hxxps://mucp[.]api[.]account[.]microsoft[.]com/m/v2/c?r=AIAAC6BQ5KU7ZP7LRWONX3PEEAEGZRK3PWBRYF6TSQITZHDT22NUNW2KTE6OLCQCT5PO56FKCOIBFG3N6PIEVTF77UQ3DYS7IPPSNPQ7GMIDO7URBSAWUJKJDH3MMMREZGDU7DA47HGOBIZKHQ74H3BP6OOMFOL4J45SSMNOSSZOXAIZLINCA6KY&d=AIAADGHAN5FNTLY5AROBV5TTAA6GVE2XQSB4NPE4T4L3LFNRYFVL6VIB6S6KVUU4X4VYONG4QKW7KQQ4HG4CQGKFLSVIAVRYPAKCRXVP7SBC3DWZEWAHA5AUQTRBPZAOHCDNXMF7UOACXGL7NVUV3JNLXBMMFMHMTYCXMVHKYKKUC6X3GCOK27OUE7RQ3GNGJJ3PXHPGQDCSQRC43Y&i=AIAADSIUM2JCXKRFVHZX5CFHRGFDIZK6CL56L5TCZGUPFROFTRSW6INDAPH5HDI4FFL62P5DQKDBDCI5HSQOG6B2WR3BKIPXOS64DBSTZTIRLKB356M2FJGQZ7T3X2WFVWNOEUMTQV5DTRVZ3MKZSANJUP22MUODEN3F37O4WC7VORUKUKMDNGJPZV37VUFDUYUEI6DTHQEFDH5V5CK4WE3U7AQTSDZBLGZVE4R7FAJHTWLJR7RLCRTA65B57CE5HO4M6ID2DBT4OBUY5DGHX7ZORUUL34VPLZ567GAXKSMTQF6R7QUXD7N6XXSJMIQEB233PWXLXOGSWUFNMI32PFZF53XQQGXGPKBXIZWEKJHLDZYLTIKLCJMV5K7TQDFU6MA5OX5BY6FBC53TAAZV4BLXMCR6P64PWRBIIMZ3EM335U2Y4VMLU5BGK4F6WZGOUZYMGHBIV3HVGXMFUU

Analysis

max time kernel
145s
max time network
146s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
15-07-2024 05:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://mucp.api.account.microsoft.com/m/v2/c?r=AIAAC6BQ5KU7ZP7LRWONX3PEEAEGZRK3PWBRYF6TSQITZHDT22NUNW2KTE6OLCQCT5PO56FKCOIBFG3N6PIEVTF77UQ3DYS7IPPSNPQ7GMIDO7URBSAWUJKJDH3MMMREZGDU7DA47HGOBIZKHQ74H3BP6OOMFOL4J45SSMNOSSZOXAIZLINCA6KY&d=AIAADGHAN5FNTLY5AROBV5TTAA6GVE2XQSB4NPE4T4L3LFNRYFVL6VIB6S6KVUU4X4VYONG4QKW7KQQ4HG4CQGKFLSVIAVRYPAKCRXVP7SBC3DWZEWAHA5AUQTRBPZAOHCDNXMF7UOACXGL7NVUV3JNLXBMMFMHMTYCXMVHKYKKUC6X3GCOK27OUE7RQ3GNGJJ3PXHPGQDCSQRC43Y&i=AIAADSIUM2JCXKRFVHZX5CFHRGFDIZK6CL56L5TCZGUPFROFTRSW6INDAPH5HDI4FFL62P5DQKDBDCI5HSQOG6B2WR3BKIPXOS64DBSTZTIRLKB356M2FJGQZ7T3X2WFVWNOEUMTQV5DTRVZ3MKZSANJUP22MUODEN3F37O4WC7VORUKUKMDNGJPZV37VUFDUYUEI6DTHQEFDH5V5CK4WE3U7AQTSDZBLGZVE4R7FAJHTWLJR7RLCRTA65B57CE5HO4M6ID2DBT4OBUY5DGHX7ZORUUL34VPLZ567GAXKSMTQF6R7QUXD7N6XXSJMIQEB233PWXLXOGSWUFNMI32PFZF53XQQGXGPKBXIZWEKJHLDZYLTIKLCJMV5K7TQDFU6MA5OX5BY6FBC53TAAZV4BLXMCR6P64PWRBIIMZ3EM335U2Y4VMLU5BGK4F6WZGOUZYMGHBIV3HVGXMFUU

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3276	msedge.exe
3276	msedge.exe
4404	msedge.exe
4404	msedge.exe
3108	identity_helper.exe
3108	identity_helper.exe
2092	msedge.exe
2092	msedge.exe
1028	msedge.exe
1028	msedge.exe
1028	msedge.exe
1028	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe
4404	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4404 wrote to memory of 952	4404	msedge.exe	80
PID 4404 wrote to memory of 952	4404	msedge.exe	80
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 4720	4404	msedge.exe	81
PID 4404 wrote to memory of 3276	4404	msedge.exe	82
PID 4404 wrote to memory of 3276	4404	msedge.exe	82
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83
PID 4404 wrote to memory of 2920	4404	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://mucp.api.account.microsoft.com/m/v2/c?r=AIAAC6BQ5KU7ZP7LRWONX3PEEAEGZRK3PWBRYF6TSQITZHDT22NUNW2KTE6OLCQCT5PO56FKCOIBFG3N6PIEVTF77UQ3DYS7IPPSNPQ7GMIDO7URBSAWUJKJDH3MMMREZGDU7DA47HGOBIZKHQ74H3BP6OOMFOL4J45SSMNOSSZOXAIZLINCA6KY&d=AIAADGHAN5FNTLY5AROBV5TTAA6GVE2XQSB4NPE4T4L3LFNRYFVL6VIB6S6KVUU4X4VYONG4QKW7KQQ4HG4CQGKFLSVIAVRYPAKCRXVP7SBC3DWZEWAHA5AUQTRBPZAOHCDNXMF7UOACXGL7NVUV3JNLXBMMFMHMTYCXMVHKYKKUC6X3GCOK27OUE7RQ3GNGJJ3PXHPGQDCSQRC43Y&i=AIAADSIUM2JCXKRFVHZX5CFHRGFDIZK6CL56L5TCZGUPFROFTRSW6INDAPH5HDI4FFL62P5DQKDBDCI5HSQOG6B2WR3BKIPXOS64DBSTZTIRLKB356M2FJGQZ7T3X2WFVWNOEUMTQV5DTRVZ3MKZSANJUP22MUODEN3F37O4WC7VORUKUKMDNGJPZV37VUFDUYUEI6DTHQEFDH5V5CK4WE3U7AQTSDZBLGZVE4R7FAJHTWLJR7RLCRTA65B57CE5HO4M6ID2DBT4OBUY5DGHX7ZORUUL34VPLZ567GAXKSMTQF6R7QUXD7N6XXSJMIQEB233PWXLXOGSWUFNMI32PFZF53XQQGXGPKBXIZWEKJHLDZYLTIKLCJMV5K7TQDFU6MA5OX5BY6FBC53TAAZV4BLXMCR6P64PWRBIIMZ3EM335U2Y4VMLU5BGK4F6WZGOUZYMGHBIV3HVGXMFUU
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffacac83cb8,0x7ffacac83cc8,0x7ffacac83cd8
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1924 /prefetch:2
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,11427846544007743356,16677796370187017821,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5852 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3492

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bb87c05bdde5672940b661f7cf6c188e

SHA1
476f902e4743e846c500423fb7e195151f22f3b5

SHA256
7b7f02109a9d1f4b5b57ca376fcacd34f894d2c80584630c3733f2a41dddf063

SHA512
c60d8b260d98ced6fe283ca6fed06e5f4640e9de2609bcfbfa176da1d0744b7f68acabfa66f35455e68cad8be1e2cfc9b5046463e13ae5f33bbbf87a005d1e0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5478498cbfa587d1d55a9ca5598bf6b9

SHA1
82fedfb941371c42f041f891ea8eb9fe4cf7dcc8

SHA256
a4e82ce07a482da1a3a3ba11fcceee197c6b2b42608320c4f3e67f1c6a6d6606

SHA512
7641a2f3cc7321b1277c58a47dfd71be087f67f8b57dca6e72bd4e1b664f36151cd723e03ea348835581bcb773eb97911f985d5ee770d4d1b8b6f7849ce74b44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
4b6ad5dd9bf0de1227d11e7460f03575

SHA1
3c3c8bd93015863afda9b0215e198fefa139409a

SHA256
b7aa9886011edd6518469dd2220fc454b77c76fb38bb20e58078aa1138928b89

SHA512
a23061ec759a187c50fc6e18b17ee8e735f9881383a926593e3b13f5c0394ec17559ea84a77c8972c462e616cc6367ddc73f43b7a2db687536ace64518a02647

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
777B

MD5
2a1466d4a49302db881a62b4b4d08560

SHA1
58d3540918f94ac387237ddd1c4359a8863daae4

SHA256
cbcb05f0cee547fa07ab629ae4aaf3ae5fb2fcc92b5cfa9f35661a30f9fe0de8

SHA512
865930c2f9d971f9495e7270ee17422e474110f95df6c284293228365b28584f0e195552fefec76f9baa0cae7d8e34d191942c19000572409e30de011e9d9a93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0540fd556b6033a021c2681340fa2e77

SHA1
a0e42a4a85bc148cc9bfdfbae6711cd173c11d02

SHA256
65d4f139f5f8de768adff3be13bf60e9398343122609da2c84fcfbe5af3ddf06

SHA512
ce4a3301b6409cdbbf9e9e8f2b198e3a75b2394260f9c57257477d7b5c81d827a1a532c2d7e557a4700bd0f2e231bcc9a7d9e4f6ec01d3e45037417f2c0c5224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
96a6d9c19fe7066ff60e34b81afb6d39

SHA1
105a04dbb882bc1eb9c4187c07367cdd82018146

SHA256
5d77cf180246fc5184bd03709e7a8073a394c6b8967963fb8d568598b1199e52

SHA512
1fa2a048579d7cfa6d2708c17def9e2c78543ce392a1667cf450f13037c61e40e0c695149e71c3915b5bf55b65b1a3ad98fc94a3ed638df45975e128f95c2b84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c1eb0cde2406b6af565f825dcd492589d40ab644\055c77f0-6d88-438b-b46a-1d86085164b3\index-dir\the-real-index

Filesize
7KB

MD5
1c293a7b769e2ee0ebd5099cb97d19ad

SHA1
d10d186dfad09a2cc4ecd0e2e1810e431e85d96e

SHA256
8e3909bd5d4a191c0465e1f990323f78d51adaf97522dba54606322626f9f202

SHA512
df060ed4e2dc841e1881c0c7db2bd29f2f411f182ec32d67aeb3a4e77f9a0313fc4f044a4a61c789272c298c67a42810f93f6f50d665719bb10ac784c0735caf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c1eb0cde2406b6af565f825dcd492589d40ab644\055c77f0-6d88-438b-b46a-1d86085164b3\index-dir\the-real-index~RFe5852bf.TMP

Filesize
48B

MD5
4bf47eff6a8913ed67fbfd773ff3d984

SHA1
4e8bef67d77f1b0a5f55052855d283c2e2a17543

SHA256
38ab52f0d344d43d0fd63da6f61c5a1afd63f12a32148825abdfa38c948c5fa2

SHA512
c9e5a9f90bf319a674811693c85e6ee12191ad7105bcbeced23d1daa9b0f12c9c9ac3d8a7abc307f9de1c44853a300040d1e154e206243e933b690b9b325ffd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c1eb0cde2406b6af565f825dcd492589d40ab644\index.txt

Filesize
91B

MD5
816087620bc1889401952fd5322a7a40

SHA1
7bd46c14175a07f81b5f116bff4c70aef167c820

SHA256
bb4d505321dbe08e279087bed73578332f4409b508fda31f56202f1163210521

SHA512
274602d5d73cb2389eab7cbf10eb2baf560ad62b9cc7320f5aa01be61015efb7de51b7cd1e3439aec42fee3a81185e1de9efd256b393dc7799de505ae80038e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\c1eb0cde2406b6af565f825dcd492589d40ab644\index.txt

Filesize
87B

MD5
9c9d0dd840f23513251e898f561bd257

SHA1
a2c1d090398d918ca97b708896295537a293868f

SHA256
63951d4d86048c7f16c44d36e5e4b234557c3372c7ab3978ccda1687fd461cba

SHA512
abecc34c44943cc4a981f7fd9da8bfd8c9261712fbd3225c5a4a8d4093cc6d563cf6196d47bba6188a8f7886f11b6ac6aee45e6633263b70ff008e6c3f8aa71d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
84f71aad23a0b5bc5fcab78d8801ab46

SHA1
f12eaea07df14cc5d160a03f016b847ed3f1446d

SHA256
a134de40a9f03757a14cd5ab8d10aad64e122f6283a23a6d9c8f6d1537ceb95e

SHA512
0877ad49bce19c512589d030fc016bd7ace7b31a6df354775f5204e0fc63dc13871ecca0efbe0f6c22b57c3bc283025a1f585ffc4dea3f58df8b1cb0f02c2399

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5805d7.TMP

Filesize
48B

MD5
941b4970ebee3418ae7361f31f28c45e

SHA1
93f0d9b6ebfc353ecd5af9a70482058ae068d49a

SHA256
1a87666454ec2336aef2c19e30fd9d92e39dcd99e8396235099bac8e44c590e6

SHA512
456afd60dbc751b1cb626df24d36985540b01fa50208652272cd46063a03b4ef01d089a686a4954eab362afd462e6b899919a5ae69027a50fbf9916fb2d3d6fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
a8000c52838ebf5ed1e86b7a5c466f99

SHA1
c8776a2c8c007cae647af5f4a8fbdbd967f38851

SHA256
a3b871e2827187806ee83aab3b64cd0bcb780fd8a318297b9703215623226387

SHA512
d31d70e7222ca8fc4114d67aef9684ecf1465e62d2a09e230bb3f1d7d4105150a8e12d110441f0ebade7048cf47f37309db48dfedea44d00fc59032dac22b3af

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f8e7.TMP

Filesize
705B

MD5
79ead2df5144e0fbff38cb309f3c325b

SHA1
dfb121324c537dc02cdec4c11c8d6f2f7e95343b

SHA256
62983d75485d470fa073302d8c40481c9aefd0011c173ac1d6fe5cd03d4bfbdb

SHA512
636bfbd329b421e544bd4d40bd8b6549867c9837f7899eec9dab315ffcbd817843a98fe49498e6f7d03f0a3240a02a2e95d22e8818ce801d6648faade68ae4c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a2aa756c31f4a6c047438ae95354b4b6

SHA1
20e5a0ad0a990d6bc0a40916a6f61f4da46c2996

SHA256
03e01353f710b61334aaa0f78558404a19204f8955234ad0a55d35988e8b38b4

SHA512
67ba3180f9650ff23c333d574d8ceb417515c5e696d93611651b10b18d09b9affbf5a60fcfa48a38223bbeae7f9fc0effaf55487c213498f2e1fd1ed24b330e2

Download Submit