hxxps://ubuntu[.]com/internet-of-things/appstore

Analysis

max time kernel
267s
max time network
256s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19/11/2024, 15:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://ubuntu.com/internet-of-things/appstore

Score

7^/10

discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1840	msedge.exe
1840	msedge.exe
4472	msedge.exe
4472	msedge.exe
4944	identity_helper.exe
4944	identity_helper.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe
5680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4472 wrote to memory of 684	4472	msedge.exe	84
PID 4472 wrote to memory of 684	4472	msedge.exe	84
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1756	4472	msedge.exe	85
PID 4472 wrote to memory of 1840	4472	msedge.exe	86
PID 4472 wrote to memory of 1840	4472	msedge.exe	86
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87
PID 4472 wrote to memory of 2624	4472	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://ubuntu.com/internet-of-things/appstore
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc8adf46f8,0x7ffc8adf4708,0x7ffc8adf4718
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6516 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:5164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:5172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,8298287207582014037,2402119908809494373,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1808 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5680

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3668

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3576

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3380

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bffcefacce25cd03f3d5c9446ddb903d

SHA1
8923f84aa86db316d2f5c122fe3874bbe26f3bab

SHA256
23e7cbbf64c81122c3cb30a0933c10a320e254447771737a326ce37a0694d405

SHA512
761dae5315b35ec0b2fe68019881397f5d2eadba3963aba79a89f8953a0cd705012d7faf3a204a5f36008926b9f614980e333351596b06ce7058d744345ce2e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d22073dea53e79d9b824f27ac5e9813e

SHA1
6d8a7281241248431a1571e6ddc55798b01fa961

SHA256
86713962c3bb287964678b148ee08ea83fb83483dff8be91c8a6085ca560b2a6

SHA512
97152091ee24b6e713b8ec8123cb62511f8a7e8a6c6c3f2f6727d0a60497be28814613b476009b853575d4931e5df950e28a41afbf6707cb672206f1219c4413

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
744B

MD5
0f866d5ce44a2ee70cd28d9d1f173fe3

SHA1
e71df3075a6ea7c83bbb9ccd88931cbdc2a79bff

SHA256
f99195475c821b74a9f246a7713e396c9db2e5b2d193010780cc36f873b90351

SHA512
79c9c94c65f9260048d61ac4d33f658feda200bb3d444077e1058d9c33d8b7a8dd86285e55963680df86c06b562fd985681fe3d872b4d3a7fc61d863831befe8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
440dcdf95ce9968093d1fc3c807348f6

SHA1
b581b802271d3c4b0424ea50a157f1ed807e0136

SHA256
0e1e94691f827343ba9527942e2d8b60aeea691f280681cd9722421474770716

SHA512
84fae67e70c8afc190a10f2a293c00f5516475cd20c5d8c1b24ad51795a0cee01c0d5cd4d16fd234135fda4592777a74c025cf3a0a5964b55a70f0d487a0f9c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
bcd01e57231a5f02a8266f1995aa1c21

SHA1
d510c869d486cbdba574097279af283d0eac1883

SHA256
fba6ad6dfff2eea0dad22916eae769982e2f7c62e61efdffcc166996b0cda135

SHA512
8fc1bb8b162894c828bfc94ba44779b2f1f31f39f280781789091ddaf3ed108a62af3c3ca2d607310959ca561c28f23bac4b180434eb21db59c41cbe646246d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
b7fbe9bd64107141ef92dac428601dc5

SHA1
a9ccf6780d719025526c776a34a4448105e3de84

SHA256
f100c3f40348d8f3d85e7cfd45f836c29f0f5945d4c8042de6201d664a7d2f4d

SHA512
3fcbc038320de8d243fbe890ac3e1c74c7c13fe91ca78aa6421113edf1780d6a05882291947386e8c5b4dad0f99408a0e87e9f35ff5c0b4fdcecec28fb982475

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5cf7ebd90f66a1b13f408b2185151d82

SHA1
1b965b0bcbef7786f1000eb0b773a17b1c0deb5b

SHA256
4694dcc1233a96db5e722f6fbe18c9395aaad142a4441e800d0851a4165628c0

SHA512
6d2e6bdcff1b90f417445c4d25898ecf114808b70c53c43eb57e7656e61b3de0c1e25a5fbe1a299f243a6827edf8e61d27cb0bbb3786e9f6f38628d182a966cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
400d439b6fd69c6253459ac07b54ef61

SHA1
c33656d79c0f3915bd1bfde00c39e9e24ff78d09

SHA256
24b6c68bf68b390b8e142db7cac0503a21d71fb9ac59bc41f35ed1d55d1b5f2a

SHA512
30f537d06021f9034bfcf51cbed80c20cf27d7839a1e677f7bfa3b61c1837ec932beed2cc7590cd19b460abed846b352732c03f87cbf38818a85b5199b052c61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
8e8d4e576694bd0494e9b767f255b7e5

SHA1
9fc98758bf8a55bdcbb044ae7d435e0ee2eba036

SHA256
c97d711a3da90b9eb263db5619841416d3bc536e4ec553feec7844bfdf7d1e23

SHA512
2b5683a57543a2120121cc6850b966480cfc65faa47d857504d20a346cd95ec9b36a090eeb5cb2ea78606d9f45e3ccfb9f8a5462e51f570ab8e410e87a507f2e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58124b.TMP

Filesize
48B

MD5
9c0cf491092951b982892500b131fa01

SHA1
dca17756fbd811b4ca215c423f6943f1868481d0

SHA256
34ca6434047bc9ad948ae615bd86acd5f7be2859a84602deb9a925580f266620

SHA512
9325a5102dc7d03405e6c69de23c992e8ee657a28a1042d894a4b6e7e1ab477eafcb48409357928c0d6f9a84bc7cf402c92385f12acf118f3a2f4b9da7428ffc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e016291c8dabc9541c1819aa47319ec1

SHA1
f58dbb15931364420ac769136a1358ef590740e2

SHA256
5619307da93c09f338981a2f307e6629a4d31fe6102e3cece06b7e1b0124fdf3

SHA512
ee08201208573e47c77c90915f77e753d99135fdeeaae8f9461d577d971b23bf5413bce4178c12fcfeea3b17bc0c7df3491a8c852daf8ea5ff9c8e2df44c59c7

Download Submit