e7f073bc8a49de603a2fe4ce6850a2914756dc336b5ec8a1cf92ba2be93dc361

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2024, 02:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bd6428d150e93f798519d202963884dd.html
Size

432B
MD5

bd6428d150e93f798519d202963884dd
SHA1

c1300db10e1e69e2f1f137fe8819a45b6f1aab5d
SHA256

e7f073bc8a49de603a2fe4ce6850a2914756dc336b5ec8a1cf92ba2be93dc361
SHA512

304d926f77793bbcd97ace38018ac7768a44752b9780d700601861a1111435034c4c613d79c134b3541214a41c0972c8c18255996c09d48c8c0ed5a3fe87f203

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2312	msedge.exe
2312	msedge.exe
2216	msedge.exe
2216	msedge.exe
3356	identity_helper.exe
3356	identity_helper.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe
4068	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe
2216	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2216 wrote to memory of 2364	2216	msedge.exe	89
PID 2216 wrote to memory of 2364	2216	msedge.exe	89
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 4184	2216	msedge.exe	90
PID 2216 wrote to memory of 2312	2216	msedge.exe	91
PID 2216 wrote to memory of 2312	2216	msedge.exe	91
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92
PID 2216 wrote to memory of 492	2216	msedge.exe	92

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bd6428d150e93f798519d202963884dd.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa6f5e46f8,0x7ffa6f5e4708,0x7ffa6f5e4718
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3332 /prefetch:8
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3332 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,5230272849073580039,6154231109633199544,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4256

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9ffb5f81e8eccd0963c46cbfea1abc20

SHA1
a02a610afd3543de215565bc488a4343bb5c1a59

SHA256
3a654b499247e59e34040f3b192a0069e8f3904e2398cbed90e86d981378e8bc

SHA512
2d21e18ef3f800e6e43b8cf03639d04510433c04215923f5a96432a8aa361fdda282cd444210150d9dbf8f028825d5bc8a451fd53bd3e0c9528eeb80d6e86597

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e1b45169ebca0dceadb0f45697799d62

SHA1
803604277318898e6f5c6fb92270ca83b5609cd5

SHA256
4c0224fb7cc26ccf74f5be586f18401db57cce935c767a446659b828a7b5ee60

SHA512
357965b8d5cfaf773dbd9b371d7e308d1c86a6c428e542adbfe6bac34a7d2061d0a2f59e84e5b42768930e9b109e9e9f2a87e95cf26b3a69cbff05654ee42b4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
807278a59c6d3aa866ea2e42c515eb02

SHA1
608cd4e5cce41524de5df3ccb6b4f0dbd3ea8a5d

SHA256
dd6ca70ba1d4156e6225b002b832c9cb89157ad3b4f6e244d940d359a53aa66f

SHA512
bca8dddaa17190a8337384587d35904343a37b624ecae322dab6b87080148b174b9f5a10e6008e8da62ac88c8cd7fd8a3e85a28680add8e59aae25058520ddb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1667a17d668aa824879dca8e49743eef

SHA1
f032decd83185ef8c416630a6075fc4515938304

SHA256
86230dab22dcfb23d8e118919516787f7661fc282e5844f604cc0a89f10d9518

SHA512
6bf966f5dda78a936601abd5429d864a285c3f472e68c199828f274473142afce3fce372de5e0afb18acc64130322f1a91090ee87f6294990390407de103a393

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e95212a981a3395649c7e2873139e2b1

SHA1
80601f9c746a2bf21d7e99d7e7bf2edcffa1f48d

SHA256
025df15981df2325bf26b1fecd26a9406565f00fc41494758d812a90953410aa

SHA512
fed23073629ca3612db5073cf90a8439dd3d032922c2a147dd9cc4522173469b2446c4bb954d98f4f1a79f79936b01b7230e97c7ccdad766c07ac3d4c3202a36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
a0be777a5539854313c912af6f7ed0a3

SHA1
3eb60bb43f0182148d15f13649dde0d8decb1739

SHA256
f9f20859a0f6711a2b44601ec1001a2e80c626bc6b3705f9e1a4b040ab061511

SHA512
77b8c8075d452fd8cc9830b0cc532d83fc57dfee321857fef4461899622f3e0e95f4818a04061a3382b704161b5037ea5be291370cf084758e0be427aceaaab7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d69c2c432ef3576058cfb6c486e51285

SHA1
71886b8e47bff78c6ccca1f0ac505753b60fc859

SHA256
02e47e982e175c14c49269e74bb732ad778a600bddf1842775a90f843d596ad6

SHA512
96d5e65dc4417a69e9419c035165e02cac4d99d824aab474cbd545837ac7e86cb854b3eb2691c7997ef85930c8c3637719216afe889166573fa2209c5b527d36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
9089481c48cff87cffbf3bc262a0a0f5

SHA1
150881d84db0f48653f2209669ac73f13c674bb7

SHA256
5570e1ce09f65d050260b05f5c302fd386c370296db40083005a8a3920bd2c4b

SHA512
36bcd1004c176596f889ee28ed8f755db7d1d68ec36a4af97277feb74791a27a4cdeb58bbd45ae83a13e7abcbbf5581eb4ea1a7214960dd6ff7edf352b3a21b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
915228089f3a3d8950fdb9a2b86aca0f

SHA1
54aae5d4bf8571a7e3fb34e0efca194f51b9bdd2

SHA256
59aa17cec54aa6458d90d772258931c30467f6446e03200cc0cbe50d2155116f

SHA512
0eefc786cfe0e6b6b09d8a53c5433237e3ae2f1bd5dd95ed2423a5b1edc0e86ba84b318c75282dac237e04f9cfc82b4cfdcdf1d8ac096a5e8a9dc8c48fbce0ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b79772165b3169efe204a0a5565de931

SHA1
a20f7fff64907685ce8658cef2ad4894db194618

SHA256
f5d63554e85d3b644d88f114ee5b8a616b55b16dae8874f9cb4cacbcba8c6bbe

SHA512
38c566476ee06c41c552d73ffb106d790974fd4acbef3ea5b9ff04c484ab37484b2216bec13e058c0a5446c2a732ad6f2ffa8f2320e8b8eafd398cf7fd4c18c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
6a9f24c19be6e16e7635a340d576b9fe

SHA1
7528c1a1774a026dec0dfc4c049bdaa5c3d264c6

SHA256
159714ceca117bb587a73d316b6cd582684b7ffae4442f5dbb4ccdf75f811cb5

SHA512
a0e43006713b7590c5656bf76a615bead9a605cc7b49981f7db58533c3257359e26183a5c76e3a8874270cd892f176de242d4a9bd59516fc5aa26d8371c1d3a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57a364.TMP

Filesize
48B

MD5
6fb96b509a8bf44ebb0f6de2be33fffc

SHA1
043080f34f2854c27b8667621eb00ad6870bda81

SHA256
d0a2d6a8dd5a14335ce62d7a4a87a0125ad179a139573a5a11f95d1aedf9f9b4

SHA512
2b6ad517720ca5a2629879c5ef4bfb74b2a4fc47a75c9e476e3f5cb1138fc9ba63a3e41207ad3caee79ea389fca51a3f0408e4fdf06afd41860e6a0ef0c120bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
485019c9a87bed92b31887a0dde3ae52

SHA1
ed0854ed497f8144e298f957e491f205a3c6f0a3

SHA256
d3952faab7658a2bd2153c703c2bf5f1a4dec84b6265072d00d9149d2587205e

SHA512
74ec5d9f58ac4c45d29361136e94999c28666a67c25cdfc805f50b41c7714a620ef835b7d9dfc0aa6f5c3f0214ba19fbb9e03767173dc9d58264fca0d4c4d848

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
41c5c79b92d95d2a30855ede6c99c14a

SHA1
11361f80152ba08c1e1175c7a99537f111d90047

SHA256
91ce390328188382c3d9e8a34bc2e6290979ad78fbfdc7a709beadc18f2f5deb

SHA512
915e45de3788ff0ece5cdf8fbfa05d1b5a8652b437658602de7b178a1d96d732b0d46eecc50ad7f0e6d825144ca5fed86e9e702f0fc77e6c517dfc556c42e8d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
9c84f3868556b1c539359bca53837d53

SHA1
1a806c81f69e245702105ba9461e53c6b0fda5d0

SHA256
1418ef4aab2326e9d589202978b09488deb9bf65ea7d14a906d8b54c16ec413d

SHA512
132ecb490ded75179963d27b2c4ac50b692d63b86dc08c8f1e8c7803e907aaa42cd8b244ca3ce7acd6d2012b46ef52527d351a41a2f1ca35f120d386139f21ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
34b3a16a3452f64f8ccf33d3de34651a

SHA1
5853b2de9fefa8b7f55badafcd9202c92f976790

SHA256
eab7e522d8775f7babb0ea8e83a55b7d2b2e3ed55f906daf0a153aa95e48fe70

SHA512
be9286bf42a95ea44c74fad200cda6ac014e5dac4cd82960760e02e868140699d587d53feb81eebc6a1948de827c6c7c1825db73262af7b6eba89cb082160596

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57a160.TMP

Filesize
1KB

MD5
3533908a47df424fbe2fb2b0a594b83c

SHA1
68afa9133d01fa8854be92bbe27c7cb483f0de34

SHA256
ac7c59b15306c996ec0129523eb455424bfc426f15be20f99b3c0544171b7921

SHA512
78b37aadb04436a9954af750b8db18da5d2bdb70face4b6925fbed390a1f362c464e21d38087071e73504e95e94c4390397cac340a9b01026281045868e528ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f64ba3865d29bcb2dfe83aa2439e6b1e

SHA1
c841a5dfb9cba854daf9fa335ce9f1ebfdc906c5

SHA256
c2d16b72838606a9905e51012b29d5647e028d43cb400cbf236d1a258da28aee

SHA512
5295cac353c1d571c6c822513a435c43a7b888da8837529c263bcb9539404744b7392c2fa838b541d66e596538c915766c0b8509c150cfe38b221288dcb6410e

Download Submit