hxxps://altboxio[.]github[.]io

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
01-08-2024 20:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://altboxio.github.io

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2927035347-1736702767-189270196-1000\{A9C5809A-5A43-4200-8742-3CBEBF527CAF}	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe
4480	msedge.exe
4480	msedge.exe
3460	msedge.exe
3460	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4480 wrote to memory of 2612	4480	msedge.exe	83
PID 4480 wrote to memory of 2612	4480	msedge.exe	83
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 744	4480	msedge.exe	84
PID 4480 wrote to memory of 4268	4480	msedge.exe	85
PID 4480 wrote to memory of 4268	4480	msedge.exe	85
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86
PID 4480 wrote to memory of 2212	4480	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://altboxio.github.io
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd7f9746f8,0x7ffd7f974708,0x7ffd7f974718
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3628 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2268 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5268 /prefetch:8
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,10296488920902271695,278422680253835465,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5124 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:404

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:468

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
94eddc8c760c6582645d582b4f107cca

SHA1
01860648fbebb62eadd53d3bc58471df3b8d211e

SHA256
710d6dcbe48115aecea88b0a8c0124f5ae5f30225e59dde1bdfcc4574b5e5933

SHA512
1cf9e561257755bbf563df4f348bba14ffbce2faa7cfb96738dd2aa4b166d1ddfee114578f8b84b4d7c59f3d18cadd9ebc5b45557116bf68c2eda0867d9e5484

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
71a22f9fe81453c6c788bfe09ab8fe0c

SHA1
f4ee9368e5795c5b3f9470e0434358170e7646b6

SHA256
ca6f5b89e7361282ace0d96bba28c2a4434ccecfd0a97d925e9bc61524efd908

SHA512
a36d9a0c814d4293ae70a62a76e8a98e712ad91674a26cb3d8ffd300e22a6cba134e501b4a7e742229a66005db3b508aa821abcab1347b05457f06c712a1d724

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
3KB

MD5
5eb4e118c9cd83e812ffa5573175b774

SHA1
2931df619291d10ea0f4615d9458c9ed6e60b42f

SHA256
ee8e37d151dea2b7449574d68fd95b05d02f978ef17cb4abfc626dfb836f8976

SHA512
f32d83cfdf8135c328e46472ffb33b037fa4cf8002aef1106aa44abeef01edbf0400f267dd29c95670ff3e5e0eb37931f5add4c197d597a0463487eab2f9ecdc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
941B

MD5
7d22711330cb85e870f15681f6188ea0

SHA1
8e5cef7a4c5d1e54a83e284b8ccd1a650bbe405e

SHA256
4fbc1e8d706e6aa85161f8072a4549aa154127f093b69e6cb57213d9bd16fbe0

SHA512
c1880aead186bc70d1c597805ac262ff1193c2892332bcd9e1037917608859cf66173d28b6d015c9ec13b774f1dfefa64f67a4e07e6b397016e50c0fe510c5d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
33817d353ba475cd1ef3922f4008556a

SHA1
ad75eb2140cbfea87ea611c0090942ea6cc85b8b

SHA256
15988a2d0490b6d78574fcad86194dd9e7a6e529884255e701db9eefa81733b3

SHA512
1ed4aa69ee10d292263c3636fc0820f0fcad7dead667edf87d3e74dbfd54856f7e3444cba9e6243b7526c1ecdad67077689aadcc347b3e63c9162d7e01691f24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
67f826d1c24ada024bbfd0f71eef76a3

SHA1
18e3744730c47be3ac8331c5c70099dba0c69c85

SHA256
d005b01d0ced074c94f5c2837984c30d40768df83b66f141a3999c57c66d621b

SHA512
9ee3dfd4af5b7bc11f33a40c1912b8ca534ae6b31bbd8fa56ed7f4c55b807f19fe94645e4455ebde83b018ef3299d61c53d5f0fd263b7eaab086e6d519b8c187

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
779f9f1995de4b5a301159c16af02fd2

SHA1
bcc47927fdf24ffc69ac41c4786dcc34188b2be3

SHA256
9d717e4fd2d508c9703734c97723fdd3a9364979cce4c0ca3a75d8f5547c1292

SHA512
1a098d4a93cf80630aa20851b435fdb90bdd4c4edb7b78fa0d3a2045506a1b54d2688f0626c9d5ee926784b0804ee8e3b5ce6e55003aa619f8f73b2454418660

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6a42f5e1f58b5d8253878addf50f0275

SHA1
e998a96f3ed5b6f276423ddf472bc6301e82da3a

SHA256
dd37421387a4363f72b2724d76839dd7676c35233acf388320eb878ef7c3f9ad

SHA512
04e67956d1613604636516ccafe8c99087d8a5c3f6d4aee6065e839f707c7fe031b7ab2dfe461f105f4d0d89d77fa79c13167dde163e15f906f3a734f0e102e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
12e253cf9c61516594cb6a1cdd202902

SHA1
afdd6620a66cdf128b58c404082c38945b41581e

SHA256
6146e275e177b22811bfcd64ea997f2d39503e34e9cfc5fcc9e507c350715c1d

SHA512
34705673df36b51445c5f491408ba6ef7d8b7e134b60bf344973e989aad92b6aaaeb20879cc222c1fe5237fe82d36be2d453341011b19c7b13e62a9c14cc1a0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581dd4.TMP

Filesize
1KB

MD5
4b2965a3c3f8c5c29270f4073bd6ec7d

SHA1
ea329cb2b095b8906ef5b6413084f9871dfd4277

SHA256
f5fee572805608d53b1b810ee5f30b9e40d6e00c9b2a5f24c224535f87c025e3

SHA512
daa272a496fb89e97b1a1176173f8ffbc972679510e65b28a8ff59248d7b1421f920d7cd656593bf2dad36c844e1f614bb0bca4901f6dc3bf57ab20975a6d4d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
bdca4c712d84c671bb9aa250ef49022b

SHA1
5f6a1d15a7699fe2a72ab1c3b95dd5e4357a8343

SHA256
d7afcb6dfbb5da0ab931de2de1b62d81da66bf3a7deb1efd57f2ed290f3ceb4c

SHA512
90998a80a489931382a07e2cdefc6abd69d3527877a04d6c50c49fda4b110571ebafcd5852badd0a7f405ccfe393b349f77f9b178ce001373cefee72bc6ab01b

Download Submit