9efaba92087cd5f7e1235ea6dbb2ee085079987e34ab2477040dcec821e7dac1

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/02/2024, 18:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

99d8fbf0d3dd2dd8450c375d359355d5.html
Size

895B
MD5

99d8fbf0d3dd2dd8450c375d359355d5
SHA1

e756bb7a7c06da78f6e8bfd37755ed5c4bd8ad71
SHA256

9efaba92087cd5f7e1235ea6dbb2ee085079987e34ab2477040dcec821e7dac1
SHA512

018c0d82bcc4910097d9b902ee802bcf84f2eff0a2f5f5f7dab034d485e5b200dd8a0d86379c6c8c0bc9e108f9b05dedda86b3fe69546b5c763ac2c51b460674

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3784	msedge.exe
3784	msedge.exe
4800	msedge.exe
4800	msedge.exe
1868	identity_helper.exe
1868	identity_helper.exe
4020	msedge.exe
4020	msedge.exe
4020	msedge.exe
4020	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4800 wrote to memory of 1464	4800	msedge.exe	69
PID 4800 wrote to memory of 1464	4800	msedge.exe	69
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 2448	4800	msedge.exe	85
PID 4800 wrote to memory of 3784	4800	msedge.exe	87
PID 4800 wrote to memory of 3784	4800	msedge.exe	87
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86
PID 4800 wrote to memory of 1960	4800	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\99d8fbf0d3dd2dd8450c375d359355d5.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ba8846f8,0x7ff8ba884708,0x7ff8ba884718
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5856 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5748 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3976 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,13162711555426844948,5844741440252508565,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1872 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1220

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5e77545b7e1c504b2f5ce7c5cc2ce1fe

SHA1
d81a6af13cf31fa410b85471e4509124ebeaff7e

SHA256
cbb617cd6cde793f367df016b200d35ce3c521ab901bbcb52928576bb180bc11

SHA512
cbc65c61334a8b18ece79acdb30a4af80aa9448c3edc3902b00eb48fd5038bf6013d1f3f6436c1bcb637e78c485ae8e352839ca3c9ddf7e45b3b82d23b0e6e37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
425B

MD5
56236ab0521f8d8b8dffbf0a46bd6634

SHA1
abf23e39e04cbe4308e21b0469799aadd7312cad

SHA256
a85ac73691cdbdc1ad7bda5f49c30d962bb5c393b83a144bfa70bafde96e9edc

SHA512
bcc98a835c8a640e6a1b9d59ff3b0df97ce9c8e4db18710255a26752d9a64ad526fa92f8f14af8156881094e72910f5e568a45875b6710c663adc0ce6de6b678

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
643dc1ad6a8722b3f263fed35d6b2e52

SHA1
871ad9641e559fb408eed89906d35add681dda83

SHA256
cd92511e9b34605184c6f35417f0e7ed5c42eca176bc39656dfdcd69dc26706d

SHA512
c7551968baa1f06b3d86d98b8455079735b58e3db8495c40a949e6649be4ce265a024ae5f3a2eccbad4d1da03004cc697e5bfe972bf8e9ae64536c0c600d4540

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
3565ffb9e1e6f2d9fbaa01b12d85097a

SHA1
a75927f8f37749ee0b9fa19f700ec7e64bd7b513

SHA256
74330cba4198acf41da470aa887854e06339f45c91c0f0ea98ef077996a68a7d

SHA512
b0dd17fb725027c1c009fd00a8c690400c364e61b548e4792b5a709bc261ff0262c9ca5f06b050d4ba33747ce9471430725b68099674b88bcf798861dd351a54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
6db2d2ceb22a030bd1caa72b32cfbf98

SHA1
fe50f35e60f88624a28b93b8a76be1377957618b

SHA256
7b22b0b16088ab7f7d6f938d7cfe9ae807856662ce3a63e7de6c8107186853e4

SHA512
d5a67a394003f559c98e1a1e9e31c2d473d04cc075b08bb0aab115ce42744da536895df2cec73fa54fc36f38d38e4906680cfacfbf4698ee925f1609fbb07912

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
da0c681adbdd2de7efa76c78dc2f4a94

SHA1
16090544fb9f9d8cda9e63c90dbce106971af7cd

SHA256
54788de6c15d4fff8b4bf7199a4e26e15bcbbbd99dd84e4385ab1916f2a6c8e9

SHA512
ca3ec748d8d2ed6c95f2ed80631565a3e5d447afca86da8a7e4aed5bb146056faeb1db7c8dd46c570849eb05991c5e7963145f454d3134638afcd7d5ed1d55b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
48B

MD5
9a3fef61f2270ee79eb8c6cc5d2a40af

SHA1
740b653d41becb110d63782bc9909c6d764aaec3

SHA256
64c0218920a072774b0e2d920d2cddab6caa70df2185efdf829429b723f81d7a

SHA512
fdc0a3a622f81bee72baeb09ffdacb34be152af9df58af883aeeb8559861210c93fa930a63fdaa415b817cc017a62d4aa10451b90db4eca494e30b9ad4f70722

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
dc82a8f0688aa29d90a454a1812a29d3

SHA1
aa2ad4ef1a8cd7dea878124a7e88eed9175b182f

SHA256
ac15bb09fff24423f8304ea7b51262eaaf3ab2e6b86c5a62e4c2eab7277e717a

SHA512
f6c2bdd6b5f3d0e4e363d242ca36e386aa8f3456caea81d658338828415cc1f929f6f55cccd20418ba51b28618729d3a49b6304772d1d00caa2b04f0fe1f8d18

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
cf072d19ed4e1f2608f6d0feae8cfdfe

SHA1
28ef1d2428893f0dc1fa0c19015d3910a467b50f

SHA256
7512b52ff3c6afbd797c073c2a9d563118498fc85a2c0ee9f80b81c4298f1c2b

SHA512
8c7e05b76f4140a1872b93bd46cadbaa644c151de00a1f5273438b2c7ed0c739a5efa2c6cd3098b6330c3dc8e872896923f3f7aead3dfb3b2f79051a44d9a9d5

Download Submit