b517209f452c40de839d48103545c15ca45f83410ade3b23156f9190b46620c1

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
15/03/2024, 06:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

caae002a82a952fe34a417d70c9fb1b3.html
Size

39KB
MD5

caae002a82a952fe34a417d70c9fb1b3
SHA1

f8dcbd43e945ef75a07fcce442e17ee4a9c67e31
SHA256

b517209f452c40de839d48103545c15ca45f83410ade3b23156f9190b46620c1
SHA512

4627c06c2b07882e29e104908445dbe064520061d99409985b0953222ab254af0f3bd9f02d374a345b42bd57fb05503144918e70a4f4c8d0fdd442e5772845c1
SSDEEP

768:HhDh7gs7xKdEvjAv3bwY/uO61f8f74IBNw6/3ALZmblnhEgf3I1LO9nZwq+sTY:HdhxxKdEvjAv3bwY/ul1f8f74IBNw6/q

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4224	msedge.exe
4224	msedge.exe
2372	msedge.exe
2372	msedge.exe
5472	identity_helper.exe
5472	identity_helper.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe
4792	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 412	2372	msedge.exe	88
PID 2372 wrote to memory of 412	2372	msedge.exe	88
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 564	2372	msedge.exe	89
PID 2372 wrote to memory of 4224	2372	msedge.exe	90
PID 2372 wrote to memory of 4224	2372	msedge.exe	90
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91
PID 2372 wrote to memory of 4148	2372	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\caae002a82a952fe34a417d70c9fb1b3.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa387646f8,0x7ffa38764708,0x7ffa38764718
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2112 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:5180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6440 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6648 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:5620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,3518169503964100533,9983406860311421421,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6428 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4792

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e494d16e4b331d7fc483b3ae3b2e0973

SHA1
d13ca61b6404902b716f7b02f0070dec7f36edbf

SHA256
a43f82254638f7e05d1fea29e83545642f163a7a852f567fb2e94f0634347165

SHA512
016b0ed886b33d010c84ca080d74fa343da110db696655c94b71a4cb8eb8284748dd83e06d0891a6e1e859832b0f1d07748b11d4d1a4576bbe1bee359e218737

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0764f5481d3c05f5d391a36463484b49

SHA1
2c96194f04e768ac9d7134bc242808e4d8aeb149

SHA256
cc773d1928f4a87e10944d153c23a7b20222b6795c9a0a09b81a94c1bd026ac3

SHA512
a39e4cb7064fdd7393ffe7bb3a5e672b1bdc14d878cac1c5c9ceb97787454c5a4e7f9ae0020c6d524920caf7eadc9d49e10bee8799d73ee4e8febe7e51e22224

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2ff76e13-4cdd-4593-a2c0-2e75544301bd.tmp

Filesize
6KB

MD5
7f4d452257513f0726c9ad4dc96b8064

SHA1
9aa999ae228e76bf1a0d02db9401a94e245107e9

SHA256
11b06cc3df580e37a3632dcb999b9cab4cc6040fdc57a0a2e8dba304bb563939

SHA512
b139352c898e7c6e524c44aa7de93b7e880f5e59e3b7f67868ddd5cbb032ead49710f9891a03e8fb580e0b1cf22f7217584074add1f747f6ba9b087c2808e820

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
131a137c803e2ebd0226f34907e254cf

SHA1
477376c12203a876afbdb8d0c5f222263c485c37

SHA256
5ca19f1ef103e6c1878c5fd37164d6215ab031a74955be38b9ad3918583d9486

SHA512
b18ca570412b41182037aee28b384c011b8cb73ae0e05d6db5b56aeb518240ee14295ffa113f5cd1fa977d3ad771875effa04b6859b9a55451838ceb27a83dab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
df891abded68074b1cf1a227759006fc

SHA1
2927205b71ff914528d4afb91d9b8369e6b2fba0

SHA256
2f68ecb3af365218951704382013880592bd020374c47962cea46cb71d54fc73

SHA512
032057264b2660b3a9a7945e0b5d48f2f4c8333502d0a9f893f6ff22bf341895555da7a1bd6868577d8ab6b90a102c69b90fa275b38c749ac38886600055985b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4335e4b9f7e43822f27e347863688b78

SHA1
bd1daa1082316f34055598feb8e539af8c446283

SHA256
b9e0037c1f9a3e74f55fbd8d9b3a0d54007e54081ac6dcb9017cf144c45f61e5

SHA512
6aa2e53446683ab5e4fadef2cb9f9c7f81598395a9017dfa63bfa3d92fc8275801a32bea5ccda7bcf62f1012edc10d19c0eaf04f0d66d0483ef225d810a2158b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8cc21935303c1263e9d3445b80776c8d

SHA1
be38943f1b91fb3310b8502ea029617af6f7dade

SHA256
544bed2484ecfc8811cb23a1d21d4bd274e560f0930b285c8da997a9b448ba70

SHA512
8cff0cda4ab3e72ce1ea8ff9bc2400f0a5b2b236764398b88941f1fcaf5c2c3fbbbbfb8af8e2989c6da921598e7547ac283dc78f3660b1f1e206260e4f781471

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f4848896798aca4c6a49990acc91ba67

SHA1
692a94b0e4705b0bc4125f3af2e7dac750ad44b2

SHA256
c4ab9240d58f09061c7b3e6dac316ec4456a8ac5f220b052d1517215872939fe

SHA512
d885151dfd628d87698f7f754c48c699753ffbff67b9a2f9528a175c8c3fff5f86fa52c3fdcd5c4219f5e1ff63c5dbe08893bd2426a7eb2459217e5757c90f0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
707B

MD5
b02b1cf064d72661e7d8d10d908ca6f2

SHA1
d35b35b2e0aa9840e9fe589a04e0c3d33a0686a6

SHA256
e43f8ff12ded97a6ed3d01cab3b81eb272a332334eedbb0053c55cfd75b8075e

SHA512
190de57e3550f15e123cf56299c1d6f9162a14633c62e9fb7ea1be1ea613fbcb56937d0ba0d927b41573e234adeb3fe6ef2bd4e633b0fb41b3283ebc6bf75f3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe590110.TMP

Filesize
707B

MD5
7face1fa66b7fbd2aaf5b66adfc692b3

SHA1
44b9b31bf89fdeedf4fefd6c37c656f3871ca19b

SHA256
9a4b5c46dbaae7b1611c079343c83563fb8026b290d742162eb26daa119aa50a

SHA512
76a1338e36f634a049b12a5c381a262d0f42eb354024f40d0adbb62cef0d7a1b6ee2672335d0e5c31abacc4aa3193ea2f971c4835719efb4672f05986d050a4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1db02b8f89875e8e48bb910eb205070b

SHA1
f32419896d0d63fb30ef87407e1ce746c5d485df

SHA256
3fd1c8ba48f44436e6d1ec45cbf615ac2cdf8d72909ad205123c3841d357d1a7

SHA512
52a8379a94355e27a48b5966df5a3723eae3217b98464c553289438c698034cf4320af77ba9a433b0352d1d2c0ffba8fa6da96277d1a20a9fbd0746af0204ed2

Download Submit