af6d4463d241a3b9fd8a05d3891809bcd7c4de89bc0551ecff828983a73a208a

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
14/02/2024, 17:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9c46e273373e9d72d1d90f9479a3d38f.html
Size

432B
MD5

9c46e273373e9d72d1d90f9479a3d38f
SHA1

48b7f7a6c4424ca9c89dc764c028997b9384ac73
SHA256

af6d4463d241a3b9fd8a05d3891809bcd7c4de89bc0551ecff828983a73a208a
SHA512

6475ea21a61e11307474ac66d68c6f9be5222a695a428996a4351704d9b389318a197961d3338fe569afd7db5af650d6383c454b542855a0e2d1635d34de2267

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1804	msedge.exe
1804	msedge.exe
4572	msedge.exe
4572	msedge.exe
2608	identity_helper.exe
2608	identity_helper.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe
2980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe
4572	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4572 wrote to memory of 2920	4572	msedge.exe	84
PID 4572 wrote to memory of 2920	4572	msedge.exe	84
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1656	4572	msedge.exe	85
PID 4572 wrote to memory of 1804	4572	msedge.exe	86
PID 4572 wrote to memory of 1804	4572	msedge.exe	86
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87
PID 4572 wrote to memory of 4788	4572	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9c46e273373e9d72d1d90f9479a3d38f.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe1d0046f8,0x7ffe1d004708,0x7ffe1d004718
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3444 /prefetch:8
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3444 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3428 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3424 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3576 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,18046663083548286079,9511815158650357773,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1300 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4428

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
efc9c7501d0a6db520763baad1e05ce8

SHA1
60b5e190124b54ff7234bb2e36071d9c8db8545f

SHA256
7af7b56e2f0a84ae008785726f3404eb9001baa4b5531d0d618c6bdcb05a3a7a

SHA512
bda611ddba56513a30295ea5ca8bc59e552154f860d13fed97201cdb81814dd6d1bca7deca6f8f58c9ae585d91e450f4383a365f80560f4b8e59a4c8b53c327d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
194KB

MD5
36104d04a9994182ba78be74c7ac3b0e

SHA1
0c049d44cd22468abb1d0711ec844e68297a7b3d

SHA256
ccde155056cdce86d7e51dfd4e8fb603e8d816224b1257adfcf9503139dd28f1

SHA512
8c115e3e5925fb01efd8dda889f4d5e890f6daaf40b10d5b8e3d9b19e15dadcb9dcf344f40c43f59a1f5428b3ee49e24e492cf0cb6826add1c03d21efdec52ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
bb264be9e81c61444116a066c28943b5

SHA1
1617c06d18ff80d810f65cef849be2ed9287f331

SHA256
a23ac4f58c43cd78237fabcc546deb7b1d33e706c019bca22ec3c504a2092723

SHA512
ffc522148e91dafa63f9f4d1c85f9734d6633ab7e0a4429639d8198f2447eefee38a84f7257f70834b24e1905e8af62e5bff8340455224c644b24295753084f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ec3f564040aaaa531a9d703dd5e5b5fd

SHA1
7d7e4cd05c9a88674152ddcaff09b243329ec591

SHA256
9df60462e43ea3c48138c55ab2ce98ba8ff55ab7d858ea03e01979b307d53205

SHA512
b1002d76a923b7133dc8167497a3f9ecbf38102629729915df0781cae733e1df1bf1a8b76f5e2d4c23c905cbbca6a606e96b8ac5c4b3aac47fdbc937a9317397

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
16043b46f8c203d2782f0b9178a6def5

SHA1
fc9bcbc84c38cc944da19842bc539ad933cbb045

SHA256
b8b06c1410c67a05d58a0f202cd44139f2981eb9b287e2cd302f3bc9ee5f438d

SHA512
9e433a676f22b833cbe73755ec946fd5590f4f8b67e46c5468429f22f35df63d720ccca1e170f88c7db9bf644777a6e5bf04f781a79651c8850c6b36cfbd45ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3b0380a1a8779ff83ffe130e8d8b66a4

SHA1
a73ebfde3da006e68bb910ea3e1ade00a9a2a486

SHA256
dd478e869f68990e604027c2659be8bdd02a677a9721790fd797a1beb6bf014a

SHA512
9c6a284bf6b6267cd118d2496688972d56293b19c1db8d0039ed8587eddb23c63b4e1692dbc5458af5c05f456345bd01aee490a29242afafabf121b150e0bd41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f8f96392e5964102855893ab2fb26b77

SHA1
74190a8cd6f2503efe82ba376fd2c1e23933d684

SHA256
af379c332d87686bc9db7e03057ca2f33918eb2e5be42a641f4d807b774a2771

SHA512
b1f82a8589ce2d1c5a79457740c0f531dbab4342195fa9891cd0f9a831a65e0bddf68122b44116d77a21efbd6dd28ee41524a16b6e87332a5f25d317bb641e99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
121510c1483c9de9fdb590c20526ec0a

SHA1
96443a812fe4d3c522cfdbc9c95155e11939f4e2

SHA256
cf5d26bc399d0200a32080741e12f77d784a3117e6d58e07106e913f257aa46c

SHA512
b367741da9ab4e9a621ad663762bd9c459676e0fb1412e60f7068834cbd5c83b050608e33d5320e1b191be1d809fef48831e0f42b3ecabd38b24ec222576fa81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
536be475fba10994a72eb33356ba5ac4

SHA1
0bf98d123a9d3d4707aa17904350842a9a567b74

SHA256
8b49edbc1f751c0ce582999e57d9d097c39f7c77e479b6620535ec188436f897

SHA512
96269cdd7d326359227698897302ce7564c60471375fcadda8da736178b6c6ed95f76373f8187ef5ae744d00498734237d72c7ea1066cc116027f2be1742376c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57f992.TMP

Filesize
48B

MD5
78a659077cdcc8d2cc9305cf75046688

SHA1
d3fbe139a9dbcba6838626b4f73f1d26bb3a5b43

SHA256
d7a86273623c03e57a442ce7096250c03a0de922f6c3b3683b9668648166b7ce

SHA512
95c3158a844015af9b73001eb89c57f984220939039cafcaa3ec0370e540a5e86802e2e1172755ecd8379782898aff2a62273fdf6b39ac19f8037b17662ddbe1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b6eeb8146a59a402250bcbc83334d3f7

SHA1
72f38cf08d62c8a4c99c1e43d78c9100b2d3c90d

SHA256
190f438893dea9c6e9f27c66cefaa6daf394dbc02e662723bc160460835aabad

SHA512
b679ebdbfb328ce432396ba5f8355bebab2722e935324ac62992070d823098242d986b2aa608fafafc8c6156bab3d55528673a9f6de7322bc228b7d4c1317e37

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
fbb228e40f3a8fad5a82a1b0de7e9c60

SHA1
e494d337e104f98630c3dd413775e3a66c9b94c9

SHA256
62322b3c648e7f82661c2266c04b7f05431060e241c32c5f11d545ab585af669

SHA512
41e6487a3e95ce6a777667489f4f75758a4b1365fee87bc1a69003c99e67d88284237bb7298c56a9c229f5c4cafe761c39d5f5f20b1f5e7182bdb4f93f4c35f4

Download Submit