hxxps://www[.]braflix[.]gd/movie/1320637

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/10/2024, 22:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.braflix.gd/movie/1320637

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2200	msedge.exe
2200	msedge.exe
624	msedge.exe
624	msedge.exe
3392	identity_helper.exe
3392	identity_helper.exe
208	msedge.exe
208	msedge.exe
208	msedge.exe
208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe
624	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 624 wrote to memory of 3312	624	msedge.exe	82
PID 624 wrote to memory of 3312	624	msedge.exe	82
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 3620	624	msedge.exe	83
PID 624 wrote to memory of 2200	624	msedge.exe	84
PID 624 wrote to memory of 2200	624	msedge.exe	84
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85
PID 624 wrote to memory of 3448	624	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.braflix.gd/movie/1320637
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff877946f8,0x7fff87794708,0x7fff87794718
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3896 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4068 /prefetch:1
  2⤵
  PID:552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2240,12265504237361773553,6237604257856669262,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1760 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:208

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3124

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eeaa8087eba2f63f31e599f6a7b46ef4

SHA1
f639519deee0766a39cfe258d2ac48e3a9d5ac03

SHA256
50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9

SHA512
eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b9569e123772ae290f9bac07e0d31748

SHA1
5806ed9b301d4178a959b26d7b7ccf2c0abc6741

SHA256
20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b

SHA512
cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
d803b3645fbccdfe817570d80887af6b

SHA1
bebb2952b022b13a3b66cb381635f26ad1ba417d

SHA256
a95905da53a8b139f00260fcf3b4961f5312398b26a99c4259c4887c99f88d52

SHA512
822965aed4f9f52a44b94bc3e9a6dc436c8f048a731b3761dd78a09508cab59e59790cd78763301109b83aa737740122073c9b52cf7c770f65b485a3b04cb9db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index

Filesize
72B

MD5
b2bada91e6feadf2307c860cd81a3247

SHA1
81dc5e17fa40db64c1cf6aa9dbe79f7406ae744e

SHA256
6ebaeb9a24f06f17c6caca4112180836b247fd21fc515c827219dc1eca9533c4

SHA512
531c0e79e5cc5a0e35084a056c1366d9ad486a7fb1e3ff5ea5ff14fca6ee2efdc2c94236d5a1a1a8897bbad503262ec9634e3ed63cbdb793706a3fe7a6d065b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
7aa04c9458c22ba1eb178a993b04ac1c

SHA1
65e3af5c0eb6d3ef99af1e43f2a515f31ef35dfa

SHA256
310e045375908dd5b454dbe030ee92244ff6ac19fb8d9a5ca3ffc5b657117a94

SHA512
102d9f8779cba0673173c7749c762f684008b681af5071e625b14d0ec4dd94ed4cfbcceeccc17b802e188dff23e2fa18af96a0e1aa9d2fad196ceb5bc79c1ef3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b8269902b0a76d03d32c3ca86a610a87

SHA1
64edec69e4d34a91c97011423356b56e24aac68b

SHA256
6258ec49cb425ae1de8e3c2a2cf8e80dd85e5617d3ca23976e4742cec221dab4

SHA512
93421f94ffb71877761833d9429daf833e11772a7bc20fc63b50d8b0b94a208260477126734e4ca4c68d538c7a9d8633cddc5c81d6353e0fef5eae0bf37c9072

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3009b94b7f1636822965789eb6ba7312

SHA1
c8754bf6e265f9992402ff8e9319c542b437c441

SHA256
08f1c87e6654167780ffe0f8dd26f9916bb6b2ef1e133168a44d7e9e144dd789

SHA512
f9999251e4442395ef5041ae352e0f23094a896fe9099aa78b2ccea2e8fa626ccbd0894200a625b3f415d07489948a56c5dbefbb950b812d2377950809f6e888

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
e69426e77b65a31515aea1e52eddb6e6

SHA1
04cbd3a53fb36fc0cd6f400efb449d6f931df3a6

SHA256
f97d9fa784b766b4fd0faaa7eedbfcd4cb49dfae26533bb4cdaeab4c06d9338e

SHA512
d744e31237f27cc56ced69bf29487d6335e3402800516ec4933f86a55b96096b389a199ad5debec74c0042ab2b693d6ca81e1b8b461b41054de76239abbeb262

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
6190ea489a25eba7e8bec909ef02750d

SHA1
8444e687612ab5fbffdd2d67a6f88246e5ed4cd0

SHA256
5b6824a9d8d2e80980ac0b12ce83ed2e9f221de2d7f99622f4ae5217a88be2fa

SHA512
3301ca222052b6d1f283eae46b19f4e4284aca2348a262f2f21409987877d61a2f10dd14112edf6653a989ef7513fb6791f0ca39eba8eb3194159222d9065971

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
864bce8fdb056803ceeee0e94bf6221c

SHA1
b12d18759af90f9d54406606745155691ac22688

SHA256
5bc6a611bc324298c7459318ad2244a81db0ab647c3fbcdb5beb65959add8a0c

SHA512
eace5237e43a99e5dc51d4c92da5067abfce9ee2818380509c24f108e5f370c3cc2d6adf90281b3f241edf55954826a97fe168a43a5ee6c8e0813f802056bdb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
61c6777d993c474f03c763da5d163da5

SHA1
b64d6c0a96839c9bad184166116181a7bece079d

SHA256
15f9091e1bf12dc9a0b7418be1b1c951e70a63b6759e7946b0d74b2030137372

SHA512
27edbb4f86913e9ab0237149958da238e5d9f0650ae43c2feac513867ddf9bcac488d903d2f43efbdd20234a50c8dfef98bae6242bab3cd6dcfab90112ed91cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
e292518d6d7da85c0eb40c7dfe254921

SHA1
ea8e95f2df10e4a803cf506dedbfface50468099

SHA256
bb3cb7a56c94541aaa99d8e0f8a04df79fbd8f76d3c4fb28fb37f2dcd5a85608

SHA512
9c0a1d828761a34e4bf910526c0c20eae6008b2ca6cb687216112c31fc62c90a0da83d8c05487a70629e9cd96124934e6c796b0422c97d0079cc05bbcc50e3fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e0fa.TMP

Filesize
539B

MD5
617d49e1b07766bfbad46e206b1490f1

SHA1
1fdd9bd158b55f8f845d2ad3da56f4114125473b

SHA256
12c51a95c7a7b989a349a01731015a5bee9e9153df7597f58c7aab598a9ad84e

SHA512
563a6b259342f7d821bd7c391c752d57f94e91c783f5e29e1481b833ba75e3bf66b65b15853bc9610bdeed2b269f6e88e33287c509f92cdc60dc851774b34111

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
41c1193215c12cb62fc8044ec77d737b

SHA1
3bb5867bad512f26dabf5f7079ea81613d6812dc

SHA256
3659bc7aa0b3c044672cdc371e9335dee182b8ca7aa3b547a0c918d897568d85

SHA512
97572a8dc8e35d08f8bbfa88157c51678f7b7e4e477086b9ab4c77f43d80e156d562baf530355aca1ff8b4e1b52d8f798e3bcd8f516a304225257e2b0627c9f5

Download Submit