e847bd8adeecce4af3a6dd3d72a8b6db88d44b644be93bd846ba027539c59554

Analysis

max time kernel
184s
max time network
208s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24-02-2024 15:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a224e483f1dbd007690634adcecc5560.html
Size

57KB
MD5

a224e483f1dbd007690634adcecc5560
SHA1

6fef2c568a364c52d112cc15a5fc1f6f26a17b7e
SHA256

e847bd8adeecce4af3a6dd3d72a8b6db88d44b644be93bd846ba027539c59554
SHA512

4047d620964a0977edf4b3e2c600fd09214a0c03877aeae195062057c165faaae32a8895d44f3225a6e147356e45b025bc089e1a70af8c8d9a521ca908939ba9
SSDEEP

1536:gQZBCCOdB0IxCiPxUfHfXfufifKftflfbfTfqfIfcfPfqf2fGfAfkflfdfefKfFo:gk2z0Ix4/P2aildzbygkXyu+4MNlWS9o

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
5012	msedge.exe
5012	msedge.exe
492	identity_helper.exe
492	identity_helper.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe
2524	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe
5012	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5012 wrote to memory of 3056	5012	msedge.exe	53
PID 5012 wrote to memory of 3056	5012	msedge.exe	53
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 1312	5012	msedge.exe	89
PID 5012 wrote to memory of 3936	5012	msedge.exe	90
PID 5012 wrote to memory of 3936	5012	msedge.exe	90
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91
PID 5012 wrote to memory of 2932	5012	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a224e483f1dbd007690634adcecc5560.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbd7e846f8,0x7ffbd7e84708,0x7ffbd7e84718
  2⤵
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:1312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3404 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4080 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,4534191973568739550,16119700704456321398,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4952 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4392

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f4db60c9bb06ea5452df26771fa873ac

SHA1
c118183a1315a285606f81da05fc19367a2cdfe1

SHA256
f168242e74bfde18bacb9e18945a39bb447188eba916c7adf0f342ed8d82281e

SHA512
180ed98f9d5a14a22687a099c4a0ba6b586610f7b8b4c8de89f3b91713b07a2ef3726fcd318cb4e270b1745213b898037d29cca4b490d0c91833b797d69ac406

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f5b0bf4edca2187f7715ddd49777a1b2

SHA1
eb78099013d0894a11c48d496f48973585f0c7c0

SHA256
562016f9159ef363fcbe62ed13ee26052b31d4f67dc5ea6d60864a7d5dfa50a1

SHA512
1039b98cffd32ca4c9e37486b96e01b167d76b19dd8440a21da4932d677c463f4c5ce2260239e8337f59bd61ff3111905e23ab71d3ca5b20e7d2935fea7952c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
195KB

MD5
873734b55d4c7d35a177c8318b0caec7

SHA1
469b913b09ea5b55e60098c95120cc9b935ddb28

SHA256
4ee3aa3dc43cb3ef3f6bfb91ed8214659e9c2600a45bee9728ebbcb6f33b088d

SHA512
24f05ed981e994475879ca2221b6948418c4412063b9c07f46b8de581047ddd5d73401562fa9ee54d4ce5f97a6288c54eac5de0ca29b1bb5797bdac5a1b30308

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
ff0fe12d65db80555a088f1b009184d4

SHA1
7d533df8225b198246de4d2296026f8a4a838f77

SHA256
903d3d2ccc0ffacf8772bfa09c5eba87fcc99928ec447b8b10f20e758a4cbdb2

SHA512
f9593ed75f01b3af5cb265b9499225c98ab1d14314e1010956f197d6ed98b53327be0fb6cc63b9856edf79f2f6f192ce06bd1bfc1be67f7cc3edd18616879abe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
62a3481d2c3a3aa280fb04613289a4ff

SHA1
d80a3e475fa31757317453a068c7f5ca3aabc0cb

SHA256
db7ab9937a32065628aedeb1342bff0a891e79ff1d0b2448ec031374462b5808

SHA512
91e7f812a5ee7d0a7166abe05612d6d29fec977b42b76322ae799dcfb968a65ff364cc7979f0e7fbbd3a5dd9dc6dd848a5a56d12f58bb661e04d0ddc024df686

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
ee58916fe6fa3d4856de54da7d0c7646

SHA1
ced159c021d33b6c2122e8d3fe8cdbb84d6f1861

SHA256
80537b2f2413446373f51774efa02eac2018f059de6b5ad8d009477f872ef3db

SHA512
d1a0fcbffb888bf5005e05ee50b57d3292614c8e8f9685c57b6d275efe9b699b9c4946b756fbb84294dbb97fd24938f917a4a28a7a92afaf59aadd49a703c9f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2430a76e650ce31d6abc05c271fbbc5e

SHA1
640555dc3149942bb7225609e9e6003a74fcb5aa

SHA256
0a14231ba83e9dffd750af739efe209123d937f95c8b4b9ea184679e2f7ac462

SHA512
039ed4b770ca81ce2429b3147caac89dc6d4de32f3e8a87d31a7664545e0247d9bac9f3941887e45ba66a20f917757bc39f85fe0800e17586785a03e3bb2692c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b02b13a96e13b02a2f4af7b4a9d16def

SHA1
eb202642a6b075b51cf170d16794a48ecdb38679

SHA256
7cba8c3ec085141a83251c5ef844e314f241366062cc03b985b6d6b0d4694d60

SHA512
006f3a8dfe7d7ed28b1fbc4cac3651316975f21cad6a8724bcfe2144b372eba0d17b171da010b716d1c2d1efa6f80ee0b85ea3e70196aa181fe08f43c23f34ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
704B

MD5
7c24612528877a77c9edf4298c62310b

SHA1
519a35218faceb9076493ff4ce3e4e83f21b50c0

SHA256
7403bc4c0cbfb9a401dca86f08f7de225c823957cc6ed75f4a448c50e6c69b63

SHA512
73d6cebf032ca50f1949d013428e6a4c86da1f039eeed98c0bd47f776ab5238ad707f1e0dd6a3d704e8b267fae1332950451f32bce5d8bd4d1b6d0b25ec7aa0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe59f8dd.TMP

Filesize
370B

MD5
c8fb078215984025989b91c0ed2505aa

SHA1
41f83640ec7feebdf8eadfa237e967961ac7a5ed

SHA256
cbb5b6fc15e55df56fd6069577f1a2fea8933b6e43987031a12f2eda93c9de00

SHA512
122bc8f1c3783a8c21de7854e6a77fa2d38c52bec0ada07fad9c866e7d926721450bc98e4a81341e4a7921b350c1d5b2b08019f56fa89d790f70969469a7579a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fa7aed1ccc15d7bb96ae32b0714ac14e

SHA1
429da6d7d46c05c65f6934eaac07aa23fe33d21c

SHA256
a4f563bfc8b25769d62f2ac6847d16a3e29122260dd926a866602b503d27cbaf

SHA512
9751b104b539fc311532ad437fd61aa0375f5a2b0dbe606d66eb07e8eadc7c2f71c517af3caca76bff9b512cb7e1fd1417f21b8d612e80cf967cc29d7f6fbb61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
8KB

MD5
756a3ea243b1e98719e182f128692f71

SHA1
d60d81046d63a4e159c0896725adecbdfd9edf4e

SHA256
7dd700b45225390b108549aaba114d20dfe4f9eea125956890c73862437f9424

SHA512
2367409969638fea2b691d91e623a2c23677cae2c19191a544a24201c61f8071291b7a98640963ce967dec27da18cb50feb60e5a4524dcdf2673803d16a3dd10

Download Submit