Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    08/03/2024, 12:40

General

  • Target

    bb4832aa5614b52fd6c8704078a81098.html

  • Size

    430B

  • MD5

    bb4832aa5614b52fd6c8704078a81098

  • SHA1

    8a028b5d5307bc48816751b15434c3221e064cb5

  • SHA256

    323f38468862096e05a0776241eb1bd38a67e67a8ad2ccec53e02ebad0e1aa5d

  • SHA512

    1cab9d56c1ab97f69e4547db63222f484755fa9329aad52857789e77e6fa8fe5dfdf16622763ec1ae7bc8d3a8d1da16d58be993e3c385f8e8865f8b2a0e2e45e

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bb4832aa5614b52fd6c8704078a81098.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2396
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc6b2e46f8,0x7ffc6b2e4708,0x7ffc6b2e4718
      2⤵
        PID:2036
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
        2⤵
          PID:1720
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:3768
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
          2⤵
            PID:2744
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
            2⤵
              PID:4192
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
              2⤵
                PID:1932
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
                2⤵
                  PID:3248
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4968 /prefetch:1
                  2⤵
                    PID:1640
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:1
                    2⤵
                      PID:3952
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5148 /prefetch:8
                      2⤵
                        PID:4924
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5148 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:5108
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2540 /prefetch:1
                        2⤵
                          PID:4724
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4396 /prefetch:1
                          2⤵
                            PID:1932
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
                            2⤵
                              PID:1432
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
                              2⤵
                                PID:748
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1
                                2⤵
                                  PID:1556
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4388 /prefetch:1
                                  2⤵
                                    PID:4724
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
                                    2⤵
                                      PID:3592
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1339537197115638047,2131648500270234489,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5424 /prefetch:2
                                      2⤵
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:5888
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:4216
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:1432

                                      Network

                                      MITRE ATT&CK Enterprise v15

                                      Replay Monitor

                                      Loading Replay Monitor...

                                      Downloads

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        9ffb5f81e8eccd0963c46cbfea1abc20

                                        SHA1

                                        a02a610afd3543de215565bc488a4343bb5c1a59

                                        SHA256

                                        3a654b499247e59e34040f3b192a0069e8f3904e2398cbed90e86d981378e8bc

                                        SHA512

                                        2d21e18ef3f800e6e43b8cf03639d04510433c04215923f5a96432a8aa361fdda282cd444210150d9dbf8f028825d5bc8a451fd53bd3e0c9528eeb80d6e86597

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                        Filesize

                                        152B

                                        MD5

                                        e1b45169ebca0dceadb0f45697799d62

                                        SHA1

                                        803604277318898e6f5c6fb92270ca83b5609cd5

                                        SHA256

                                        4c0224fb7cc26ccf74f5be586f18401db57cce935c767a446659b828a7b5ee60

                                        SHA512

                                        357965b8d5cfaf773dbd9b371d7e308d1c86a6c428e542adbfe6bac34a7d2061d0a2f59e84e5b42768930e9b109e9e9f2a87e95cf26b3a69cbff05654ee42b4e

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7c18ab6c-06b8-465c-8162-d6d146b1f1b4.tmp

                                        Filesize

                                        6KB

                                        MD5

                                        0472092878b6a59a36108a6c81cb9b6b

                                        SHA1

                                        b699f4ad7f8ef235c434c47546cf24ad256bc864

                                        SHA256

                                        9af30b47efd41ba70522c93a539c707a023854f1f55517e2a7dbbd5ab0781428

                                        SHA512

                                        56864abc565a0ceaa73d18c423e764084e5f8ef903aad21a41f02d9969d412f3bf14b5f946d3c70519648b6d711ff1640633cf0d8ec7960a149b027ca83f8520

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                        Filesize

                                        528B

                                        MD5

                                        9e74e5dce7b1aa1373c1047f3ea7ba49

                                        SHA1

                                        03ee6ea73c1017a9e2f5a5d8e9546498b1d3aa8f

                                        SHA256

                                        861f680c762acd441dfc25bf99bc1f1bfb5d53d0bc15cc3a3d4900645429176e

                                        SHA512

                                        fd9feea8db77a5e3b798f0429dd58724e5f3c7bcab7f8bfae5793817408a66ca1ff5581139be1c2bc387e7aa28b4d4559f4cd05ca6b0ab6af5b4fe8921236055

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

                                        Filesize

                                        41B

                                        MD5

                                        5af87dfd673ba2115e2fcf5cfdb727ab

                                        SHA1

                                        d5b5bbf396dc291274584ef71f444f420b6056f1

                                        SHA256

                                        f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                        SHA512

                                        de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        46295cac801e5d4857d09837238a6394

                                        SHA1

                                        44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                        SHA256

                                        0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                        SHA512

                                        8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                        Filesize

                                        1KB

                                        MD5

                                        63146d9f542f556961ea3f5112c316b1

                                        SHA1

                                        a3de8b84f5f7a303be6cadb0dc96c198022f3a29

                                        SHA256

                                        5f276c07abaa091b1f9c70ffb2df23a7672de44254823ecd8cf321a977eca4d0

                                        SHA512

                                        0b46f9e001973c1da7d3340bc5234cd24a55d9012a4f397c2a961b1b1c8a56063e56d856764716d0cab97b74f8898e0de587dd30dee1037ae64f0ebfb9ad9fd1

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        8KB

                                        MD5

                                        51209590dc1baa1d72930f8dd7f8cfa0

                                        SHA1

                                        4dc4db8f12c061ce2347ae6d7f4f653e591b0f8c

                                        SHA256

                                        9e04e3293337bfabcd97f29f027a979d080becaaf2813581774934b7b377a467

                                        SHA512

                                        67b8b6614f01348a924c34594deabf39ab3d8efb37bec0611c41c99dc27c2b4a22aebc81be86d362f75f73f264b80aac4d94dfb47d1bc7f8fece0d0fd4ef3423

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        7KB

                                        MD5

                                        e05adda0ac53ac58729f60a89cbaa4e8

                                        SHA1

                                        5069213f45df0b0d97b22457aeb5f345f9ad2e66

                                        SHA256

                                        0ffc684b5693da521774ebfdbf2954bb48e95c27063627774c66318e6614a88c

                                        SHA512

                                        7a099f2893c1a03495ec936a7434959dec993ae83996f92290fd13257a3ab9bb790c4ee68fdae611220cc8fbb92a6659bc9dc947e2556e40c9dc37178136c7c8

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                        Filesize

                                        8KB

                                        MD5

                                        317c9da40c8efc410d2ebb1b770f0e66

                                        SHA1

                                        b09221e9d3f56344e4dc56c8ca5d3f2624f659a7

                                        SHA256

                                        8123c625482f309c6aecfe3fc43dfa2fa9ce54939887999ba579aef5e14537ae

                                        SHA512

                                        39d19912b7156b05df0c370a97b0d87d2a0d9ec498059aef86c1fa253b46c0fa5cf5e3cb949a4f8aeb250184b6ef3f0f2e4b023d9f022637e8dad728304303fe

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                        Filesize

                                        72B

                                        MD5

                                        55a203f8a2e0e45585aaad0c78737450

                                        SHA1

                                        5acf55e50453ad7e2235d5c17990b5fb04dc2e06

                                        SHA256

                                        7626790ac8af4c719bcac557d52fa0a4bee8d56beb4ba08b3397e944a2f0d309

                                        SHA512

                                        6574906587ead50bd4d73caea34d1ae324c779ec0d3004b2bea29e0b6bb1d90bda72c587436d5c00363538992fee371251b0e713730e04f194c1f9175d2c5655

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57a5c5.TMP

                                        Filesize

                                        48B

                                        MD5

                                        60b5a731891212ee54c68ee2ae147518

                                        SHA1

                                        2f3d4262b07e2157ad506d37f8fe9082e274a4f8

                                        SHA256

                                        7274d64cf9c6a9af4349a22b3ac0860d3907a72fbf372edc55faa2925460feba

                                        SHA512

                                        2b25fbdae3b8b03c011c5e9b54d40755f255101af602783554d4e2632eb0480a6632c964c78b481f76492e9cfaa5f59d6b15226f8bd40559c3be1c17ed5462a9

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        1KB

                                        MD5

                                        8439552e5ec5c172ddcf97b6f6358db8

                                        SHA1

                                        8a9a8ac2f2fca3cc3f447dc2319ff040df48eb09

                                        SHA256

                                        2b6198de7d77bbdc523c276ab17afd4110e9c09a28d340d8c83a7f835bbce644

                                        SHA512

                                        e72063109b88dcb04ddfb2ca24564eecaa80dbc41517b356017894bb73d1270a7fb32564a39da74d65a049ff5c58c0175c74a430dfd552caed2deb65fe1c18ff

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        1KB

                                        MD5

                                        0183a66a909fc9558ba33dc2096c7939

                                        SHA1

                                        069a350eac0a2d273efc8c78b41539b766bc82dd

                                        SHA256

                                        329a4fbf58cd8b8764b400dca3f74a6c230f1ceca09b4ea9b00ef49e2d0eaa37

                                        SHA512

                                        db1c3407a885438b0a02e836cd2e17bfc827da66f2b4e6e45055365723d2e98d9d9f6e50194492e618f0f51bc7e30ef3fb5ed54fc140ae20ff2c80ea23d43f7c

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                        Filesize

                                        1KB

                                        MD5

                                        e36292abf085e6fba058d0e7228d2889

                                        SHA1

                                        133091bbd20a4b3b23b40ce408b9fa6b10629f80

                                        SHA256

                                        8edddc149f271a44228a610c030c5218b8239f1c246ed09bc02ff32c5a58cd59

                                        SHA512

                                        8ecf832053e4001fc8fdbd7492f253deaff1a9bfa07eb35956afd347ebb09aae3e6026ff6c30c36ae35376c9514f84ec142251b587f27bdb3217cab3c7636e88

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ecf0.TMP

                                        Filesize

                                        1KB

                                        MD5

                                        8df1a70ceb8410aea53429e2614e9d72

                                        SHA1

                                        212bdb6868e082b951321ffe33778517b6bdf220

                                        SHA256

                                        f9f654ae03cb009b93d147873ecc8edadbd5d01fc4261bd16983aa6a3e43f3ab

                                        SHA512

                                        2df29b6acdbbe835bb345042899cd82d7f4c273cecbac1d34d450d39ded0c9a15d7e3c66b4eb28470b7687b933849a430e94bf948aa7401a66cdc811ab504cfe

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ccc19cef-688a-4a77-b9c8-725553f6fceb.tmp

                                        Filesize

                                        6KB

                                        MD5

                                        0609e24f51fce28ebfc4711f71e4ef09

                                        SHA1

                                        2221f60aa2ad4d8d049fda242a8946ccd385b98c

                                        SHA256

                                        ccefc0b06842e4ee43a6371bca10101d4324ebe8a13832412987d5cc25e86e37

                                        SHA512

                                        1a593a8bcf60f241413d2fd361fe1e95e2ad41bfc74f13967dfb5d22fa5f5ec9dc79e3b8613a6f8ae0494e8561b667729b99e3aa6d2937bd1a8d9abf4f0a9464

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                        Filesize

                                        16B

                                        MD5

                                        6752a1d65b201c13b62ea44016eb221f

                                        SHA1

                                        58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                        SHA256

                                        0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                        SHA512

                                        9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                      • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                        Filesize

                                        11KB

                                        MD5

                                        a7d161d39e2e8c7ab8d350da7c426ec3

                                        SHA1

                                        c840586fb2c4f920dc0059ad044ccb75c105bddd

                                        SHA256

                                        e90c977002ea81ad39a0efeddcd2ac991040055664757d55e0c30f22e8b3e49b

                                        SHA512

                                        b90d797958623258f74ef89e6cc82388c7384e39d88abe5c3a3721f5ce1876be4343988029ebf34be7ae69552df6ba5aba120c63205fe3d6b28609885d163e6e