hxxps://www[.]dell[.]com/support/home/en-uk/drivers/driversdetails?driverid=jr8yv

Analysis

max time kernel
145s
max time network
155s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
25/07/2024, 10:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.dell.com/support/home/en-uk/drivers/driversdetails?driverid=jr8yv

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
2692	msedge.exe
2692	msedge.exe
2104	msedge.exe
2104	msedge.exe
780	identity_helper.exe
780	identity_helper.exe
3040	msedge.exe
3040	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe
4900	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of SendNotifyMessage 12 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe
2104	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2104 wrote to memory of 4312	2104	msedge.exe	80
PID 2104 wrote to memory of 4312	2104	msedge.exe	80
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 4920	2104	msedge.exe	83
PID 2104 wrote to memory of 2692	2104	msedge.exe	84
PID 2104 wrote to memory of 2692	2104	msedge.exe	84
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85
PID 2104 wrote to memory of 2796	2104	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.dell.com/support/home/en-uk/drivers/driversdetails?driverid=jr8yv
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=90.0.4430.212 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=90.0.818.66 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ffb5ddb3cb8,0x7ffb5ddb3cc8,0x7ffb5ddb3cd8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1884 /prefetch:2
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2624 /prefetch:8
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\90.0.818.66\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5404 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4024 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5064 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,14334401870364844084,3908819313196782401,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2404 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1140

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f1d33f465a73554cd1c183cbcd0a28a2

SHA1
f5c16fc4edff600cb307f762d950500aa29a1e8b

SHA256
22d8c228cdcfd3e05431d7377748014035a3488ad3a0d4aecc334e724245a1f9

SHA512
7cc94f77f3943143ee86eabbfddcb110ce52c6ff0975842e3a3d06072f51f2c48914ee61f24484a539888ad19a7e6a1becfb029485cd5984bc736434a63cee95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
575466f58c7d9d3224035d23f102d140

SHA1
2fce4082fa83534b3ddc91e42fb242baee4afa1c

SHA256
9da0e657652daa1ef86af7c3db62b0af9cce372a5f765c98c68479922ccf1923

SHA512
06503e718fe967076dd8a061b57debdc663b9616b005f8567099a84fc7184880633079335d622c243918efc3356b40e683708fb0583084abeed7db6168a212ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
552B

MD5
62efe9f59a1ed56df9596e18047b0760

SHA1
d54121f10d36efdccc2f180f9bc139d309d10d74

SHA256
7ba5cabdfca2cf7fb2bbfbd40458d6401a6bfb6f49c5bf35ed3c8732dddf0836

SHA512
1a4bedf6471b7141e99ee3b6e79d778f6d94265075197b8c3adeb5e0a2e0db042afad6599e77761b8b0e4a60670ff1ff987eee54f623bec9a7bebaa33defd8bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
942B

MD5
98e992c8c21f9e57ee1f08dcd3a2136d

SHA1
e381c13c0e9dac9e639f85c74cd719a219e4191c

SHA256
303f9606e35c51b04af6b2afd9c578819382cb1352391d7f0baae9597343e3ee

SHA512
afabc04046ec9567bf3b4f6cec357df695968061a3775d2fd50b25e2baebadd6183fc5fda8f95d9da5f1c1ad86e714e01e2b7dd41df8fcec19d9c43555c3ca77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
489480821d4123bb5deafa7ea0b919aa

SHA1
6ae81a41dd6a3f8c5ecc3ed8c219eb9172ac4475

SHA256
cd1d0cfaebea6e583f7c461788d21e7b08467e6c7a3d223ea3c864b1606f1762

SHA512
b9820b356e446fa22d7a29f8157bc00c6a0f3a684d8b79e583b226ad453e1db55fc8f8ad1505bceee3ff31add1919e2e4230a18632d9a1ffbb2519751a22ce57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6f24341103d05ed185f6e69d85f0d4bc

SHA1
9ce80323b6594cf3d8efed0be68b53ace0c12314

SHA256
c5c3a8d00e19836b1f512f8cba4a2f01c311671416e827797b935822dfeaae18

SHA512
34788b97edf81c974e2c1b65f5b0e03e0be8f837e97c88529f933eef7a5b66f72509e246355dbcf2f69646240e823a34b7c938eec5fc413c32c3d7990d6e484f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
72029fb23163eb3670110d897f0f4410

SHA1
cfc8bf5c6a86ad2888645deef94751bedcaf838e

SHA256
3aa675117291570d17f24e3cafb10c195f7f50b0bd3a92536bafe156f16943da

SHA512
e16ba891fcf08dff8e2e57942cbe9a1264a2bcf9128dc3d53d2e9166013571a2094f47a44f4b0c5c013d03be0aa9d01b2c54fa1041097b8bf3c71ec168c5349a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
4f0b3f08c5cec52ffbfa5ad258e3ab6d

SHA1
78ca1f2b2c22df7ae4d51c2741498a7e76b98973

SHA256
73d02c37b18268543645b128c780d93943a3653c9699907fc8570af41bd6b550

SHA512
d4bd81032e7054183fa3fcb33bd42d7cd11ce0e501bc58c89f9427b06dd25356d2ce4eaa1733b04b1eb14da52f671e630aa4ea036653b865c64be286b154493e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fb44f5468811633855640addfcf01843

SHA1
e33e1afcb6110d0832c67eee08fdf8b22ba01417

SHA256
e330423adaa4c07466ce2483b396e53d5ff5dbcb7a9a34810d1fb085f0d93596

SHA512
5c5d54b3967ea02fe76a36dcbd4cd2ffd9bc538f6e365212e2caaf6f5375ed88731f4d0c04d4acb1fec1b0b6104310364222b100ffa4b3cb5c3aaa3aebd21e42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
d4b78f16a9f25d396d69ae4cab5258ba

SHA1
6ccbf82e6380773e7959d5ded40856aeeebd7fc6

SHA256
da0af6ae498d790649ac42a687700c18e5a8622843fd71bb9759721446f02161

SHA512
506e33627f47454234f1d27458cb01ff712fee69fd5122a03993fc3e78f383900039212a12bf241cbe8d0d8c2dbdb7f3dabef372f3c0febac470947893e5ab51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
fcb6c6d6a33ceb87c34ecf390821fa88

SHA1
a4878365363544566bd03d443e618b2af0a29ebc

SHA256
7cdd8b35e12df5d81b49d384c5a8d20abf8f19cdc6cce8a128cf7df87fdf2ee8

SHA512
efbe36527c8eeebe5e86b0dc4b9e1f2686f9c16c881a609d152aafdce6c1b50745e3cdb411cf135ae2f972bf98bdba984abc4b678e81f8d86711e28cb93196ba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580a9a.TMP

Filesize
1KB

MD5
c2557faa8bf31eb8fd0c03eef6127b88

SHA1
b8413624aa0e38574aa3a7fdb21cd6e2b84eedf2

SHA256
edeffaebad330f8aea6192da035715d4662a7aa89bede89c8522c12bbe1f3492

SHA512
1edb092c591d5ff2f8059c2bac39d904ff26beba55000ff10545fafbe3fadf7f25fd01976c87ab29b8d13ca1b1b31f8f96c2af52258bf0458403ed5f09dc5616

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
abaf54d42958cccb96c79e4a81c85fee

SHA1
e9d0db3384a760cc6881a7b9beb6e55dfc6da20b

SHA256
8f50bf79aa979af9ce2eeda12ed4aa9fff87e65957fd70b3e8720c15f80e2130

SHA512
d624eeee23ed07ad30edea6bbc5ef90b51e210eff411d8f46f95b1f6a51bd9074dc00c54b3744d243f4be29c604115bdf82b46e3082ea01be63a154e52015e5b

Download Submit