Resubmissions

10/10/2024, 01:18

241010-bpbbkayfll

10/10/2024, 01:13

241010-bk4gjsyemj3

10/10/2024, 00:46

241010-a4m38sseqf3

10/10/2024, 00:28

241010-asg3vascpa3

10/10/2024, 00:10

241010-af9mbssamd3

09/10/2024, 23:52

241009-3w583axclr3

09/10/2024, 22:53

241009-2vav4azhkg3

09/10/2024, 22:48

241009-2rkwwswcrq3

09/10/2024, 22:28

241009-2d4rvawarm3

09/10/2024, 22:07

241009-11wt3szbrc3

Analysis

  • max time kernel
    900s
  • max time network
    881s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    10/10/2024, 00:46

General

  • Target
    http://instagram.com
  • Sample241010-a4m38sseqf
Score
3/10

Malware Config

Signatures

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs
  • Suspicious use of FindShellTrayWindow 26 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://instagram.com
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3480
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa8b7646f8,0x7ffa8b764708,0x7ffa8b764718
      2⤵
        PID:3672
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
        2⤵
          PID:644
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1772
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
          2⤵
            PID:1088
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
            2⤵
              PID:228
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
              2⤵
                PID:4956
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
                2⤵
                  PID:60
                • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 /prefetch:8
                  2⤵
                    PID:2792
                  • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 /prefetch:8
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    PID:4112
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
                    2⤵
                      PID:2012
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
                      2⤵
                        PID:4080
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
                        2⤵
                          PID:380
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5712 /prefetch:1
                          2⤵
                            PID:3844
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
                            2⤵
                              PID:3396
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
                              2⤵
                                PID:1608
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
                                2⤵
                                  PID:3300
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4660 /prefetch:1
                                  2⤵
                                    PID:4424
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,4273011193331435111,3726012102342630709,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2680 /prefetch:2
                                    2⤵
                                    • Suspicious behavior: EnumeratesProcesses
                                    PID:2828
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:1812
                                  • C:\Windows\System32\CompPkgSrv.exe
                                    C:\Windows\System32\CompPkgSrv.exe -Embedding
                                    1⤵
                                      PID:4820

                                    Network

                                          MITRE ATT&CK Enterprise v15

                                          Replay Monitor

                                          Loading Replay Monitor...

                                          Downloads

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 152B
                                          • SHA256 f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32
                                          • MD5 SHA1 SHA512

                                          settings.dat

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                          • Size 152B
                                          • SHA256 b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841
                                          • MD5 SHA1 SHA512

                                          f_000001

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
                                          • Size 65KB
                                          • SHA256 b3fbc2ea9978a37e1e4db1ad6b6f028228633cf3c93a63b8a2832920b5d2761b
                                          • MD5 SHA1 SHA512 SSDEEP

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 3KB
                                          • SHA256 2a46abef0018b45c5c07d9dfe870bfc87ff93bd4b8605d74208d6e1b74bae25a
                                          • MD5 SHA1 SHA512

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                          • Size 2KB
                                          • SHA256 15c71d8c3cf4f2e73f266e477b2e933f8220028ae466f497689fb9682c7099b8
                                          • MD5 SHA1 SHA512

                                          Network Persistent State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          • Size 1007B
                                          • SHA256 51f6e49878c1ae463b57adbdc46f5b101d80af727b286a72cd6f1094a9df3e3b
                                          • MD5 SHA1 SHA512

                                          Network Persistent State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          • Size 1007B
                                          • SHA256 0aaa8a7e7eb075384638a222b27ef78abe162bbd55d99c15e8457f1f4a8283ee
                                          • MD5 SHA1 SHA512

                                          Network Persistent State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
                                          • Size 848B
                                          • SHA256 66430f6148f30158f7b8eb5b0efa67dc8623f17ba1d03d525b5ab8d6b3904bf5
                                          • MD5 SHA1 SHA512

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 6KB
                                          • SHA256 fcebeb703b59589ee1493b0570d6d17f76185cf3af0b47ea39c0ae71bd938d02
                                          • MD5 SHA1 SHA512 SSDEEP

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 7KB
                                          • SHA256 248fb4e92184c68a367c7295d13bb3137b2a36cf371a90944eabc5341c6be684
                                          • MD5 SHA1 SHA512 SSDEEP

                                          Preferences

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                          • Size 6KB
                                          • SHA256 60f535b3596bd5cd51e6ffcf4de43ef4e44fcef1ed502c25e52a493ac960fe0a
                                          • MD5 SHA1 SHA512 SSDEEP

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\0bcceaf9-1534-4803-b2ff-66539154e834\index-dir\the-real-index
                                          • Size 72B
                                          • SHA256 86209058b76de0cd29aded79d7f282d6551659beb6835cc6b00c23352510d343
                                          • MD5 SHA1 SHA512

                                          the-real-index~RFe583553.TMP

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\0bcceaf9-1534-4803-b2ff-66539154e834\index-dir\the-real-index~RFe583553.TMP
                                          • Size 48B
                                          • SHA256 f57ba3ca16889a6e3f92a4a33a0a05dcecae7a4f034374ba2c765562b2bfc19e
                                          • MD5 SHA1 SHA512

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\e854e541-7e18-48ec-90b8-44517b36ec9c\index-dir\the-real-index
                                          • Size 72B
                                          • SHA256 ae87db89bbfd67583576b3496d08682a27dcb10ae79ff2767eab36c507d22f3a
                                          • MD5 SHA1 SHA512

                                          the-real-index~RFe583553.TMP

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\e854e541-7e18-48ec-90b8-44517b36ec9c\index-dir\the-real-index~RFe583553.TMP
                                          • Size 48B
                                          • SHA256 f8cdeaeea42b5216012242de321d204e2a70371d74042fe17d3a02b0f3bbd6f3
                                          • MD5 SHA1 SHA512

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\index.txt
                                          • Size 160B
                                          • SHA256 72b7b154cea9e7217cc6482f47733cb1e82d5ca34db2b950bb76182ff3464c94
                                          • MD5 SHA1 SHA512

                                          index.txt

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\index.txt
                                          • Size 155B
                                          • SHA256 1b7058f2baf342dda17aa81e6d0358a590d4004b23cb417787027a19c7fb9f4b
                                          • MD5 SHA1 SHA512

                                          index.txt~RFe57e704.TMP

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\2348e52d6de9218df880d9a88ad6a5d8c2c9555c\index.txt~RFe57e704.TMP
                                          • Size 95B
                                          • SHA256 1b421327f73c00caae15e575fd2a0c7aa520ae711f6d57922623027baef5e816
                                          • MD5 SHA1 SHA512

                                          CURRENT

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\CURRENT
                                          • Size 16B
                                          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                          • MD5 SHA1 SHA512

                                          the-real-index

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
                                          • Size 96B
                                          • SHA256 1ae482bbd403993a3ed094d27c87b08797127b45a5283b8f167265ba4e296583
                                          • MD5 SHA1 SHA512

                                          the-real-index~RFe583851.TMP

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe583851.TMP
                                          • Size 48B
                                          • SHA256 a708242919a592bf7e4398ac8f5bda5c9fa5509e6b45c383cf48ae3beaa67364
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 231e71268f71fad678a9fcf8f7de67a0b39a0920b741eb0bb34a69cdf04879c2
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 210149bbc01b6da64f8ddf60cd6e81e1d46ab1e45b34e2ea40a4847c9fb6ef6e
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 3ea05678da3d54783af516c3a59a9b5f08ec1741e2c3eba383dce8f61a1f05ab
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 241329cba83d8d0e8f4ff79eb76e3a8a1e96766caf78cef0dc1a01981de68455
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 6825b72c8799c4f9ee5730d510565a64a999577c6d4c0342b8a2f602d3797d71
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 b84e0aa469b2bb5482f30dad7a633f66b867f4bed8c27738e36e69aff0f4e782
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 424487fb295446c46394b8d85b96d26428ee2a697d21e1335c0e7d3456f6c877
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 868B
                                          • SHA256 19858891d65ff960ef9e9a4423cb9e774d2d168d41afee0743d73493cea73093
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 956464db4f37945b4e14c13af10ee77106b46791ff52947b93168ed4925026ee
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 403ba9dcafb36c21c14cc2cd695686155a446e551373cb3a9a06bb0afe81e26b
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 98ec070fa8b13579f25a1dc99c3ce00166cc43c79a4d003db23936faeb3f4592
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 4d2f76742cd502f217b9c2469053c920789cff04a4f06f6d5b5383e00ba58a0d
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 bc49d12cabbeb59fba70efa935a373e8cda821cd3bf00dd5c7126e3ac8c722f8
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 f83a86ff3bbf7b4a217478801b65e8c299510c1c844f0bc9bdba66f1679aa286
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 ed23e776c8aaa3c92b1b3a3ea0d9e0d5fbe253ce9cd1b62f8db2b1547a4a9cf3
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 874cfc6cc98cb0145a31bc973936876f38e632f0a2ebbc825cc2b313553b4458
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 1177651720eca7073628a1dd4799894e8a74f2a85a2dc0e695867cc70bc32480
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 870B
                                          • SHA256 55d0019dc915e52fcd937e2b5e7d758e843beb2294f7adc5de7363c8abc33a69
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 423a091ffa1d6c3b2ad6416535ad685afcbf0cd780457011ba30dd55a98b0d35
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 58a70e0b5d95ca998ea15390d408b792837ad74b242245d16055d7e37abeec78
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 fe7aeed34c54e94e3f141b650869ac4a2aa4d25dd047b0072eef0ed2152eded3
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 e45fce786dae5cd3f9f6fd4b37f1d571975a6e2e57516303522ef3213014f82b
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 f99fd58c369c1d97d63b5ee3ddc2ef799264a424abec3267566880e1a0f6ecb8
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 1c5b5e8d1008183647f3b9afd4ce349e2836511f46e17152b11756eb1dc55630
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 868B
                                          • SHA256 29a75a4a5442867b4e9c352a01cac48ce4cb390645fdcd2d638cb09ea6ca3bdc
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 d695b4f3274e64c778eefbbdb44a9a282b260ac0bec82ab73f174ee355d8af9a
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 69f78094798577440cf0f6806696ed1b9ac0259a054c5b77e454f1909d98d8c9
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 b7bf071e8ca037c1abe8facc9f00b2be9f638289a057afbf0b182b4420773be9
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 e39866662653ede8eb8767a5ae430f441629f8663ef64f35a2bc86f3f82a118b
                                          • MD5 SHA1 SHA512

                                          TransportSecurity

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
                                          • Size 872B
                                          • SHA256 5a13bc61e4fa1ec41b956da6dfc9d0bad73cf9f7d7e6388e5700fe088430ebb2
                                          • MD5 SHA1 SHA512

                                          TransportSecurity~RFe580a1d.TMP

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580a1d.TMP
                                          • Size 872B
                                          • SHA256 30d41795dc3382745285ef4260c3aa45ee914fc4023bdcd39202be7bf5158912
                                          • MD5 SHA1 SHA512

                                          a4f40bc0-d9c1-4ee1-8f19-12c6050e2676.tmp

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a4f40bc0-d9c1-4ee1-8f19-12c6050e2676.tmp
                                          • Size 6KB
                                          • SHA256 f00073b2d58b4d9a5df00e599d5ad8068372430bd02a31748991905ce1c9de15
                                          • MD5 SHA1 SHA512 SSDEEP

                                          CURRENT

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
                                          • Size 16B
                                          • SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
                                          • MD5 SHA1 SHA512

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 10KB
                                          • SHA256 af450bb4be6e1246f9c0a5ab53242967c1a603cb0bb05f6bd022de7429399121
                                          • MD5 SHA1 SHA512 SSDEEP

                                          Local State

                                          • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                          • Size 11KB
                                          • SHA256 95cc98140305b1ea20129082cea9d1e2060859ac70ea2cfd335a34760a658e0d
                                          • MD5 SHA1 SHA512 SSDEEP

                                          default.dic

                                          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                          • Size 2B
                                          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                          • MD5 SHA1 SHA512