hxxp://t[.]b[.]grainger[.]ca/r/?id=h1245a807,b04062d,997e42d&cid=EMP_Industry_HigherEducation_8Aug23_EN&bid=306554887

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2023, 08:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://t.b.grainger.ca/r/?id=h1245a807,b04062d,997e42d&cid=EMP_Industry_HigherEducation_8Aug23_EN&bid=306554887

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
3912	msedge.exe
3912	msedge.exe
4948	identity_helper.exe
4948	identity_helper.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe
2184	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2184 wrote to memory of 740	2184	msedge.exe	80
PID 2184 wrote to memory of 740	2184	msedge.exe	80
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 4256	2184	msedge.exe	81
PID 2184 wrote to memory of 3912	2184	msedge.exe	82
PID 2184 wrote to memory of 3912	2184	msedge.exe	82
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83
PID 2184 wrote to memory of 3856	2184	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://t.b.grainger.ca/r/?id=h1245a807,b04062d,997e42d&cid=EMP_Industry_HigherEducation_8Aug23_EN&bid=306554887
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff833b746f8,0x7ff833b74708,0x7ff833b74718
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3548 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,2959425609313805421,5153132026683018813,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3988

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3423d7e71b832850019e032730997f69

SHA1
bbc91ba3960fb8f7f2d5a190e6585010675d9061

SHA256
53770e40359b9738d8898520d7e4a57c28498edddbadf76ec4a599837aa0c649

SHA512
03d5fee4152300d6c5e9f72c059955c944c7e6d207e433e9fdd693639e63ea699a01696d7bbf56d2033fd52ad260c9ae36a2c5c888112d81bf7e04a3f273e65d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
5073cba8b1c837eac7a91720033ab4e0

SHA1
62a0817e328fe41110c10b992ca7db156e65e864

SHA256
54089e541f0f327598b15fa87436c2f4dad8d2d768d611cc8fd3b2073a0f26c7

SHA512
8a22a4aa32683a65b9d2206c566e819d086d6b53a1dbd1abd53e78dae4961313ad614b1bf059f3a5aad363c6262b3d68789f9c5dda9be0235f1eccb9485c480a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
82fd9178d9a72a02582581a1fddb811f

SHA1
0939fbc8c5dec942f5f8dc776510a62a3271be79

SHA256
e0b65f73342b112b25b19d095b85f2e607bbd78bcd09aa6835cbb339644ca0ed

SHA512
210ad183652e53a073239eae726d050317e4c9d16b2c34eb7bd9c5fd488d26729dd2be01adb1661f3bddaf842e8320cc8b337de7df3542132450cbc9cbb8137e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
702f19c8b2815ea956adc283fb43f53a

SHA1
56b074e71e54d6b0c8ac564cca872fc03c779bd4

SHA256
b488e5364c90353d795be8f05182c552386003b764c5f113e98ec04e4a3cfe77

SHA512
9f9810f7c593a3f4d9da2cf572d4e9ab418a773300279601049d5596eeb799ce37d5f7570a3b1accf6c6edfca839ee159da9354705309d2fa18b419e00b2ac3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
68da8de08f9a7a1c1de5e0b3f54f2005

SHA1
f0b0080af4a2b457aaaf547bccb906f336c4cb2c

SHA256
9de5383bdab7a5695c00836d9438222b2ac8ebe186dead7c167887871823ae23

SHA512
e59d7564a31a52fe3ce504a2ac15fa8e4e0f9609298b353bd924c2d07aec296da53c3a06cd9e91e218b216be51608eb171beaa4882b0bec9a498885ba1db2f22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
0e78f9a3ece93ae9434c64ea2bff51dc

SHA1
a0e4c75fe32417fe2df705987df5817326e1b3b9

SHA256
5c8ce4455f2a3e5f36f30e7100f85bdd5e44336a8312278769f89f68b8d60e68

SHA512
9d1686f0b38e3326ad036c8b218b61428204910f586dccf8b62ecbed09190f7664a719a89a6fbc0ecb429aecf5dd0ec06de44be3a1510369e427bde0626fd51d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
0f88284f13c7b7b55964a8771ab31615

SHA1
29228dd27935e53c2204ed13241b8919079c8a01

SHA256
8430e6735e78eecb857792d73cd5767b6a31c4e150b39d303acd2491919653dd

SHA512
6e42f57a561d9d7bf228fdb73bc972c88ef95349ed732655c02f8e71b5112f184c5bcecbbc8a783febfc3ccbef276c07850ec2f57d287eeef463521e8a7775e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
17963a1550d700e55d7e91ede2c3d17d

SHA1
304823a38754c7165b8ac97bf657fbfec72a9b06

SHA256
e5d6e9033263f13608c3e2a54dd424174e7e82d5c36db7c2bedf86d5e06ae91e

SHA512
f00c160bf7c68d965becd8fa363a5e35245ba42fc26829f4665612e0615f2041b06c0e4d665b032bb64d1d039d45a908ef3cf62217ec089d91bc35d158347458

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
c0056e68765ef781dd18ad73707eef6e

SHA1
b4ee3645b32da59363e3a7bd8d1fb94f66dacaa7

SHA256
e52fbf903db7dbb632972f775690cc8ffe323b1c8f92c56e81b6bab42b500aa9

SHA512
e0ac1c32ca9b754b16eaa8066d6c516a2eab4ba62d18724edef086f5f3832ec400e71b2133f2dda89a3fb5773eab03bf1c12a729e2ed6f76196b9cbe548ebd0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
7eaeca1302199349f6c60a722ca089a2

SHA1
dbf82e8fce6a261955c13f6be3d628adb606c37f

SHA256
9304a65e22edd9d4d0d7bac2fab012d27c08aa2ef7c2a60c94e95a03323fbcbf

SHA512
c2db0bb2a33a3022378d82e867a85778af525d451f0eff4844c58a22a29b31bbcd58050498bef7bbb3917b85f094e863b4f2b3eae2eb7d4e0352cf65563cbf5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
7e048a74a8877d6bb69a942bef3a4fcd

SHA1
60b32d1643a6eec232a3bcd13ff5aedecc21727a

SHA256
c959f07aeee93e5e52c500ff60d4b7168993645da281650b1ad886055e22373d

SHA512
2546cfe97d290c18ea7efe97cd001e962a4bcb33cb0bd1701a1fb8644846b7dafd0e9c637ba8caf0543409f6c8949b7cdb3e1b05570484b88b15b75ea1c144df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
2a33954121686b7ab76a1382c14ef791

SHA1
ac4795484602fe0a21b64f302f7e3c746c6657c1

SHA256
5122565a9ced2b620fccf7d650ccafd21273041b1faddd3d4f1e67305bbb6196

SHA512
98677cc531706d48787b0b0cec275498b4efecfe6fe55f0ea5edb0e68c13cbeb8d632811a89c0a1ee3fab930f7993713ce25b692118e8db4a56f867bdd8ac450

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
167106b14721e6bd4e3e3c08f51b7038

SHA1
d823664a981bc1ed5734710b7d37a15acf382963

SHA256
b88a317260716d12fc4d996978de6a99b7e1dd01b4276595943765a08bea4f6c

SHA512
a2a9bbc15a483d509de028d1f95788e52c7f4a1b8cbdf6c64275d847c67f1f5d1a8bd8b98f9523091ebd13969bf949ee527c6cabe9adf6a4fcade73cecca5b61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
500a22074b6cb81f95065071b5496c82

SHA1
ce33b19a775854acd05f90c6fa00ed221ee1d37e

SHA256
42d67996884ae0f033ffcb7ae15f696d5110bd084ffa2db9f2acf81c8e993abb

SHA512
c2c58aae9de6de9b75797165745148edf10396ed73ad3d7fb1b67ac8bd6fe276c0850a8364d2f22c7bb212b8eec9f67900369e7a5f45c76e852d7d55e102873a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
3f821b0cd979dd210b7900e35e0abf0d

SHA1
d08e7fdc3884f5fb70be007ca1be6bb76a926640

SHA256
e951314e1d4fc58162a437651f323197071ea6743761bf61c9e852e8903d8c47

SHA512
12b3953e6b7a539b65350294dce1ca77d793ec7ec571646bed5d5f7bdabeaa9d30b216f81f25c1fb1f00326557963b4da429a674835141304b2063254f6ad9c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
5266ed303dbea70cd6c1248662c961cd

SHA1
da680605d71209c1aa2e0740c50e240bb2ce27f8

SHA256
e53967a695756762bc403ccfbdd7b88748b34e14f77ae0e291d177a121490ba5

SHA512
2aec077a92eee2c655b4efe3ed6ae28f41dc7def4d26e63530fa391aaa25de0950cf09303af9444e792d148f7bc3c636d45179d4167cfdb506f74c46ade9da03

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
bcfec91111b02ef0b907d025cdfd222c

SHA1
e28d8d28b341b3c782908085d741d050c302dfeb

SHA256
41e714828ef31e3b4a2b2a79eb88afb751c516a75ea9da97169cb0571928662c

SHA512
edd7604de2834651dce117a1c244809ca62f08a9a1e027e67b3562addef25e4d270e2d5f8cae4bf8c9c7dcd516d6959eca8cc9b3a45f2c029dcc1e76a0f47f0f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
d3c898ff73b8cd46640fbb8230b6483c

SHA1
d4038fdee59f1fc524b630914578977eb68c8603

SHA256
3a087820c31fda5263ca86c1b540b07450f52160a627276a4b93c48c424f7c85

SHA512
7a10052e977f4130730736da1ae44589bd1336efd0ed8a4b31b537822604f1b83d59e06af4a3352a1adb506958d41f31e814cd33f761ff20b2e945dae940374d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f414.TMP

Filesize
2KB

MD5
f71c74770d4b1f70638cdc4d410e950e

SHA1
1586fd6369902ec541dc7761b129a80f413bb425

SHA256
e7de356e27fb31bdc7c13497035164be08d336e766ad2efa67386d74222676f7

SHA512
1f1ebd775390164f0a491d309bc45f3e5974b086db0d5a1dbaadcff2f4b225256010e5e162a8e4cc85beb8993e7113ce866880cbb8041f1ba81f89a475fe8fae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
6e3fc9515483ae96bbfa7db502b73e40

SHA1
25f4c6aeefa844a5f6ecf9dc786220fb70831fc4

SHA256
8f56f11f8f1c01c9e179c476098704200192cacf1461bc1880c2327da9201bbd

SHA512
3171ff0f1cce492920397b182f51e37229f507aabc2e84efdc06763315252179a0fbccbf420ec956b22be646c7ca544a954ea579a58eb139b970e940af5858d7

Download Submit