82eef3b4ebdf5b81013568751ce8ba3d99784f2a672b3b904257bbcff7350b01

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28/02/2024, 01:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

aab0f28cf8af7d61161e0c4fe0e30444.html
Size

895B
MD5

aab0f28cf8af7d61161e0c4fe0e30444
SHA1

8fb4d5b1244444cc89811c51af258dfec2ac1306
SHA256

82eef3b4ebdf5b81013568751ce8ba3d99784f2a672b3b904257bbcff7350b01
SHA512

ff2ab5c3b53a98253a4086dd983fc9c1e15bc32688ec628c7acd0f22837ccc162305d30889711fbf5c606b2e627b1a725afd93b7bcc603e54f7149723a5b9f32

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
388	msedge.exe
388	msedge.exe
2208	msedge.exe
2208	msedge.exe
5024	identity_helper.exe
5024	identity_helper.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe
2256	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 688	2208	msedge.exe	41
PID 2208 wrote to memory of 688	2208	msedge.exe	41
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 752	2208	msedge.exe	90
PID 2208 wrote to memory of 388	2208	msedge.exe	89
PID 2208 wrote to memory of 388	2208	msedge.exe	89
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91
PID 2208 wrote to memory of 2968	2208	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\aab0f28cf8af7d61161e0c4fe0e30444.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7fff62f846f8,0x7fff62f84708,0x7fff62f84718
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2208 /prefetch:1
  2⤵
  PID:2696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3952 /prefetch:1
  2⤵
  PID:1020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4204 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,13860722870791002233,14700741759718386244,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1256 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2256

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3096

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4520

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9ffb5f81e8eccd0963c46cbfea1abc20

SHA1
a02a610afd3543de215565bc488a4343bb5c1a59

SHA256
3a654b499247e59e34040f3b192a0069e8f3904e2398cbed90e86d981378e8bc

SHA512
2d21e18ef3f800e6e43b8cf03639d04510433c04215923f5a96432a8aa361fdda282cd444210150d9dbf8f028825d5bc8a451fd53bd3e0c9528eeb80d6e86597

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e1b45169ebca0dceadb0f45697799d62

SHA1
803604277318898e6f5c6fb92270ca83b5609cd5

SHA256
4c0224fb7cc26ccf74f5be586f18401db57cce935c767a446659b828a7b5ee60

SHA512
357965b8d5cfaf773dbd9b371d7e308d1c86a6c428e542adbfe6bac34a7d2061d0a2f59e84e5b42768930e9b109e9e9f2a87e95cf26b3a69cbff05654ee42b4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
d1f7490ccf17788f8f437cef3c82b0c8

SHA1
f629c0f8795d5efb7e51951301a702c8eab8f457

SHA256
78cff0ad8c76498da5d660fbba848390f9f16bf2d7ed753db693745271bef48f

SHA512
ffc668c5922b3fe490a0db8175733300c84ac41ad388765db11e0f1b7406fff3faac1f05ab118e96b0272d84298aa9db80792afde83bbf0017e1420bc14c4ab6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
986B

MD5
a07f8d65a27d0c5d0040233f79cd6143

SHA1
ff981103ed826f29c7d35cddeca699101690776b

SHA256
137aa11aec35c95bab26c5136b97ff9312c9fc0ed211e089d23cec1b95e2b34e

SHA512
2b09f0d395b99d6d977a0ddd4db146a962ea4c4dd96e67b0a2b87110847f026454aa5f1c5046d8d6fe843c736c4392e03b7a546c8dd9f650b86627892d36b63e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
dcd9b5c8b804a9a6c4518c545cf0cbd5

SHA1
c31958fbbfb48f1002061bfd71acb0d5989966c8

SHA256
4f526ca70bf44b5b295c160b236c462b06252ea07a07c0f2b9444f85a1d618c7

SHA512
d01188d60f8cb57254c12b0c60bb5f5c6b8dc9694c7672c4b5e2154003eaaf7d037ad45546a66cb5ac61de87d19f87eb5f5542cea85ad1bc3a02402e7d9e28de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
d489b7499be7c08cc9e8d23c036b72b0

SHA1
11e9157ee516d68c75566e2e488e85c026c720f3

SHA256
6595f1e00b84011d4ed9e24176411afad263e62583f99f1a10d790f58422a9d2

SHA512
28d834f4503ad46e95df1da328238b183c546bf62af8fae01fc11702299d6a5808bfc826de321a3f685e433ca130f79db2c830ac0d636a61f99b2e9923ba5af0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
b42148819a1c1e630c2d47817967c8fe

SHA1
193cf20dfcd6375bd3c00425de7f827db1acacb1

SHA256
2147be75fbab560b5633ccfb5e0b67b11eccfb28fdd7e61e2436ff03dad583be

SHA512
474f7d1292b20ab525517097ed5975d2b2380e40e93066913a2043713b2f48c66a9bf997689ff02e1be18caf2f712ae44ac29ac1aa5bf928d8ec02da75160427

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57a3b2.TMP

Filesize
48B

MD5
587ef9feaad8a64a5a8c335934e969ca

SHA1
04ae38fd32bef19b7eec320d081265fe322bdf77

SHA256
6bb19b2a8a3896cac160e86375dd5f8ddba2a75825bfa207e968937824494464

SHA512
d51bd0242479ece2086a4526193cc3d6876d9adc374e8eabd49f8a39dac0081b53d8d824490a1c93d62bf54cf93c7a99e15e5fa7f297dcee06bd8179f81631ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e461df5d919842a6f388264fb55f9d5f

SHA1
9a66282fb02f4054079dd70c5dca3bbfa46f7f7e

SHA256
44069e729df270506fbfa05533ad8423532516a1364d1b75fdfeec7301777c80

SHA512
2d5f5dbd6a4202e7313792a97cb6c64629bdb3ef414f1c38913faac4a4ca80dd5fc8c94be7b00085bc6b2d99c47a823542d423ecd7539c3ef175d77a503910df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
47223cbaaf9d2377e26439615584f5df

SHA1
d80b8c16f69520b2927c5afa81a0f791bf4f9ef1

SHA256
ce64776c75963258481cf27950e4eb189592a509ea2a9867bc675f2cef04b116

SHA512
016c7930ff07d0d74f83a955775d09f21e6005e76b4b8a7b57e61580f16be65ded3736d4a0279040e4bfc71803784273a57130b48a9ed12d70af44949bad4b15

Download Submit