hxxps://krnl[.]dev/

Analysis

max time kernel
64s
max time network
65s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02-09-2024 08:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://krnl.dev/

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3372	msedge.exe
3372	msedge.exe
704	msedge.exe
704	msedge.exe
772	identity_helper.exe
772	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 28 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe
704	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 704 wrote to memory of 860	704	msedge.exe	83
PID 704 wrote to memory of 860	704	msedge.exe	83
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 4116	704	msedge.exe	84
PID 704 wrote to memory of 3372	704	msedge.exe	85
PID 704 wrote to memory of 3372	704	msedge.exe	85
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86
PID 704 wrote to memory of 1200	704	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://krnl.dev/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa527746f8,0x7ffa52774708,0x7ffa52774718
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5164 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3960 /prefetch:1
  2⤵
  PID:608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5820 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4588 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4020 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2716 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2736 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1696 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6796 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6572 /prefetch:1
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7052 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,17290214875292596008,4694101155995469495,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:3048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:60

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
96142ba45f7203a8c4d877b2d70588b6

SHA1
e1d1ac761b3c41ba0a3409d7bec68ca22ae1fac7

SHA256
dac3fb834fb077720a5a79f49add75e37c15bd07ac063b5516061ffc611c334b

SHA512
fe09d408370c5ddfa3264f870118fd2edb2e4184871a8029bb62a438be6da78a8e1f72d176149ce6a4963e9981136dc878aedb1e0c660833482a9850680a4beb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b367ffa3cd6896506992c5bb8b91addf

SHA1
93c9bded12fd3a814e4a87d1ab6b102818a9996e

SHA256
a2e0b202caf41d3a5fbde3824043e423cc9ce0ec9653a9d1a2d23b04c1467b96

SHA512
44e2745fad967ce9b7a2be00b75d6617d441ebe2763d81a8c038d57906b1c94d6d57c930141331c39e032a284b59014646dd9054be213fd973e75a2269466a8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
38KB

MD5
3b62de5dd9c53f962b1775720c360a0e

SHA1
4548a4e98a730461d18f6f8a382548fea2e4cdc9

SHA256
fb6a4a1633a0ab5b3a683326cc176f2e15fe5a53cb680a1bbaa0c746a14614bc

SHA512
d093ff50551ff1b93ea1832f04c318d79eabba6cd63344d01b6473838266535a47eb05d9c62e8ab7fb96fa1e1c4b2c5df2be9de19f4a31b9bc92d16f7326cc7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
17KB

MD5
d9931f487ebddc00dc92e0a5b672dad6

SHA1
5f730829d18e39571e7aa34931f7c2eba6530ddf

SHA256
0a46b760445d0afca06a55f818b735c1c6938bf55c79ca5cdbaec54eb1fafc36

SHA512
317e65aabac6335dac4b0e55e09f93817b4d526586a1785ae1d3053d9458efca5be11129f544caffd29327b7cd03ebec4ade2ddde50dbd67e3b732e5c83ecc11

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
30KB

MD5
8fc04f0a1a15bc42f5a832fd31f447a6

SHA1
1fdc1cbefb2a9bc601fb299241022d695b3013be

SHA256
8e5e82e50f588067cd159c159fc88735d4123d3ce180b0708d6e2535b048add8

SHA512
2e3d44c486d41ee24ae02e0dd8fd206b3f797885ca304d40777327d61ee494b3fa77ed1c7b8fae1a2df34120efab31fe63e2053ae44b8faa7b2976adeeb094a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
52KB

MD5
aa57248e6df5eb0fe3818b82e4755ef9

SHA1
30519fa2663141d3ef17bfb6a2662c6d0f477564

SHA256
b7f753e5cbc4b3be0475bc5554cac48940930f2a6daf8d6c5e47724c7b21d9f8

SHA512
16c5cb4631c75ed8d5a6b88cdf88adaa03db1a2d6916bae797256e4e7d09b3b98c8f85fb827e890dba509e9d8637661922510e77ec19fd291b360622ac561d4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005

Filesize
51KB

MD5
f85e421be2dc9c3ac12025af985bbdbb

SHA1
ba83853ea299792ff8932fd784d2b32430f45619

SHA256
4fef2d42fdd317e503b9e2d04b1fe159d9d316f6a50e67a7235bbf9dc14563fa

SHA512
07bf90c0d3abf322edd82d25ad4811b5bc01a5331bea2cc412195c22754c3e7c82f29a5fbf9a14420042dd6e29be0a9f8ac13b300806d6ec49c98c17023dc5ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006

Filesize
51KB

MD5
b23886d6278e5f4eb9d4f2629fa63fd5

SHA1
c7d4b1b21fcba03fda9e943ab4b25eda13c66e7d

SHA256
446f8bba7010d8fc57dbd598d0dc4414235d0224917ec9e7d9eff6b3a5962ae8

SHA512
4f5320c4e63a5831c3182bf96cede3dd1fcced1e27bdffb234d8fe89cb798158faff991ad11e1444803de434fec961df2a16c83d840c5897d734d0f39808b7f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
94KB

MD5
20c786ef0ac7dd9bcf4dbe67a0679b20

SHA1
f7d2bb9b4300fe5787916e6b618d56cc8ec10063

SHA256
a9d91bb4ea3abc75e9ab91b81711137a82b3f52b1aa30c99f3c10e190a56717a

SHA512
72108335c9f5538713a9eec38da244735fcf62271f48b20a897dc4b26e60cc8cebe432468b119fc785d01fc293899a59dfb6a0feb1aef2448f80a240286df4f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
18KB

MD5
c83e4437a53d7f849f9d32df3d6b68f3

SHA1
fabea5ad92ed3e2431659b02e7624df30d0c6bbc

SHA256
d9bada3a44bb2ffa66dec5cc781cafc9ef17ed876cd9b0c5f7ef18228b63cebb

SHA512
c2ca1630f7229dd2dec37e0722f769dd94fd115eefa8eeba40f9bb09e4fdab7cc7d15f3deea23f50911feae22bae96341a5baca20b59c7982caf7a91a51e152f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
18KB

MD5
8eff0b8045fd1959e117f85654ae7770

SHA1
227fee13ceb7c410b5c0bb8000258b6643cb6255

SHA256
89978e658e840b927dddb5cb3a835c7d8526ece79933bd9f3096b301fe1a8571

SHA512
2e4fb65caab06f02e341e9ba4fb217d682338881daba3518a0df8df724e0496e1af613db8e2f65b42b9e82703ba58916b5f5abb68c807c78a88577030a6c2058

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
18KB

MD5
115c2d84727b41da5e9b4394887a8c40

SHA1
44f495a7f32620e51acca2e78f7e0615cb305781

SHA256
ae0e442895406e9922237108496c2cd60f4947649a826463e2da9860b5c25dd6

SHA512
00402945111722b041f317b082b7103bcc470c2112d86847eac44674053fc0642c5df72015dcb57c65c4ffabb7b03ece7e5f889190f09a45cef1f3e35f830f45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
19KB

MD5
214f75e42aa5cfca07257cbf8c64e83c

SHA1
ba4bbe71d4ab266bc145305217cdf86a7777137f

SHA256
a6760631fecfe59ed152aeb2c51fdcb515ac00cd4755449016b5b34813735d00

SHA512
e8d896c8c3509941fbce96e2847838a520b3bc8d94348b1121840a1a2a45328be939238423a03cdfb7823cf128eec3190de8b4c1924553d603ef02fa856217e0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
39KB

MD5
a676bee653cbbe9cd2346c954b0cf539

SHA1
eab70b3bf8358e567793f8995961637bd297f73b

SHA256
2462745c3dfd1267421d5849d0995975c21ce255d6b5f4327c60769ff6ab93bd

SHA512
6bdc704e74b030d3eadc5a509808f0d974d5769613d30cdcd7427f4bb79297b4dca45f94324b81fe99ed23bab01380c910cbef07cd2c1862077e27f23aa67b59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
75KB

MD5
8709b8cd22f2d36d96ca3facdd1562d8

SHA1
3c0ee27eb6ed18dfc1310f1720ce3b2dd4c72420

SHA256
d7ee9051a5cec78e563de7cbf6cf05b60e6010841ded6f9c91587475e56e34af

SHA512
9dc90af42831cb3cb486103ce83de3cb697987a8ecc541ff156ce956a0997d447a957a1711d39ecbe343abc0683c4dc3497390a71b3b2c6d1a7014ee34ce5bfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
91KB

MD5
0c8b6b40b9ad031362c6c1cce6bdf1ca

SHA1
da62d901aaad68393b67fe24bd362e2f076fa385

SHA256
928f1778aa83eafdd3be6de97160347a91bab3cbe259e5d7c1157560d208e9e0

SHA512
5b065ace8e96e5ffb64b7125b58bfa141d9fe3d5f7a34402191628f4a9f7d6db4e1aeb984c703c6eacfca52a58600c6dc3e1b82a3a92fc2ceb4d394a829a64b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
89KB

MD5
1cb13b154ddf9bd3ce493d1d643785dc

SHA1
2bea8ffabeaa7ef6488d4b75a48dab139bb194a8

SHA256
dbf4de6de7a3a11295b41cc1a0d23c972221a44112b0accab8ca5227dc0e2d5b

SHA512
74537267983a343d3e6a80db5c165d552971a91694c607875296e592c84ce8d17dc20c88933913a3046142a7d0cb25b2228e674a59665c6147121c9400e5278c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014

Filesize
20KB

MD5
7fe88b3b621156c7e2a1e41385d3423e

SHA1
48a4c83cdd9fe9a3b7feeef017f59a42d706f272

SHA256
0dcb8f6207d2aa479ff564359085ad8acf315e889d91699b4e22750e5bc634fa

SHA512
2d8f14a85d9716c226a3e24aa33e13ddb52114bf51f8972786296c18d61e4342c6699021abe23e67ddf42de80245ad13bf935eab11174d1a703b236b13676fb2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018

Filesize
25KB

MD5
cff4ddf6842299e073b6559c61072025

SHA1
7fffdc7a1418d3bfda1b219efe91cbe4e57773ab

SHA256
d772ff2923121b1fc5f729eed88ac08848c2376f5435114fc6a3104398c715f3

SHA512
8271e3ff11e373b48f5d988e8bd2625a64a15b455bc84efff172c64a4541a268b1112a9623637cfa2df39a0de15de912834815678ac10d72f1217a5b9aff3fbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
63KB

MD5
a2b03561cabc0d346e9a6be3f5b11b5e

SHA1
ba0aea2acc1c20700c4c09c5b2b8d0bfbd33ce6b

SHA256
09588f4db755d8d88d9e521f5189d97c2ac781ee7ad782bb0c644eb9f69feef1

SHA512
3602c58bf569bbf22d2a559f0a62c4ac8d6c9868dd956cf0d75d694d104eaf2f82d22c9427636a46ec82cc24e758ad1eaad75fab771ce843308c1b2fe57c6ddb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a

Filesize
52KB

MD5
13ac5d25975854f43a8b85423c171b6d

SHA1
5bb989782d838bf809b0559979ed8ac565777400

SHA256
93b445cfa8bf48d5083869b248871d63377da35015e366998fde98cffcbc3524

SHA512
1a04ef8793be99d925d7511e9ebd64abd07035181b1c925ebcb19e04be2f59895a6e7817a349ed758a51ff964798c1020632012490af269df702d855ed93bce8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
20KB

MD5
b697f8604edc9875b0075ed06c69fc65

SHA1
933f120dc38868d832efe962f27144ee597275bd

SHA256
48c5bf89d95ed77f2ded5cff403c849aae18c11ee5512e9056c64bd2a57be797

SHA512
430a6fbeebc338435ebd764cebe62aeba5e08a53b59e3e01a886d2c4ef12bbb4e301a991f70794b8bb3f5797e56c9c6abc0a07baed12bba6070754e8aba66a89

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
33KB

MD5
1aca735014a6bb648f468ee476680d5b

SHA1
6d28e3ae6e42784769199948211e3aa0806fa62c

SHA256
e563f60814c73c0f4261067bd14c15f2c7f72ed2906670ed4076ebe0d6e9244a

SHA512
808aa9af5a3164f31466af4bac25c8a8c3f19910579cf176033359500c8e26f0a96cdc68ccf8808b65937dc87c121238c1c1b0be296d4306d5d197a1e4c38e86

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
16KB

MD5
a2edb5c7eb3c7ef98d0eb329c6fb268f

SHA1
5f3037dc517afd44b644c712c5966bfe3289354c

SHA256
ba191bf3b5c39a50676e4ecae47adff7f404f9481890530cdbf64252fbb1a57e

SHA512
cc5644caf32302521ca5d6fd3c8cc81a6bbf0c44a56c00f0a19996610d65cf40d5bae6446610f05a601f63dea343a9000e76f93a0680cfbf1e4cf15a3563a62c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
20KB

MD5
d517ec714cf5a12b9dedbb94a419e40f

SHA1
dde9afb02dd9c4aa7aa902c8e464e3bb7db6139a

SHA256
d358bafe59e817c89c2cea04468ba69cab3677723fc2fad09c291e86608478c3

SHA512
2b356aa332078ab59377c96a223e69773018e5721fe313a7306bc2301dd278581f5be2be6f2bf219464acc1d5575d6502e81c0f150fcd1d5aca25938cbf5166b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
47KB

MD5
015c126a3520c9a8f6a27979d0266e96

SHA1
2acf956561d44434a6d84204670cf849d3215d5f

SHA256
3c4d6a1421c7ddb7e404521fe8c4cd5be5af446d7689cd880be26612eaad3cfa

SHA512
02a20f2788bb1c3b2c7d3142c664cdec306b6ba5366e57e33c008edb3eb78638b98dc03cdf932a9dc440ded7827956f99117e7a3a4d55acadd29b006032d9c5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002a

Filesize
30KB

MD5
3e11bb0feb0c100dad874c5fbd048d05

SHA1
36f6a5fdc495cd99b1162d47abe4051797f20876

SHA256
ec8dce8f4c7dea49dd17a1f6573867dc36fdd78b7b2feacb936df909709cad26

SHA512
0a9e3d197ebdab8035138ee0347fcc342025edd312d7764246a2963743b5cefca66bc7a9bb098a0b2fbc81752c1fac9ce46fcc4d4904e156fdb0ba5bdbc48a7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002b

Filesize
142KB

MD5
03922170f2d66eaa53d3e65b58e768d4

SHA1
a10041f86fc9b7ebd30273318cd6c3fb99f86fb3

SHA256
7755a009d709db472c73a0793d2c93dc90b4764396194574bf36789f5fdb0bad

SHA512
95a5175754ac7bea156bcf9d02d6e6ab9213b5eb7f1e509954828872e667f680dc43c6707f8924f27a1bc9e4ce42104273b0a383fa1c1eb674b5b975b3baa3c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\10a5b9a52470151f_0

Filesize
64KB

MD5
48ca409b1e55e2a2ae0966afaacad835

SHA1
45459d7e8dc9e7408ef175fa32a12f818fdf399d

SHA256
e1145a4f994d3f658f168fcc80d735a39e952e51dc9dea9302b81229aa99f0e5

SHA512
9ba8ed3017848b936c28f694774996824becc4fa5135051680e01c282d056da19e280461244cd161b66216f9b76a3f29fe6b2acf421de8c65bb877add336d729

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\1f937f6436f029c6_0

Filesize
353KB

MD5
c03e2647940039d6a245442f1c368e8b

SHA1
a8bb7bd5838fa400d6035b6b3b39b92ff6f2f73e

SHA256
b6ba2db7a2203d8d89794820acd3960edfd5c961ffa82eeb2a0211ca3e534d5d

SHA512
894bd49c9bdcb783fb81991fdd71041cfe21938b0d3b7de279da83bc4243ff0731c85e60d4c7331713621de3ae1ac04036dc15050ea1a29ccc9daace77435f06

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\2f10f4f2744c2649_0

Filesize
322B

MD5
b076139a268597a1cce3bac5a6a215f6

SHA1
700edd3a2a730c9376b2685e1b7c904b881c3bc1

SHA256
ba7cd642288ab3b4b6df57ee76af425a23dc698c2e4be4503b746de5e0397f3c

SHA512
af94e8a35a54f4097b6945b8b25572f97d59ed200abd745ddd488de8d072c11a6f719a2f1c848cbc4ec0eec5141a2b7bb28b4896b2137901b45233d7138ffb85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\3fe754081854409a_0

Filesize
54KB

MD5
2bb162fd0b571cc5005d72b3c003feee

SHA1
5f1900b5063548b3838343b2f539583f20c59d77

SHA256
4f8e7c78f5ebbee05c4861ea421c13e354613a0d765cd772aa3e67c434febdc9

SHA512
a4525f260732eb9bf7a54c59aa1115710f24d86595308762c9cfb7a3e222c67e10c08149a27be462191737f2b9b9e28bb998cebf867a9d4e3110e9a97ea3e373

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\7f56c6e1aeba7eec_0

Filesize
32KB

MD5
d3e523abd95a331c9ba9b009b2d54d67

SHA1
e8bad390bc7166a2dd1d05017b673230523bf4eb

SHA256
1462afa5c1473c0929d300dcb8058b081d1277c1fbfa03f35ed1c59b91ddf7e2

SHA512
083ace33a93248cafc18e3180eb44fccf99b14015197660a5f0a5656ecfa93abd95c2527fa84cc760f09eca371df7dfc843fa2a7cf83510a2422bd34ab797634

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\965ffad020381297_0

Filesize
3KB

MD5
6a21bb60e26f1981b8431847ee3322a2

SHA1
744d908e638051e02fac4a61ae888fd6b317cfa5

SHA256
1678709cc8edf6f1c4d52d4dec78062fc9a1f5940d7058daf63d4e7d3246ad57

SHA512
12369c2b36b409850516fd0477f9b527918690fe25c53936b3be7b77bcc3d2ce3d48f278e79c708c0908b1ccd1890afec66b468cad3a5161c496cdfca16ad1f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\b5ce9af8267e6099_0

Filesize
29KB

MD5
0a84338b7e83258c1104fc3fd072af1e

SHA1
905213c82e633b6fc3d2908268ea6ee13da392ca

SHA256
9103ed2465bb448276e12bb8adab638362843e5ed46726f01b82b5ff954436f8

SHA512
af76ded4d35a04300041d62f918fa9259634b37e4c31b67c73eac71f0e43ceb05677361b8cdbcb63b922513be3ef11c9e15e7f187b6637cdc0d49359d7693029

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\c49d0209e772a4f0_0

Filesize
3KB

MD5
3e6b65f58e87bb7f155413b68286a825

SHA1
42305aa9303ce82db3592bfdd6c3097c63de086b

SHA256
026c89d400e28eb78c8606f2752732630f907d92346ee6d9711577304c8956c1

SHA512
4fb4070971dd0909b9ff789fb277f73e855304e203678ea2d429948b59c70abd348a1032b6f5f04a6a297cc4110470ab15a59c65162b62dce58f2563ad99fe54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\d986f95f9dd7fedf_0

Filesize
265B

MD5
83504e44f62cb751d59c4724d0c8de86

SHA1
3c112fcf43865a69e35cd6660ec8ef4123f1b5bd

SHA256
6d0b7fa8573a736be274a2325b3a95c1a66f0d7ec22a97254055d63e6204b181

SHA512
53ba4727d7c57f60c7aeccd8bcc76d54ce85608bc8da6e3c515aaed49e7bebebc6447540de121a91ae5fbbbe9a3cf6399bb6d146e3163f969bf158c1a4997c16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\df53bad28ea1e322_0

Filesize
303B

MD5
b9641d9438db58840b9bf1c90a6678ee

SHA1
28a000e4a24f9a6b65cdfcbb67007b71d10db480

SHA256
9bb7accfa66200943c90aab492aa65b0ba98b1b758e66e0799bae98ca04a5125

SHA512
0351a34f219c95b3730c03e08f53631aaabea8beeb730e45d03bff2bb286657be171ba1449b96501ad0f1184676854f09792e7e592386c99924480a3cacd3a3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
fcbc74c038adc396caad1ccb9e68d1ea

SHA1
a7c9f007f7afbcda81ad8a97f485ed60e01cbec4

SHA256
3133f13423bc83077bb2ae07edaab4eae2fd2336ae8f1814aa9ae86da007b480

SHA512
7b55749d86177822abf98f92c68e0aaf2aec5f0d8a2579cc5a5f07e2550f4c93300eb671eec2e9e1338a09bfd027310ecaae406e77d9894903bbabf815df0c4a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7cb7d21c9fd6388ea5a02c32e2be4e7b

SHA1
171caca4e637d686f546e4c51038e826d3636cba

SHA256
9604460f0474a80e6471ebe30244b689ece1b4706e1eb23bbf637c7f5fd14844

SHA512
3145bee62c34c4c3f051beb4809b7c53b2f3cbb14e69fa3297b02b249c558e2321817d480f63bb199f814eb9180b4b939c177c1538248a1bab3661f7475cdd53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ed4befa6218fe91fd008c431877b26ca

SHA1
52f5dbf55f3336c9caf655f9a6d68e32294c29cd

SHA256
325c8fe3cf965d68b24a38fe8f7f54ac710e3f133effe6e97a7118a050541367

SHA512
48f428587d43174f95738f33e518693173cf435a3edd3580d53ff1ac65a042f0be547b10230fcc79f07aa19f7f26cc5b1c117f4fc7f4dec5adf1e6331e0e270d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8133e223a1187d6ad9dbd4644195de7b

SHA1
f6324aee22ee2dc775f253a038bf0191cb333cee

SHA256
dcd31ea22f050ca9fc6d5527260327e296a465ae88905afc8f344172f8ae9f6b

SHA512
f206f1758984194b5eda5d2e7c072e2937c309bede05d2f2951c102aa87bde5a84a5935d9202e7ce198108a6a2d6246023cbc23dd92b68482a72edd2ade7760d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
bdda53c052be6a48657c0499cc62bbfc

SHA1
8d0e22d2114624e4a88443c8bd68d952b4dc0e14

SHA256
9f5455f7658ac97ca7d7634fc7a6385f51ff5cd56f397c71ef215ca92515f931

SHA512
f8c23affa449b20bda721fc85f56a5038b32a25d8ddf918d019f63230f28730881debaf59768ead11751f416ea276d17abd2e4c916bc30f5f38813af2443a713

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
852d886f30a60b001ee9e16d15da655c

SHA1
713ae02473e2af931fb4455db3be07a00c734e97

SHA256
0c05a4e24bafde15c1c9cfa778ac25eb5552c22b1a589b7b473eebc752a6ca68

SHA512
09625a70076a264b7138dc14f2fe81b0e8ad6cc0ecb3cc4f5d5bd73eb58fab1e2528c5e3a3a40837740895a5a694b94b2fa174a8595960ef122823a4132d4f73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3ba7370f84360ad75e847f9472150d86

SHA1
94a1a7c1626b3bc9b58d6d0bc459094261d90f04

SHA256
968d8e0aa87b0eacc32e5596200abd6e37b86323cfb10d5b6c408264c4c13888

SHA512
37923a212ea7f3666753de6a643d219dac795b8e15dc448476225bbfc32a686a06bd3b977eddad8a105c21535dc6b7bbbea1a200a3b3f7530ac4c80a7a2746bb

Download Submit