7f528a9f237752e6ea9381b0a558451e7cb72122fffc568cd59f201bb3a7ccaa

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 20:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c6c82da336472e1efd261b1d3cf98e58.html
Size

39KB
MD5

c6c82da336472e1efd261b1d3cf98e58
SHA1

9c553b3e87ef66d367e9c4eff764ce1ee044bb5e
SHA256

7f528a9f237752e6ea9381b0a558451e7cb72122fffc568cd59f201bb3a7ccaa
SHA512

a5877795051f2173bef4952e542302ad6e9e6d3ef76d87ae8b10ee370d1324961ab871d32af67c2fa89dbe5db7c1a5d50cace4014885bb3886b644f85c3c21ba
SSDEEP

768:vZGU402MC+CiCiCzCzCqCqCqCqCMCMCzCzCrCrCmBCmBCL5MuJw5:vZGU40hXxxIILLFFTTmm88nnkZw5

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4264	msedge.exe
4264	msedge.exe
556	msedge.exe
556	msedge.exe
3632	identity_helper.exe
3632	identity_helper.exe
2140	msedge.exe
2140	msedge.exe
2140	msedge.exe
2140	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe
556	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 556 wrote to memory of 1992	556	msedge.exe	84
PID 556 wrote to memory of 1992	556	msedge.exe	84
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 416	556	msedge.exe	85
PID 556 wrote to memory of 4264	556	msedge.exe	86
PID 556 wrote to memory of 4264	556	msedge.exe	86
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87
PID 556 wrote to memory of 4524	556	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c6c82da336472e1efd261b1d3cf98e58.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcc71546f8,0x7ffcc7154708,0x7ffcc7154718
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6564 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6564 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,273781358228305603,5861881011750102304,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3052 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4d6e17218d9a99976d1a14c6f6944c96

SHA1
9e54a19d6c61d99ac8759c5f07b2f0d5faab447f

SHA256
32e343d2794af8bc6f2f7c905b5df11d53db4ad8922b92ad5e7cc9c856509d93

SHA512
3fa166b3e2d1236298d8dda7071a6fcf2bde283f181b8b0a07c0bb8ba756d6f55fa8a847ca5286d4dbabc6dace67e842a118866320ac01bd5f93cccd3a032e47

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\0b06f5c2-b409-4ffb-894b-3b557a3ace16.tmp

Filesize
2KB

MD5
2cb75e3e0acccadced6e2294a5bbf0c6

SHA1
bf9d504b88407a72a05e92a22e9298fe72edb1b8

SHA256
867faedd1c5277e9604d357852fa69ee832d6601c52f5fa541f0ef6a6c7aa7ef

SHA512
6d627475909f949997ba89fd7134249f260a1331f98c44de897563c7fb4b8b98ec08c3cd8119c7dae228a08f9b046a5cb15a51d7e2571069d174b6bcdbd399c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
a0d6a988a4b0315fe53694a9733aae43

SHA1
2efe16b46733ec165eae40851924083eb61b3c31

SHA256
6b6fcadd266a35420e697b6693279e8462c48b0e14fdc6b1428a068dec0e3612

SHA512
3c19c1bcab604baabc56135a22bb7405d292691cd095281f5fa902ad9ed7d9539959b3a5249fdc79a0b8cf8678b34d9254b59c796c9f0880c8beb0983ab618cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
4c9c3d2b7390829263658290d750cc1e

SHA1
e09ba2e7dfbff87561d3222f70173f1dd8ceb1f3

SHA256
e7c7dafa1389442e10240ce130324e3d6ed96a8365ecc9263ffec8cbaa18e3b9

SHA512
69d40f15940903f062e57ade7e64f060483be77294214cbb92b3684650b2ac1be0179e1c14df0f6725969b0285e5fb0267cf8de34ed0d98bdd017f691ec335d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e963e4de4683a241a0935e5e5c328a26

SHA1
038d7dfdc3b10995c848dbcf2f78da0404efa340

SHA256
89c9617fd130e9b458f120f62af635170139f67df807c969e445ae70a717be80

SHA512
0aa42a3efeb087985af1604050d11ee0911ade286380eb505c2ae199f13d5114f22c40d6cc9b8c875002246310c851bdd09764dd8eecf09f3e5d211d183c369e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4e2146ba7182873a9eb4cae6d4bf336a

SHA1
bc907f014a2d39762bcad0dcab4b845158ca0e34

SHA256
8de3222c6e92e7f0208e5c5b2156f2689de1e644511c39f2018f18c4a268f593

SHA512
0a2a44b38a534dd171342760177eb2020a05e8047f25ad6e882bbdf517ffe1f28b3dffac18f2590877f667d5ba87a04437cfcb40a7f71d24cc7bfafa4c7dc07e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fc4c84ed95dd1116ae6bbb3fcae0b785

SHA1
104361095ca3f526be0b3528bdc399186716a3a4

SHA256
8097a359105c4f38b8f1b8923b2205822f9e8bdb2d8476c0ed98b04f24593935

SHA512
5da52113666c6eac705a4b945f09cb2e54c7510d2149e463f29b84281d2a4848c1ad689c6b7eff943e6e5a38db495f42d4adf397541f5c9819f059877c37aceb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
c2ef1d773c3f6f230cedf469f7e34059

SHA1
e410764405adcfead3338c8d0b29371fd1a3f292

SHA256
185450d538a894e4dcf55b428f506f3d7baa86664fbbc67afd6c255b65178521

SHA512
2ef93803da4d630916bed75d678382fd1c72bff1700a1a72e2612431c6d5e11410ced4eaf522b388028aeadb08e8a77513e16594e6ab081f6d6203e4caa7d549

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
67d2fa0910a2b31b3321739465ae63b6

SHA1
3da8653875e3ee224857f53b095960dd94aaf605

SHA256
42f54c90ca57ce266dbf7aabc9a96a12bb5b9709d042c29ee1b8d503e4311283

SHA512
e71a76e92e2d3cc60cca3db0e4ad10625032862eb9b44915b9e505968d8eddbf948ea71c4a2bf4de7c0b82ee3e4b092503d39753c14f974d9b698cf7b6ff1f38

Download Submit