75992a837d679530473082f89cb47c1972c4ee69109003429768ef27bbb241db

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
19/03/2024, 02:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

sample.html
Size

143KB
MD5

5f01f201a40b68d517ae0ed06e3a2055
SHA1

8c41df54708bcca6c9403232f9ae474c31395e1d
SHA256

614980a2fdab7bf094ecdb2b17732142ef712e6459c280be57004f2e0b54c34c
SHA512

cc9227eec961e2d2cfed17df6693452114cd227e34d19d264635c82f2270915fac07e24047b7988dfab7ea5111633f3a90db699e73eab038bc6d799cced8680b
SSDEEP

768:SFC6vqaDZoVZuW292UqONY3+0UmaHVZum7DVmvrIwCkUgF62cQzKDemrfqhln:So6SaDZoVZ+4NONY3+TZF7DVmzFmIJ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4364	msedge.exe
4364	msedge.exe
3760	msedge.exe
3760	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
6080	msedge.exe
5496	identity_helper.exe
5496	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe
3760	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3760 wrote to memory of 3636	3760	msedge.exe	88
PID 3760 wrote to memory of 3636	3760	msedge.exe	88
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 3980	3760	msedge.exe	89
PID 3760 wrote to memory of 4364	3760	msedge.exe	90
PID 3760 wrote to memory of 4364	3760	msedge.exe	90
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91
PID 3760 wrote to memory of 4400	3760	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ffbdbb546f8,0x7ffbdbb54708,0x7ffbdbb54718
  2⤵
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4484 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:1056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4288 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:5632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=8184 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7932 /prefetch:8
  2⤵
  PID:5436
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7932 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7684 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7756 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=8168 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4703115969412423868,9645037570336070553,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:5896

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
47b2c6613360b818825d076d14c051f7

SHA1
7df7304568313a06540f490bf3305cb89bc03e5c

SHA256
47a22bea2e7d0154c59bf5d8790ec68274eb05e9fa6cf0eab0d648121f1a02ac

SHA512
08d2366fc1ce87dbe96b9bf997e4c59c9206fcfea47c1f17b01e79aeb0580f25cac5c7349bb453a50775b2743053446653f4129f835f81f4a8547ca392557aac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e0811105475d528ab174dfdb69f935f3

SHA1
dd9689f0f70a07b4e6fb29607e42d2d5faf1f516

SHA256
c91388c87878a9e2c530c6096dbdd993b0a26fefe8ad797e0133547225032d6c

SHA512
8374a721ea3ff3a1ea70d8a074e5c193dbba27ba7e301f19cea89d648b2378c376e48310c33fe81078cd40b1863daec935e8ac22e8e3878dc3a5bb529d028852

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
341KB

MD5
c751110906d92c267ba2e6b3af3e07e5

SHA1
177632c6081c960d21bee20aaca9a30f4d18e21e

SHA256
b2cd6bf22733883890be9783465f4e65483c9d4b1983cec505a74e94504c24c0

SHA512
56a6173bd77b48919019eeb636060367648bc65effb11307de81140b1572732c46a275ce932c8df756ee4689c671839717dcd5796c3ab1ede21c945092e77fd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001c

Filesize
20KB

MD5
87e8230a9ca3f0c5ccfa56f70276e2f2

SHA1
eb116c8fd20cb2f85b7a942c7dae3b0ed6d27fe7

SHA256
e18d7214e7d3d47d913c0436f5308b9296ca3c6cd34059bf9cbf03126bafafe9

SHA512
37690a81a9e48b157298080746aa94289a4c721c762b826329e70b41ba475bb0261d048f9ab8e7301e43305c5ebf53246c20da8cd001130bf156e8b3bd38b9b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
d49a1604c723083fd642e27ad2312e7a

SHA1
4fbdb67197db1b45f61221088ebea95759c7971a

SHA256
963c524c05df3f00f9d42f69dcdc8efda79d5a03882ef283e3172a8cec727f59

SHA512
f4ef112b5b0216966b6526dbd355f070100201b9bc886531b6e7fe57bf0a986455c2fa988d3be23d1caa7dd1f9fc5a75e1eb9d5f56889de439c01c0eec0da9df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
0014921678e731182ed74f2f16dbb101

SHA1
6fc7e4994ccdf21c8edb3efed9363cd3a32d763d

SHA256
115b365b792a98a43ebdacf8ac4c3a9070eb7e877ff659a9f04d64d1916d3ab0

SHA512
b4a99bd80ab2958b50d9d87fd36f026e942e707a14cdd70fbfc818910f4a8843ac8e646ec98ceae69e294e6cb3f955d9ad865e753a2475c99a85a2808b6df2bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
a305342ddb0c61c2f44b64ea822471b2

SHA1
f735cc39535a970189a100c5a08e0a22836cce84

SHA256
c517bddd34b981d2376232014e64d1376c6b9773e684ab7abe91ffc040eb0bb2

SHA512
6ca1c38cf794dd572f2ece7c113612aad91137c80315bb8c11cad005ed62a6b6fb97449caa8ad6d5f320c53d26545408b297a761f980d6191e734898cb7afb2a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
219715ab296c9630586fb97ff9e6a3e5

SHA1
b92397d22fa05c856299f2ed820f8071f1c3293d

SHA256
ee5e4c389c1163c4051406b010e5f4efb14117350397d61b99738d028a0fc614

SHA512
85349672786c1ab62c2cfd09e27037709a1914e636fd15954a0f0d63f1acf758ca8d2fbd3bbf106ad5be49695b4c1cd6aed3c0ded20afe3941ee6062775353b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0f8a7fb690f1da13911726b359a9a7f3

SHA1
2c8a005409f5f9e12cc2d522862a63d7625f4a6d

SHA256
46d57b5b37ab68d13d73661141512c8f65fd29d7982efde2aa5ff48f8766503c

SHA512
b49a0f2271655fe92e6e08c0b4252227cf9becad80127acff84d55cf2dd3185d6be0a79c9693809c508971df2c2e18fcfc5dbeb6f6a1e0453bb99a438d5dc48d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fa2e73fa6f9901781f8d94f253b1b19c

SHA1
38c526d0c5190fe103894a256f891aec924b0f65

SHA256
c50e203f5957301544d1a247f307050077081c99199d39905748359dd6312a87

SHA512
502443b5b545adfca0638d2cb77e72efed79419d251d198e6637e7714715949f922858331cc218b879a82e35ae41da46a64739a08ecd98c72900667775cadd34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9358339df9d29af36c8b519ecc90f573

SHA1
62a50244980a74a0ca08206ada986f5bd38aa368

SHA256
4724472cc24fffb2963e43a36d56bc06de90fc26ddaff59c97abb3576ecf798e

SHA512
9102d8aa125836738034bb03bd7a1c2cc8dc4d1bc5ea3e102390221a540c173677d8fbebee80032ec446c18ee8d6a659caf3d16070cbdb2e73cc9550dba1547c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
504d13af865d76a5003e4a5a9275a709

SHA1
daab933db0fb8580acc536e37f9201630613ff06

SHA256
1265a726ba65f707764bd6546f375defcd978d2f25177a7bccfa6bde2d139e2a

SHA512
c5c51876a4694eab39be1d13a448f9ecea2373e61b4064cd0396637415059df8775ab82d304f9908d3a8ab4f16b37f7edea32decf577106e73a26ef652c47f8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
11b333274ac97ae5b4bf6ecd4f7f7355

SHA1
d2db17415229c48d9f2f685072d5a1a36ff01a9b

SHA256
2f3b67f19168a6e0362dfd5ba8b9701bd3e1a85dde53e65687d66fea2101f5f1

SHA512
fe9ebb6dca8f85e166bbe330b6b0fe7b24f0c913c7dedefbd5c1e45d27d91d47af51793cb16c8d13564d14f3e996a6aef6fe34aac2fa7102cb2d6156544e9a14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
0b81168f535e502c7eef36dc692a4e1a

SHA1
2c9b14d37b5c1a806178bfa0696c097ecedca430

SHA256
b433b7864f7c11f389a9875f4276a337c711f2f8e38a38b492944f63da3413c7

SHA512
f891fa925efd6a00bb4a791926b5159b9a0c62f40aac1afa4b4e54eb20588099df399a03b17b03d9df1d8cf70def7b8cc572b4e33767b2b77791662923b85785

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
871B

MD5
e8093dc75fd0d19fce30abdd1dc6236d

SHA1
c034d15157824e7c79f3bab8c30d097058fb0201

SHA256
0c94ae5bfc36f6ca3b7b628f7f49885334589f31e40c32d4b52fc155d0da0d23

SHA512
038329ed5a5035cc7c8717494fe11404ad69f185cf8ba9e48051b8bf41d7940bf740351aaa1ea210fa7332261f05ad2851ef189daaafbb175bc558e46d26db1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584a81.TMP

Filesize
873B

MD5
90d1dae7f9bcc903bc889227317ee1bb

SHA1
b71e26ab132558a2296b792c8c14019ec5aada8a

SHA256
9d82704ca2c561e50917453a7d2180fae8cefb37fdecf6f03cfe2e252f8f66f6

SHA512
68b0503be7625da7790bd21d4fe39d326a2ec1e159a3a55d65f90d33452615134dac01c7a7e96bd07321e290612463bf4c86cc787c429e03fb8728ab9edc6c77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
13065cb931bfb136fb5a4e47e0cbfef2

SHA1
14e8b4cf443d789651358b87430481edbba9ed89

SHA256
4912827335740338ce32781e5fac7ab74c624f3292d71ead0e0925b003f89ee5

SHA512
235d8be64063502a0e64a85d25fe448515bc78048c84c159a85128601b88116682e43bc25ba87ba8dad78e84f15f9b39212efac681cde93e0635754ca53dc9ec

Download Submit