hxxp://youtube[.]com

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 12:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://youtube.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1932	msedge.exe
1932	msedge.exe
3420	msedge.exe
3420	msedge.exe
4852	identity_helper.exe
4852	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2676	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2676	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3420 wrote to memory of 4012	3420	msedge.exe	82
PID 3420 wrote to memory of 4012	3420	msedge.exe	82
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 2536	3420	msedge.exe	83
PID 3420 wrote to memory of 1932	3420	msedge.exe	84
PID 3420 wrote to memory of 1932	3420	msedge.exe	84
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85
PID 3420 wrote to memory of 916	3420	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://youtube.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff9cb046f8,0x7fff9cb04708,0x7fff9cb04718
  2⤵
  PID:4012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2656 /prefetch:8
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3536 /prefetch:8
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5680 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7760367689593132648,9661516533813683120,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:5352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1152

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1692

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x44c 0x2fc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b4f91fa1b362ba5341ecb2836438dea

SHA1
9561f5aabed742404d455da735259a2c6781fa07

SHA256
d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c

SHA512
fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eaa3db555ab5bc0cb364826204aad3f0

SHA1
a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca

SHA256
ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b

SHA512
e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6364b6e5-b8ac-45e1-b74c-bfcde7172586.tmp

Filesize
2KB

MD5
93117e41da30ca5a7815962e50af2227

SHA1
341034a2af524af22098749e8692c025239f4e97

SHA256
b2bfe96569b3f3a1b6127427891e4014728c8f11d9fbf9b690c77d2c0e7feb8b

SHA512
33229aca2ae1844e61197bb0d90dbc624bd30af179f525bb229853fcccf380d8e4f2d4fea8d9995b9f0cf1a30dba6808eec7f265211ad52b13d71ff934ba7777

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
a4b9122225dec009f608f05e32cca0d9

SHA1
bd62b708e8827f2890418d32c54d5192e97bbd01

SHA256
217076eaf6c3902e6b477664f3ccf54ca8d36b2e16a45abb39e916f2df81f444

SHA512
2910c21f8558c72dcafe267a8f4e7dc182c89d6fd675ae24f3b11ad9d08ff8f8d77e0bfa426cfad1a8734b46fcbeb3a6e2a81f8a76d3ee199171337d667c8042

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
fb4e54cafe8d6850bb8fce8b91ea859c

SHA1
8a2ed1e6791c398972da70006edd88c5875b1503

SHA256
6fe3d5afda52d99b16815e5a2be05425c2889ae20596b9e99a3be82e35a8f53f

SHA512
02e14d45883891f877d0939df4447d4704ab3f43f0572a4ed7cb4550820fa47af83daa4cb559b20e5c67f4fea6f70326653e5154958856132300e9915c6f38b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9fd55bf4870c3a329e9916cd71fc7ab7

SHA1
b8b65f869d56994a48993ec998713ed543685b94

SHA256
f119a0de2f7e3fbc8bf9947fb16c67c5a1a941147673062ab747882fd9fd0095

SHA512
c59707e0c144a7bea10acdcec4f1080f5fe26c986c77970c3e15004c5949a09ffc67a2f446f7ca3fc0b8997c4d17076d7a47eb2fcb02912993a0d1811035201e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
368e33ffadaa07c43ad4478f45d1a011

SHA1
60c11acd7d9539167bd8dab373c67d7c591747fa

SHA256
74dbdd6380ecf0aa622306db09a563e413b6be264f9462ca49a45d4bbe8609ed

SHA512
673b67ff206ee1841d7ffc6715bd8470170852365dfd7f65843c4297065ba810168eeeb9d3d734645b552a799fb563656cca3b2c3d67d496ffea6551c6d5cca6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ba4ee18402770f58014ef9d8fbfdcbc3

SHA1
86aa47ecd706b1b3b9c709cbbdd2e5f9d2625727

SHA256
bf06cf3285a6f38b25ca992c230381e88fa2be1fef472f988956b236a6f384de

SHA512
0a01a1dd4d71030ee778efc7c97aca90be7943517dd40e1cc92505872f7c49ca40b7aa82fcf53edbd9cc6e49b2c562f8af68791e7cbbb46d3f4e0ea65d899cd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
79d5cd8e4fe9a2b0ecacde1bb5795ffc

SHA1
54d29e9889075928ef7ec0fd1b4f086dde7c417a

SHA256
95e766662940cdf493dbf0b2464763adbad9e019eb98114b90e7112a20b74cec

SHA512
a48e3719cf8846dc678e4abd67e706e540599aeaa9f246b29bb4d33299f0b46156d1558add995ef1fcad8e4524771ce44ba97adfcd1ce04a01c80c0c37265631

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9513ea278857ff0899e2cf629e96b89d

SHA1
eea3c27bd77589cc00db2d7581f00a61bae82314

SHA256
e14c9bb5909683f9766044b151a87cd623d1d141a57f28ca3265972f3ab271e6

SHA512
4ecc98f323f39d5809c5d2c381ad781ef55c346facae7f11cebec07a01485e826d34a2e8acd44d1ae54aee415094e84b700703b7f40c4e079188094e8dbd2619

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fcab9742-ef9e-4b79-a549-2a0da9b6a43b\index-dir\the-real-index

Filesize
2KB

MD5
4dcd1ac8039a5b2a709be73e365859fa

SHA1
b1689e15255fef6087161b5c870499461a7ad863

SHA256
bba7f6b83d64c266c9cfe1360adf98f9958cc45ceb0c84f790c0d7abbe73e377

SHA512
2f8337287f223f3dd035be7111b2106ad3119e6359c599a2574adffc0a1ca177cd006378db8d4a555d94597a4284a77e2c36b59a21efe3eaca251a160025ac3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fcab9742-ef9e-4b79-a549-2a0da9b6a43b\index-dir\the-real-index

Filesize
2KB

MD5
ec3049a389b8043181432c28eb7f3a89

SHA1
5302809ece4d8b1c4261b7b0a378bbe68296364b

SHA256
0d95bd8eff10e38fba7fefd666367f50aa4c0f43d1ef75b24dcc306cb221be6f

SHA512
b3a95ac36a46becb7e4c9de552834c9296eb534c4805f1a371e56372872d95b9977b76c4afbd1559b2564b356801cffec10f31d0ea9be1b29ad13c4e8aed360b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\fcab9742-ef9e-4b79-a549-2a0da9b6a43b\index-dir\the-real-index~RFe57d060.TMP

Filesize
48B

MD5
fa6455470a6d572d2530e254a2ec7ea8

SHA1
d1856c78816a184b8aaeb9590c885b4550f174bb

SHA256
c527309d30aef282a71bcfc51a33a094441f169b17c1581061a0bf7f32ad4879

SHA512
96f449866659e93af0d12601d30b7ef4307e502ff3f17391c559eda6ddf28ac40a806fe7de1a001a1bc517306106cfb6c506babe8e55a31b6d9f576f409c6aac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
89B

MD5
ba9e9a9d1150e249c942fc3c29032d77

SHA1
856bbe65d6c6dec7f2db2aae6fbedf99d222914f

SHA256
20b3bdedd765518b7f6c9c47463fb4569af643cfc04ece79bb1027dc0e49c06c

SHA512
6e4b8e76ef590d86f5283761963dfb1349c84ebb410bd9969c79b0f430fb9dceb82f28eea27add63f8f893d5187bc661c5c8fe0be02657333122e6a94c84750c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
146B

MD5
f411184f2e6db44db1d12c6f4ebd0906

SHA1
2646ec4a9a7fd48f733ff6dad175a142bdbaa9df

SHA256
1ae3df415736fbf1b961bde9be42cc15c4cfcf3aa6befc52f3f99345e55d2919

SHA512
cdef3a1cd45344a3faac6a66488748d0af35ef8ef965a4eb26bd7965b2ecc40cb2e0b84daf5ee524e4c1ecd62a369d2c23c1999e761e30d45ca27042cb1df71b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
82B

MD5
0cc14bce8da9e3c4019a523b252ac953

SHA1
1353c1a6d21f0c9e889fd8bedac36200cd0c9353

SHA256
fd717618e66342f2233781e78b4b26beed74b4c4b71f8541315bb9c1de184913

SHA512
f6a42c6adf3de7937afd8ea73d39ef25da8dd83c8ac8ff3f7f95b370a72c79589f25269b44f328e16a77b3feeabe4f38cbe1119e3c4d839f4aefcaff0bac47d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
84B

MD5
80da2620a54f9742013855dc1366846a

SHA1
914630ac16e1bba3473825f82165b69eee858a77

SHA256
8a57abd8142a28d0daa742f9225540733cbc120d81d94757c0d7e1a9d47bda97

SHA512
f0d2a7ff61a4f22ca51e800f449169308c2943262fe903541e0af5a96a105cc52a1a382d2386afa5b2a196876478ca71b353d4ee4b1cca2a036253f0c6e0d27d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt.tmp

Filesize
84B

MD5
f4cb1e2b398c4785e3c6edf97920e8de

SHA1
671532a8ecf3a7cfa3ac6958268ad6fc644a6204

SHA256
edd3d0bbf17a2f56fc24c1444800f66e90de6b384785737d8ba0d83b55d3e41e

SHA512
e117c1f8e973a5fe12647bd5f0970923a4807409bf92d5e17ef43f3bdd35b341eb6a0fe2523e90ade5d3d01154b17fb75a34f7b40ec2c534da3a4db245b2fa18

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
87d2e96ec3a25ff1a4bfff58684b9ccd

SHA1
fb0c2e99d65d17a6ae21bf8dbafe94b04920de77

SHA256
6f55b846ab1a72db5f7f6733d4fb4e268041202b8eedb47e3d27db5c51c5f044

SHA512
7851b1f18a389c62d24edb7a29a9cb1af78f3bce7ecf2fd11a99d0d65fb28cd800256cdd1de0ef0adc61e09eb4ba8c620b4073689c4be16d63afa1bc8ec55915

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
48B

MD5
f80cb3a6a7218a1cbc5d4fbb4ae4a507

SHA1
1845ab91680f3d9a150cc53171ea095dd039edac

SHA256
9c2fe1866dfd287d6c5994ad1c5e11580bd6d47ad4a8b30067e1e0f6f344b9e7

SHA512
c3e08959b1c1fe38d6d89b3a970d1902c1baa858e300d3e8fb00cd261d51f7e9f231046a53bdbf69a66a9572096b0660f515faaa8bf4ba1ea0b65d250a14b8bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c92c.TMP

Filesize
48B

MD5
5e6dbeb8d10335f6ef604b605b02dd8c

SHA1
e9f9b910c1ea8904a2bfc57066b91b3925527f6d

SHA256
052d7c0a48c5cb8a662a81699d5e687cbbac78748c9ef5f8b004ef8f46d54f3a

SHA512
984f7ea012aa8de2fb4d530fa58118fd3ec8587bff4bd226fc48294068df81f9c58d70235a280987dfb83e78ce20d8463bb853516ae137038aca6dddb5b240fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
718ff3af78f4f4a5ecfbc2c14f69e610

SHA1
2ab9d429209153987782094efea13f0838efcfd1

SHA256
75ea1880ccb342c6c65dfb5b6bd588d80d5dd414c0a549e5de630e478f1e8e15

SHA512
7a7c343d2a43a4b45bac08a9e11bdc20d3b1e785e60c32409cc475e47816d1f7a84f434628473b9616a2409f2a316fca9510cd33781bcf3a54dfd45fa3b1fb58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2f720489d10dd378f4dfe58b24ad3852

SHA1
19eb29d271c90a78a55cd41ff50cd2b82fa49b60

SHA256
c4c4aac9fd59f724dba8443d4150cf5412586a81b8cc7432d44cb5ee675beed3

SHA512
993da21023e2a7acba90cc9348e3913283f894c91181a5d03460ea479e22eb4e28c09e20fd1305359bf921bd36d842a3885b5233b97b87b3d8eaa804e43f8133

Download Submit