hxxp://www[.]events-swissquote[.]com

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2024, 01:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www.events-swissquote.com

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
452	msedge.exe
452	msedge.exe
5112	identity_helper.exe
5112	identity_helper.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe
452	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 452 wrote to memory of 3128	452	msedge.exe	82
PID 452 wrote to memory of 3128	452	msedge.exe	82
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 1200	452	msedge.exe	83
PID 452 wrote to memory of 896	452	msedge.exe	84
PID 452 wrote to memory of 896	452	msedge.exe	84
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85
PID 452 wrote to memory of 216	452	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.events-swissquote.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9f70346f8,0x7ff9f7034708,0x7ff9f7034718
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2716 /prefetch:8
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5028 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5700 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:1324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,8233524043751778783,3802679767178496488,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5308 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
f331e0838bca73976fe11821437f63d0

SHA1
e10b3a2e1c176206fc4ffe045518bb2cf51ea53e

SHA256
52ea3ff307b73077f35edb9c92fd51b0c43f8655875d00d48e5f5769a10038da

SHA512
5e84dd9ec2ac68a74d8b272c1a890025ed780337ff36a07e25390c3d2e41efe0ff41868e984be6621b50de84e3e66829b958fa79b838724625e3530be6953b1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
189B

MD5
dc6f33a85b4b8a6b704c46e40829c255

SHA1
e1633048b2c007735d2dafd961d3e6e2861b52ff

SHA256
9667d0fd2dfaa108f33cb0d321e1b5ba8e737892a5ad9a55ff96a3702ed7ebac

SHA512
8f964e6c77a3fd6148893a8dda40a631f5f391bc12bcb95dcfd57bd01eed9e659cd7e8089d063a9de1b09eea52e4e99d3e3dbe784925535cdafd9d7120f11395

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
ad5a671360ecd4bcbf749b02cea8f991

SHA1
98ae338cebc20ac39dbbe374c7adb181ae1a40ef

SHA256
a10b4f707eb382f0b0a218aef23e1a5c8c8b0fdf8b0d1a792a24b0a0c56527e6

SHA512
95c20b7b469cf5216b50ee27dcd3f07a757f40e5a2a51a6f87d6495da8caa70c63c1ffcf4a9d4b8021dfa3c27d4c83b8c7911cd33ba596bed2e8d95845ee5da2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ad4135046726889c86efe49024c20561

SHA1
a706dfd9dd327269aa3a768700170222f7ffa56a

SHA256
e836088d097a4183dfe25c93cfa907e271eb01c0c38aed6bcf3f86972ce4cd29

SHA512
3a3353a85fd4f7ab45af258634a0519343a42a28f3f3c16c7719bf4f7f591184f33bfb618addae23b8c3953c3ab8e2fcc2fe17aa333665039900427250bf27b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\2e38d4c4-62f2-4bc9-b3ee-87b358c452c4\index-dir\the-real-index

Filesize
48B

MD5
c039400daff53e15336e73be8f5c7c24

SHA1
6605fb759e08754b543f1f8f41497183ebf4d2b0

SHA256
6f52ad456a073b37c49fd60a08302d3ad4ca757d14a3b01788d63261b356a1af

SHA512
035a0f6daac1fd7e2650db8a1f3d08bf8aaddd9b441ce6a0693225e19dbd9f53ab370ff525ede757aa133f4a6212043db41e57fdf95e00038ca0374f31a0cc43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\2e38d4c4-62f2-4bc9-b3ee-87b358c452c4\index-dir\the-real-index

Filesize
72B

MD5
1b655ab65ecf4e7cc39e6a6c2738f018

SHA1
2cc07a0d3e623b89774e18579b633e16eea5e7da

SHA256
46009080d60a4670d8345260bf8d4d3b2b9118364249a194a97b2fd518d5541e

SHA512
729a93a2fa1b952df9b05472e2f2d3e40156be2a127d15b4642abd04c0b1303fd7a303b352e188d25495a842a2d755029aaae8125692e341d0876f59a0c8b81c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\be1bdc68-e2e7-41e4-ad30-1c75995a8827\index-dir\the-real-index

Filesize
120B

MD5
e001cc0fb6377032e6c264b9824fda0e

SHA1
d2d12cfb03a0954db08d737329041a6184026c5e

SHA256
b7208a4f540cd260951b7e55d5fc16bae86b5e0107acf955307b1877ef199c8a

SHA512
ee8271140443f709f210c84a249596538a6da02a98cd69610830d4df2770fe6e1938448aa95d63cf9e34ad262509d9c45651adf4cd49c8fac7fb300d523e3569

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\de297a4d-e8a5-4a5a-bd5e-969d771c5d8b\index-dir\the-real-index

Filesize
72B

MD5
952e57f4f4e0404c09268fa1325ca3b4

SHA1
9f7b7c29448b8ad9478ae19e2c609226f0470d7c

SHA256
03595b0130ecbf694ea207a9104f10adc648d37ee3a86e8d1932ba58ac1c7ab3

SHA512
7ff68251e94af58ade7a696ef3fd148c5acdd99210515cb3929f968485cfd0f9df8c94a0161353b3db0aea69f3c19b775f432623b59fa5bc6894d1145c61f771

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\de297a4d-e8a5-4a5a-bd5e-969d771c5d8b\index-dir\the-real-index~RFe57c6da.TMP

Filesize
48B

MD5
9b40a73e9b9baae9846b9e14297f0f2b

SHA1
89cffa7385dfedcc414613da74231ac8435e3bfc

SHA256
d19d2428fe12e9f2a2301271e8baa9079c5905267b6b71191ac447ba945c6c12

SHA512
57b9ec6d8dc8b4e1f310d4aae237466ab09c96f5ff97cae08fc352ae1692073a33aff0b69f9fe5dca84f587a5f6ff05bc0408ce516c8a450f1e5d0155914e88c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt

Filesize
169B

MD5
948c96bc124d9fb9178ab175d3b9d2d3

SHA1
1e1693d21828e0c85e65488641f5977dea3c9488

SHA256
9c90bff162ea2ad4df7f2afac7c6529c13129879cf4ce4bb82db63927706ef1e

SHA512
24c61cba50bf8da5b5d8fe42afc12696f11ce6c2733f93c06e0d38a260e74d7d84eb9592cde97f9d347146d13595118671cdd24cffbb25f608ba8d192cf13233

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt

Filesize
230B

MD5
8dc8564e0a401238a5cbc2d8dd76d7ae

SHA1
adfec553cd39e303af7d92f57c9f39211ab31d95

SHA256
a1ec66d0e426e6d051c64b0f56c713ca4314733abf979059285188b55c109aa7

SHA512
b72db4cce1816b87783c63175102e1166b415b95795b6bd2db73465ee0b7b3502cd5376e5d11b3ea5ae60c7c7b18c457ef245119ea5c6cb05feb990aba4ac658

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt

Filesize
229B

MD5
d686c94505c9463179945f04eb7b42cb

SHA1
7e55f880a1471fe54be874102788c18e629eaa3e

SHA256
e25535a8c23484cd240278e79851c27e80dbe207d62c1a29c138ebdb149d6e8d

SHA512
745a00ddf4fef375a606149381fddcbfb3772365622de8b9bc87612d5c06b653915deb454204c474bd3b4121f8023db00ace803d43a8f8a484ca27b7a7783ffe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3d4376b47eb2d7200abf888bae7780ac1f2aab9f\index.txt~RFe5776b6.TMP

Filesize
104B

MD5
6112fea27fb37b40ad4d11795f5e38d4

SHA1
9044a46872e8dd4f621931068d88745766e3b2c0

SHA256
76ec6020cd4e6ff03476ac195e74499ecfba739be53fd828f379dc0ae681f34e

SHA512
0e662f5e10c82b83f1e50d7fd88459cb5a2ba94734ac2a9b595ade33b49678526f9fcafc0a7354ebf5fbd553caa5d6bbb7d51c6d00bf701f0db857cd2fe49a40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
e73f4011b7011e1e1a4e8283e501da30

SHA1
63a521494fdc6276bf03cbd5df5e5563f64554ee

SHA256
9e990a3f004e9df28ea59edb9ffbbc11f3ecc0c8f6ae5ec5142f35119980ba70

SHA512
5f1c26a5406ad22cd947779f66ba6150c155c9dbed334f7991c9146d9be4ada2dd49aa39023496b351c090a98f95630f07d528c608b9376584126b919833f57a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c4d6.TMP

Filesize
48B

MD5
a10374294815d47d1ae4b7d23222fdaa

SHA1
8868f04694cfd947670bf87464bbe1dba070d0c4

SHA256
b6743bae03a5d905f73cde93ebe92a617463977bb18b5f8cf8e523c344e5062a

SHA512
579eab9f0f1b0218514492c0f9422ed9ca31aaeb4566b938f596d9f8a1a65e519588ab42fc4817dbf8e8fca27ed04586e1cee2ef2a4711ff9a8a3491e1da8820

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
38b2aa5beed03fae5c28b98fb5c48fbf

SHA1
db97bdc210e4611254189aff61675d796e039f2e

SHA256
63e246fdc4946d58f64e245f79eb8d05783443fda57f7dc426b7f21b42520b83

SHA512
fd08017e90b004e45bf5cbd4a70ab23811a57af9a19de3428fff7ee2481c6ba2129e0c7c9c0707e5a48e98c7eb65949769725a59b65d78d8e4b9449cb90e3c1a

Download Submit