fd3a581b4c5061829a2e450a5136a345104d91051b1eafe740b1aaee7db35bd3

Analysis

max time kernel
128s
max time network
130s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
20/02/2024, 08:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.html
Size

2KB
MD5

4410bdfe00167122bbfac10efba99a53
SHA1

9db032b66b4c8bb5c5c74bd313d49c9a4bc14e8a
SHA256

fd3a581b4c5061829a2e450a5136a345104d91051b1eafe740b1aaee7db35bd3
SHA512

352914048972def928c99212c0f72c8965fc682001f8ae3bd39418e50ef41d2b102b1c9f551230fefb3659e00be6fc01ae1b6a05d2966a1bd0f30cf8c15877bb

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4712	msedge.exe
4712	msedge.exe
2004	msedge.exe
2004	msedge.exe
4080	identity_helper.exe
4080	identity_helper.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe
3144	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe

Suspicious use of FindShellTrayWindow 33 IoCs

pid	Process
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe
2004	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2004 wrote to memory of 1636	2004	msedge.exe	82
PID 2004 wrote to memory of 1636	2004	msedge.exe	82
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 2224	2004	msedge.exe	87
PID 2004 wrote to memory of 4712	2004	msedge.exe	86
PID 2004 wrote to memory of 4712	2004	msedge.exe	86
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85
PID 2004 wrote to memory of 2108	2004	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb1cee46f8,0x7ffb1cee4708,0x7ffb1cee4718
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1976,12997545446160495924,2029340611652340725,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5356 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3144

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2236

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1136

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1386433ecc349475d39fb1e4f9e149a0

SHA1
f04f71ac77cb30f1d04fd16d42852322a8b2680f

SHA256
a7c79320a37d3516823f533e0ca73ed54fc4cdade9999b9827d06ea9f8916bbc

SHA512
fcd5449c58ead25955d01739929c42ffc89b9007bc2c8779c05271f2d053be66e05414c410738c35572ef31811aff908e7fe3dd7a9cef33c27acb308a420280e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
d2a503f585b7edc8913a91f36719f5cd

SHA1
989b23d5d97591beed481484f6078756ccaf8f82

SHA256
93218b06df0e04e508278a248ecea97d0da557157130bb4d951c699b5a724c3f

SHA512
06294a283345422fce245fae38e064b5a359c7eccb68c8afb6e5426d69a9138cce6cc634932d0eaaa344ee706f618619e4f8fe3cb7b8f3cade4b6bd9126063c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
180B

MD5
00a455d9d155394bfb4b52258c97c5e5

SHA1
2761d0c955353e1982a588a3df78f2744cfaa9df

SHA256
45a13c77403533b12fbeeeb580e1c32400ca17a32e15caa8c8e6a180ece27fed

SHA512
9553f8553332afbb1b4d5229bbf58aed7a51571ab45cbf01852b36c437811befcbc86f80ec422f222963fa7dabb04b0c9ae72e9d4ff2eeb1e58cde894fbe234f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
fe692f1847a0fea3f843fe3f6b6b7741

SHA1
61721a4f6684331b42db21ff1b6a26dabd0881d2

SHA256
4fc76626c3325e85bdef5d549ec0e3205a74059fe87b1ce0bab197823967e991

SHA512
dee77f16389b47b0c4a496b4f300335f1f5b3ae4a4903a521079757b80b114f1ce74896c45c8cfc19d33949be795ab01ccb901099672847651fcf9bf2e545e00

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
56fc691bbf06fb9625b99e90a6115cc7

SHA1
ca626550a33f60ee013a98da9dfa09100cb816fd

SHA256
ad90ae2e8c0ccc13b525725262c747b1944e48cfe52b75b90c65c9b059113930

SHA512
5f2f65c7028c4f230f835d8a25455a16fe9597a7dd6b524ffc3fb70830d2367c68b33da2dcbe7f867a1a60f077020cb6743bc359673cacb8174f3bfd3d39c99f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
dfd4ef71b52c60b7161e16b6889d0201

SHA1
8cdd6fa21e510c9c887cdb26b337f1739db97723

SHA256
023566cd2801755f8c5b3ec4e5f78f30925755bd7cdb6f7b4f42455c5c72262b

SHA512
77da50d8808528703e64a90d7d0df04bfd53edf318c5ce679d5fdb8a38294dc1fc362bcb6dbf83332b9a5ab9103a019f8d817f1e8a16eb76c50c9d62f54fd3ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
da1f3ff3f022bb378e8eb7f804e74b94

SHA1
1af4393b4100867e54cbb890039f06290df67004

SHA256
8be7a6f3da8ec664f9823aa9758f2f49d3ebaca1fca9f4f5191d3d36187efdeb

SHA512
c46ccdff35ff42c999b703f24e93765a9e1d2431aee1350163e14812396f0780519798c2d8b59d89347bb7e8d7b13c45ffffda69c400f3be1a02dc769e81b061

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1c5f67cf415c130af8c25e79e12d33b6

SHA1
1e05ab282430977b45efd3d713318d677183dfa7

SHA256
93d8717f3a701f63185d00983d962e447619efcb0941807478b36d56bf51a327

SHA512
b22ca17eb8823b3c6718c3f1b9fb7aebbd4df626d681059ba6f15969bbb40900a5e3b7450f68f7cbab08794024b0e1ab536253fb9f96704f558d5892ec0bffe9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4397a28d947c36c97e5b5d9197304cb5

SHA1
8b83a52f4b42d0e92a929c39f34e8d4bdc09e142

SHA256
b91555f03d428695d5ec5ecee92bdb542e1309bd6051657282aa9b37e8852d20

SHA512
ee2ca9f3b972562e1171c32dc43cefc8f90bb5c58516a3e9492225dd5b00c27f87f37677eb6eee034f5f54709d9a73396924954bf6a7b5e8fdb4d41242e4be70

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
e664066e3aa135f185ed1c194b9fa1f8

SHA1
358ff3c6ad0580b8ae1e5ef2a89a4e597c2efdc5

SHA256
86e595be48dbc768a52d7ea62116036c024093e1302aced8c29dd6a2d9935617

SHA512
58710818b5f664006a5aa418da6c8cd3f709c2265bc161f81b9dfe6cdb8304fabaa4ce9deba419fe4281623feeeaa0321f481ae5855d347c6d8cf95968ee905e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
405f159f241c215dfa8958b1636670d7

SHA1
494982837468ecf6323a3a5021d21cbfddad030f

SHA256
b3d0b8e22c5091b51ee3e0a9945048ae2c5446e7e9474c1df8af37ba51e3a4a7

SHA512
e3c006e8d5d8bf963029384e5e8c5c259ef2055e59594145f678ed10c6c06305c2161c2a541bb2861ae66262370ec7129deadc3668dd6a7aea3badef7564709c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
20d4d03878ae3b586c0814bc6a9d4ba9

SHA1
627f95e2d8f5c23136595e0c09ffbb84c7c05ea8

SHA256
ed9e1034ecd747244c6f2b5cb3aaaf4c12ad9cc4320587ea7445ab98965d0906

SHA512
39d037229eaf934bb0d47a17e733a5696d81f09faac754ece5ed4c678ede64ba0bb857468926e8338d6e50a487a3325b7585c6c295497c462e8a587f018153f5

Download Submit