12946f5105a635cb82c55725d83da71e92aa6a09e6382d37a8878cd15eb313f8

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11-03-2024 01:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bf7ed579dcb2d09994191c5c0664cd73.html
Size

432B
MD5

bf7ed579dcb2d09994191c5c0664cd73
SHA1

de719a7f17ddf9c63cca55ffe037ce40a592bc54
SHA256

12946f5105a635cb82c55725d83da71e92aa6a09e6382d37a8878cd15eb313f8
SHA512

b7809202fd9f7cac29b0088e3d5c64702f9d8286d40a2267e45f44afe91f6537b979b2df2af802bf1fedb94f1885fbb8844eb8e2508f40d80eb936ea4279803d

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1360	msedge.exe
1360	msedge.exe
4460	msedge.exe
4460	msedge.exe
2608	identity_helper.exe
2608	identity_helper.exe
5180	msedge.exe
5180	msedge.exe
5180	msedge.exe
5180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe
4460	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4460 wrote to memory of 1624	4460	msedge.exe	88
PID 4460 wrote to memory of 1624	4460	msedge.exe	88
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 4132	4460	msedge.exe	89
PID 4460 wrote to memory of 1360	4460	msedge.exe	90
PID 4460 wrote to memory of 1360	4460	msedge.exe	90
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91
PID 4460 wrote to memory of 5028	4460	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bf7ed579dcb2d09994191c5c0664cd73.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffef5df46f8,0x7ffef5df4708,0x7ffef5df4718
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1448 /prefetch:2
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2472 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3900 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5456 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3592 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:2076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:5648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6888 /prefetch:1
  2⤵
  PID:5656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6956 /prefetch:1
  2⤵
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1876,10883663368672628457,9863028595946712797,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4516

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7740a919423ddc469647f8fdd981324d

SHA1
c1bc3f834507e4940a0b7594e34c4b83bbea7cda

SHA256
bdd4adaa418d40558ab033ac0005fd6c2312d5f1f7fdf8b0e186fe1d65d78221

SHA512
7ad98d5d089808d9a707d577e76e809a223d3007778a672734d0a607c2c3ac5f93bc72adb6e6c7f878a577d3a1e69a16d0cd871eb6f58b8d88e2ea25f77d87b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9f44d6f922f830d04d7463189045a5a3

SHA1
2e9ae7188ab8f88078e83ba7f42a11a2c421cb1c

SHA256
0ae5cf8b49bc34fafe9f86734c8121b631bad52a1424c1dd2caa05781032334a

SHA512
7c1825eaefcc7b97bae31eeff031899300b175222de14000283e296e9b44680c8b3885a4ed5d78fd8dfee93333cd7289347b95a62bf11f751c4ca47772cf987d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
2b05d7166610d9379aa54b23f3ab066e

SHA1
e733b84976b20e41a81258d82b04cfde8927677f

SHA256
f334c622b6a27fb7f98bdf015dcb55d5a3921d5f90fcf4f3301c57eb3e464ccd

SHA512
ebbbd82fbf5ece54e70419b08b7634e204b3aa3084331341a98294bea029dbcd2c7b79684a1f82a951323c47e1ba28eb9cf91c23a0cebf728a46b997879de44b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c204181dfa326c371cc4e149a5b5f142

SHA1
cafca9ad9d8fe47b20583c2bf028e2db4da56a22

SHA256
8aef0399f0ad648ac1fe63c34638b590ea07fb9e1f888ec34964337b9c95bdb8

SHA512
75c2fbbf3737e56a63a68b7c42095daf38872e1c47ba5a983bec7b67a3db30dba8cf74215a292d89afd7b33b6a43b8fabdf1e1c5ccecc0b1da73c262ef7c2e50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
46f193dd2459768b8f10ab6bd1901d13

SHA1
2d22c07650d3100bc53e1f898aebb81d176cc794

SHA256
4e55d6099abafeeec573e2d8f8057946cbb0aa32caa0daea07879584df70d252

SHA512
b8a93f94f2f702adcfab8818ceecd9e045625f533269cda01d7e253094e2cea9fd4690be7a00c9ac13512dcfaaa3f7895e70acbf038a3c6e6ebcf78bff28c52a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f482844663ea49dd6d411a30dc6902e9

SHA1
af63ea1e9260683b76de0a515e84d991509454b0

SHA256
c518445e9808f1aebdb0da75ad18fe2b208eed00bfd0916a9e97b865c7579841

SHA512
9425d0ea5c40d4cde3706577f0a047f1d75c44ca27cda4ea18de6e39754f8f2cfdd0955b6a13b99f801841aa5d7953af81dbc186e336f6c6709d5e97e5ca2914

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
e487c8bc57a832c34ac769e7bdbc4796

SHA1
ce5ade034c108fe89b59f55d50f82c5d19a88ef8

SHA256
c184e67cfc3d40efe0b553bf19a35edde035b583e0314a6d195b86b2d1c1789e

SHA512
5fc8a3dcc0a796dc95b9453763e7d13547af6aa3bc9afc899787a6f624c54c3fa77bca03d49ee0cfe15f5150c0e52de49964639bb108b76c0bccd21e5eaa1979

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
d2b15591c23882fcd44a26614587dc38

SHA1
08195fef184e4ec4a776a76774da61f9f858811d

SHA256
1f6ffa0cd1dada919e5398a97596565d32f1e21ce289a8da8abef848cd130eb5

SHA512
6aeb7cbc2788b9c2cb1a7d80fabd49aafbc7b2b3ebcdd6877c13271b6be5ee882d4a00df764233b00537f52889977031ff4a65d9f7246f7c6c1416f6ffcc863f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5799bf.TMP

Filesize
48B

MD5
9a3b1ca61487e91f41a35641de65475b

SHA1
40fa20d89ea57bed9ec40c9fd7b7ab42b0682ae3

SHA256
39d1435bf7060a1ef1cbd4f2721523d48e4c257a4f205747bcc49547174f9925

SHA512
35881f8906836dfd35549cd52ffccb48ac6b64a62692bfcf89417ce9d0b07669f8db3f03226c5870c45dc6b365dc022cd0aaa60318dac479916708bb1bdd97e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
247db448180030bb46fe59c5d55b47d0

SHA1
6be755cacb84b357e52e92af6d597aa086e3a740

SHA256
716c570dfd1b3cb2583236ae4736a5a1edde3c2da5bf73ff76cb7d8395a92494

SHA512
c75bc7a7ffbe492727bdd553e388585071f7c838a374adb657f188a08c7338264f1f3090998f594680487c0bc52be8cd599f3e3c73ea848d07cf498a82e08b73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe579e53.TMP

Filesize
203B

MD5
46bc4a90681472148962860b249489e5

SHA1
75c0807328ecc92eeec2e3948de14b5e8dbeb156

SHA256
e618bb4d84fee36b4a1c2b1db8d3757da7d4f2071306b69c9c9cff51317b9814

SHA512
df22ac83d910fea93934de3acbd444f0711758368887238caab011c9f4c6851fb589c3ad6fa5d69cd0d54ca203ad3c4186ce0070041a6db6806d53888b38b149

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2740c120cb05b7489d3306541bf4a85f

SHA1
ae9de037bcdad677c6afd9c0cf7a2b58869e4ac2

SHA256
6404f3afb6b48c5d2f0a04f64cfc04af0a6b16d35bb609487581636f4440162a

SHA512
47e495dd5b8adf7d665d90d2b40326c697031a1c562ae3f40e46e4e365b30d62e91f838ebdce4108a24d859241d023947149b858ef1e74f452c1985312ad506f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
8ee00e6c42899d98b7c51961014e72cb

SHA1
dd5ebf781f1de3f61b3bb6cdc301d35509acd953

SHA256
85f3c700a090dce5d5d64ce83059249c0f203f4d16720bdb57fb5df33e84d171

SHA512
b41530c4ae0899cd92ca424813a86e7e2207443c37a736aa3de631dc49045a323566aedb6ea89ef452557a26ad8f26e2edc2dfc7f45b7b5777812ab831167fe7

Download Submit