db84acd189f873bce8ef9319b524ba394e787f530693d7cb7777fe99f1828edb

Analysis

max time kernel
154s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/03/2024, 22:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bcf40d4039951ae0759b0d5a557ddc6a.html
Size

432B
MD5

bcf40d4039951ae0759b0d5a557ddc6a
SHA1

3e6082a6919c3b79c82c6b715fe51f3c95e31035
SHA256

db84acd189f873bce8ef9319b524ba394e787f530693d7cb7777fe99f1828edb
SHA512

8bca5e7fe069ccb5ca438bd39f4a1f55faea1f9262ee59264f6fa567ae898b9bfec75897dc6a264198e1e4d6d43bd8f6bc26b72678591b8689e124173c580e5b

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3820	msedge.exe
3820	msedge.exe
1852	msedge.exe
1852	msedge.exe
1612	identity_helper.exe
1612	identity_helper.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe
3680	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1852 wrote to memory of 220	1852	msedge.exe	90
PID 1852 wrote to memory of 220	1852	msedge.exe	90
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3384	1852	msedge.exe	91
PID 1852 wrote to memory of 3820	1852	msedge.exe	92
PID 1852 wrote to memory of 3820	1852	msedge.exe	92
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93
PID 1852 wrote to memory of 1372	1852	msedge.exe	93

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bcf40d4039951ae0759b0d5a557ddc6a.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc319646f8,0x7ffc31964708,0x7ffc31964718
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4564 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3484 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4888 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,17840704908113580793,10718838730644970165,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4652 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3680

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4864

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3164

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e494d16e4b331d7fc483b3ae3b2e0973

SHA1
d13ca61b6404902b716f7b02f0070dec7f36edbf

SHA256
a43f82254638f7e05d1fea29e83545642f163a7a852f567fb2e94f0634347165

SHA512
016b0ed886b33d010c84ca080d74fa343da110db696655c94b71a4cb8eb8284748dd83e06d0891a6e1e859832b0f1d07748b11d4d1a4576bbe1bee359e218737

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0764f5481d3c05f5d391a36463484b49

SHA1
2c96194f04e768ac9d7134bc242808e4d8aeb149

SHA256
cc773d1928f4a87e10944d153c23a7b20222b6795c9a0a09b81a94c1bd026ac3

SHA512
a39e4cb7064fdd7393ffe7bb3a5e672b1bdc14d878cac1c5c9ceb97787454c5a4e7f9ae0020c6d524920caf7eadc9d49e10bee8799d73ee4e8febe7e51e22224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
64db9c3daa85eae87e7a0d631ec3b87f

SHA1
a34cb6aa60f246fd7b9a6382d38d39faec07a701

SHA256
e2382b668479e8fddb503cc9010907377478012de97c2740e8b5fd28b5fbe09f

SHA512
30f81c9dd638e98af945dd3af2eb4066f0155d7bf2ad5504fee3f0873a5c6ad0bbd405816086681f2cc1ffd13a4fe6e765905a29504258ce050e519386ae530b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_worldfreshjournal.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
726B

MD5
4c28d8bc0e1e77cc7dfe03670585c8cf

SHA1
a8e69fa932070ab389123855dc546e8451bc1fea

SHA256
2cf54376e034fe9858e70b27e21ab4db97ae6e4dc692f3c89e9fbca05f356841

SHA512
ce2209d33a3dc6899acc5e7214aaa8dd5f3a1979e938934027c58979b4fa3778a3cb5ae5d75dba338a7b6151db6823c01b7de2b061fedcf1f2fa62ede24221a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c261e49735c3579212d7172cf671999e

SHA1
428ca9642a1f278b3c71fed27bd35c8c76952315

SHA256
f85ed16c92a62a5c91154113e425fb52870a3c7d26f142be7e8b8c260ef97a9c

SHA512
50a6805f3f84d0dc5f185ee43c45b0b7912b6e4fac9db356fa9188b360d9e93d8ae098c3765d004077bb0308b3b1742290dd81f4b436062b03efc105d60ea840

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
afe908b65108c6d4c37b91fbaa655198

SHA1
c262be6b4541f9805a78fee245975a45c1b531bc

SHA256
5035ecfea5cf39b0b8743df82d66a8d107f71bac4a47336b62601fbd67c3a3c3

SHA512
2ef4a1a12eaa2c49aac8500caf1970027cbe0b29761b9cf7b48a5df064a23bf8980e2db4334fbf88ffe84955dd31e9dfdc66f20d0017443bc54560cbd893b514

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e7457e76beed775d53a765f2ecbf0564

SHA1
f2a705d9a9bc510c3bb6ccd5ff1d816c3c20b341

SHA256
e4b3c3b3297bde5d4abf3ee17a2b19283d1ede7c6c15a048e8950213b599dfa8

SHA512
249bdea06e35ea73ee67ce2266649818ebb7c081b8d0dd751694c6d2fcadd81440d02e29de2f187f1e6009e7891bcba494619501aea1a096a3b8eed6fa779c7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
a50e5d68ff8be340e37f726e86096b12

SHA1
2ee064c9bbc56a831667ec8266dcd5e02f7d18e4

SHA256
8f3384e84d298dd2f3970eb0b4a7aaaa564bb4fecc394ccd98413c355e3a2fcc

SHA512
8c80eda763df9a6184c9b186c90f857ad21eba31a8dc79946caa279daef7b4953ba5631c0249e97bb13d025a8d585ed98175a7854c210b1593140afa08cbb3ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57f08a.TMP

Filesize
48B

MD5
3ae95d01142693dd6a1154e4cc7f4e1c

SHA1
41ce73ce3cb519b3279a8ae15bcdfe348cc1092b

SHA256
367e115584db100a321e49257b44f74a1dfd0f884a1319ba0c0e45d8cf819778

SHA512
283f2a092fb98a9f675ea385ccd1011e873d413c4faed1d456700f362ae4607e8a8d40a1d162f10c0c9f743cca160e43fbd75b43b2eee7b64e4763de42117ccd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
32c4ac9d4aa91a59fc9685947c92b1ce

SHA1
52c62b40fee092af15247995a0d2288560698d84

SHA256
df4b4d058fe3f832d596e72716f56c26c29de800acaf581d7a69d731ea3f73a5

SHA512
b7d037bf560b628eb01fb03ae72f50679b7b2b5644fd488c451dd34e12d32633b2a1411c31c5944f1078dc5c8fcde308b63c0f0d0f7d7e805d3399d7ba2c1425

Download Submit