hxxps://admaster[.]lxm-group[.]com/link/13?r=https%3A%2F%2Fwizzair[.]com%2Fen-gb%2Finformation-and-services%2Fwizz-services%2Fwizz-priority

Analysis

max time kernel
146s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
28/08/2023, 09:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://admaster.lxm-group.com/link/13?r=https%3A%2F%2Fwizzair.com%2Fen-gb%2Finformation-and-services%2Fwizz-services%2Fwizz-priority

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3572	msedge.exe
3572	msedge.exe
2468	msedge.exe
2468	msedge.exe
1816	identity_helper.exe
1816	identity_helper.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe
3976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe
2468	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2468 wrote to memory of 3768	2468	msedge.exe	82
PID 2468 wrote to memory of 3768	2468	msedge.exe	82
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3656	2468	msedge.exe	84
PID 2468 wrote to memory of 3572	2468	msedge.exe	85
PID 2468 wrote to memory of 3572	2468	msedge.exe	85
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86
PID 2468 wrote to memory of 3708	2468	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://admaster.lxm-group.com/link/13?r=https%3A%2F%2Fwizzair.com%2Fen-gb%2Finformation-and-services%2Fwizz-services%2Fwizz-priority
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa1ae346f8,0x7ffa1ae34708,0x7ffa1ae34718
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2180 /prefetch:2
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5572 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,11519279481549932134,933280549490284075,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2700 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
70e2e6954b953053c0c4f3b6e6ad9330

SHA1
cb61ba67b3bffa1d833bb85cc9547669ec46f62f

SHA256
f6e770a3b88ad3fda592419b6c00553bdadc50d5fb466ef872271389977f2ab4

SHA512
eeacb0e62f68f56285f7605963ca9bb82f542d4e2ccc323266c08c9990cecdebd574e1ab304ae08ea8c6c94c50683180f83562f972e92799ebbcfcd8f503fb5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\437bcabe-3e40-48c0-b21f-c69f9a3743bc.tmp

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
180KB

MD5
497835d373e12af4cd257487dd5d3612

SHA1
425950e9427926ac0aa7940c4a18a44ab59df47a

SHA256
e11ff08dff0a884b311133e2469146b2a54319cf60094511e098df0c3677c4e0

SHA512
aa05611f56185e02289345f9c286ca98f96d5e1d24c8d152605e866e60013dc2945fc60f826e81459003ca9c2b7d439c0f6fdd173cbee57cd751ee51b18d2bf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
e0a5a2ddd323091916780278042b666f

SHA1
6a8fcb307d0259b1f6374d9e337da6981afa67d8

SHA256
9e017c418006fc1d7070e581051e07a293dc77b3f5f3bdfe01ed3d34491336e7

SHA512
061256b8600ce3cd792addacc0e48429462695b42a9b2c7cb280fa1ef9dbd846ea46c91ad4ae3a3ae8044baa5b3dc27c80c55383d98396b8232be2b5b9af8d93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
aef74d1518913efc2fc2250cc2fe0d80

SHA1
657e828eecece68c80c9e0b935fa9f368908f9a6

SHA256
4945bbccc5501d42541fe892e2355a9e1910d92728377075010fe84f0aa58630

SHA512
a18bcae16861d811795ea0ca27634f6734df11ef69786e6da80314da4449ac668287954db68818476386b7107172c59d14b051c4e082dc8e82e7b51540b98f33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7c16df487a4e79b1ce8c34d93f008bd6

SHA1
bb3f7f8063bc9e068f5ad582417febae7bd7f370

SHA256
39ddb5802118789b0f97e59229afec0f8db39d79b7f76dfad03b4ec1f69b9fb6

SHA512
611a86d669775595a176ff0f00ef6bfd7435477f7a76c7b3d1c301ce57c812694f29510110ad7b1a3183fd81b0718c0c8728536c04d3fbb52be740caae29de6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
dcb57a6e5bde2402fa3655d63e525525

SHA1
dddfcdc9e74334216f550f59aaf491f792999081

SHA256
994bcba973df0c4ca21c194f3ad9f0d130a63898124c6760c5ec529373b2586f

SHA512
1e89a2e2afd3da8fdd827ed5c7bad4d28ec39402a9bd3edcd5c48aee36229d217f3bb747717959df9fc90fa210428c4dbe696624750f1de962b0576ed8430343

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
76d630d74ee92e0177437f7dfc72c9ce

SHA1
1531782c1a6c08e816020876a0698f5c7ead7c01

SHA256
18b6879ac4b485ceb333a98bd1d783b382d322e5831ba7f324fa167353ada1b6

SHA512
26e3ceb1ef62cce57d915564720fc3ccd6fe4951c9dace103bbdac08c2f8471fd07bc8d44cd69c45b3ac23a4a016bb885b9c19b445f2f7b2d2311366bb5b9446

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
5a478f1e08816969e8214f982850b754

SHA1
1cf5e7192f3c6e31c7e27b6cb34ebf89036eec0c

SHA256
665cf5612c61412c9acc928b1e155c8f11ae83905ce614d9a1a7ad72cc0fd489

SHA512
7e7ff60c157841f6f5bb206ebbce29f6df3a6c0c671805415ad7226654e13da49ad76e39a6d0afe28992348f3b5685ecacbfb44178fd61998c54caebbfd97832

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ad7df69b07901d14ea8501a5fedc92ef

SHA1
c8beb41c507f436baeb659154230e6b672921d25

SHA256
c0a20c225694b6531dbd5dbb076d055aabe17a5480469156382dd734cfe5a065

SHA512
b8a4bb19cc746136aeda3fb6aaa826d8f0a26d44ef7ef43df51ef8238c39258ea2cee49a8be412074bdaf267574f5b3c66cc24bcfd86dd48579ab58769862e04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5806f0.TMP

Filesize
1KB

MD5
d4f954e636afde3fe4284d1314157589

SHA1
312a6e537e473491f8f8ab6cbd3a5df4460b5e21

SHA256
e2fa10dd300ab09bb7d7cfd6260c2251a59ce922d71d57f15f8fa2743fdd0a8c

SHA512
726ed4bad0d42d5ee3423790afd0ea5f1de45e6779be0c7a0e0b1149c21e272945169eedf4b86a48ae1092baf81d5224d067144b0b6ca2877a36e3fd8567e221

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
34ff695d434dfe27f327502eb4d30eb3

SHA1
b4355f4542f7fb1abe031c947c714bf62304e5a3

SHA256
42f584b61cb752dd0a701cbf338b74e8ccc147e85839a14040c9572ff8a2d1ac

SHA512
12ad5ae69bafe3ee0727abec0e8fa3c35aef9bd5479ea3a5f39e95036ae0d8621b1b5d3e3d635f110dee4c4516b273b3b955e67998428db4c56a808d938abe6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
735180b60e7115286c1c1222629acf61

SHA1
af3f797c2231bf080739a7bb0b24e90169b3fc63

SHA256
0b0f06f2127510c1f0875b89822c60ebc71b4c525c8dd4813bae460109f7981b

SHA512
a7d2602b4d6c554076b8ca74430732f91cc0d45bc135d529dfb4a0635edc7378ac20f0f1814fa1e04b440fb8ed0f4f438c80b04f3c0d82b493ec8dcdbebdce7b

Download Submit