4b1aa26e12d9f06ba494ad2e2223466c8ddc5bc61b5f189630dffea54f3d93ce

Resubmissions

10/04/2024, 19:40

240410-ydkgescg9z 1

10/04/2024, 19:27

10/04/2024, 19:16

10/04/2024, 19:04

10/04/2024, 18:56

10/04/2024, 18:54

10/04/2024, 18:49

10/04/2024, 18:41

Analysis

max time kernel
600s
max time network
485s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
10/04/2024, 19:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

467KB
MD5

12b9d6652e7d1689ed510c50c53bd38c
SHA1

013a1cc01a97a97d9b18dfbafcfec91a57e6232a
SHA256

4b1aa26e12d9f06ba494ad2e2223466c8ddc5bc61b5f189630dffea54f3d93ce
SHA512

0ce40b9a4d137d99330f7bc2776734d121d485d3f1e3af23ede4bbebead330c30de2c4568029303259812d591ef7bbc52bd1f16d8912dd5ea006523008346e7c
SSDEEP

6144:DFoiM/iMTiMkiMriM2iMSiMliMziMViMuMt:D2iciiiViQibiRimiIiOiXMt

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
956	msedge.exe
956	msedge.exe
2352	msedge.exe
2352	msedge.exe
2320	msedge.exe
2320	msedge.exe
3620	identity_helper.exe
3620	identity_helper.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe
1672	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2352 wrote to memory of 3248	2352	msedge.exe	78
PID 2352 wrote to memory of 3248	2352	msedge.exe	78
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 124	2352	msedge.exe	79
PID 2352 wrote to memory of 956	2352	msedge.exe	80
PID 2352 wrote to memory of 956	2352	msedge.exe	80
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81
PID 2352 wrote to memory of 2868	2352	msedge.exe	81

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb39ec3cb8,0x7ffb39ec3cc8,0x7ffb39ec3cd8
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1908 /prefetch:2
  2⤵
  PID:124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1540 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1920,10291195762203012674,17989865510355479333,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=5668 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1672

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3b1e59e67b947d63336fe9c8a1a5cebc

SHA1
5dc7146555c05d8eb1c9680b1b5c98537dd19b91

SHA256
7fccd8c81f41a2684315ad9c86ef0861ecf1f2bf5d13050f760f52aef9b4a263

SHA512
2d9b8f574f7f669c109f7e0d9714b84798e07966341a0200baac01ed5939b611c7ff75bf1978fe06e37e813df277b092ba68051fae9ba997fd529962e2e5d7b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0e10a8550dceecf34b33a98b85d5fa0b

SHA1
357ed761cbff74e7f3f75cd15074b4f7f3bcdce0

SHA256
5694744f7e6c49068383af6569df880eed386f56062933708c8716f4221cac61

SHA512
fe6815e41c7643ddb7755cc542d478814f47acea5339df0b5265d9969d02c59ece6fc61150c6c75de3f4f59b052bc2a4f58a14caa3675daeb67955b4dc416d3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
d9ffb2fc33b3d5cade8feb2e0f519871

SHA1
359bce1b20dbad4bfb8026fe31812826fcf40002

SHA256
4e8fcaa1a68f397570d1b195cb0d9833a342888d429d9fdbecee6deab5e04741

SHA512
d22cf787a87fabde88dee58c198b186ffc107fd6e4f920df0f91abb830f4959f6aca6ccc321fe11c11e77239b001131c64afdde800a12d33f3fafab936a2ae77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
90ac90bb9e6fc4634343584c2d11d886

SHA1
565788420b36c239b122d4b347ec0e66fc5c85b0

SHA256
7f11cf46399d09d6d12ff390c7beb80ff075b758c3a4cfe74967c9f057a1eafa

SHA512
8681ccadb1d33854134de49ad43a12c51547f3d8b60124196150e6a15c8bac82671c96159c93ab2f750b7bfa4cf609fdc1e99103ced7f77ea00d2866c3ca89bd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a266a3bad70a126727f2faaf39cecbd1

SHA1
23cfdb258722d89db42c00d9d30847bfc72afe5c

SHA256
11d9ab178ebb7447f64274289ecadefcfc6dedb4f5e28e32c31e7e84fa4e2118

SHA512
7d502d2c0908efd3a7c6356fdaff62825b7a0ba6ccdd826b632fb4ac23a76d059c5caef21fda9f231a527bb3345bb5405cc2c925e545b167dd3d0ad713e6759d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1674bba31bf5d6fc015cb498b8f56d3e

SHA1
c58d42d0bc8687eea11580b5e5dab75672c70848

SHA256
842af795112ebf46cbc810a691cc54b2ea110756ffd89093e18d1df7bdfbff62

SHA512
8213f2fa230417f04f5946f41228365f3a96deddbaf175e8ed63011133496d443a8cbfec482410926b861106846217ca3b323eb0a37390ecbacbb1befb72ff36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\a20e4fc3-b661-4027-9d22-a1a92377f8fc\index-dir\the-real-index

Filesize
1KB

MD5
50fff80583992f4f12a229ce625dbebb

SHA1
8f2d47ead7e4b85429fe1e58dd47a55caa10f46c

SHA256
10977b3ed0d460e95873f4c7a172fd9660c8e28b5dcf2b32574d9dc09149504c

SHA512
5e6ce2a4f3f5dd78ca49fa5292b1f779acea58163a28b92cd21ad5d14cb2d8994aed7be7557311db9e372e1c316b78c76a8a11d3193d528cfb518bd79010bb95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\a20e4fc3-b661-4027-9d22-a1a92377f8fc\index-dir\the-real-index~RFe57ff20.TMP

Filesize
48B

MD5
1729989bb6a4a7f45c6e53950cd1b10d

SHA1
222b6a01d46723d872b5e9b6cfb4d003a5cface6

SHA256
1173d6cf53e20f96c43218f1bd8f8946dcf7c41e43a3fa1461db3b6ed182f7df

SHA512
49c9cb8204c6f963150df8abf64df4cee4b1cc10c38ef3dc0c5b53446155035cfc8e4b2567e699e43c4d54055ebdab6c0f2ce4f8512d9b11abdfd00cede86493

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
73B

MD5
16bd7c3ba61c2e0369b3e40182ea1a78

SHA1
acd833fb5ddd0524465b19a6ee180cc7e696ca2b

SHA256
c775825ef6e005dd70caca7aba7854ba66b40c833241f215365de1b711615c7e

SHA512
f161f40e5aee9fefe6c51ea7ddc44067a044302100844aa11c7a71ae02c954d5633e34bd40718ed85baf7be926aeeeeb2f3b91c97cda881305df4f4f90b58be1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
130B

MD5
36973a198d97628316d1dbc96aea55ca

SHA1
b20e90aa58da7e3a9a99febe8f0ee089dd7c9520

SHA256
2f1608011957fdbff1102337584c5ca405b40472dc9a5ada0267b750484f63ce

SHA512
ac9eeb54de8ff0888a86f850fb9d371cd518c0eb05e48c8d8520ae8c5c8d398006ab979fddd4f14e6a9ee9dd7c87eb6aadc011f59add4c4ead7b231d7f4759ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
66B

MD5
17b59d403e4eaf2fa6f8bc9b6e9d6843

SHA1
2dbad627ac801cc38c7e0a5bf5e80480e29db19e

SHA256
4a607e8fde4d10089bf6ee343b10de6effde84826da50a44213c3ce20be6b305

SHA512
bf92eba82ef23006b47429fbadf2ca55ca12f7aaca5522d6c58f4b2ed6160bcc226930ecde00b8c4c8056eecd1bfa39b200c4d930d6e2acbc5235159063a2fe7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
68B

MD5
43f4f5da23bc7e045f23ee2828772898

SHA1
02b70f51dc4c36143f8b6c4f502b389c925092eb

SHA256
95d90cb49e86dcecaaaa5fd5ff297a02c35369ddfa181f2a4f93151329cc2938

SHA512
04b1c63f8290785632008986365a0629eb1c4980208ae30df6885ed0a59221022c31a4cc0b78fa3d3e1ee0b998aa451de4265272d7de558a1cf5ffe182489887

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e01b486e4c765805fac9d169b48308cc

SHA1
ea3762f4dbddf60c5fba5d3a676ac090aa4a25af

SHA256
9fdd141f7412b51672c443401fe0e3fe712b354ebef9e9cb8a81db1e745b8906

SHA512
14c0b0e808e741cb766a47d12441f5e95362aefcf7a9dec0d380a3f3a802f06f9170d779bad48668d059bb37d8f6688ed02210a32404c3b03e1d6c10fe2ae537

Download Submit