hxxps://www[.]bankmilleniium[.]pl/

Analysis

max time kernel
148s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20231127-en
resource tags

arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system
submitted
12-12-2023 09:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.bankmilleniium.pl/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
896	msedge.exe
896	msedge.exe
1544	msedge.exe
1544	msedge.exe
316	identity_helper.exe
316	identity_helper.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe
5604	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe
1544	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1544 wrote to memory of 4112	1544	msedge.exe	82
PID 1544 wrote to memory of 4112	1544	msedge.exe	82
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 2160	1544	msedge.exe	89
PID 1544 wrote to memory of 896	1544	msedge.exe	87
PID 1544 wrote to memory of 896	1544	msedge.exe	87
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88
PID 1544 wrote to memory of 2008	1544	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.bankmilleniium.pl/
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdc36b46f8,0x7ffdc36b4708,0x7ffdc36b4718
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4952 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:5372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:5804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:5928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3732 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,11781780709829946548,13535505887187511231,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1728 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5604

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4468

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2992

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c89e9212e22e92acc3d335fe9a44fe6

SHA1
c43c7e1b5fb58a40a01a6d8dd947c41a48e0b41f

SHA256
18c46c863404b31fcce434662806fa34daff0f9af0a9379d898f772b5c398b44

SHA512
c6961c171af63ddc7a72aaba4c9d910cc6a424794c416cd1ce51206f7c7f1100ca51c9e41d07d68489105dccded2294c1d761a8dc6be80d22c661014efd6a9ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
624B

MD5
dbc03d8e74bf61e96ebed4c351327a64

SHA1
c878e255e7e822e90b4ab77f0047514b9b59b7b1

SHA256
ff7dacda83387c5928894ed748a7e718914da91ee7bd40893fbe716ac66c132f

SHA512
cca89b9bf7974a8a639b70da95ff9d870a99d5d775e67887dc90055a0e88bcca8df1b77ba60d4e679901e3d40599221ad40e869624ef4587256cb2062e58f9c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
855B

MD5
187d9ff337b2fa6ac08881a6a695da25

SHA1
053aa56f05af679e8051b4ae6f5416d33847c72c

SHA256
2b10a470097b92e1392eccc84f9267b03059ecca686fa091db43b7c80ee4dc36

SHA512
cc9fc09e61b343d4ec6f7d93081d3f5089169349514f58c4ec9637fefe98f01f1f8525a55083bdf71848aadae88bf96720e96beabe52e216d7adb2610a3f5235

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
68e73cbdb336202aef484a8fc1e97efc

SHA1
1104f6c71652ab3df78952b303a3ae6971d4da87

SHA256
90ec0193d33c288b1a17c9c9ad08352931c8c4517371e2e7f00e94f763844c05

SHA512
683083ef3e337c80aa3ffdb473a83046a60133a5afd86b538d87a92fae50f4f4220bb81e016d02ba857baf8ae0bc4884f331ef7a96ddb26071927a5a13a0e104

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f2432bd37406760e0f22302fd2d5f7fc

SHA1
a9d02c7f3af957e5d7046a23249aa505ab10f76f

SHA256
8463ed44dade15d5c6691cb0a686812dacef5a6b1b7b3051774045047854394e

SHA512
88af66622c8d8954182006ff3642aed3f8b001633c74db8a5ffa3982c06bb516c22b57aa578fc18ac3b4a9ad3635cbb20314d7d344759011968d459bb6bf65e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3ce80c9f8cfe32eeda59e6f10b2db707

SHA1
ade29734606d1820b5b010d6548fdd1817ec2986

SHA256
cf849394338729ed5fabf6bfa2295eb8c0555a351376f14bad65ef2b8682ea2b

SHA512
c7b7b379748ef01fe748d55ac4d107f7779c9ad8b390720e70d542ddc2520c6807093fc54b7c1c6139bfd49e9dec853e23b2a7b483c172e190ecaf65072a7750

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a3e18d4367e6b594ff4b2d7134f7cc06

SHA1
64f334990739e3e2626c7c72d772bca661e8973a

SHA256
b68b55132fc94c5c5710dd3aee8ebf3a07201bd6dd3d781a3e9ea191ce1ef4ce

SHA512
041a8a6fe2ea6a558b184ba0a827833fc0f1e7f45611aff3081597de1c845c18fd99177f5213996d3aef2aaaf3c5dec935f9d7100d60c74f23d15d23838b12fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
d7b2b29ef1d9a33e61e1167984c8ca3e

SHA1
9a0da1a3cf9003ecf6aba220a8a00ca34a7ebd34

SHA256
7d4bbec0e8bf4e62f352750240a0bc0f7844d58fea590bc6a9fc972c3b752dc2

SHA512
3cc40b7e35c0749e419b035a73768c8f76bace77ed44be6a59469a032b643da15162733e5aaa94064494b055858a24e4f79326a863f31f1c28eab44cec35cbec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
787622141b8daaf467401ddfdad7c6c7

SHA1
1bd88a13553d660df751c9fc9386880b50c0893c

SHA256
1e570edad1bcacaffe9de10e859892a27e27e3d3498155feba8ac0cbcc5e236f

SHA512
65296ca27ae95a288e9e6e4f7f0d7e28fc1a0c06746330e824c0644dd9924d0cba3c5fc3ed9f78bd42dcc8a10da21d337c289e0fd3162a3d2b5c1c26ed0df7a1

Download Submit