006e938f62e3d1353d269601331b709e149401d0b50a42508056561fe5d07711

Analysis

max time kernel
146s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
20/02/2024, 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.html
Size

798KB
MD5

984a8255ace5e641484c07e57db460be
SHA1

21819eb4da7477d3921e5815f3b33d96a9c07af8
SHA256

006e938f62e3d1353d269601331b709e149401d0b50a42508056561fe5d07711
SHA512

6c2d094647beea760a8045f980fce294cc76f7796365e59e85c860e7a6ab2a89877b601577854399c2e8324498030dde9b8531cee728aa9c949f59f90e83a29b
SSDEEP

6144:KpohJehJ+hJBhJ8hJjhJvhJuhJVhJMo+zJQTu2sjlbAem/EXnhAg9UhNLMmxFIKn:KuhohshDhGhRh9hEhjhGPz1A

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4668	msedge.exe
4668	msedge.exe
4584	msedge.exe
4584	msedge.exe
4828	identity_helper.exe
4828	identity_helper.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe
3492	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4584 wrote to memory of 1396	4584	msedge.exe	84
PID 4584 wrote to memory of 1396	4584	msedge.exe	84
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 2240	4584	msedge.exe	86
PID 4584 wrote to memory of 4668	4584	msedge.exe	85
PID 4584 wrote to memory of 4668	4584	msedge.exe	85
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87
PID 4584 wrote to memory of 4956	4584	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc47a446f8,0x7ffc47a44708,0x7ffc47a44718
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2940 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,5823161128764645380,307418250755712309,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2984 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3492

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4936

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7a5862a0ca86c0a4e8e0b30261858e1f

SHA1
ee490d28e155806d255e0f17be72509be750bf97

SHA256
92b4c004a9ec97ccf7a19955926982bac099f3b438cd46063bb9bf5ac7814a4b

SHA512
0089df12ed908b4925ba838e07128987afe1c9235097b62855122a03ca6d34d7c75fe4c30e68581c946b77252e7edf1dd66481e20c0a9cccd37e0a4fe4f0a6fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
1496ff28ca189d4a6d76e0080f60c58b

SHA1
03b4981a29eadeaef28c877b6511e80b5662765e

SHA256
cb41c42803f51d499514bdea6a19cb4a3b15e1fcca19b0f166118bddb699d33b

SHA512
8461ec09dfa54e246893d4d143c5783e79f9e8335a25226d8bb3cd7d48b998cd6dc4700361dac38806a313b6f3c65bcfe2e98a6818b9310f77a031be47081f5b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
3f1c97c52de592a9d172ac52706ba1e4

SHA1
dc94ea9db3420abc6f2fee0b97326cc2be8eb66d

SHA256
2388d3f0ceec5b3d4fc24044a9104b264d85fffbfdd77e52571c4154e457dc07

SHA512
22f0f6cb9b17294ed1e262279c901656b91ca5ea759ada4cd47d21fda3a6be190a9051b7449d306d03fe4b2eb7b30bdd5769abad8a3e94dd46f4826e4170e5a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9fcd74e0d651efa0c28efed117ade8de

SHA1
7887ac6ad78c4460ff385e78c3c860722e711a79

SHA256
d463bf651abaf5ecaef7740e3ed1434305fd85f40515fad888e3ae0b2655a053

SHA512
31b6298d9050a3982cff30df3d73e5f4bd022d603f6b6969922c86f437ce27a524f83969b7663726d8c419096fb862a59811f18b3bd96a3fd8c6ac49d8a34d3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
bf8eae0449f0dcfcea953425baa7152b

SHA1
f2beaab254d3f89cb495aa3cf24e7b2c947f2534

SHA256
4f7c613654a0b1becf3a075dc0856725f891fa71181afd804d68b2a71236f6f9

SHA512
b30ba57a34c2d7e49fe923a759234421ddd7bff8cc29211aa52e0314691dbb59867bc2ac8ed94facb399fae66d6fc97b7fa7e99c4f3999095e679c66b868140a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6a81dad8c27d638e7ad83b5addc03d80

SHA1
88c1fa0f09b9122206cd1a9626c5590a38fdf536

SHA256
ce4fadb457514b48662938c023d28431c0f800389af70c1d201ebacb144e5dc9

SHA512
f54b5b957464cd9be18fce1fbd9888f1966f78425cea6459049a38f8d8993fa590310ab40ea9286cf08d53c0968d6cd669d5be1fcd1c10cc867ab39f7dba5eae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
52826cef6409f67b78148b75e442b5ea

SHA1
a675db110aae767f5910511751cc3992cddcc393

SHA256
98fc43994599573e7181c849e5865f23b4f05f85c1115dff53c58764d80373fb

SHA512
f18df18cab6b5ecd71b79c81a2a1fdac42cc9960f62f06ac25f4d6487792705f2766ee3a10239eaac940d090186e6bc820e4eb7a5ee138f6e5c1c64f951b960c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\5a7ab360-36f0-4377-8e0f-adac6bbb38d4\index-dir\the-real-index

Filesize
1KB

MD5
0c405fe2ebc0990ae45ae6afc4e2495f

SHA1
344a1b3427ee0a830957030f41f8965e850d584c

SHA256
9f292a2eab349be3e75b600bd90c783cd53b6f7ac4fbc61105c95c7d2cb26e10

SHA512
26474a11f5e2ef78fbe3bf0b47441c93bf5a4eb51df47ac17f3949f08e14dd2a742dd7e46a541f0a0a4331a937820278c090ff57156648de47e721b2505617e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\5a7ab360-36f0-4377-8e0f-adac6bbb38d4\index-dir\the-real-index~RFe584c56.TMP

Filesize
48B

MD5
bbfcf34876fc94e9d2ed9a160c44dca0

SHA1
7fc12a963bc8004090c0f64db76e6f411f5ce112

SHA256
a042e6c22ccb579b88e13fe0ad9d7e705de09e801a3cb058e7a3306cf19ede5d

SHA512
201bedf4df935f6e84f7f943612369838dbab43b119853376ae8b15551982486764235686535c6563a2925a7152089ff63c44c0a15b2cae5bf0dd9be4dab494f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
73B

MD5
48b1ab3fb1b660db829568f0f2b757a2

SHA1
baa589b8a5be07939ef75b4558c3aa85dcbf5c49

SHA256
315f3caebd1e9f08859d20be4482a495f6792195e2c08d376c210f95b1f3295d

SHA512
e5cf16692309fff9ffef226040821ff4ee9115afcf6fad2f624a47d5665d2ec9063443aefda24d3ca6ad9f71b57c03aff66d257c615f20521e8b45ec2d35f1dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
130B

MD5
a62bbf0840def67a0876d25c06c20c90

SHA1
023989fc961d199764da6a64e86bfcde2eeb0028

SHA256
c1c9e7be2e3c9d5c56dfccdd53b012a8b9204c474bab02e881d273c3ac6141a9

SHA512
9a8a60e480d5aae46691b12fb7316a6d59f2e8769d98d361de040a79b7bf771b3953ecbb9354b6c9b670660d2334b7d0471b2a7d51345e9e567e131809f4cd04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
68B

MD5
2cc65519b090c31fb6a24aff45831bd0

SHA1
fe879688b494c9649551b747fa800ea7f116a4c4

SHA256
4b6b6054d148ef6227054249d9d356ccd72e79033cc4b577d4901b407472235b

SHA512
47e9cf22700ae2c9a42520d1e00d92d6ec3b3603d6ce51677d33541c8efdd7c8032af9feb8d26b17525a9a8b86e430bf1383f6642251328b37ffbd467bc63991

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
66B

MD5
7767dfe26684440eac62bcd57ddb9988

SHA1
bf4768bd4e7c384aff10364bd327252689d83ecd

SHA256
c2896c4d34d45e01ec714f680ecdc205e7d8cc136cbb325fa588f536c2509dd2

SHA512
5c6f87c29d166c84ae452c5ff21a22047e1d4024fd805fd71cf447d967799d2f989988f3bccec778b918433c4bff0b161879a8703cb127641884f37cf89e1927

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
06c1dfa667b4ec2f6b9201c299c3838d

SHA1
9f0c9f3257cf73beef25361b6458f42c889b8ea2

SHA256
663e35467a938dbdd2155398cccb8a2b18cff6804ec991f0cdefbd957b18364c

SHA512
f7984ec6ea1721a1f3e29498381c5b6776fa4d64e5eb7c03e35bf09b9c2123c07653b6007adfeeeab9eccc9f54f3173ef4c50e0d71398a418bf1ec2403a5bd9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58368c.TMP

Filesize
371B

MD5
569c9d2e61fbf80000ed0435f4d7b058

SHA1
a6a8fa57365173b7bd31cd150de8d4926badaf90

SHA256
5cc7784956ce31606f9ea3034bd7816eb66df91f1c534be9e1d42fa89aaf6153

SHA512
3e98b6d0e87233829c7ec8b86a90ff878d000ca2d52c0d4ea2af6ec45374426fcbc078ae15200a077a1de3b5ad65a6e19605818072ee71148e6bc17077fbe93f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
105a0297b725c44ee0fdc2422439e480

SHA1
f3854adf6495239dcf8530c18b2786f65db9512c

SHA256
7f7b1cee21708f46f5ada7936198ceedb3c602b63990fc25c95bfd88e89cfc17

SHA512
28bbd6dcc08f122af01d942a29b8223a6948d20f0bcf519252e001a4861c0baf96e6ece7141e7c11274d288dd747efef6dcd8621d128fd5c2e21e5d6621c1022

Download Submit