6382fa109cf6ac26bec89f1e0d01a103a4969160a38e0820ff8e1c56a69e45a5

Analysis

max time kernel
147s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
27/06/2024, 09:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

watch.html
Size

950KB
MD5

aff98b5d1b48eabe269b9eb1badb8ec5
SHA1

77a414b041c919171ca15492a58b62795f2db2b7
SHA256

6382fa109cf6ac26bec89f1e0d01a103a4969160a38e0820ff8e1c56a69e45a5
SHA512

2de95273d3d63d01564a0e2973d53b2982cc97191e8a73c63733c57eaa51fab6991bb9089ac174fef44d20b9723b1a55385c27eac444170e835e9f3a72375e25
SSDEEP

6144:ZsWc8xc8Dc8Gc85c8kc8Uc8Kc85c8Vc8AU5O7t7wIGl6fNMiUJAHs5qJEWWxYiGt:ZHcMcsclcQcbcPcrc8cocnUvUmdK

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4652	msedge.exe
4652	msedge.exe
4956	msedge.exe
4956	msedge.exe
2232	identity_helper.exe
2232	identity_helper.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe
4956	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4956 wrote to memory of 3216	4956	msedge.exe	83
PID 4956 wrote to memory of 3216	4956	msedge.exe	83
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4868	4956	msedge.exe	84
PID 4956 wrote to memory of 4652	4956	msedge.exe	85
PID 4956 wrote to memory of 4652	4956	msedge.exe	85
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86
PID 4956 wrote to memory of 4192	4956	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\watch.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffac76d46f8,0x7ffac76d4708,0x7ffac76d4718
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5500 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2184,3033312046085238937,15454841268001186894,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2544 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2296

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
477462b6ad8eaaf8d38f5e3a4daf17b0

SHA1
86174e670c44767c08a39cc2a53c09c318326201

SHA256
e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d

SHA512
a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b704c9ca0493bd4548ac9c69dc4a4f27

SHA1
a3e5e54e630dabe55ca18a798d9f5681e0620ba7

SHA256
2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411

SHA512
69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
5b8e6d0efbb019aced58be6a790c5ad4

SHA1
311e03e4cb001254651962e37fe4ddce7e8a1f96

SHA256
04701c65f009a3bab5b30056114ec8e147e3474098c61bfcca2658ae26f1e913

SHA512
5d356de9ecc78b4a5d8d4f98e3b7e231da95ea50f349d7c9f08de85fcbef4fcd20bc99cf2394a6d5f37138764e01f186835dc52c537fe16b46a5b7dddae999d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5662436cf2f7927630fecfa1ebebed13

SHA1
707026d9a9f7b91584211a70f983ff07bab037fe

SHA256
2f3447e2eea55b8546eeaaa1c9e32a8045fc7f0088691aea0b868cad6158aac5

SHA512
fbf11e6e42d1682acf89600480cf12d15541adf3bf3f8fd2493d2f2408634c54fb0a021c8b060e54f80435125add899fa698f43c877a44ac11f6971e9012e760

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8bfacd5d9ab391c68081e027bbc16250

SHA1
d6681b4a40c7ad274ebd4ecd68fb4c5eb63d14e5

SHA256
d109a061ea10864a83b366fbb8ea090b7f93eddbc6739be67add34f606c9ca51

SHA512
0e88b1e6438f15ff7375e250d76ae5b4dd88cbdaf467612d7db9f4d7d6ef4fac755a1396d445a935566b4018dd9ba3c3ac06063425b31ce6e4d3ed068bff1bb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b0b74381b4ccc2d9f2f54d67bccecc35

SHA1
881483a347638e75af20988dc2b7b2351a19a048

SHA256
574536de71a92ba583ae5e01718b7b8f1bfa83cc10253d1c2a73d1c71af95d0c

SHA512
8d46b706a5e7ce40fe0ad576ef0467f0e6cd3381cc20a4e717832561fd3964f128cd9c6a063adb5cc894901d255438094e16968614a5602a43c9888c033af184

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\1abd696f-f417-4c36-baea-0042e8fdfec8\index-dir\the-real-index

Filesize
1KB

MD5
a7d1a6f1e0a6e8bf704cc59ad7a93c94

SHA1
f9e3c4b6e4314aa1d2ed7729f2b4ad13e314ef87

SHA256
9453529a7d325bf7dfbb6edb97e86d40f0c3c597b3d252e3f4d5e2f4cd12f9c1

SHA512
7c0892e14396ffb48cc40496fedab45da858300794272faf217c1ab84a7a98049107005a2b23179b31883f3ef79dafafb43468f2c2a2f66e66b56160f4d4b8ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\1abd696f-f417-4c36-baea-0042e8fdfec8\index-dir\the-real-index~RFe57e177.TMP

Filesize
48B

MD5
1a39c4e81369da34cea94ad5ac2ac5e2

SHA1
6a17c35458a945d0c357c475d71a7d9f0ae57031

SHA256
b6264731ba91a6b570e7d521f6ef1422c034a7a38105d5051795fe4cdce4219e

SHA512
65f15594f972222475e7aab5250d072d8ff4f100ec3046d9f2a4bfa519ffc9dae9cefece0324fb29be3e93c0a356f7084027f38eeb4264490f59a2e7447da376

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
73B

MD5
a3e4baec4dc4ddf23113a75cf0d21108

SHA1
b979793f47c050976f0170ca7e7c8c4235c54020

SHA256
a542f730aee5d0c16008da4714c1f39789407461223d96d5543bc90c4ef2948c

SHA512
f2cb82b16b92c37521f3d4470713509535b57ab2c4b70baf9527f2f83b5dee6e68dc12b2a79788be8e2407d6cf263aeeef3906f2783b3bae2080c68be41b2999

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
130B

MD5
c16db118d19d397250f83d4374875568

SHA1
fbb943ff7edc52d5475890dc8e531a05a0892bdd

SHA256
7364687f1d74e620b9dc96b5694c9b18e54a189b02f52f4dd8b9abb27fa5dbc9

SHA512
36a0b97c08c977cdf1bc146cbed8899cf42e97083a91ca64099ead575245a544b8009e7160c2ff60a284cb992fa1928b01a7e13a576791f8ac7c903e1f8def54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
66B

MD5
17f4ecaf5d26e97408337a460519aa21

SHA1
7bf0787592f526c75ccc015cdbd4490054bb9195

SHA256
aa9dc03e5d5365c4c3172c2ae912ddb9329e1e7840c0ddbc2a4948162fc43e68

SHA512
693254e6ad09164e1f05d1b3708ce096d6d3db9e28d85f16d757857073d677b0410a1b6bc7ab0c62d44a0d5ecc8ce95a95dcfb041282c63287b2eb9e08082bbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3e8ad32ef6e0ff2c8dfb0722a7a862f0a1038fb3\index.txt

Filesize
68B

MD5
cefe961d1bb2f1edb8f52efd4561b6d0

SHA1
0a360659368970f7aebee56c64bc7538b7f18c35

SHA256
4a2ddfbe9f21e1cee995beff58a74a27c7f8f182dad67c08c3985a49ebd2f08b

SHA512
b1cc205f97c0ec529df22c004b7a02971c13cccdee40f8df091057eef1d6b380970a5c1d1f5948058c47c51876f7f321d3b983390d764f805194e41633558554

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3fd9af2900d7f4df624ee201db257495

SHA1
4fe27a9b655456207e4e743417ef67d99a5bd939

SHA256
8dddbfabf16e165fbcca7acbc2dda63368b3e3c221442ed380385f7400b2fd2c

SHA512
b73459fa89f562d30e9c0cac08d119836b31c5915d7f648f2cd4fcf9b2e238eea6f210dd01ecd874d36c8f68a2373a45917cec590e906e84e30d75d8c7a4dbc2

Download Submit