Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    14/03/2024, 14:19

General

  • Target

    c8d3bf0cadf1c632914f7977a2a7b8c0.html

  • Size

    432B

  • MD5

    c8d3bf0cadf1c632914f7977a2a7b8c0

  • SHA1

    108cb5cf52c68a634db6933f04d35fec88705f26

  • SHA256

    f35e21b543cdad4b21408918207886d391609b8c55dded9476564b270faff68f

  • SHA512

    6ecc7fef274cd52edd2ec74facea907490fa214494694e364806f08275c3b92fabfedf96c2d5d9ea85ac2909b2988365b08cf2badac0ef3e8c6351b2b20e4b0a

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c8d3bf0cadf1c632914f7977a2a7b8c0.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2356
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb073646f8,0x7ffb07364708,0x7ffb07364718
      2⤵
        PID:428
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
        2⤵
          PID:3332
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:2444
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:8
          2⤵
            PID:3188
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
            2⤵
              PID:2532
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
              2⤵
                PID:5028
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
                2⤵
                  PID:2732
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
                  2⤵
                    PID:3908
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
                    2⤵
                      PID:1832
                    • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
                      2⤵
                        PID:3592
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5276 /prefetch:8
                        2⤵
                        • Suspicious behavior: EnumeratesProcesses
                        PID:844
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
                        2⤵
                          PID:3840
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
                          2⤵
                            PID:3584
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
                            2⤵
                              PID:3504
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
                              2⤵
                                PID:1548
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
                                2⤵
                                  PID:1944
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
                                  2⤵
                                    PID:2912
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
                                    2⤵
                                      PID:6096
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5656 /prefetch:1
                                      2⤵
                                        PID:5424
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,11028435663564645458,13742660967652263027,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4936 /prefetch:2
                                        2⤵
                                        • Suspicious behavior: EnumeratesProcesses
                                        PID:3016
                                    • C:\Windows\System32\CompPkgSrv.exe
                                      C:\Windows\System32\CompPkgSrv.exe -Embedding
                                      1⤵
                                        PID:3964
                                      • C:\Windows\System32\CompPkgSrv.exe
                                        C:\Windows\System32\CompPkgSrv.exe -Embedding
                                        1⤵
                                          PID:4124

                                        Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                          Filesize

                                          152B

                                          MD5

                                          cbec32729772aa6c576e97df4fef48f5

                                          SHA1

                                          6ec173d5313f27ba1e46ad66c7bbe7c0a9767dba

                                          SHA256

                                          d34331aa91a21e127bbe68f55c4c1898c429d9d43545c3253d317ffb105aa24e

                                          SHA512

                                          425b3638fed70da3bc16bba8b9878de528aca98669203f39473b931f487a614d3f66073b8c3d9bc2211e152b4bbdeceb2777001467954eec491f862912f3c7a0

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                          Filesize

                                          152B

                                          MD5

                                          279e783b0129b64a8529800a88fbf1ee

                                          SHA1

                                          204c62ec8cef8467e5729cad52adae293178744f

                                          SHA256

                                          3619c3b82a8cbdce37bfd88b66d4fdfcd728a1112b05eb26998bea527d187932

                                          SHA512

                                          32730d9124dd28c196bd4abcfd6a283a04553f3f6b050c057264bc883783d30d6602781137762e66e1f90847724d0e994bddf6e729de11a809f263f139023d3b

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          552B

                                          MD5

                                          d97943a53bc55a4df2085058683f053c

                                          SHA1

                                          38ec6a571e5df553407b2d61666c28ce5758653e

                                          SHA256

                                          103584ddfcfff190b8fa29c37276de45468c1432a73aac338f77edde0c90c07d

                                          SHA512

                                          7c32c2388a3c3e153af2564493797174cb7ab7e81ef09e52c270be45a4b629ce9060485c5acee6c3f12f875fde9206fb94a6867a26e629e3b5c8725a33e7988b

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                          Filesize

                                          528B

                                          MD5

                                          bbea1a2376b06f52d9fdcaffb0bc574a

                                          SHA1

                                          82fba6d18ddb24301f22d08ac8a31d27b1c01115

                                          SHA256

                                          89faa309bf54bf3321605a9e03bf13655a9fb3542950bf205214159c1e4021c8

                                          SHA512

                                          df7fa9ecdeb97069e363ea4560e4b7bfa807a7c3daeaa71f788282515c5225c9f31e0b35a765438e2c733b6794b341d0e6d5857344a6c8666f64a9c27744b576

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\000\t\Paths\MANIFEST-000001

                                          Filesize

                                          41B

                                          MD5

                                          5af87dfd673ba2115e2fcf5cfdb727ab

                                          SHA1

                                          d5b5bbf396dc291274584ef71f444f420b6056f1

                                          SHA256

                                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                          SHA512

                                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT

                                          Filesize

                                          16B

                                          MD5

                                          46295cac801e5d4857d09837238a6394

                                          SHA1

                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                          SHA256

                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                          SHA512

                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_worldfreshjournal.com_0.indexeddb.leveldb\MANIFEST-000001

                                          Filesize

                                          23B

                                          MD5

                                          3fd11ff447c1ee23538dc4d9724427a3

                                          SHA1

                                          1335e6f71cc4e3cf7025233523b4760f8893e9c9

                                          SHA256

                                          720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed

                                          SHA512

                                          10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                          Filesize

                                          1KB

                                          MD5

                                          ac0a93d928bcf1c63fc47c131b21a439

                                          SHA1

                                          e27b2db2914e10b7d78e5c49145f9965163a9b67

                                          SHA256

                                          ce6c5613a5e7b564f0c73eca15e0bfbca225a2d812da4e588e2826db06d503dc

                                          SHA512

                                          8bacb570b2e845cd92e116568456f2ccc8421454588bb5b18c0f51f2fa27bade0e1900dd8994b8510d40de375a625815e55891f0f6a3abe23be5d548d6fa8063

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          6KB

                                          MD5

                                          51edf0bab8ec4692b96c4a23bcb39e09

                                          SHA1

                                          3dec144e3c0a934ccd48fac1a6727376a2b7ef24

                                          SHA256

                                          7c3e08f58c8fdb7da6c97b11ebede1a01cd4ad1bf394e7e7dfb914ee6a7120cf

                                          SHA512

                                          da2dfbdd97d30fa734d9bb86bb80ed6105151e264470405553e093497c94f34948111ead404e28f3d7bd2eee7d9777bfab040ebc3559d7fd51c067f4d2c0fdf4

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          7KB

                                          MD5

                                          63ded485be1fbe23255ff6f27a868196

                                          SHA1

                                          29b73ca78b2c88d7f2dc9868570732a6126cdf2b

                                          SHA256

                                          99d903e36e2f0ef8f28c7ecac0f310522bcbf29dd4abf098cbac3115e373440f

                                          SHA512

                                          b63a8d5a11763f02de80fbfb34d869b95b4d41fdd60ea335dfd68ed0f015e6a63420fd47918f1bb2b2d3c663f304c4f1cfeea3a013b1218371228ea068d35319

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          6KB

                                          MD5

                                          4ed7a2e423d0160c36fa13c352ae512e

                                          SHA1

                                          69fbeb550376414becfd090bc4c8c5c8f3e02415

                                          SHA256

                                          299df44ef7c7df1e60b860cfd58e0693519066ee913f45817575d39dba58046f

                                          SHA512

                                          9146c5d6c249ce1d8a7b12facf9c002cd2a3908c6a7c98c02304e50bd0a7036691ba42d4d54d3694562422a16048d7b17dafe793d0b7389032261b63e5256330

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                          Filesize

                                          8KB

                                          MD5

                                          33769ec1b190babab0175260ebc93c1e

                                          SHA1

                                          5135b5e7574ccfafe1cb190200c3f1118dc8745c

                                          SHA256

                                          d3593d47bc88d39032fc92f38326fbef5f7e019ea79d91f1f520ea24288aebb9

                                          SHA512

                                          9418c2a87583e8fb9f2609031f9bdeb5d5efccb0f33afd9479513cd07e544678fe601c343e96c71b6da4aa3824f211ade6011d08470c5744160ae656292603cb

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

                                          Filesize

                                          72B

                                          MD5

                                          ca1b220e5728e02d15cbbf7e23f871a2

                                          SHA1

                                          7d2fadaef856e9bfe992f94733f4384b59983b9c

                                          SHA256

                                          92f945d6ff28c457a739ce2384d841aac5a59d6ac4782048aee26f88ff33335b

                                          SHA512

                                          58de6e24d4849b4db70d1f5afd71638779203f03f736c490de74aab7b0fe824c148d8616e363939f60675caab18b70ea3221c99466747f155c522c9c5af64333

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe578e36.TMP

                                          Filesize

                                          48B

                                          MD5

                                          bc467ae7fed95094ca0f413d7976ec97

                                          SHA1

                                          bb00c39f4d752621c936731126a3c97c7c791d31

                                          SHA256

                                          011bc2b8042fd9b19a7b706e7703685541280343eb19e4a291b2a3c3cf22fe27

                                          SHA512

                                          8245608e332e5119977de27968284860003f240c08d97e1d22e5d2033141d1757466eb805d27f7bfd332379838984484635e745cb3365c285a9895850b2cf6d2

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                          Filesize

                                          1KB

                                          MD5

                                          6c7ce001f884d9691c4b15eafd273da1

                                          SHA1

                                          36cdd1a49bad011b2425101835a4af94881feb1e

                                          SHA256

                                          693f85a809eec532b9d51a732e9ebcb939023237d1a793ee6339ca31c667e269

                                          SHA512

                                          c4f43bc08fb4e1e4af518a81632ecbe6b5bc699ff355f12c0e61a6b7d37b1d528db5b4f0d324ab9e344c2827b6c41f5a3ccdc5bd565517955e04fc53ece47bce

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                          Filesize

                                          1KB

                                          MD5

                                          328cf1d7b3f5b36e59ebcd5c68c44e46

                                          SHA1

                                          8031f0f1f1d827bd1f8c0928e78271b4c1527401

                                          SHA256

                                          30d195d9becb4cf83e3a2f695b4472ccccb0647c0f1525b2aaa5e290cc38c4e7

                                          SHA512

                                          6ca79418229a864b1618c4ff0378a64a9f5cef3b7fd72312b4f1210cb9d74869d91d0281fc83b6ab258afd42e80d95beb379d3d3c8ef59927ec5223d5f65d971

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                          Filesize

                                          1KB

                                          MD5

                                          494879e5f92208ec3a233689dcc4516b

                                          SHA1

                                          e142a6481bc5927041ce76cb5aa70f1e635f16c8

                                          SHA256

                                          364ac5bccbbb8a09061eceb853be80cbbd5913a74a949efcb7ed0f6da026f5cd

                                          SHA512

                                          fbc7872a6c368f0a377f145e72365fdfd4a7b9c408bfd009832208a661405427f1349a453a7f35a708ebc1bb62f2ef13bb897e35b542bfb3beae3ef76df964bd

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe578d6b.TMP

                                          Filesize

                                          1KB

                                          MD5

                                          1b0010a80e0f4ef0d0139f75847e494d

                                          SHA1

                                          9860901e96fafa71ed49fb1ad35896d0b5008420

                                          SHA256

                                          874d1049fe2c82036e64d9527643bbbad83851fca3d8360aae44a549ce180e8a

                                          SHA512

                                          d3cfa73d3d7dd9c283c971cfce0126fb3865b01a41d1b14f54c60af20a66cd5c9f3078d504d1baef5649e232d7977e2f9fef8d1627e2e9c0e28d71eec7d5850d

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                          Filesize

                                          16B

                                          MD5

                                          6752a1d65b201c13b62ea44016eb221f

                                          SHA1

                                          58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                          SHA256

                                          0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                          SHA512

                                          9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                          Filesize

                                          11KB

                                          MD5

                                          83627a369a0c6d309c99ed8536bb0233

                                          SHA1

                                          b9461ebc2d226505b9aed8ed5417f57a71e619f3

                                          SHA256

                                          cb03154c31c49d831bf32879117fadf31a21328a63dde6a6afca468b7c725b5a

                                          SHA512

                                          4eb479f195f392b3d01b2e37bbf2c36c41ab6aacbf5363b0cbf1ef60eec2809e72b68a4260761071ed6f097747831534ae598e898b840cfbc528e45e14e4c485

                                        • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                          Filesize

                                          11KB

                                          MD5

                                          8c4ef4ffdb186631b860742bc6d5b165

                                          SHA1

                                          9e28f673d155df25435a6a870182a4f586fe22b6

                                          SHA256

                                          76bc2e50787e070716046f70d14a4282609607180450ba64acdb672d9811b155

                                          SHA512

                                          9c6a4aea33ef9ecdb21056cd855928118aaff7c0e07394d005f685c0f1f8e654098c8a4c3bc951b100b80c01069bb347588b5f1e64bbd9cae3dc8a45f50e616f