hxxps://amiunique[.]org/fingerprint

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 19:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

https://amiunique.org/fingerprint

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2804150937-2146708401-419095071-1000\{E515D909-C8B4-4C64-B52B-FEE22F0BFB33}	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3720	msedge.exe
3720	msedge.exe
744	msedge.exe
744	msedge.exe
4324	msedge.exe
4324	msedge.exe
5092	identity_helper.exe
5092	identity_helper.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe
744	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 744 wrote to memory of 4984	744	msedge.exe	83
PID 744 wrote to memory of 4984	744	msedge.exe	83
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 216	744	msedge.exe	84
PID 744 wrote to memory of 3720	744	msedge.exe	85
PID 744 wrote to memory of 3720	744	msedge.exe	85
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86
PID 744 wrote to memory of 3192	744	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://amiunique.org/fingerprint
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb7ba46f8,0x7ffcb7ba4708,0x7ffcb7ba4718
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=2236 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=4588 /prefetch:8
  2⤵
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5648 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,10951911414903124347,11251207975197808027,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4836 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2108

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4424

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x460 0x324
1⤵
PID:3772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b4f91fa1b362ba5341ecb2836438dea

SHA1
9561f5aabed742404d455da735259a2c6781fa07

SHA256
d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c

SHA512
fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eaa3db555ab5bc0cb364826204aad3f0

SHA1
a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca

SHA256
ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b

SHA512
e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\469b5cde-4709-4a04-a728-b415c76597dc.tmp

Filesize
6KB

MD5
e4a170c99fa73a55d6cc9fdfa49a08dd

SHA1
0d461cb3b5edb108bd9f03fb6a1d041ddb395cf2

SHA256
3cbc7707e8807a5a64b4df8435a5c903178318d412228b803bd51993dbe67f21

SHA512
6b64fa3ce02388ff52e4e3050b682c675f3c5d4536a2a9b1492601ecc26b2f8faec18436321dba067f4c5607bbf68bc57e5c33fe0222357dbdef4e338cd5a0c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
648B

MD5
19c06fedf1776348c6075741c1d0a567

SHA1
5bd8478068152df32bfd7e77cb1caa0c34e01eda

SHA256
070b9fce86bbf05d5b29c6862465e0085c7abdd21d97ded0403378e9aa0ea70f

SHA512
9477a876d8f73a4118019d7a6c93ce2f32494f66be1c37206f7bbcefeaa755502680956c602d18e8bf6884072d191a9558783aeca79a2fdba7784964e858fa7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_amiunique.org_0.indexeddb.leveldb\MANIFEST-000001

Filesize
23B

MD5
3fd11ff447c1ee23538dc4d9724427a3

SHA1
1335e6f71cc4e3cf7025233523b4760f8893e9c9

SHA256
720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

SHA512
10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
181B

MD5
b3bf3ffe0db49126c3d26cf11cfc5332

SHA1
c90a47eaf26a31c616ea1c0392e024b2fbaea253

SHA256
2a8c0f5e0e4d6d8a62fa2decbf750d67341aa25d7aab19d8544ec1023b764dcb

SHA512
de9721a47e9ff31d8b543738c23ee96d1810d2aa1b0fde789deafc818d3db4125fc2298cb1423644a830c75adc399a720913c851348b2d871c05f31b958be51e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5c4a589f6b3c981ae8a355831f9903be

SHA1
bb006af8efb882ae6c64ed89358e299454ede2b1

SHA256
16425f814d6a938d3bd9132d4b6a6f556de401dc2bc2f0e6292a70d4ad113307

SHA512
5639f45788d515b30f153338cf3acfd5d76b225b81cc9150b09c58c8930c536eada2ef405d6c94b58c2df68104313b7041319be406f1d4794a1b5f3bc0c36beb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\323c8f636d1514091dbbcc24e602eaedc2fa9a48\d173f3b4-c5ab-429b-b52c-95d05e22a224\index-dir\the-real-index

Filesize
72B

MD5
c8b63e94b17b3d56140fbb141d631d3f

SHA1
359594a44a5fdac0011946fb5c193218ad9872a6

SHA256
f382c2ebe83d337c80c95dca102beb03ea80ec53b69dca1e04148ba8351b00b0

SHA512
048899397760864c6287584df34bcd68590a4789da0616dbef04211fe7ccbd1d81aa60b448bc2bd67ae328b23d8431f9e70d6338645b4e5598e5c7a26e79f043

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\323c8f636d1514091dbbcc24e602eaedc2fa9a48\d173f3b4-c5ab-429b-b52c-95d05e22a224\index-dir\the-real-index~RFe57c534.TMP

Filesize
48B

MD5
6ce5d1afce4aacd4bb6b8fc4ab9fd982

SHA1
5fd182cdaed09998a7752f516b7f60671c9bb1e0

SHA256
b7d3e02cb260c3d8a34005577d0a90625c52bfca9af586b401c537e8343b9021

SHA512
87e8e468cc15e0ab2395e818149a438fed5c04076819afe4d907f0b16ffffd16da537accc0a9988d412de49c068568fb90c84300364357445edd3ed0ef58a701

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\323c8f636d1514091dbbcc24e602eaedc2fa9a48\index.txt

Filesize
149B

MD5
1ba9822a80955cc954c246b324e20d11

SHA1
c97509554e6cffab34147206c4e41009dbf6ca7a

SHA256
caa7801517dba4011724590c67649e46e33fbe2d07d20f105b2dc0e31245950d

SHA512
5c4f63f6b669d4ff4eef1ad2b20ba1e0bff6a86c1aa1f6f4a7d7098d61421061acaabba458192cf2fb3c9a45820aa5c6520a6f1c9d1c1a20410de1a4d5843a46

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\323c8f636d1514091dbbcc24e602eaedc2fa9a48\index.txt

Filesize
143B

MD5
62d2634b8b64858f8a6548cc09932709

SHA1
a8778ac41c1f9be81d60b7e0a72d92f790547929

SHA256
01bf5a1351f22d1cbdcd261980054f126dc7e8b8e5a8a5dc4725d08c4236ca3b

SHA512
deb8d6c48afab6454fbf2473b8dfb0668038c4d5af020c118ed98f442eeec6450a95a58a7eb373360787a782a14051f088439e5b9453e4cd3ed44045aaca1b3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\323c8f636d1514091dbbcc24e602eaedc2fa9a48\index.txt~RFe574853.TMP

Filesize
90B

MD5
f9c52c30572562944f8cf883f2922e8a

SHA1
ba547383f4068c5711193a8661a7c3e94ae5650b

SHA256
9e36cb93d0de0578a3f65e72ebcc8a169a4ed1d2d98d49ea9ae78bb24dca81e2

SHA512
aca569602ded77f52dcb99bce3bdeabca5e4e6496ef66f7d19f83839632cc797550ff1e4d09b59babc3d96060ece6db8ba314bf1390032f730e49045b85a74b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b015e11fb2687f643dc1f902278081e2

SHA1
432de457467180e44e47ff58a90661f8a685672e

SHA256
377fb64628f8d64cd2948edaf0d81f8ab0b18204f03195c6892c7f6f29945ec4

SHA512
b3822ef1bb21dc450865a1030189b91722f64f19a1682e604d4b33c26d4459d181338736cdb096221316fe33c90a52da1bb4ccf07a6c6f8b959bbc90a4a28175

Download Submit