hxxps://es[.]luxuretv[.]com/videos/se-la-mete-hasta-el-fondo-de-la-garganta-y-eyacula-en-ella-114231[.]html

Resubmissions

19/01/2025, 01:14

250119-bl6naszret 3

19/01/2025, 01:13

250119-bk75qszrcw 3

17/07/2023, 02:26

230717-cw4r5aaf31 1

Analysis

max time kernel
963s
max time network
964s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19/01/2025, 01:13

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://es.luxuretv.com/videos/se-la-mete-hasta-el-fondo-de-la-garganta-y-eyacula-en-ella-114231.html

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3924	msedge.exe
3924	msedge.exe
3208	msedge.exe
3208	msedge.exe
3988	identity_helper.exe
3988	identity_helper.exe
5660	msedge.exe
5660	msedge.exe
5660	msedge.exe
5660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2024	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2024	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3208 wrote to memory of 2188	3208	msedge.exe	82
PID 3208 wrote to memory of 2188	3208	msedge.exe	82
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 2248	3208	msedge.exe	83
PID 3208 wrote to memory of 3924	3208	msedge.exe	84
PID 3208 wrote to memory of 3924	3208	msedge.exe	84
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85
PID 3208 wrote to memory of 5016	3208	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://es.luxuretv.com/videos/se-la-mete-hasta-el-fondo-de-la-garganta-y-eyacula-en-ella-114231.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9264246f8,0x7ff926424708,0x7ff926424718
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5292 /prefetch:8
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6072 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6472 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6332 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,14370208622316065527,2436532309344441411,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2936 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5660

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:856

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4328

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x33c 0x300
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000019

Filesize
1024KB

MD5
e569de8723a0943bdf545b908d949e97

SHA1
e0faa6bc1a8ceeb281c05ecffa434cc3b9f0f7d3

SHA256
3ad3520a8ceeb9d7f1c5e9541108d18e46385f747ff64843455ddd869d7e1c67

SHA512
f06090053c31ef848770bad54881254014bddf0c8bdf07a71a257f7934d4645044aefc202b545e34be35ce7bf98332e99633db8b8ccd41b9d2b4979c47ba3afd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
2de8329bb916041c85bacf9778463aa8

SHA1
5e6c046b53765ea01392af622a9db356cd27b52f

SHA256
0b0f5bafd2254bd8c4dd77ce7ca9294b0b3fb629574faf5435e7548773e3e685

SHA512
fb1f6a47ccdb1539e507f49e6a045ff9027073e9e9c8d5854ff17483c4e1adebc64df82995f0eea0862e47a79f15097ad4dbad6670429c84420465d8fb14e585

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
46046eb5de5600084e2438da2851bb1c

SHA1
0569a0b726e6dca01203d24a1f8ab9aedb5c7b61

SHA256
1516740660e1c76b43043fefd7013f09b2ccf147121ab2e817f4c17fcbd3b9c9

SHA512
a5d6739991665f707762f512b88c9d4607599c10425945a4834986dcded9399739671412381232fc06e78c99d20fbb5b21504b56ddd4739755ad3c1c6c6c8db2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
729a719cee7885631baa745dfe58455b

SHA1
165d1870a96a75dcb26c1a5ac0097c5dbd8f54d1

SHA256
318a51591238a629a24ec6c9c061997433fff409c48d2ba7ff2c26245252b1b4

SHA512
cfc4ddea9e768fc65a158218b23382972c93aafd8c97acb6155632d86aa44896bd7f4182e74d6565116075ffda3b6618b12bcd75a7403bab61fb5a0bd219d851

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c8838042d45ea39d6079466c42fc9f72

SHA1
ad6690814c3af6a6baa998eb566a7f0faea06240

SHA256
a44ab0d9f504d50e0d8f313719f435ec0041373e903c51ff07764d13ab1a8e3c

SHA512
a2b9d17cb33bde20f2a04284bed07f5a399d8b8e89c11d1df14e74ba8b389e0d330a26c72b62c49ba1064071387d15064ca5d594788151a6895848851382c97f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
427a98ceb60f6dc317b8a46cbc728add

SHA1
93a776841b17dbc0444175754e24960b3b10b27a

SHA256
f52269dee208e5b72bb1a3a19480a0b15e523b7f05ce2a0696b053f76580558a

SHA512
d5ffa2fcba7b8fe9e40b650cb718a52e7eac9fd0e9ea87723f12f3c2461dc1d64225bc3805c77bf314a15209447266f03a752d5e032efbdad3386ac92a9bc5b2

Download Submit