hxxp://url6108[.]aura[.]com/uni/ls/click?upn=u001[.]EQwd-2BIj7r5K7c01BYCnmYyjzDckhy5YvTz2l1PPxZJ6-2FJFxAOf53MJhB4G3IXZ2Yb31TnPpiAHzL1rxp5JXwzwMfjz-2FF67N91WiqKoJJuMAmPXD8itKOwunTpjHTqanOlcDF_jzuDhL2ykrQNDKz43e7LLbQ8I6sea9a9ksuAbvvkP9HLJMwxkp67h0l74Cc-2BXDFjGqsI8Dr7wRhkubk3KPNlu5URZYD5-2F7J2P0LLug4keHTswWBJdSRGGXE9A2MHwCpVe64O9BkNJg7PIdARfbS0Jm9zEDlKE7rsv-2FeZoG3qwCgwfDjfgMWIlliu-2FO3QL9sqmNXaJZNTJev6EJUnZyug-2FKOuQbf3xsO21Qv5OSTohI9bu-2BLYOLo0544EJNwbjC3irz4lTTKpT7aNBElzbqqM47YWGVwT8mldS2e7YHT4g3JMuFuKfRok0Or78OaVhiiVr-2FAFRbaZbl4WYYFUQLkXwn8MTrigYGIdpfNYJgKry2Q-3D

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
26/08/2024, 02:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://url6108.aura.com/uni/ls/click?upn=u001.EQwd-2BIj7r5K7c01BYCnmYyjzDckhy5YvTz2l1PPxZJ6-2FJFxAOf53MJhB4G3IXZ2Yb31TnPpiAHzL1rxp5JXwzwMfjz-2FF67N91WiqKoJJuMAmPXD8itKOwunTpjHTqanOlcDF_jzuDhL2ykrQNDKz43e7LLbQ8I6sea9a9ksuAbvvkP9HLJMwxkp67h0l74Cc-2BXDFjGqsI8Dr7wRhkubk3KPNlu5URZYD5-2F7J2P0LLug4keHTswWBJdSRGGXE9A2MHwCpVe64O9BkNJg7PIdARfbS0Jm9zEDlKE7rsv-2FeZoG3qwCgwfDjfgMWIlliu-2FO3QL9sqmNXaJZNTJev6EJUnZyug-2FKOuQbf3xsO21Qv5OSTohI9bu-2BLYOLo0544EJNwbjC3irz4lTTKpT7aNBElzbqqM47YWGVwT8mldS2e7YHT4g3JMuFuKfRok0Or78OaVhiiVr-2FAFRbaZbl4WYYFUQLkXwn8MTrigYGIdpfNYJgKry2Q-3D

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
5016	msedge.exe
5016	msedge.exe
4884	identity_helper.exe
4884	identity_helper.exe
2032	msedge.exe
2032	msedge.exe
2032	msedge.exe
2032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe
5016	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5016 wrote to memory of 3860	5016	msedge.exe	84
PID 5016 wrote to memory of 3860	5016	msedge.exe	84
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 2852	5016	msedge.exe	85
PID 5016 wrote to memory of 5056	5016	msedge.exe	86
PID 5016 wrote to memory of 5056	5016	msedge.exe	86
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87
PID 5016 wrote to memory of 1728	5016	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://url6108.aura.com/uni/ls/click?upn=u001.EQwd-2BIj7r5K7c01BYCnmYyjzDckhy5YvTz2l1PPxZJ6-2FJFxAOf53MJhB4G3IXZ2Yb31TnPpiAHzL1rxp5JXwzwMfjz-2FF67N91WiqKoJJuMAmPXD8itKOwunTpjHTqanOlcDF_jzuDhL2ykrQNDKz43e7LLbQ8I6sea9a9ksuAbvvkP9HLJMwxkp67h0l74Cc-2BXDFjGqsI8Dr7wRhkubk3KPNlu5URZYD5-2F7J2P0LLug4keHTswWBJdSRGGXE9A2MHwCpVe64O9BkNJg7PIdARfbS0Jm9zEDlKE7rsv-2FeZoG3qwCgwfDjfgMWIlliu-2FO3QL9sqmNXaJZNTJev6EJUnZyug-2FKOuQbf3xsO21Qv5OSTohI9bu-2BLYOLo0544EJNwbjC3irz4lTTKpT7aNBElzbqqM47YWGVwT8mldS2e7YHT4g3JMuFuKfRok0Or78OaVhiiVr-2FAFRbaZbl4WYYFUQLkXwn8MTrigYGIdpfNYJgKry2Q-3D
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffabc4646f8,0x7ffabc464708,0x7ffabc464718
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5516 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2224 /prefetch:1
  2⤵
  PID:5292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,8246570892521429741,7599355035042986763,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3640 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
212KB

MD5
2257803a7e34c3abd90ec6d41fd76a5a

SHA1
f7a32e6635d8513f74bd225f55d867ea56ae4803

SHA256
af23860fb3a448f2cc6107680078402555a345eb45bc5efb750f541fe5d7c174

SHA512
e9f4dc90d0829885f08879e868aa62041150b500f62682fc108da258eee26ad9509dcbf6e8a55f2d0bdba7aa9118dd149a70a7d851820d4ea683db7808c48540

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
a2781bd363199bd4872c8cad7b3dc7ea

SHA1
9f6b9a7a356c4b2920620ffb0640d99d19c0de25

SHA256
548bed53ccf72b2ba883aeb8b5f5a29e722a976a3940f078bd1e2d110d8e896b

SHA512
3a7f298f4f902ce0415ffb0c40b725ca15fb7b991f00d7aee5e27fadfc147cd3882ec4d648d14b54d57cf756e0d7d03faf8c6a3eb4164ff7dfc211144dd113f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
96B

MD5
61bb4c903637260c1a390f9f02889d82

SHA1
99596df1ef757e58bcabd0c1f6ec5dcf6083fb02

SHA256
636f5be8f78ff0e7c1e608ce3320515fbc07a377dc1796c717ae539296bc4725

SHA512
0d7033abac837d26debebdf1e9682e09ebd9c27eee35a9701e213192721d46cd727c956f87b46e0b6d9e61b1bcdf715c32cc7888d7ba6dd37831aa8322ab6ff9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
39970266538cd96c0ac3778cf203ceb4

SHA1
3b81ae23b28ea694cfa03aa751d568f3958a5e3d

SHA256
5b02ee8c6a11517e8ad840e77b0d9059a05bad18bf435b7362748af1fd37a1a7

SHA512
9fb7d23fd255b7b8c4d77a7d7be3294cb9d3dd6559316473ece95cec3751f1329994c06e11afef9a1a3f0ac2ffb7247fa9606e9271c0dc26678e057c3dca2cbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fa9a33529a94687ddda8c4aab3803f75

SHA1
efb13e55aaaaf481b9223cffa167757eb07e39c3

SHA256
9e4c72ed74fb88a0caef59c11f52ee3bb79877c5b3328104f9d0c12de19eb0df

SHA512
4728b320dba19ef6be4209c2e9943e2cd4518a5748ce49b8a9bd69754b144bec0bd1cfc7faa128ae7ce002ae1ec10ca233576d0ed0942cd2ec7f849085af2b5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
37381bbc4a8a8546a4c85f540085f3b1

SHA1
8d3bb16ceb68dd67250e1a2077aa5ab3269f5aee

SHA256
ab59d0ea89b6f22f79103760f983daf7eb1f833f03f0428827f2bdf716858213

SHA512
608c8cd541426ed0b624c9f3e6b83fb5c6a5e0b60de73bab50fcb09190fd6db1644cc2348e119cfd4e563bf00328300a1e6503cc842ec2fce2739d0954775180

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
54960c4f29d1d59dbeb1ed4088fb2949

SHA1
0079eb5b3abdd1d3bca41a7a9ba58194618001c0

SHA256
f6f3f25cce832dc4ba09c90133477319749782d9616991dfd3975ece26ccbb6b

SHA512
ebff2cb7e0b321d36904d4b42c3d90926e3cf01536b56fd6d1c906c4c38fa4c87fea4fd41e2213b7053b585f82d795bb9d4dba5fa45f04a9f5b3eb98d7874531

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
7901658c4e0421ba1ca39f0a72a3af2b

SHA1
70eb818a7d0e04f7b67c277999d8536f89fa7e69

SHA256
5ae38559e6c2ba6a18dc5b894e2113b14ae3d8d7ccaffb016296beadf30240c4

SHA512
3df7eb7943e012ccdfe35f8f7edb8390eb95bdeb6c7c693ada91751b566348a8c11779544ecb743c8d475c5326975feee2ca4c242cbdc31128acb6a2637d7e53

Download Submit