e22e66417aa12ce77ad8d12858018e72dea3138e65a3ef5a5e00345347629c49

Resubmissions

27-01-2025 21:03

250127-zv7tqawlbj 5

27-01-2025 20:58

250127-zr8lvavnhv 3

Analysis

max time kernel
93s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
27-01-2025 21:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

.html
Size

43KB
MD5

3cbeccea39d014ec1da7df7c3f0d7dc3
SHA1

b91d5a5522982dc9bd41f8bbf0019f27fa7e2677
SHA256

e22e66417aa12ce77ad8d12858018e72dea3138e65a3ef5a5e00345347629c49
SHA512

e4171b5911c4e4228e2dbbbffa383751b3911fe439412bdf3b20fea61302ae8d97d211edd2a9809bafc7e866380465af22984500022a02aaf4f86d8e42f172d5
SSDEEP

768:2dBpqhYGMpevT3x8gAts0+L7G9TFXWt7aXfsW9l+X9hJYFnzOMD5QBdxaXfsW9lf:aB8hYGMpevT3x8gAts0+L7G9RC7aXfs6

Score

5^/10

steam discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand STEAM. 1 IoCs

phishing steam

flow	pid	Process
89	2868	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
1848	identity_helper.exe
1848	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe
2328	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2328 wrote to memory of 2520	2328	msedge.exe	84
PID 2328 wrote to memory of 2520	2328	msedge.exe	84
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 3908	2328	msedge.exe	85
PID 2328 wrote to memory of 2868	2328	msedge.exe	86
PID 2328 wrote to memory of 2868	2328	msedge.exe	86
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87
PID 2328 wrote to memory of 1344	2328	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff003946f8,0x7fff00394708,0x7fff00394718
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Detected potential entity reuse from brand STEAM.
  - Suspicious behavior: EnumeratesProcesses
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:2628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=5412 /prefetch:8
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3076 /prefetch:1
  2⤵
  PID:4108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3048 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2576 /prefetch:1
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6292 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5800 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2000,2346245892565458125,943261534387218474,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4348

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2616

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4444

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7cb450b1315c63b1d5d89d98ba22da5

SHA1
694005cd9e1a4c54e0b83d0598a8a0c089df1556

SHA256
38355fd694faf1223518e40bac1996bdceaf44191214b0a23c4334d5fb07d031

SHA512
df04d4f4b77bae447a940b28aeac345b21b299d8d26e28ecbb3c1c9e9a0e07c551e412d545c7dbb147a92c12bad7ae49ac35af021c34b88e2c6c5f7a0b65f6a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
37f660dd4b6ddf23bc37f5c823d1c33a

SHA1
1c35538aa307a3e09d15519df6ace99674ae428b

SHA256
4e2510a1d5a50a94fe4ce0f74932ab780758a8cbdc6d176a9ce8ab92309f26f8

SHA512
807b8b8dc9109b6f78fc63655450bf12b9a006ff63e8f29ade8899d45fdf4a6c068c5c46a3efbc4232b9e1e35d6494f00ded5cdb3e235c8a25023bfbd823992d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7b38598e-9345-40aa-b985-b88ac7509a02.tmp

Filesize
5KB

MD5
e918fccab57e8d0f185efc1d12d0f70b

SHA1
8dbde6ccc29fa86e2f235a2f2d34f4ab1515a27f

SHA256
115b94185946cf917c5adccaffc64503a85417d768e66865a04573792094566e

SHA512
0fd8862902200bbd0d048111f58762074db97aa0f635fe0088037522312d335789b0868cb431157be5301a6ab74325b184ddb1a4cafe1f25bbb2f714a22f59d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00007c

Filesize
36KB

MD5
4769554431a2506afde025561880c118

SHA1
e6823fd9fc77c5a4edfbc755075a43f207e9ac20

SHA256
b2a1e4754dbc123b4bb5aab6863d17b917f11e28f6cd82746cda511e0fd104eb

SHA512
5cb53b1a90d7b16ba89c5512b25af49b57c55c7aad4c4d84b0144f43249dc736d95f39af7f81cff6c0d5dbebd807261e7e142c8299fb0279266cd9ab057bd912

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000083

Filesize
121KB

MD5
2d64caa5ecbf5e42cbb766ca4d85e90e

SHA1
147420abceb4a7fd7e486dddcfe68cda7ebb3a18

SHA256
045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f

SHA512
c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000084

Filesize
119KB

MD5
57613e143ff3dae10f282e84a066de28

SHA1
88756cc8c6db645b5f20aa17b14feefb4411c25f

SHA256
19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14

SHA512
94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
70ad1cd4a6e8a766ea35fdc70c22a10f

SHA1
0a621aa9833dedca75c8ef6a08c80619174190c3

SHA256
473b67d276e7c38808114b47eea0a9ac845a6780f12aa889ebfcf54ad82e3be4

SHA512
e35270fed9f820014d3b218dce090bd5fd53507a1322262915ee60bf177a48a1e33c9da8e65a30804600496c40e5d79d43bb88d129431276c8da847c02a8b47c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
693b5e4e48de2827e3de909d3648a080

SHA1
d46ec6b2f33bc9f46cc8658c9881ef5ef1040c51

SHA256
ab0b60dbf284eca27f1f6e0eff5ffe0839399b55ad01496e4bae78b53121d620

SHA512
46096bcf5e2679cffda9bf91fa07ae1fb92094f82de3bc3b1432693e6ee9f67fb761f13349a962d228f650668e256536ea52c07e1a7197e88779501a387f37a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7062f5a70d57b8b77eb0cdc257eec597

SHA1
ebca6689c13ab81aa1bbc1fc21ad17cd39b99c54

SHA256
84e421c3a6c6b3a3ff35d983a4f13b7f0a520eeffce040bb6b5cc4819f8edfa7

SHA512
0bafe3d9a27150c69193c12f6d9a45744ef06bb37d003739d6935f5710911562caf01711a43efeb5c03e29f0b8547eb5dd2a653248ecb945188631c0b9e591e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c1afadf1aba3823dcbcafe6f34b8648f

SHA1
4d459190229d2ddfb35ca7f94346c0a0ba28c853

SHA256
8f2c40d48578ebe21956c7b7e7c8a10ddd43cc033ebd50ece5d9b7360b0f52d8

SHA512
2ed13a2e74bd3fc36a22fe21bb936ac048e3479af7ed5e55d826acaf334308051b60d4cb3dbc4d203c392d54794e364357e3274d559b89c2a144018f8a5cad9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2f10d2f46b544f185fa15edac670644b

SHA1
c9fb6975f0948209eb30001beb56045bb83edc1f

SHA256
2134766ea9ac14414320ec4604bff284b0a4dacfd3c1f2cdc7d4cb0191ca8b5e

SHA512
c0d9dc1a61fedc22eb870ddd99c965368e55863e9d9faa7bd580cbf2e18c718466142ec67a6d75cdfd67f4f5f0eb92a8eb9dc06bddc0397ce079ca81fa715c56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
544ed5b1c02f6d14da7f98b68a087b25

SHA1
99c0f60bac3dd317323d7e4407f9bfaee62cdf11

SHA256
ca0e95526a0bb33f297104041be1f60ff247e50087e051920711ca84c5f86f25

SHA512
92d97827812c5c871297614840ad9783d04e1e59a9206f4cff9f3b7d0cbc42bbb1356788d1e30f4fd01365cf85139c671c97d4cca39f2ede3598e91b916585cf

Download Submit