06f0e37650da3a76f0aa0d43340559c4f9606d4fea13d1bb1af8a55c0dd3b39f

Analysis

max time kernel
150s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 20:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cc5cd52d594c1fd594b1018bb84a738e.html
Size

146KB
MD5

cc5cd52d594c1fd594b1018bb84a738e
SHA1

48f3a969da61fb2f752b17410e2eeaa3a74f2c96
SHA256

06f0e37650da3a76f0aa0d43340559c4f9606d4fea13d1bb1af8a55c0dd3b39f
SHA512

6268a0431b2036707a516bbdd11cd3dc7dcb9d17694b57ea75fa2dd65ff8f14658cf6cf2313ef76f231c5762a71aaa34a44a64ff523721a494f27de95a700d9a
SSDEEP

3072:nGkci81BpjI+z9S36COdHMikcihWz+IrgIw4X5uCQ+TJ3VShVoy:nGkci81BpjI+I36COdHMikciVtJ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
2152	msedge.exe
2152	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe
4456	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2152 wrote to memory of 4580	2152	msedge.exe	87
PID 2152 wrote to memory of 4580	2152	msedge.exe	87
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 4748	2152	msedge.exe	88
PID 2152 wrote to memory of 1576	2152	msedge.exe	89
PID 2152 wrote to memory of 1576	2152	msedge.exe	89
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90
PID 2152 wrote to memory of 2732	2152	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cc5cd52d594c1fd594b1018bb84a738e.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffde41e46f8,0x7ffde41e4708,0x7ffde41e4718
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,1689927907428644986,17603420566694748646,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5404 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4944

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
73c8d54f775a1b870efd00cb75baf547

SHA1
33024c5b7573c9079a3b2beba9d85e3ba35e6b0e

SHA256
1ce86be0476a2a9e409fcb817126285bc4ad83efd03ee06a2f86910fe18d4d94

SHA512
191344f5830cfea68499bd49073ffa7215a42265a9629d203d07849b2417c0ffdbdbf288bf2c669e91009a0d7e8bd6a6b378c92fc283049141231ca7bf4da3b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4b206e54d55dcb61072236144d1f90f8

SHA1
c2600831112447369e5b557e249f86611b05287d

SHA256
87bf9a4c3564eb3d8bef70450da843ae6003271222734c4d28d9961c52782e0b

SHA512
c9e8d2452368873e0622b002a0c2f8a2714b5897a09475738a9f9740122d716a9f0d3841725230d58e039564c820d32a6f3a675a7bb04bd163bab53dcb4e22f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
17KB

MD5
0b6016baa31ab2db5a1a08dc820660df

SHA1
c150c58c0be3ae53afa14d9a6889278a61ff1839

SHA256
835abee518d74571c6306e21ad8950267e0a185a6a72e34fbba8ec050557d3fb

SHA512
b53503020f2f83dc1f89a15240c4522a19e2ea4a0ee2d912f5aeae1e70cff0296f73c81fb47031845c2eeee44c9abd65a42224e1e3e47051806e73defdbd0044

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
780KB

MD5
a9640c7c0e59132fcf56c0aab7d9fba4

SHA1
923cf473da15f10287b1fd9ee8b51091ae747db7

SHA256
acaf98c53ebe793e1db1873bb25251bbc600022a8e98ad25944861debb071b4f

SHA512
5df8b5cb652c0a080648db80a9095c85ba1ab7f4d27675f1adbe0e521c779a73ac44b94667a95d9618499460dedc8b6827eb03960a8abde323873f9397e8113a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\9ba240e98e2c65e2_0

Filesize
231B

MD5
e7fbb2b9148021a4ccff82c0201153c0

SHA1
21a560c66a1679bcd75caa219c913f0a22eec0ad

SHA256
ea1561f0064873be96f1acf31f2c0bd59130efc0c1fbf36c3ddcf659b1e31204

SHA512
0abb25bd887d82a1b27bae84357645e0055a9caa2320b35f2f4cbd5b2aa9cc1e769105fcb3f404e465b2a6fdaa75644d75bec248ec88acc110ed9268ae29a1f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
b91521477d635560ecd2e0e46ab785a4

SHA1
5f9fab06ea86b004b28a4b3c1be35fb412a7f3d2

SHA256
53e164c3fab56b760d0271becf2fb3317cc593722c2b36471766c790a9d14f71

SHA512
c6137197c46fb9059c2583fe49acb9e5fee7147ff4589e68e037eea03e602620bd7e224674e79d481a56b5ab10bfeca8eafd41b631e0026fbd883da0f206354d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
564057020f71b87cc3f3ad00b2532f24

SHA1
790e4d0d02940030516ad4831a1275aabc866798

SHA256
bac5d9bef158a40a5cb431c26892a24fa9218d59c81a1fa7e1e0461f1f32dd62

SHA512
4657bd88cddee958ab5c5e4e278cd267b6e298c7d44da7081d16bc189a27c593718de48aeb1fb7a9f8feed905dcf65bf29c519279d193d44fcbc95b251310659

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
d23a964eaea89e4b729453751d1fd6ce

SHA1
66acf9832dc063f07e61eefc74127ff28522f8d9

SHA256
1e1ba0a361299fb65f5646e21fb88ed3746fe55819f51cf7cd37c8ae7c173263

SHA512
c3c10ccab2ddd9084f9bb9f15dd5f1c2346ecd4d2c5c70e51ee41be391a2d541517ab95cf923fff67c2d1dcfe73290e0aef7fcb847470eacdfdf2115d65a36b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7ceaa5d4afa9fe7106f44aa0965cd0ba

SHA1
77c8bbc1db98f23277fca58b0cdc0da0a1e85c61

SHA256
9c569ddf446a9f8342f17175b5fd18f302d5836bada6f554cdfdedcda6dd072c

SHA512
2536ccd1f673cdf0026d2e0909df44c1a7bc91990704363e918cb296c111df370ae51af76b29c8e6a846aeb49d955111489dd1fd8d29ac2c38b9284867742bd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
35069a0db7af1f9f6311b8d286a5bedd

SHA1
b3a1f5c904b33fec2585e413f12002a5dabb911c

SHA256
e6ce9443d2983475b5295619d7faa55fbca27b58b04048b4181c83f304e154f1

SHA512
25916cdb4a1fbb0802a393d4735dde473a1e6264fc2b2f9d086eea104d9578c1d93e03e9e19dd67bdc6ba51c604ee904ffc4b4edba27815c6f8195439e022acf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
88449dde8b608bf2d2531f6670eb0a68

SHA1
fb0c88457f306d21adee90915eb0052946d701a2

SHA256
b895aad0d077c5a51ca1216680d491b5698548d400925400f4c1d812ff7c8cc4

SHA512
0a2dda10973ebc4ed6d5f5814c0c79a059333372370107d251b5495fc2158d2813fdbef06fb5a025b665722a05a1de93b39d994d25bae3d25ad13662ade397ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
e2bf32b30ba535f4b365f1da9554b6b0

SHA1
e0893bbcceafcc642b68ae027fc46a91dda8d9d2

SHA256
c19b2b5caaea5f176cd9065db0372780930356443403384a73e8f569c06f4d6c

SHA512
5e60929c4fda63ef5b4efeebd2dba8051631165a364bd28ba38ecf7dffacf0d3cfb4df77270c929b0be0bde2b4066b825ec68b2dca50a9dfc39f6fe0d8d17120

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
75efbf7887d954462aac97b0f149616c

SHA1
fbe4e835031c1fdbb1a8d6d188f8ad07e6d018de

SHA256
d0bfdabfdf4dad286686ad56a81f2a3e1bfcd6bafd10f8002c06b554ca613e25

SHA512
7976717801eaf377517533ae603d1f0496f69b29a67f3c13e14fb98bfbc1817c3911688064e5306ea68bb735c5cfa9a6bbe741f365a750db19dc0d5ecd0aecdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d63c.TMP

Filesize
203B

MD5
789c1606459e7a4c4a05ea7594bf5026

SHA1
db62de8b47e2b418fecb2e575b598171d22a9278

SHA256
60b4817f7b567789ba51c2884b966ccef90616ca5e68164ce1ef26f5442deabf

SHA512
9f4c7d6ae4a82ec6ded14012ce94adb9d4c3f18dad6cbfe032a1dba4de0adb03cf243c47f73afd891c715544ab14c13e104b3d796cccb763c163e7dbf836e518

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
8KB

MD5
5c9ed0d966fa4cb554a83f5bbf7d4ae7

SHA1
ae5b9d251f15e15bf42986674cd3319bbb40ad20

SHA256
3b45af713e50e44512e148a054493afe242e9841b852fb4795ce687f0403426b

SHA512
a934eb2c0f5d804ccb5db32edb683128ed4a6fe43b3cd7302ce0d303a3fcedbeb95b755821e7f28891615b16ed672130c500c8a59aa80f6bfc49071059ba9868

Download Submit