050d1775cb681e6e4fcca18d4b37311e4decd27afe9110f45810719146a1cadf

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 19:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

ac9e04611b609505cffeb6878ac18547.html
Size

432B
MD5

ac9e04611b609505cffeb6878ac18547
SHA1

41f8fdb0b0b8d8ca911ab113044409c83ff92d36
SHA256

050d1775cb681e6e4fcca18d4b37311e4decd27afe9110f45810719146a1cadf
SHA512

e0286935fa52f3e559e3dd952ee08ac25ab6eb7fc25a661812a40d0c9b5a8fbeac633afa80ac134675a152027c9d98955b11a0ba2e7bb9bc3eb7f3f945b60e97

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3804	msedge.exe
3804	msedge.exe
920	msedge.exe
920	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe
60	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 920 wrote to memory of 1480	920	msedge.exe	69
PID 920 wrote to memory of 1480	920	msedge.exe	69
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 2892	920	msedge.exe	88
PID 920 wrote to memory of 3804	920	msedge.exe	87
PID 920 wrote to memory of 3804	920	msedge.exe	87
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89
PID 920 wrote to memory of 1896	920	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ac9e04611b609505cffeb6878ac18547.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c93a46f8,0x7ff8c93a4708,0x7ff8c93a4718
  2⤵
  PID:1480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4020 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6156 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,7763146070574153688,6381079933851764777,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4248 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:60

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c6136bc98a5aedca2ea3004e9fbe67d

SHA1
74318d997f4c9c351eef86d040bc9b085ce1ad4f

SHA256
50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2

SHA512
2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5c6aef82e50d05ffc0cf52a6c6d69c91

SHA1
c203efe5b45b0630fee7bd364fe7d63b769e2351

SHA256
d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32

SHA512
77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
35cf34625491d221b0a2dfc3af5986c3

SHA1
d285f99b6785e0bb52d35e053cb29f9ce9a94133

SHA256
292313164472cc852bdaf13370461fda2f0f1136381850cbafa5317965828958

SHA512
31aa05274f25fb75b6ea879882bf98e7a1ac76b37481f043aaa7cc5643ba619de1ef33f957084b30a228c9dc8ebf978a4dbe2b2f3ca43afc3fc523f97d375356

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b9dfa32a9361b2217cd3c931d19210b7

SHA1
f6d5e642f30b26f068e3b16b8d3e7f69eff62535

SHA256
4ea088fcb1335a5b71ef5f9deb1d1c5d5b51adb846abab4ee101aa9422540ede

SHA512
77bb292d33434cf2b6b816fd8bb1a4a27547856c0427b097f4a7c99d0149de77454014afded1f1b5a2cac7407f4e3d78da8bcf1290a0fceac7d867c620347a28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
534eef59af603f223dcd8ed81d8e8ae8

SHA1
c708117fecea2b5e61dc55dba56ec1d0dc115d16

SHA256
8491518667d75468000552466612e4b788c46382b37bf3cf1d35ee2f3b71de85

SHA512
f09b0cb5596c48e5e1726c20d216e74ed62dfdd76729b496475afb5926d06517cf30c00eb02c44e42a58e943d78fd89de1e3c255cc2289a08db74c479829a9d1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
55dd7b1a0bbaffd9fedcf464cfe802b8

SHA1
0717a1be12bf2d374a7abb2cb7784703b17122e1

SHA256
7f18a321619f5f521d7e979f741fe0374478406c37bb594d6e31c91992528b60

SHA512
3ed033082625a5920474cdf97ed6c754a085934edcfceaf592c33eeb5975bb709dc5776df0127c5f825e6a38008038f89873e1f900fb321823fa371ed2c55a5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
0a860af9aa2cd9bd228d629b29004cdf

SHA1
3c57770b233038978fa16b4002fb09007cd1452d

SHA256
d89129e6109d2a32f94a44095f1edd3e7faf8c94e9f76817347a4c9b57ba5a0b

SHA512
ea303f0bde1eebe3e56dc4efb9d5f668a5ad802827b354ab0d8a6ac30d43828104ad1a5b58308a2dadc31ec23371c60a04b6dab4ffb4486ae366dd9337ced901

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57becc.TMP

Filesize
48B

MD5
08ae77367b313defee8c111dcfb50e57

SHA1
e1c2d61fca2be3f54f14399354e41d8dcd1f6510

SHA256
20bcb4eeac77e43e3263a30a5e84356b27f58a2f1124e1a632b7e5fba12fe438

SHA512
dfdb6274df4d5e0f1a11c53d5f2d446aa34c1534e575a49b1cb465bfdf3bc6c8cbcffe86be0e470dd3f553194448cf59a264f62451e758ef01f343a243f79281

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
08329b978a159cd50f7a55299640c5ab

SHA1
07794d4790bee1b309489502f74bb6ee72c373f0

SHA256
b52ac8bebddc61541a8dd9be62acb6d37edae60b93e1a9c74bf645f6be93ab47

SHA512
81cc4dcb26d453838f38d7cfbda879a649b34386144d63bc3e445f6cca6025ea25b8d088a2344b632f9357528a3145bab148627b6f422c9e3b56625415b1e9c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
587200d0a6d2288b4ccc9fc7c9bcb0ac

SHA1
213a24913aeb3b685f2e2b48cf46b86d39b97e5c

SHA256
74bcf2a9bb7230ab2a698c67d5bd30555725e4b692c2367c0e23189e8330de35

SHA512
44077ec46cef260444861ae263dbc87fd97363e4733b671b26f748f4a78c8cf40a56f944794a12f5a61692f3b547dd05599a7b0b17db568ee77f03859baeb378

Download Submit