cd49622ee35a9d68bdf60a4a814f6aa35839153cf6ae1399724c33089b085291

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
12/03/2024, 12:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c36390c455e2d5666d6852b0dad9652e.html
Size

122KB
MD5

c36390c455e2d5666d6852b0dad9652e
SHA1

36d42bd0c86cf4ce58fc4700be8453cea0b8300a
SHA256

cd49622ee35a9d68bdf60a4a814f6aa35839153cf6ae1399724c33089b085291
SHA512

ad3f7570c2a1415819a60ec99da1050e0ff82d1a14bff788d91b4ba51a90c327f5ca377fbf496196e949289bb4fb49212aa42ad557e1719ff02b2efdfa4bc118
SSDEEP

3072:ljY2sYJ6rHfgaToXdYKlGRwWYsDm9TDBFtQl7ZByHz7xb5CZto7bTVNt:l4oaTo4UHd

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
4936	msedge.exe
4936	msedge.exe
5280	identity_helper.exe
5280	identity_helper.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe
5776	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 532	4936	msedge.exe	89
PID 4936 wrote to memory of 532	4936	msedge.exe	89
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2992	4936	msedge.exe	90
PID 4936 wrote to memory of 2464	4936	msedge.exe	91
PID 4936 wrote to memory of 2464	4936	msedge.exe	91
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92
PID 4936 wrote to memory of 4128	4936	msedge.exe	92

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c36390c455e2d5666d6852b0dad9652e.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb073646f8,0x7ffb07364708,0x7ffb07364718
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:1496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:1412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1744 /prefetch:1
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1732 /prefetch:1
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2808 /prefetch:1
  2⤵
  PID:6092
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6416 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1852 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4788 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:5856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11623170068212145251,6930669968092491283,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:6056

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1448

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
cbec32729772aa6c576e97df4fef48f5

SHA1
6ec173d5313f27ba1e46ad66c7bbe7c0a9767dba

SHA256
d34331aa91a21e127bbe68f55c4c1898c429d9d43545c3253d317ffb105aa24e

SHA512
425b3638fed70da3bc16bba8b9878de528aca98669203f39473b931f487a614d3f66073b8c3d9bc2211e152b4bbdeceb2777001467954eec491f862912f3c7a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
279e783b0129b64a8529800a88fbf1ee

SHA1
204c62ec8cef8467e5729cad52adae293178744f

SHA256
3619c3b82a8cbdce37bfd88b66d4fdfcd728a1112b05eb26998bea527d187932

SHA512
32730d9124dd28c196bd4abcfd6a283a04553f3f6b050c057264bc883783d30d6602781137762e66e1f90847724d0e994bddf6e729de11a809f263f139023d3b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b

Filesize
22KB

MD5
14734a8bb0bbf70e4c2baa3d73adc7ec

SHA1
b3a16d617c95fd8da1af3215867abdd80a23a708

SHA256
56ad32c2be9235dfe4a5653351f1121c4373fb48147d91bbb9397b65d5bf0bb5

SHA512
aaed10d4b91749bda93e69b4188c93d4fc89cc9e05b4ea5bdd8363cea53a3d1904f0080f23826edf35f18fe4bdd51a86c04a5a43b7e5f5aaf1568ed17e3a0d78

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
256790e2a6994b0e8a9e0607ffb593a2

SHA1
c865500ccf5e84848280fb1a44d8651035838638

SHA256
c5e3fd26a95f154347f0e27e3583f90833df78493c1c47f2281aab7bba19d207

SHA512
3942f306f98f86a3132d9cfc9a122bfd120369f57c41793e97696afe27a4b11c60d6a8f36b0e7a78c9d2e72162826be94288d4ec307a9ed3ef485a6a60ab8960

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
5de0fc201539e663fe94ffa55aa1536a

SHA1
6bd6bef3bbc387187a54f475b58356dbdb189a36

SHA256
98d245fcae2400bb5def9484b946ce7bc20dba3520984b3febc8df0c313ae20b

SHA512
d8359a0a9cd18bd29ac781970173404337c74bb92049fa018d30fc2e9755a6ed95c6d69696fac1c12af80cecdf93582f6ff88d7693ce335fda2c3b23c65055c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
e974cd70766f58416a24373a61e6ded3

SHA1
f390500ef5714c16588589d70cd0c09100a2bd02

SHA256
abf3960334eda7f9943a735f8f7985f115313ea038f518602aba8ebf3daa5e6b

SHA512
e55ef7bf4eb74cf1a03c10fb489830b1fab96cd25bee6fd8b9af55f384dd04e78295b0a84ae4f9846d06e8e6357c41cd3c52a090b4ad554c7cbd909737da6fed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f61812c9515d580d53a3188248440cec

SHA1
7ddb48a2da7a5c9111b0302bec383547741bff4d

SHA256
954cf8514025d3537117a06b594a14f5ebe068e21e6d942dad2c280bf5ce65d3

SHA512
7b77980d46eaea6b11d9ac52af55b64907aa81c9c90e922190774ddacd53620ba256bc7fc6e0dd36613c9c744822f9b02f2e448333317c187a43e1dfa9d473e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4d1b465327072ccaf30cc6711b3881ef

SHA1
17864a46d7d684b5390ed9dad5c847952fcc5120

SHA256
d4f6816789f6581fbffe70de65f15f9a6b2a16beabfe723db96dffe27912b656

SHA512
d0ad96dbac049e48b1fd80b184dfb968ee973285bf474f9929da0f149962af10bc5b105389617263e280557ebe372b11843af6504cc77c09b0ad6d8139301dd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b24b0516b8f03fd8e45bfb4ad1d94521

SHA1
c1ca09c6ae28d3d164576107fc2fb9720a31c5ed

SHA256
7c5f1fad419e55d2ecc01e7442be3f59889fcb4ef63e5b7e791289b9725e4049

SHA512
16176a4deb2a61dc2edfbfeb7ac77d01bcb0937bebb5f8f2c03a16cdf82c218115747f9ce87e7b67676a9fd39e1deb98eef796277cf2efce26bd45450a50c778

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7a7cda23b683ac027caf1d02d7e91178

SHA1
1f8ded57d8349e895003c36f7fe5ca97547e3486

SHA256
a692a05b42c34e554e8eae9c9c2065140875637c18d75c23d1b0108a7ab416c4

SHA512
d2bf1d3454198518271693b6bd79c2cd2e399ea0d7d8de527dae6c9b0359589c6756d1b3ed81fd603d585b8c238db2c3d3e1decc6972470c4dc8b71701ccd57e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
08ead64b79e8521fc9c29f2db08f2ef0

SHA1
270795636d7e284d455df96af8e6c0b016129155

SHA256
a9be565c81f41fe94c41cfd732b1893981a972af2c73ffc64204f8211e4ce439

SHA512
fe3a7f6382031964f41bd115d73f570d6ff02ba159a37dfed2cfdcaeea394c75eb6e28aec0e70ae98a786e19b0287ee26f6ab97a31607fc40355a173590aa84a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
463c1d51193714ba4a5d9cfaa9507632

SHA1
d6830736ddf4740714f7b93091a8421baf95b1e0

SHA256
bff8d0eacaaf174f814200711d13b4985ed3021440863bb30397ceff31477049

SHA512
d2a3778bd438fa805d421c1abbdad32f5e0fc50a81d04e1b30eca13ca881cb60ab2e4826ce20756664e8a99b4821c7555c42ae2d3ff0b2a318655d5e13cbd841

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
9ce50af11a339cd2174b653eb3538c74

SHA1
ed3010fa316eaa28d55c163c40b6a4146d98b8ab

SHA256
e63998bbf1203ab240cf7e7756cef3cc5e78d00a35805eca92d2a0d241f4b8cf

SHA512
be71e70325580f7336fe17dad4723a83b398479f9c333568c012fbc9457e937a67fd2e317654a5a96a48ecb396e43938a354d10e67da8b808fef3f1a24c47cb5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
5e8ad3bfc9a9aecfe3ce704c120b33a8

SHA1
71d86f04831c97b98838057620129fc4adc5adfd

SHA256
58c9128838113e7626c001b5ee75398635fdbc3d95956dc08201c1b97e08210c

SHA512
4ce96b062f693eafc74c0b7fe53ac82070b541d957d4bf2beaf20e989264c4de72e191bb4d5afe9e290de9f102893d2d0710518055ca3ab39c48a02813cfa1b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
9de6bcfb6667a75db6c362e4aa6a36f3

SHA1
d42eb3f16ebceb65728326497afd28e0c7312c4f

SHA256
c36d0f998949ac01a06c9ac97c8d8643a5efefde28f7f0828047a0a0aac6475c

SHA512
26e3867cd571866d303ab525ef66bb52d6ef2401839611b40c35c1b1ff1d0da52c48add23c48e80fd0b8df36a45cfafd62c2a4d3f10e525b26e69b0ab8b84d0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b2b6.TMP

Filesize
370B

MD5
88362111471395a999b74a45c21ac1dc

SHA1
9ad1a4a816914d4294e268a958691dec6d1c0b39

SHA256
5a3a47e7d799abbcd20915ee7d5d8ec1703385fd842f3cdd3b9bb89b72afb4f2

SHA512
afd347a1e0bfb4a1d13bc96fb392b5b6f9063e10de7491014dff072c9afced81196aa6a742a79a585c700225388db091200ab1f6bdddac4eb82bc1ede5fafe9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
54c3b9ba947f73074b7e55e04887a22a

SHA1
32477a1838beb225be80a40132d06a333933b608

SHA256
ee7002585efdaed9b9413d7a2150c62183a1910942906aabdfa1cb06ae86c434

SHA512
ced50eacbf840177ea659bcd954716bc8cafccf9b0b6ec9eb8ebdc599f753e69080a58b178349726a3e039ec82c3e4097766b423b1776fcd9a342ef9a8ef3693

Download Submit