hxxps://cdn[.]jsdelivr[.]net

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 07:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://cdn.jsdelivr.net

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1436	msedge.exe
1436	msedge.exe
2036	msedge.exe
2036	msedge.exe
2528	identity_helper.exe
2528	identity_helper.exe
1888	msedge.exe
1888	msedge.exe
1888	msedge.exe
1888	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe
2036	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2036 wrote to memory of 4132	2036	msedge.exe	83
PID 2036 wrote to memory of 4132	2036	msedge.exe	83
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1120	2036	msedge.exe	85
PID 2036 wrote to memory of 1436	2036	msedge.exe	86
PID 2036 wrote to memory of 1436	2036	msedge.exe	86
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87
PID 2036 wrote to memory of 2152	2036	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://cdn.jsdelivr.net
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9275446f8,0x7ff927544708,0x7ff927544718
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2232 /prefetch:2
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2200 /prefetch:1
  2⤵
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5420 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2240,17287643837095760902,14470694666577269526,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5572 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:652

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3212

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
18KB

MD5
d091831a0e0b68b6890a9d8a27f02a95

SHA1
54cb2838e0530ef8fc041b8ab1c8522940e112ed

SHA256
0d89b81285abc304603c8c5d329efdb256a3ad9695519851ca3666cd347bb2b5

SHA512
9f69ec7cf75bf1b3eed18c09603cba0902a69edd733ef36233c16017d6d26d43e2a6a525b1e91a66e1cf54c91439eb4b303ee49afd6e0c800140629cf4fdcfdc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
42f6033ce4c259ba754d10bfba17eed9

SHA1
9019e8228f88d79d4818700e2452a1cf6c806d00

SHA256
9d4daab7c26a06b6e82f9f4a0a55715eb23812851817e31a52125133ed20f77d

SHA512
4a92e22682cac1ee419a7c8d8e19e9fc77b72effbb74352d42759b3c38f9978aa45982158e3d5fb340083ed851167fcfe3272130cc2ae18265e3ad37c133c963

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
528B

MD5
20287edf4ef421e9b9f1f3c1e534d539

SHA1
bfee08496700fc8e850b446d59b7ab99068d2ef3

SHA256
781566e230616e04f69047bad9a4c1ba3dc2b687c3cb48e506ff973f4c1d5379

SHA512
53df7218eae3b0a25fbd27f7ed609dcf1238f1804a91dd76de2e5a9f4b6c58ba58c6e2d86e7aed8f85d845fd44b28d681596085e53b36949aea4906566084d7f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e31688c3515ea9cac73ee1255b06d906

SHA1
2d2ed7e164cba939af94802ea1d77b81175e0ea5

SHA256
54e6805549f031d095d2437433a00d18070f008616a6699c6cad35818a8abb40

SHA512
1864e3ee13c7b9fa2cc19d0f5ba330880e4e1cbfe57118a7fe990671f110c3b8f2bbdcf8506e82ca31d101de68cbd366d0fed2368229210477f6584097373605

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c1aaeebbd9115281b472b2273b4699b8

SHA1
87bb9ef1447dbbc8b06ab375ec2740313f2adc6e

SHA256
ea3626d73ab8194103924cf5f6efe40267cc67ceabb475825e7e2d5b51c706d8

SHA512
2c4d3a8d9c58cfab986f18e1f2907524d127b80c8f6f6c140a31ed604675ab2ebf46b3fc2a1a1f2aee5147c35eb498c1cf9bbfb35c24cf79bf591a10a2bc37e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
72b1058bccd924c5afde458f1d15b6a1

SHA1
861b1860dc3afe4e152c0e9ee145cc4e09060c36

SHA256
3513073c0836ebca109719d10fc5d7130dfc2cfe8946720598b386e6fbb9f70c

SHA512
ff65c80648c3a2a0d81b4a0cabac156a7ac54e5c8e8606e923a8781f6e63fb526dc354bc05b67ba1daa20cabea53bb26647e357c0ab8f7c0c1baa4dd7f321dae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8448fde9045f3c0f0cf303e83009ea50

SHA1
14838d2695d67ad2f259f417d23e28d3b551dd93

SHA256
c950f461e373c390d3a8e92d49b60a7ecdf33d3d4769d1fddd40ff4c96ba1e9a

SHA512
844bf75416c4c0d2b6fee8529bb9a99d0dc051d7188c9710f005be31fc83076a860443a92257885a77f73ae689dadd28f285ff9ddc413aedbe1cf094271cdb24

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
71a3efe65e9cb1be62477a38de0f75b4

SHA1
46523fa625e4bdfbc213103fe4f8264061f3deb0

SHA256
3511277ba17943a4cc530960d696e046d93ec4dd5b1308dcbfc435a07de3b3ad

SHA512
c01ba221c18500c85324b84acd7775f76f93368e2604ed6eae3effcb53627f87702477219e726ad373475e68e49dcdc3dc3036cfa8f8b3c42f30354963139ccc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
dd8c3f2038d6080b675a3eb013850160

SHA1
21f1fe64cbfd8a71d4f8af013609aeb559efe7ab

SHA256
3a84713a3dac3877d36beb97caf35e6167fc41606c9fd714ba460d46a2b46c42

SHA512
040c4377cfea1d207db97c81facd865ad4058e2e44d5e1836e97bc0631b2231d323036e1bff44b273d86be8aaed36702c6f7878ba1230da4fd8f0605dfa265f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
bb56505ea504ebb41e32d70ddad07d51

SHA1
efade6dfe85c60720e8bc9c51cc0619d7e4fefa9

SHA256
eda86579d8d3688f17b22b4789a51379227e6f5f60da789db89ecf4cda6fd92f

SHA512
8d0a6f83589cee9563b2d8cd3c32b8eed3581c4aadabdab76526235178228b76597070d8d6943ba83ae866c43b3b7b60d368ed45ad010488b503098da01e0ab9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58311d.TMP

Filesize
705B

MD5
b1a8b87adf8c86f08bfddfccc4c85942

SHA1
e824bc86f511c2fdd48f5e587379cf82cafb0db0

SHA256
6561ebcd455a22263213b77bb5036d73c15ba415ab5edf0bc4006d010b1a4d3b

SHA512
5ca75e7bb4dc832f1380f29f6c578d417a4b10a0842ca0581f515c5c67360978b32ef9fb054e9e719a7bba9a57649dce270961dca9a53cf62a2a407f5a837d42

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
fe7c24083c1c77b7245399c91f3192e8

SHA1
567cf9950a4ac5d6ff12e3f411f1635134bb3c9d

SHA256
086bc9933b3e15c77d60658bdd755c116d591feaf097f0d7193b6261f96d66c1

SHA512
fb4c572533b6639705bd0a70a46fc725e8ac2ace8c2287f2775449d868bfd12f25bcf02d74cd9f9f6dad3536dbae27c0e28e95e33e8f307682e87037e52bd7b5

Download Submit