71dea46ed3ade5d8eb149ea9a4341a07c234e9cc589f2cd48c50ccb5dac907a9

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 15:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a426c16940dead84b8f61c48ad7635aa.html
Size

37KB
MD5

a426c16940dead84b8f61c48ad7635aa
SHA1

c5d2199d692f31a15cd9440b8a1d6c5ed5085be3
SHA256

71dea46ed3ade5d8eb149ea9a4341a07c234e9cc589f2cd48c50ccb5dac907a9
SHA512

729c25437a4ef2d8ce1c5ab7d2036e5f99c45c30b130d9714612a7e42131e045f63cb4e5e0d04fd935eaf7bca2cea140bc92da0b56006942c7be31a1ee633244
SSDEEP

384:2Y70zL7YI9eaaJSqGD1CA+rF9Yf2HJJQq/SWLDn0HJZCB0IIuz4iQhW+tF:2HEaeaUGDV+p6OoqSWP0p8LzEx

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4716	msedge.exe
4716	msedge.exe
4288	msedge.exe
4288	msedge.exe
1240	identity_helper.exe
1240	identity_helper.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe
4000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4288 wrote to memory of 4908	4288	msedge.exe	83
PID 4288 wrote to memory of 4908	4288	msedge.exe	83
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 1924	4288	msedge.exe	87
PID 4288 wrote to memory of 4716	4288	msedge.exe	86
PID 4288 wrote to memory of 4716	4288	msedge.exe	86
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88
PID 4288 wrote to memory of 2600	4288	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a426c16940dead84b8f61c48ad7635aa.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd1b2b46f8,0x7ffd1b2b4708,0x7ffd1b2b4718
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6360 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7092 /prefetch:1
  2⤵
  PID:4156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7104 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7720 /prefetch:8
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7720 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3980 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,7480401015261430388,15520461951710920640,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:832

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x30c 0x2d8
1⤵
PID:1496

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
360dd5debf8bf7b89c4d88d29e38446c

SHA1
65afff8c78aeb12c577a523cb77cd58d401b0f82

SHA256
3d9debe659077c04b288107244a22f1b315bcf7495bee75151a9077e71b41eef

SHA512
0ee5b81f0acc82befa24a4438f2ca417ae6fac43fa8c7f264b83b4c792b1bb8d4cecb94c6cbd6facc120dc10d7e4d67e014cdb6b4db83b1a1b60144bb78f7542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6fbbaffc5a50295d007ab405b0885ab5

SHA1
518e87df81db1dded184c3e4e3f129cca15baba1

SHA256
b9cde79357b550b171f70630fa94754ca2dcd6228b94f311aefe2a7f1ccfc7b6

SHA512
011c69bf56eb40e7ac5d201c1a0542878d9b32495e94d28c2f3b480772aa541bfd492a9959957d71e66f27b3e8b1a3c13b91f4a21756a9b8263281fd509c007b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
7aeb51c2da3632d78ba3a7aece84092d

SHA1
4b511a63e36239e3cc2e6b93f1729717b2aa23cd

SHA256
6119b4590ec88f8a41b1a59010703053a3f6875af36e476e909b43837ddcffbf

SHA512
b0d48dfe5ef5bc92f78472f8411317daeba85eaa87b3fc97a8c336edf51d4ea922606cff5386683de498872d0c4152ad9382d36cfbcda9c4506fb41a57955fbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
bc6cc81e5bde6c8be38f32a215e5e033

SHA1
c7dc4b0b8dc91fb5f13a1c53ef9f4aaa42e99636

SHA256
12e0d8926fc0975bfa8f404ec56bd34d2642e3eb18b7b4ad20ee5d0a6a641f1d

SHA512
db33b88fa4ce2d6209e3334b9f1dc7f841c409638f5f610dc2efb069deb0af53ffe74bdadeebdd79da5d1cd5153085e2e46233e7a84885c1f500aa525dde8656

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f5911be49af96cac93409ef276fc272f

SHA1
97d1dba7de5b0f57cf5fdd0bf97947aeddb38b96

SHA256
aa5af33c4c3be12a7c0438fe7d253b0e9a8a2285ee48be0dc25a220a9a9ae735

SHA512
c1cd8fca1e2319bc6013d75652781fde38cbf5931cbe01685f6e82f6fd506ecdd5cafd96235799693f55c540e63f53ff5f347b118e7f284186973ae85972f26e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
14f553893ea8fd6bb388cd0fae106c9a

SHA1
f8733ddf7916995a97e41abe46e6acc785b9ddc6

SHA256
755c59abf9d6b302a1771eb346bc0f011f8a9caf030f28e717a0983885756544

SHA512
92e578e68ad10b9e472b44e130dba7ee2626044863c63ea5dcff79af22c65ae1d03d492ee3fde277e5208ca26eb17e2315c65e8e50325d0f9f3a28bf12578714

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
21a8de7806a63c351b2138dc20578f0b

SHA1
9e91b0a82c97e1c9fbc2966cb2ddb0435f0af11f

SHA256
3b6f2d9538cbea953f60788e8797656c912b45595ca7375c9bf94e1fb7420cdf

SHA512
7d41a29f658ce16c56cd06aadfefbe6f996f71cb6d9b198ec627a56742c1e15034497e4bf29f708408231d7434a96222c4c7907071ebb45eaa83dea6102c2ffd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2f5ee305442985df74736dbc43055a8b

SHA1
2c2896996e25e84718209fba785cb9959925f46b

SHA256
23f9aa0202d8dbce06f7ddcf8c9fb136246b0b6647c9c94deffb36980a032763

SHA512
84a612aa8c00fb2ab398f6435880393be8d915d16cc7e654840776f9cb66185693bb8f71d8d705cad03c73b377c698705ee054b51c186c9674e6017b59dc6263

Download Submit