c453a1516333f79a007a323e99618cb74fc34d035c0b02e473f294809008cf5b

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
06/03/2024, 09:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b711304b5aee71ac27dc5aa1df3ac228.html
Size

432B
MD5

b711304b5aee71ac27dc5aa1df3ac228
SHA1

be69ea6013c8ad47c590b6f6f064ec483f430faa
SHA256

c453a1516333f79a007a323e99618cb74fc34d035c0b02e473f294809008cf5b
SHA512

ffdd0559736b4bd9c7491d702fe3389f592b56210eb6dab11249a9af888aa614623d99bbf3ffa09b67f0be5c6ba8258aef191ce0baebe64436645af537152b13

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
3124	msedge.exe
3124	msedge.exe
3612	identity_helper.exe
3612	identity_helper.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe
6112	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1576 wrote to memory of 964	1576	msedge.exe	87
PID 1576 wrote to memory of 964	1576	msedge.exe	87
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3944	1576	msedge.exe	88
PID 1576 wrote to memory of 3124	1576	msedge.exe	89
PID 1576 wrote to memory of 3124	1576	msedge.exe	89
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90
PID 1576 wrote to memory of 4228	1576	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b711304b5aee71ac27dc5aa1df3ac228.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff25ee46f8,0x7fff25ee4708,0x7fff25ee4718
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4536 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2480 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4572 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:1892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,6846617741070074345,6542940975447668166,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2908 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2336

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4912

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e494d16e4b331d7fc483b3ae3b2e0973

SHA1
d13ca61b6404902b716f7b02f0070dec7f36edbf

SHA256
a43f82254638f7e05d1fea29e83545642f163a7a852f567fb2e94f0634347165

SHA512
016b0ed886b33d010c84ca080d74fa343da110db696655c94b71a4cb8eb8284748dd83e06d0891a6e1e859832b0f1d07748b11d4d1a4576bbe1bee359e218737

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0764f5481d3c05f5d391a36463484b49

SHA1
2c96194f04e768ac9d7134bc242808e4d8aeb149

SHA256
cc773d1928f4a87e10944d153c23a7b20222b6795c9a0a09b81a94c1bd026ac3

SHA512
a39e4cb7064fdd7393ffe7bb3a5e672b1bdc14d878cac1c5c9ceb97787454c5a4e7f9ae0020c6d524920caf7eadc9d49e10bee8799d73ee4e8febe7e51e22224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
446B

MD5
c2028f62b016484a30becf7d6483e476

SHA1
53e06c1a35f505de6f6f0c46faeee6d8b609f8e3

SHA256
d3c2b358a75cc5323e8f9ae38efb20983791aaf3ee352d5f99002500009e0cd4

SHA512
3212401525cdb015e4481b73a8fa18f5fb73a8ea42ee1ebc89a44d2498102401076fba7a38bd23bcbe74d1289ec12f46f2cfef5254888367a226556ae4c18bfd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e4c312798702ede7d5dd0f59aa3d77dc

SHA1
4bd9d4fb081b98ab16b9579bc764239512b7be80

SHA256
908b58c7cb2591e88841464f0f09070783f65c850c568870ba6c737ce9e9fde7

SHA512
4bfe0b9c0f2949eb6eedfc18a9cbd3e7848102760c81fe9cf67f5e9a8c4fe19afab40941810697e1c25bf2aba0c62615b47325d031292cd18aa43b22e135eec5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
78592761055408278ea7c3bbaece0eb2

SHA1
38b5819f20cf7053f43b4ad275d753823e6ec9f5

SHA256
6caf089e84e03e9cdffe0703c1676d9a7160fe3e8ba8fa1ad98fdbf6252876b5

SHA512
06183b40b1cbe00fcc9849d173f67ef70ec80924a756dee743d4ae034ffeaf3cdb220fc75116e0b82bb6ce726bf3b428714203e8b70fd8defa6a46f0e913610a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
bf334c7b5062589aad28bd15d7fef45e

SHA1
6e6385258bb1f03b8104c6c9b484b4dff54d931b

SHA256
18e2e57eccc1adc9ae326b0fe0286e643665cfbfcd6c15512c95c18c34ba7152

SHA512
34a2c22ae456a8a2ea142cba1e7950032373b3673b944ff971fe1ca917ce884a9fa965a185e3736e9e38bc1c1fd81858fa047a6c4dd7577a600b84bc9e90b32c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c9b8.TMP

Filesize
48B

MD5
76a2820a486c35c0573fb0d9664ba3b8

SHA1
692e628e1ea335b1f2417bb5bc811c1b41065524

SHA256
dfd6453883a189e104a6d650e5afc95f2dc0dff0f66bd3a5b05f850768faac7c

SHA512
59daa1e7e52ef8374acdee15aa6d76b4570c3b3e6b9e289690adee7df7a4f085889b946a65178a4dae0ae08b6e0ee90d46e8c45d506d0a52730d66dd0a1d0d68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
e6a40a4b1c5d5d5a10920f54e6e5fd0b

SHA1
75c99d198567fa37685c931edfa4c8d9f7871971

SHA256
ec3de19588db206dec77b4908356cb506279dde02c5cb5ed14c750e51a26a1d7

SHA512
f3a476ea54b502b8184f2b5faf81558e775ef643d5a35f1266c771232585a74d2a86df84c83260f4e0a9117ef25ddbf6c69164be83ea3e9a8831ad8db159b214

Download Submit