81c004966ed17708edf21ca97132f0521efebebcd42eec4b5b30d103f7f35d42

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 02:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

485KB
MD5

91dda45a13cc1b7be2be530508cfab96
SHA1

aef456035d257eb24460bf3a90e66118e0f3e5ea
SHA256

81c004966ed17708edf21ca97132f0521efebebcd42eec4b5b30d103f7f35d42
SHA512

0c52e2ba7abe25a4351eff5ed74821de1aefd41f256886e75356c2ceaf6c87915fcb5fd450bcb5b763c01a29187920b83ee659e5f97335a844cb36e019097b92
SSDEEP

6144:Qvoekdek7ekEektekOek8ek8ekpekHekGPwlJ:QQe+eCeZe+ezepene6e8eHolJ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4920	msedge.exe
4920	msedge.exe
1844	msedge.exe
1844	msedge.exe
3248	identity_helper.exe
3248	identity_helper.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe
2240	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 1860	1844	msedge.exe	84
PID 1844 wrote to memory of 1860	1844	msedge.exe	84
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 720	1844	msedge.exe	85
PID 1844 wrote to memory of 4920	1844	msedge.exe	86
PID 1844 wrote to memory of 4920	1844	msedge.exe	86
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87
PID 1844 wrote to memory of 2320	1844	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbe42d46f8,0x7ffbe42d4708,0x7ffbe42d4718
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,14676977117577989026,8953402904045729949,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4808 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3624

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dbac49e66219979194c79f1cf1cb3dd1

SHA1
4ef87804a04d51ae1fac358f92382548b27f62f2

SHA256
f24ed6c5bf4b734a9af4d64e14a80a160bea569f50849f70bf7b7277c4f48562

SHA512
bb314d61f53cf7774f6dfb6b772c72f5daf386bc3d27d2bb7a14c65848ee86e6c48e9c5696693ded31846b69b9372a530175df48494e3d61a228e49d43401ad1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a9e55f5864d6e2afd2fd84e25a3bc228

SHA1
a5efcff9e3df6252c7fe8535d505235f82aab276

SHA256
0f4df3120e4620555916be8e51c29be8d600d68ae5244efad6a0268aabc8c452

SHA512
12f45fa73a6de6dfe17acc8b52b60f2d79008da130730b74cc138c1dcd73ccc99487165e3c8c90dc247359fde272f1ec6b3cf2c5fcb04e5093936144d0558b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4cbca40a88e4ef8349556e4e0cdd4ef0

SHA1
c89467c0fcac7b39580b1fd918f75013443499a4

SHA256
9d4e3c85f580e301c220941fb7bbd1fb4a77dac5c0ea5a38033869d5390648f9

SHA512
fa7dad6fa4956c1383c1e7b4ac8d915cbd2a01b51d0a12480b8d977d586cd12caeafd1c7cd7cdde0d72fd7b1273ac0e892976b7bb8285d82e7e5f6ce4a9d62d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
003d859c802c4e46bf63ce19d1d45a68

SHA1
3b890373de742724a20ee4f26348c4dee6452ad2

SHA256
d98bf0f6a0ac4e92393223de92eb9c4bde4ac2eb6079507e829896cc993c0415

SHA512
90655456ee1ca1af74d49ced50f3c7c2e8f262bcb3bfa5bd742150f7726c3c46b6c9ff9571e1737d01c19f9dff463b25f452279f760c6989b4bc18892a051eac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8503eff09d5ddcf57c3cde3c2fdf92cd

SHA1
65dc9fe3fa3cce30809a632f701ba341a31891ef

SHA256
5b6868f0b88c2273eb7dfd70cf3e6ec80a5f0a55188a6bc8a07e3f5327b6b6c1

SHA512
1e74a38106503fd77eba9cb67e5e9669e78bc6367adedf843b0e94f6458442aa569efd8a86dbb20cb748087e02575a98b8c04d236ddcc0c729791385dc078071

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5d2f6dfd6b184eeb85b6550584624c02

SHA1
a979a3e556a79ebaf6b5ef9263280a45478d0dba

SHA256
4a1acda04a8e55ead59fa439a8b97fdc702e783993f4f6de243205d3ea3c8196

SHA512
a397c1318d15098f071e7bfe819fc80a8d32fec31ed0a429b8e6ce3ad6f04b080255b1ff5df37fbdf795cf7c82b97c97659b94d1940f43a9e2a2c6a6da351a90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\9d8689ba-c6de-4726-b3be-11bff4a9cc9f\index-dir\the-real-index

Filesize
1KB

MD5
2c0991c0f958fba68b5269b289e13e3a

SHA1
77312a4138ac8c4bcc375dc2a520a541dd64e119

SHA256
eadcac04f1fc565708d0adc1044e334023f47ee8665c8e39fdfcc7eb604df27a

SHA512
93080cb29f6adf969777b2b1c4cec9791c30a75b1afd6ddb7d5db6c5e35c972179789907656376c3a5aafeb0191778433e6610c33c19e28dc5c41573aceec583

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\9d8689ba-c6de-4726-b3be-11bff4a9cc9f\index-dir\the-real-index~RFe57eed4.TMP

Filesize
48B

MD5
313cece940facac2339f8759d217b0b4

SHA1
b9ba2392df2a22ea7f74469a0e250c33e52f90cb

SHA256
23e3c0c0b0d7b18bd456c490c46218ef17a04f69df3281282def609e1f8c2e11

SHA512
bde2e86d8dac21e5dd93f7b72141dfd877c3a829f661a2b6d9f93032d170a787c12bfb0a0f657c69c59d4095eded1b9b8772793bee7cb137eb45086f9ce8f13d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
73B

MD5
0824905768955128837b6cfef5f8b202

SHA1
35215df7c055d383ecd4aa19d9a73fefb38f274e

SHA256
fbdb3468794c63bbf5e8f21d5d690d94d34b7b9d3efba02a42df9755956d89e0

SHA512
4352079eed7c65db70b20e5c9b0b62c7fbb247e089445617a9bb6b75bcfa9bab70c03a44f78dfbe9e01e64a426220e077b8745e2fa7dd342adf5781e5db7d858

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
130B

MD5
c2b0b5878ee5243a3953084dfa52e159

SHA1
374e27ac4f25c6acdebaa8aaf2eeb2394856a908

SHA256
50e0c0ca8ca760ff694e29f15b97a46016fadd4ffcc0daf6914617a9895a9147

SHA512
9b9f3f43c7b6c7ff2eef8cf74ed37d99ba44d409393ebc9a79765597288f10541fb2e227b1b75de9bd7337b9d4e62298a0f54b51ca9b907056ad47a9c41d3d76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
66B

MD5
f91a92fabd4fdd713e0dff836881ca7b

SHA1
e8cceb5b52d6fdfce027bb674f3cd7d583ad575a

SHA256
6c3db74378d0b176cc19a32b742c3e157d0d7dc2acdbb67b87442e9f3d352c6a

SHA512
6242d7ea3a50623c12db28ad5b358acbb305c908d6fe1c2da07f895fe6ad30d2cc98fc338c98abd802c5bca3279228d5500bc9b6278f2a1db11a1869273e7bd5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
68B

MD5
e8c85756f01eaaecb8c6a27db20c2e0a

SHA1
a148a0592254a4bfe2eb6ad21aec188b5b86b303

SHA256
6bd83cfc4a885770cc0c2b9f3dc9685c51bb22ae2f507a037257e210f7617355

SHA512
9f49c433b0638439f8e7c87b7e95ec7db03627073bc88cca82361f6348ace26be2166d43e14069312ff3a2a340270a6efbc1bc50f0d408df83d9a68ab5c37093

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7448694f5d92644cfed17ae4aec36fc7

SHA1
28a0026e56044e034ccfbb0209825c949ddfaf68

SHA256
9470ed7f067cd538ad0372a5779b43f5bcf572295c0de4acf01700100cf32d4b

SHA512
715df8c6f4eeb33d5026daed8f703bb0ebe386aecaaf2f76e7d2ec5bda57d1fe4c83bf42da7aa98394f9a4f87c47acf542b12c4c3bd4eeea3094dfdb9d05caa4

Download Submit