

SHA512
dda2821c9395f9498241b487e2bd48bff2205df7e5ec749b1d168600a5ed5a92f18ac691768ff739c41242d8f5ce4708042ba7e25a7b35c91d4798d0cd6d843f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3d2faaeca8eda7ce7ecf83daeb765fb6

SHA1
64a39c4ba8cb8bdffad412e59f1a10488803b51b

SHA256
c06e18abfa55e9a6485e4b39e9dae46a998fa7e4a75ad036068d364a947defa4

SHA512
f72488e8be8bcf2db8bb2b7d0ed679ff31375c560b9539014299e9a845fb195b5bd584f94e55c765b07ca134089650b27ecfffcbc4c20f8a398493df163d20cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a8622e776e6c87584d5b7ae90a98a474

SHA1
8891cac2cbee5e6bc93d9160496f7c7c751735f4

SHA256
600ab91cb440ffc6a047a65af4b2029ad706b25adb4d8a9c394cfdf756d39d99

SHA512
4a29c251f41d1485cccb66478e24870a8d1b8d84dfe8be7af66426178ee6b2c02cc1bd61659bd7a488b6b7432e08dfa58df58b703627f7f135bf414b58ad844d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a9ed39c6a68cbcac36637f05ce09ec3c

SHA1
8070f0ffbb796dd9edb695d50a4fb2953cc51b0a

SHA256
87704ab1c2a645ec98a0e0006fef6ac346156a0cd6d3e9b0a848abac57f0b1bb

SHA512
38df70b422e4aa3f89c4d8f813b3bbde19d5c7f30c8455c24232981dac3ad848fddbf57f1c47a4a7c1061379a6220570b3c5ec201b2438bdd45735c54d7188bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3b9b3e11e2a95826d8cede53bb6669ad

SHA1
05acdbd79dc2027ee2b07749f6399ef1734896d2

SHA256
3995f246bada83da24fafa0328e1d5eded342e75ffd4a426713c868f90db635d

SHA512
7907c89c46ddb53b66093faf96627ec0f1ab108c6865a2bd74390fe42037af648a8d47477521b8ad0873bdfb2a7d6ae5f74c6e4afff76a4c80952ee849c9823b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6bb96a66f0a4ac9e6e2b92a89cbb2145

SHA1
f5fcf94d9d024c5f8cdcd07f9919f3790bbf7fb8

SHA256
a9b7b2fef8785c7a7e70f5d97f862b4d3f1dd9bf1b3bf8e012a96d287b82cfdc

SHA512
a9a655d56fcf69196345c233053b85c8b55eab43b84b7ffd159dcce93ac61fabd5ae1bb6ee9d8cb9ca38c53985e16766db34aca4fa3ba578448b05bc17f86685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583803.TMP

Filesize
1KB

MD5
4789f20953c3f38c35d5406aaeb31c25

SHA1
3a18667c38bf0b4f1c22cc604696fb5169bac184

SHA256
d48333bdbddeff4deec5ecdd32f1451fc2f0ee1078cf615b20f770577572c750

SHA512
b3ad228760cd5be313a7797ff6a6c698846bec0f7c48be7b9766d6364a9aa8352b76a97728fa39f72f510c11a67bdd0ed3a34577ce43b29cb82eb1e08583b1cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
02422a33a72dbc7e24b43bd550de570d

SHA1
2723be5fded0a7f74e5c508ebeca6be76e7d9f53

SHA256
10abd949b519812d8179c704fefc01ad5fcace6fa66098247af54058c366ba53

SHA512
f13b477bbb06c51c3d5b27d368913ef0ea779d309787310652ab93a85ca6f7542d482ad9f6f53af5b384b97a15771553037c21d01f56d4194e2dbe3bdbd78492

Download Submit