hxxps://testmy[.]net/latency?gID=4wqt6z1y5y

Analysis

max time kernel
206s
max time network
203s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 02:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://testmy.net/latency?gID=4wqt6z1y5y

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1040	msedge.exe
1040	msedge.exe
4796	msedge.exe
4796	msedge.exe
1760	identity_helper.exe
1760	identity_helper.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe
4796	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4796 wrote to memory of 2784	4796	msedge.exe	83
PID 4796 wrote to memory of 2784	4796	msedge.exe	83
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1728	4796	msedge.exe	84
PID 4796 wrote to memory of 1040	4796	msedge.exe	85
PID 4796 wrote to memory of 1040	4796	msedge.exe	85
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86
PID 4796 wrote to memory of 2176	4796	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://testmy.net/latency?gID=4wqt6z1y5y
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffbb8f46f8,0x7fffbb8f4708,0x7fffbb8f4718
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5528 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,7890315258571088169,16777346719431125106,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4044 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4424

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1580

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8dc45b70cbe29a357e2c376a0c2b751b

SHA1
25d623cea817f86b8427db53b82340410c1489b2

SHA256
511cfb6bedbad2530b5cc5538b6ec2184fc4f85947ba4c8166d0bb9f5fe2703a

SHA512
3ce0f52675feb16d6e62aae1c50767da178b93bdae28bacf6df3a2f72b8cc75b09c5092d9065e0872e5d09fd9ffe0c6931d6ae1943ddb1927b85d60659ef866e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1790c766c15938258a4f9b984cf68312

SHA1
15c9827d278d28b23a8ea0389d42fa87e404359f

SHA256
2e3978bb58c701f3c6b05de9349b7334a194591bec7bcf73f53527dc0991dc63

SHA512
2682d9c60c9d67608cf140b6ca4958d890bcbc3c8a8e95fcc639d2a11bb0ec348ca55ae99a5840e1f50e5c5bcf3e27c97fc877582d869d98cc4ea3448315aafb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
916669a0f2571b18275dacc6000cf239

SHA1
101adcd0136a93fcef6817b4c84d883c70e00f93

SHA256
1c72477176603de33ed9ce5ba7fe50bdbe97e59251a307ada9a4fcdb3e82f12b

SHA512
97fe751a618bfe449d96135df5a3f53b306f06a598872011eae2cb3959bae5dc2ceb9f711756f771decbecc8c5a5408b9329df6d546fa28edac45ff102bfc61f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_testmy.net_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
b21140b05642c815eb1a29d4b3d7cea7

SHA1
ee9b0319177069ee0c27d6f0f59321eed38385ad

SHA256
e9cafb76bd2bc142cc5c672a43076715fcacdedf815a8dc0cef05beb6716061b

SHA512
35108f524c59465deb05d74866dab3efa98429d7f7d8a95204ed7cdc61cd268f5b29a3a611fba6e8beee4f684366eec277592bbd7fb292269f102de7779e8672

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c72eca7608349d1677f12876bddbe5cf

SHA1
2b40c4c31da18ac77e183eaa5fbd30ada57796fc

SHA256
1baf5979be32bb7882754d253c194b2a3e59eae2e56b9f1aa3893afb6b6dc3ce

SHA512
d55fb85c14701a0fb26012724525f0a9b96c4345288468c202f26d1ddf5ba0fb9f0ab6b0d19c73c20e5e963526d77c4bc95fe4536663a73ce61a1fa6d2c065c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
1a05b35c2409283338e4e4f98c531a26

SHA1
0c4e4830d8d15c7ed34893c167097a55b72b0055

SHA256
4945437926d7546d50bcb03d6a8bbaed400766d3d251114ab2a4f58c0491d386

SHA512
90c223747746ffff3546e8106bffd64bf0952dfa8ebf33fc9168b9690152e53da0ca975d6474b302bc090efe45ac6bb725e7a58f6cf1742ee0ea8f280be6b7f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\2b2defef-56b3-4d15-84cc-749aa01544dd\index-dir\the-real-index

Filesize
168B

MD5
e87b6b164ef3d4d4f75a5d2e430cc32a

SHA1
acefc12c578d6bde959a220e955ceaa4d63ce9e9

SHA256
c3497421ea466e05a1003889a783896757991dc7189cf48b7ca0ea47628fb753

SHA512
11d669924f9620b74ab658b90164ec30a8994e17484a582811e4d4f8e749426efa6cf807a0fad547d2c78d2b1d96a2ba46941dcd7c46e3539259191622a1f2ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\2b2defef-56b3-4d15-84cc-749aa01544dd\index-dir\the-real-index~RFe57dcc3.TMP

Filesize
48B

MD5
92059e1b340537e94e1de75a729c440e

SHA1
4567c98df5b90d0192c3c7155140f0245b97fd09

SHA256
1ceab4bc09bcdc8b5e8b2942d7a2ccb39e2f347393745a60f76f6038b8f293de

SHA512
6de60b2b9d1426e0ddb089fa67867c3c61ddcd8769c990bd91d8f0728bcc9d7c3d9b1e391a0574dec951c18c508fa0ba99cd45a7d2b2b53d40724a218eb5c4af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\dbf907df-d219-4ab2-96d2-1201b580d157\index-dir\the-real-index

Filesize
48B

MD5
71defe699a91d93338b371e5c0151fde

SHA1
79e97981fccac03f1fa1fadc61800aad101ffdcf

SHA256
c4c9c3d45687b3ccb632b886ebdf2a980ce2e130aa1f9eb8b9112d6390c3f91c

SHA512
07b14ccb924b917ccb409b103a07c78965943b43d2e06843f4b6c5fbbdb73779062e926090d3be86e5af1691345650e7326c6a16a83aed7f5989644b21f03135

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\dbf907df-d219-4ab2-96d2-1201b580d157\index-dir\the-real-index~RFe57dcc3.TMP

Filesize
48B

MD5
76c7c12c350ded98b767325d20338a2b

SHA1
31290432db37474b515897a22986da7264d314d5

SHA256
2aee3aff29a24174c692316742a9d5976d8d5bfdf6ce72c8038db05ce06e1d9d

SHA512
c927fcbe5d951e1c7d1a229338def0e3b3918d6dc298b51fb08dd6baff0235b883267ba2c97ffb7a697c900e83c1eb718bdc8fb14fabae884292147abc641937

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\dbf907df-d219-4ab2-96d2-1201b580d157\todelete_9b7c51920946a88d_0_1

Filesize
264KB

MD5
de6d6f09999aecc44e09835d881871e9

SHA1
ef2db90b8624a335d64a064e6ee7475b174233c7

SHA256
305826d3f1dff27b44bc34ad63086db0ee748619bf897c0fdd913b80ecb1455e

SHA512
911f2636d8b1e227edf1ae96f556c4fca70415e0edca718a65af540afdee1a31881f287cbfd3180659aa4fcd81cc4eb0d06819de9620417559cc9ef14ab92121

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\dbf907df-d219-4ab2-96d2-1201b580d157\todelete_9be4a7fb7d3d3095_0_1

Filesize
9KB

MD5
067da27c6cede557820ea0116566143f

SHA1
19940237a8aa2c7bb8ebd13db518919ab1230e81

SHA256
0caaa591df0f0d620b37ab177c5a806093ddde86e07a93b5ed978586305c8871

SHA512
0bfc80d3c3e5604dcac1cb3a065d635a3d6d9a9323c86772691793e0472c03dab48ff645bdfd8d8ca5dc26b16771d81bed957f248a723f2a39fbc0b29a251d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\dbf907df-d219-4ab2-96d2-1201b580d157\todelete_e5360ffbccdddaa8_0_1

Filesize
4KB

MD5
462784c1a0cf2065553a8e9693355e1e

SHA1
eda1c6a7fd2bd74f36ea9b2732cd44fb926b399b

SHA256
39ee2ee638c22d5e7e6a22565a93bcc60b487900a05c4923a2defe8d255a9592

SHA512
ea5f8a473b95593f4f4de04871c1e874fe33888e23eacf62ca95285d3e9e26fdf0e935e3f91c0871cd08cdcb5504d09b32a3f9e784e23b6880a7ba01459bd9e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\index.txt

Filesize
203B

MD5
d28d8f576fc3ab176db3b03179e845bb

SHA1
2794045b25260ff84b5d52051bc4dadada87e1e4

SHA256
9c4c4ae4074cc65608280e3775e0f9197f89180f6e08dec13f302a25eb523e3a

SHA512
710e21af8020c0939540425a6829912a37254185dd47812dbb81559a44fe5bb39384cf7959a0cbd80c1515f122c502fb8ff2eed4e5a1ea36d8720631121693e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\index.txt

Filesize
196B

MD5
38082f7f253bb459568dcbbaf8db9e35

SHA1
0807a6c5ec131c20deebdf8618de075653559dad

SHA256
53eae0bc2c0be5b969e9fc1b5d83d52793631d36f0f119d0e433d77b60b7508e

SHA512
4bfa37870a3037589d64e641e43edacfa8e5cfec5b604b9826afd32ef3457b83e0ae8af420d49fa18b9d1e87af44a49e225d80a12a2570b9872da281f63c95e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\6448fcae4959b58acd099c99e0daf8fe6ec4cfb4\index.txt~RFe578e84.TMP

Filesize
117B

MD5
f5cc4cfc9ef905e85fbea8df771b7fbf

SHA1
d6c6ae1b3a25ab1b134cb7146c35bfda42dad715

SHA256
e836fb827e0b122f86560295a034e140e8c82e279038fb571ccc021e88268b11

SHA512
c0b5f00f8cc932b26e3fbecf5068b8ac83aa0a6a293ffe32709a5f69d9b22a6628973e2d8e0c80976702f0551b7a8825abd4e395b662a182e4ecea1c3b48bc8f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
264B

MD5
bce3329007ae03833ea0ba67e0450a32

SHA1
74fc353faf0eee8a165a8dc7895a670d1f50ae8e

SHA256
e2630d6bbb9103fe89092f7f07716d16d9e10dcafdf80e3c5b986caf76055fb4

SHA512
463f510da7d139875f85b564d7adf78b1479e8da4c7f104eb57c9286fe6c75ff3aeba83be26ba8dce8d6f8f7b3709315700a18ec213269f8947c634b3bca33c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57d987.TMP

Filesize
48B

MD5
d9c1f716d5de56d2a03e811d5dcde9b2

SHA1
3539b0a8b28b5d5013b92b45ffea7e72ad8aabf5

SHA256
2150b4d4370917a2482a1f82d879cefc93f4e5940a4bfa2709191b3a330bbdd6

SHA512
1199dc4cf6c6a55e841590520bc9f2f7e4cbae6b04efa239cb25ba2135aa6647df8cf7091f5386490f64648005fe5cdbea6770ffc83d9f95607b597b83bb30b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7a2b1f47bd6334010faa22622c1f91c5

SHA1
3de72a0a9562936a1e46b696f47b78416e9aac86

SHA256
91be098045f18ca8e6272d28f46d650566610bd92315d9f9e75ca110ffcc81f9

SHA512
30967b77a109168efdbe4ff2779e1c5c03dfd4ab84c88dbbcc35dd25a578996fc4dfaf507b1b41fbf416bbf88a80fbe559170d5834085e760f4430ddc47ca899

Download Submit