hxxp://myspin[.]site

Analysis

max time kernel
1036s
max time network
1050s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20-01-2025 09:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://myspin.site

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 4 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
105	ipinfo.io
107	ipinfo.io
140	ipapi.co
141	ipapi.co

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4532	msedge.exe
4532	msedge.exe
2320	msedge.exe
2320	msedge.exe
4148	identity_helper.exe
4148	identity_helper.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe
2320	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2320 wrote to memory of 3400	2320	msedge.exe	83
PID 2320 wrote to memory of 3400	2320	msedge.exe	83
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 1460	2320	msedge.exe	84
PID 2320 wrote to memory of 4532	2320	msedge.exe	85
PID 2320 wrote to memory of 4532	2320	msedge.exe	85
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86
PID 2320 wrote to memory of 3668	2320	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://myspin.site
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffeffe546f8,0x7ffeffe54708,0x7ffeffe54718
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:3752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2052 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4004 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3680 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6636 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2064 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,7412413391798635104,12697144397199427061,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5636 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2284

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2696

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b8880802fc2bb880a7a869faa01315b0

SHA1
51d1a3fa2c272f094515675d82150bfce08ee8d3

SHA256
467b8cd4aacac66557712f9843023dcedefcc26efc746f3e44157bc8dac73812

SHA512
e1c6dba2579357ba70de58968b167d2c529534d24bff70568144270c48ac18a48ee2af2d58d78ae741e5a36958fa78a57955bd2456f1df00b781fc1002e123d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ba6ef346187b40694d493da98d5da979

SHA1
643c15bec043f8673943885199bb06cd1652ee37

SHA256
d86eec91f295dfda8ed1c5fa99de426f2fe359282c7ebf67e3a40be739475d73

SHA512
2e6cc97330be8868d4b9c53be7e12c558f6eb1ac2c4080a611ba6c43561d0c5bb4791b8a11a8c2371599f0ba73ed1d9a7a2ea6dee2ae6a080f1912e0cb1f656c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\31341996-6ea7-4e19-9854-3b5dac8cb21f.tmp

Filesize
4KB

MD5
b45a4a5debd943425b4bc2cf0f794dee

SHA1
e1eba2d12527bbb274130389c9448eb94e2190b4

SHA256
2bf8d1ec89a1e45c03e873b915ee6a13eb4b596ba5cbd7b8041349f8cd68b726

SHA512
da626b3023a831679811251ed36eca1ebd36a8b3aa9766a865713f2c8f80e3d5c28538ed4cd40c24f04e24637666e808f4c78849d14466d07648d89eafd10a25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\5391287e-15e4-45ae-92ff-591144488691.tmp

Filesize
6KB

MD5
97ca36157c6e42c54e801fbf05a50a85

SHA1
9c2db2a99fb7ded9a8dbe8b9b9a129827b701f95

SHA256
e213a28eb8de307a2acf68e98129cd359ba845044d253159eb288facf041305b

SHA512
7b1a37b2c0152739c655576f3f406bddecebf865109f5005e88ee7585c37c503cb9f6320bb145d9b69ef887218a6b504fac4202d4dd73109e26e5bd84b70ef54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
c10b6e6c53392784ad4723db6d7a6fa0

SHA1
35888c06c56e1de7f5bcb8048d72032a23468984

SHA256
08a288b136ba71cbf4c9eec1e83f7bf9d9f12ed68d6c480a3c50394a1c20e7bc

SHA512
fa47666aa169ffe5f1a2741794ebd0cdc2a3cd5c377c6895d4730846f0412ab1bd6c16781334daa0eec414b4b99450326dae132e3e815cc3b10fdec31c5b3208

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
792B

MD5
3b0db2b3a4df64afbe3edc737fc08b8f

SHA1
cef11c106f555ac2affe7b33fe84f0cdbe912e55

SHA256
59d9d8161746f99595b0515c6b40f0fedad7379c190cfca428725ad0d6c66fd1

SHA512
8b33c6690da4e4c63bf33507fd2f616c698f38244c14d300bc227a6444585d90f2ffdf4143c010c691e34d22dcd1907142cd910f19853972580c593b7e82aaf1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
1b4579a8b2594e2d2f51e36c1086adb2

SHA1
02aac27c17a05e6b746c2f69452280a8a4c10414

SHA256
e7e243b9a4397c570abce5e3c677880fb628bc573c8f2c67f202fdd918752e56

SHA512
ed8d6eed72722148e38f266f8a80a9e21f36eb1af87c7b2fcc1fb4eb67de94bb4f1c441aef4f637c79d0b22a4f51e73683b1bb985a684b7e7f108b1386c363cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
8c4e21a4849c2da4c5fc94a4e41e78a4

SHA1
5c9dfa0291cda0e2f47281ba102708e913298de5

SHA256
0abc7192beb8c22a20f15c86852c7bc50c090a104b0b657e91975e6317b47963

SHA512
865662a0371791c1305111946015e7fc7851bc02f23b8b741b44c24c3f2da2fd67caf36c16b64ef99d1596bd8157ec128a4dec12afefa8d21416c81f4cd39a88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
bd5da40b7143d3304ea49f4f774015dd

SHA1
21166efbe7f2d2516443d74d7fc9eb45e42f9406

SHA256
eb31e08abfebb0171d172127bfc37333615ca58db71f5bdc0ad5d70cd5df1744

SHA512
9368727dde4a51a442011e740e4a1bd04494b5d59aa0e85b38c7eb8b390b2d2b6240597a052b43f90b11f0ac4d6e5a4f1e4951c24f90f4a1ca4c47598bb51f5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
6804e01e27d7792f9d958013a8e03168

SHA1
64422083d8075446306e9d1e4fca81b7889517da

SHA256
34d9c71c8fe6e4e504122592eec0d1d043da65603caf94d39b91c39740978301

SHA512
962d05426b9c7e71a90c7648527ef2f7089e9219d34896b25af3cce2333f16e5ae09ee1cae05522168d53141b82cd412282478c9aed9b6e8d1b1d90a9b080a7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
cc1d8b8394779ec9c50b1b74232c9415

SHA1
15f614c21bf0ef8136c4b6f40d437a9f2bae1087

SHA256
9d9adc94789c51aaad54d7c1cad8f4ebfe439fda0cec86480da710b98cefd6f3

SHA512
d65cc75b7496e6a816a9d22a264bd7ea0c2ee8650d66525d1cdd99f85ba288d7640732d5296b68280e5000f2c07aa0b12f91d2ae133f4dfefcc4d6b60f23781b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
517f204d1e907dd8aea19837ffc5420f

SHA1
a6cec485a1d1a32cea13240da9bfe4e842b5129a

SHA256
8b76afe0f4153a2c986121d0e6a1a7e6ea8e2ac3fcd8e18499739e96e41ed573

SHA512
43fe5c899fc50ccd6b590e675a11772630d075cc54837abd9c1abe8db9459a430f114da4c60e6b0cf4c1823c7997cdd3150c6c10267400e87a383987030549f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
fb6980c09cc76b5483fabac5f088a4d5

SHA1
151812308a91de4088ffc40de25c557152f57f7f

SHA256
516435c09a96a6b049ffde0b4fae46007138c9e5473eb671493a1ede90d32b90

SHA512
c1828e542e51616febd99d66608d50d6638256976010ee27865cebc1266d4e8ebb76e51b65efbd5b079c683821e774217667af66a184f25c06290a3097517d5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2850950f188ee3b613835da376a8dbe9

SHA1
f38fed8119737561085a30fef92cdc4614a12e38

SHA256
56df1c51b75cbd61676ebcff329a14a7bbb90b42e0d11f4f654f195ad2f37e3b

SHA512
53cc2da2e13cd4eede2be076367467611a548306ccaa7a2bb2942e291051747c873805c7e2db1bfb3076f0171e105f7ff3b6dd786732a2599a6862054cbfc6bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
b28fb9a0b47b2c428f02700bdea9b778

SHA1
4bf73b0537fb22a981174964612a87ae6daed41a

SHA256
236ad30dce82d2cac9e783162d5eb22466b312b95af4da821078dd4727ec955f

SHA512
ddb248bb51fa9764f3f5e1da3f7ebed746b96335bfc637ebfd1c6bc4f3c9a4d23d9470fb5a06f88060f388edf6da57fbb9bbda674b3fc613f7042a4bf058ae44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0f8ba75f02c0ec96163a29c424bc3449

SHA1
af8f408cacb91763e85cd2a0d67017e69ce67b39

SHA256
1585b40ae88c7ee6334bf9516ad9756cf55533028596e7bb6ef8d0eca4adfb2c

SHA512
d13c233d7a64201137e8a664513d606c0612c74d05417dca3cf3e974957d8719c8ea93f208efefa2d9c07974066402970e4077c2ee703389854780b102582635

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
a6cd94ad7b4c439b201e0719bc18db1a

SHA1
a865ec2ead99e8ef5381f1cd2b1680d0f7125d0a

SHA256
bff611e4c7d3d002fbdc632323124a15bcf58e39c5f010d39e4250e22462b724

SHA512
0d32132238d963d862fe9d9a8058d3380639dfc823a41b44f7c094fb76ae8a273ecd08242f642d1bacf53e3d1f4c3709e4af20f389be8a2cdb7e35f3ae7c6f34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
604368d465a1c8331e28814816975293

SHA1
434c01ab8daf1311dd25b95f7e5d29a7c8826ec8

SHA256
76a534f554565715ce9ba21cac8ed231e82409f86696da61bad880cb192a791e

SHA512
3319e8a984b641fbf76986d60f77d6181eb88cfd8cdd523d26eb64485d7f8749d18edd980601fe5d99c9ec9bac4434811884ca90915a5707b82fea3b09aa97f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584179.TMP

Filesize
706B

MD5
ec39304b723267279bb04a3f86fd4334

SHA1
0d8b9d727ae97a591fab0316bb02b328d73cb568

SHA256
50aecfb9c0520e171d34b0fc0799658849cef51d242758278e7a4c0a0c1d59e0

SHA512
7e3109cb73e8e6d39dfae39790b128c3f6cb8c53c496ade58dbcccf89e5ce805d733bccf0fb6a06e94f03a24ce3d767d1e326f691eccb6a800aefc6bc6a9273f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
52f775c507bc9b38de272ad86e438996

SHA1
f2a57e59d0c6f5bbcc9aad24b48a849b75e93719

SHA256
2b389943867153c4abbdbd32b150e8a1bfbd10110e7850f412ccbbb7dd43680d

SHA512
52e38c77b4d91db557f410eff4a8ac82e47088aa90c247ea792ebe109a6bf713988835e7c47bd5736413a129b06db53f86bf38b9ac644c3f4b926a409114a7ba

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit