hxxp://steamcomunnuity[.]com/activation/gift/id=478419359

Analysis

max time kernel
480s
max time network
598s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
07-01-2025 22:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://steamcomunnuity.com/activation/gift/id=478419359

Score

7^/10

steam discovery phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing
A potential corporate email address has been identified in the URL: [email protected]
phishing
Detected potential entity reuse from brand STEAM.
phishing steam
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
3464	msedge.exe
3464	msedge.exe
640	msedge.exe
640	msedge.exe
3476	identity_helper.exe
3476	identity_helper.exe
3088	msedge.exe
3088	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe
4904	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 19 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of FindShellTrayWindow 27 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of SendNotifyMessage 14 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe
640	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 640 wrote to memory of 2968	640	msedge.exe	77
PID 640 wrote to memory of 2968	640	msedge.exe	77
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 4708	640	msedge.exe	78
PID 640 wrote to memory of 3464	640	msedge.exe	79
PID 640 wrote to memory of 3464	640	msedge.exe	79
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80
PID 640 wrote to memory of 4612	640	msedge.exe	80

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument http://steamcomunnuity.com/activation/gift/id=478419359
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb4ed33cb8,0x7ffb4ed33cc8,0x7ffb4ed33cd8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2132 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2524 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5508 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3832 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5252 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6428 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1640 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6592 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,5210465657101860285,14751330479909952751,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1732 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4904

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1012

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
826c7cac03e3ae47bfe2a7e50281605e

SHA1
100fbea3e078edec43db48c3312fbbf83f11fca0

SHA256
239b1d7cc6f76e1d1832b0587664f114f38a21539cb8548e25626ed5053ea2ab

SHA512
a82f3c817a6460fd8907a4ac6ab37c2129fb5466707edcfb565c255680d7f7212a5669fe2a42976150f16e4e549ea8310078f22ed35514ee1b7b45b46d8cc96e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
02a4b762e84a74f9ee8a7d8ddd34fedb

SHA1
4a870e3bd7fd56235062789d780610f95e3b8785

SHA256
366e497233268d7cdf699242e4b2c7ecc1999d0a84e12744f5af2b638e9d86da

SHA512
19028c45f2e05a0cb32865a2554513c1536bf9da63512ff4e964c94a3e171f373493c7787d2d2a6df8012648bbefab63a9de924f119c50c39c727cf81bdc659f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e

Filesize
64KB

MD5
d6b36c7d4b06f140f860ddc91a4c659c

SHA1
ccf16571637b8d3e4c9423688c5bd06167bfb9e9

SHA256
34013d7f3f0186a612bef84f2984e2767b32c9e1940df54b01d5bd6789f59e92

SHA512
2a9dd9352298ec7d1b439033b57ee9a390c373eeb8502f7f36d6826e6dd3e447b8ffd4be4f275d51481ef9a6ac2c2d97ef98f3f9d36a5a971275bf6cee48e487

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
67KB

MD5
69df804d05f8b29a88278b7d582dd279

SHA1
d9560905612cf656d5dd0e741172fb4cd9c60688

SHA256
b885987a52236f56ce7a5ca18b18533e64f62ab64eb14050ede93c93b5bd5608

SHA512
0ef49eeeeb463da832f7d5b11f6418baa65963de62c00e71d847183e0035be03e63c097103d30329582fe806d246e3c0e3ecab8b2498799abbb21d8b7febdc0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000020

Filesize
19KB

MD5
2e86a72f4e82614cd4842950d2e0a716

SHA1
d7b4ee0c9af735d098bff474632fc2c0113e0b9c

SHA256
c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f

SHA512
7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000021

Filesize
65KB

MD5
56d57bc655526551f217536f19195495

SHA1
28b430886d1220855a805d78dc5d6414aeee6995

SHA256
f12de7e272171cda36389813df4ba68eb2b8b23c58e515391614284e7b03c4d4

SHA512
7814c60dc377e400bbbcc2000e48b617e577a21045a0f5c79af163faa0087c6203d9f667e531bbb049c9bd8fb296678e6a5cdcad149498d7f22ffa11236b51cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
5c18f6b56d7045080a9c977eea06f52d

SHA1
fab8f0e880d55028b96fab58e978c288a4651ed4

SHA256
5f521e5d48743da7cea3648ae171e0abdb79f08d9402c69a0ee32ef7cb7fabbd

SHA512
f976219bec8f686d4064a606e0e4112988ede4984bc7390cd8c16d188fcfc8fb76dcacd92f9c2a33517cfebff71e9be10c54200c6ae5eddc5e64c440e1397df1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
967ea85f72e6adce74db0f8b673d893a

SHA1
22e9d51b2be9ab8436cd55aa6e590d03af926672

SHA256
0aa11017a2867f0ca4e6d4f1c10ae016560757e2db20d07ec7e95deb3e863fbc

SHA512
bea23b859e6e03f18854f14f30aa63576826716bca6401e92fc5b41db4c97fa07515bc006f05eda7128ed2a88295a6926fbec54109dd5106360dfa1b1a84638f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
58e35871c74c27361ef919a4c3bd544f

SHA1
ca6657c89b26e57a3b5d1b181ed90dfe8cd6e277

SHA256
60db0ace4d173bd4900a350916dd996e7317d0cd5be92bebb31ff159de0a7b51

SHA512
2ce4f7f6f687b60e9b7029b6e03466fde7b46d6388a0afa0585254f98f3ef02b18947edf09ef4dd44fb79f72c57a74f5d419640c0c147d27ca7f08a58636abee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
0ce9dab1e7087430a3dfced672c90f4f

SHA1
695889404d5716dbec532c869404ce78ff34ecb6

SHA256
5fed8dede4038ed8ed5aa9e271823141651e86e91c98eb19bbf50d705d9e0926

SHA512
5934ab6a020c5bc69da6f4bb4b391857076fec4f8bc4e1719e6635212d589688ff0a9c7c9d3d019fa1ba4b8ee0d5b65574983e255e30509f1a955fdc5d3801ad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
759B

MD5
7b65b35f58345aa985f423badba6fada

SHA1
d6a9526abb04d13d09bba53a3ba220d033531555

SHA256
e1d6572447fd92ad8c2416a680e34a79db1a15ef1b062796776219ea3e846fa5

SHA512
fd71acdf19431af48a0f8ad0d475bcf1ee1487acd2385b5bdfc0338e8ffc103af2034fd140e22ea193e801fa8b93e0143020e3beafb459494d9c2b18549d592f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f7f6a3fa0b1bd8dc4a8c6a017455cf7d

SHA1
eb5f53a3015d28862ad34c93f5b75b3fe043b25a

SHA256
140f0da68e0395bf3cd965a8b3c8ac5c77b2eedd3120b1b7ebb0b8abe9846853

SHA512
bd29f9beb95e4d418275b547042030623ee4edaa50c712e233aefdab372789a04ae289c20315d9a1267f3c45239eb6fb0389b3775fe2edec2ec61d0de60233d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
997180b73393ca8acdb2c74c5413ef2d

SHA1
111a6c44e524250aec9fbad98602f3d04ff615aa

SHA256
b604e4a5061c5daa8a7ab2d4f664cb9f0ee64de0a44cd5a1e8aca5d9195be0a3

SHA512
2e8bf2bbd3bab899e721911b9942630c7a2dc0201ca91ae1d58557d248fde9d2259c09aefbec3174dcca5d972cada61927b0e1407860fdc1e75a75cb8330cf10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d6bb2699c897315caacd6a0a16885f56

SHA1
067888b0777dc596f8e3e78f0047fbd0ea063143

SHA256
79e820001d63750d41d19fba73ba9f18c8b8af982534f6f05585052ea274304d

SHA512
f992bc353f2e38d371cfb21a9f0aea656bd3f1667b3cb2751736d2574a159acc176fa3b94afbb7fa2e99197ab9f1db29304881342af0bdb2335d272012af0e5d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c678d68307843a01ce044e0b0afe051b

SHA1
f4b7a82f8ae536d620840fa76d0f0cf3c80e3ba1

SHA256
79bc29afe0076ef5ab6c81ffca782c72803c21ec79f2bae362a6c6ea4ec64329

SHA512
cfc2d239158bc08beb3df253c8e42cb9ecc46222746cd73958a20e2e1c5f546b0af0bc2ad44c7e0fece87fe033c0b2800aac1c769a7ec96c6819e964e6e449ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
131946db291490a56fcb11264a2a0653

SHA1
7fd5c3935ef453d99d32e6881bd7f3790a42d431

SHA256
4f09861a038baa1e93ab64abca5b01205fab6ab50420951cd00ce32ff2c024f2

SHA512
c8a29912e96c6da6aab054d0e85ff8d3fb6fdffd1c3a6743d7bf548323482674db4df0a47cdc927b6c0e6603138019c03c1f3f1fcef431bc1d43581c25be9b9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7cf36986847bbb9ba92f7eb08cd1aa1c

SHA1
19ef9630120a28c15a8ff72c22418555816be0de

SHA256
c4d02346b6ef3586a0d4f852bc530168ebe6a5d13f946539f3a2f160571a00d2

SHA512
21b7da23663d6156560bffc7c087c76f286dc988713de0f728a9dc8b063279eca9f69b10beab8e2041efff220fdcae3825224381ae919d2cacbd5d9c64787191

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9e19d5adefcf0b3f53a85e595348f99a

SHA1
aa9092eac627ae6856f8e52cc369fd25eb0ef9a0

SHA256
a87d1146ffbc4c1c85298111674a2379070b00cd80b76e0c7dc2c9214cabf153

SHA512
eac99c120bf7e8fe2a279ed5ee9b33ffeba93ee4465643961c0b4a67530bba83ff59eb88cbf95a4d15aff40f6e8f1db86d350dbf4124344b9ca47d36606ad4f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
5de5372105bf9dcaf372124bbf878b53

SHA1
3476628427322d8877943378095d9bfce4b558b6

SHA256
2b8eb68be0f585948e2d0279928fd347bfdfc671d5963087fc411cc466992cb2

SHA512
207544f506fabb5b4ac3c73c334fde7faa414cd4c687e4551681fa544eea5419b89384334ca67388b24799b0a3d0efc3419b2ecf4090a579f638027024dc5de2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
3b412f0775bd506f4ede5d77107f96d0

SHA1
466f689ccdda4a06de20ace5f83e61de314b4b4a

SHA256
37c74fff6ac6d64ec3a8e2cfb9c613af0515c31f4b24f01655ed7d05a7137cbe

SHA512
b63df163495a92c79be8509423321d49de0e49d3959b23308fa6a3bfd22d44defcfe704bca5aef4c7b4efced7463597af797ec90e74ec4cfb44c264bcdfa9b8b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
166bf6f25b8363305d0f818a0d6e60ef

SHA1
5ac8f61738f477290e2bbcc2c6f29a91a079d135

SHA256
b31bc850e96464b41fd17d6a7f72995e5e127db64616720e0f83d9652eb2e12f

SHA512
7f0481318bf761068fafc33fefe715f41203f2b69b18178697edfa083e66e83d48f45aa0a42bc124847366bf6d534855aa03edbe302eb3ac24788c0bfcbc57c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582e3f.TMP

Filesize
868B

MD5
f5ee9687eaa9ac49d38c1efd41fb30f3

SHA1
68fe8ffad415013ed7df8070dfc7bcd8ff22cc67

SHA256
a32cb01d1a9966c87ff7a9f62f49f28bc48247af97db49256d3d2ffbb43d49cc

SHA512
51a7c6a6190037b332597e146fe83c143a3772cace057a8033d90189ea4223a51999831ef57aef21bae2b1a860de8217969a49b61207fe2c9ca6fdf6ee3dc0f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8cdc0261c17a93c37e01174e9c9024a6

SHA1
141384f8f20852f881fbb2480418ec1e39459246

SHA256
8e4ca35f1d15a273c9820dc9171349053e6190f6b76857c01cfe6c6b603df206

SHA512
4d076e2fc780efc389cf7df93ce5b9869721dfeecf374cef37fd995ef1175290629c6f648fcac5fc883e9ef8135f953854adbb26bea31192206e0b9e008e6bac

Download Submit