hxxps://laserglow-technologies-industrial-48815730[.]hubspotpagebuilder[.]com/laserglow

Analysis

max time kernel
107s
max time network
105s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09-01-2025 12:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://laserglow-technologies-industrial-48815730.hubspotpagebuilder.com/laserglow

Score

5^/10

microsoft discovery phishing

Malware Config

Signatures

Detected potential entity reuse from brand MICROSOFT.
phishing microsoft
Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
476	msedge.exe
476	msedge.exe
416	msedge.exe
416	msedge.exe
3872	identity_helper.exe
3872	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe
416	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 416 wrote to memory of 4212	416	msedge.exe	81
PID 416 wrote to memory of 4212	416	msedge.exe	81
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 976	416	msedge.exe	82
PID 416 wrote to memory of 476	416	msedge.exe	83
PID 416 wrote to memory of 476	416	msedge.exe	83
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84
PID 416 wrote to memory of 960	416	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://laserglow-technologies-industrial-48815730.hubspotpagebuilder.com/laserglow
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7ffe5c5846f8,0x7ffe5c584708,0x7ffe5c584718
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3980 /prefetch:1
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,14958215634648633442,9521928767564854826,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4500

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3052

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3512

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
a8c1fba7ea09b2e8b77b99bb5c829c44

SHA1
e0efd5fa013b915c00648d4a8e74d0a23bb98a3f

SHA256
0d6778d73d9c394d97cdccc61111f723b7317ade22212a30745762667319a9d9

SHA512
e8962ebe23885b9c973ef6a46618f3b5f701638b3dbc2cad06e5aa3ee317ac29405c168a318f1d080cea170d9abff44edee0f0c81e412fdcc006d405dcf6ee41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
18b63d01db080c98c72347beaa0e8f05

SHA1
10189f31ed26036e13e306fb90ec5a4ffe5f3346

SHA256
92de13f93f85249a798f3e1c01273861224a575044f4f905c0cd4bbc5b12a688

SHA512
160d66080f300b6207b0a769208e22fce9186f8f5e2e4a5a9f5d3a4e4203a8be169834d08c1debf009392586d7a5178bdbb799e7a2526bffaac6bc5d579ade6f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
011420285bcc647e61acca8e2d69c9b7

SHA1
534083f8dfb8cc93578fa73ecec2c623b7f201b5

SHA256
17a43e234bfc50a919f538211126857b1c6949cb4ce39a8da67a5b77231951e2

SHA512
26a6982ff124efdd78cdaa23ac90a07b667b6d1654d8778251f131022cbe81a4625f2bdb92a377e989d5d493d41e40aa9306fdf34e04daf54bad3f6f0fae20b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
87cf669e8a650af75f92ece593ed30e8

SHA1
8460ac2cd279b63300da56507dcb3c92709a217b

SHA256
218e2d3dad4daf80cbc50efd303afcaee12390b385cc0d45c7d21790200081f4

SHA512
26de65c159173217bdd308e840735531638c95d9e98d6c3b266c9902d8f2759bdc881a9d6027768076446e34a7b898a6a2536dbf2075335be269972883783abc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f5e8fdfb85a84a90bcaa9ceea236b3af

SHA1
4e97ea79407d46b9dc268f00361a11fa59dc0930

SHA256
ff4ef2c97c9191b038ea8f197248f1cd19198a502a5bf28f7b8847244f01734e

SHA512
5392c6fa9c88b4d3c450ed504071d446dd3bc1513223b8a958ce34760bca8b2e94b091e49e4be3b453848ae86b86bd6e5d678cf9b9d0c7a21dbb1bd60a4174b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
bf1c675bde6830c5735e96973e01d5cd

SHA1
0dbef1541ae6f3812fb903639fea9b67de3595e6

SHA256
84968d542d3090b2144b2c77e37d87bdcc5fd95ef34420bfb4cefcc3c528d9f0

SHA512
495b4f5d483219c6ea3346560abe6c05ea2e19729ff52e7162885533b3cc1b51eebde2dede1a17190f624a25c953a34a1b9f4da3dafe052d49412e248a011ecc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0c93dab01984ae022ecf1849a1443c89

SHA1
2ba65d9fe8c5fa81a14db87ae257138dee720f69

SHA256
7f85b055c38fdb0f11f5cb64d2412062f78135517c32dccb2937d3f916bd115b

SHA512
5799ed616f4e72b9648a9703ff81e1de3d0d8d4db77f8229289033fca243c43a95bcaf4a85d672286ca2ae3c9388fce2e7245142b4c8bf67ed8ace5eee4ef6b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5bbbf9.TMP

Filesize
872B

MD5
3a79f0f17382a8c3cf5096d0ef033f75

SHA1
0cf35b72687c51c30268d6e0fa3dc337ebb31049

SHA256
40bb9888fd6c33e2617cf454eeefed73429018b42ae53a72d31bb68b79216d9d

SHA512
19e16967e9fc59094afdb4954dc82e73d7c9a179d5a8980e18772efe5e75e5ace8cefc19061e8984b8afcf2613a67723fae4b5187d17108f435343076ade4196

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
76cbceda52ac703aeeeb35b6c35527a5

SHA1
1f4486c44312ffc88316233edce9af4ab42e8fdc

SHA256
0da57387275c97526b5556d7ccac67bf6d45cb06d72de47e72f4dcffaa633918

SHA512
67640ddb7057c04906c1c4066b5705f44328404f5fe95d469610498faf64684552ca0a40d9c08aaf5671f741f0ec14946634ab072d06fe64c99f9bdea0608227

Download Submit