hxxps://rb[.]gy/gvkq6l

Resubmissions

10/03/2025, 18:06

250310-wp9jkstls3 10

10/03/2025, 17:45

250310-wbtafatsgy 10

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20250217-en
resource tags

arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system
submitted
10/03/2025, 18:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://rb.gy/gvkq6l

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4484	msedge.exe
4484	msedge.exe
224	msedge.exe
224	msedge.exe
4604	identity_helper.exe
4604	identity_helper.exe
6132	msedge.exe
6132	msedge.exe
6132	msedge.exe
6132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe
224	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 224 wrote to memory of 4268	224	msedge.exe	86
PID 224 wrote to memory of 4268	224	msedge.exe	86
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 2864	224	msedge.exe	87
PID 224 wrote to memory of 4484	224	msedge.exe	88
PID 224 wrote to memory of 4484	224	msedge.exe	88
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89
PID 224 wrote to memory of 3816	224	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument https://rb.gy/gvkq6l
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff547e46f8,0x7fff547e4708,0x7fff547e4718
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5824 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2532 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4004 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3992 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,2803196505198555681,13599810064386187356,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1012 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1760

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4160

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x298 0x4b4
1⤵
PID:5004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
010f6dd77f14afcb78185650052a120d

SHA1
76139f0141fa930b6460f3ca6f00671b4627dc98

SHA256
80321891fd7f7c02dd4be4e5be09f8e57d49e076c750f8deb300be8f600de2d7

SHA512
6e6c9e348e948b946cfb97478698423e1272c4417bc8540e5daa64858e28be8fda5baf28538aee849f8bb409c17a51c60e48a3f1793e3a86cb27edeb32aa30a5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f09c5037ff47e75546f2997642cac037

SHA1
63d599921be61b598ef4605a837bb8422222bef2

SHA256
ba61197fff5ed487084790b869045ab41830bdf6db815503e8e064dd4e4df662

SHA512
280bff6eac4b2b4fe515696223f61531f6b507c4c863ad9eef5ab0b1d65d264eba74fb7c9314b6920922142b8ab7605792211fca11a9a9ef0fc2ae995bf4f473

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
a6890efc03e9a3827848160e2eb1c350

SHA1
ace4fce30dcc86af9b537e9445c55a42e7d68638

SHA256
09eea75bc0c1e1c8d4fb34c11a6eeac00faa28df79fb159f53d6ed2b54cd869b

SHA512
11b8a2231f54b51d0b06b5a2e6644400498b30cb73b0225f918e32c83c8d458d88718d4f11f8d6beb094c46dbb66fc9570835c548e4d0477e0b6841684eb5d6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
2KB

MD5
27545d1a3ddc4567ef76ff5a50830e2f

SHA1
f46cd64053ac676f9577ea7783014ac839182b3b

SHA256
2d7afc5bdb449fa7389673e1dee98530c7656e47da2ca2aa7fb89b8e0a943d3a

SHA512
c74c2e02207eb933d55ad24e8c44696ee3ac088e983b6b0c326b3ebe7bb2f0740d8f32379c47fda42311995bba5c9f4504a2ff1223906789b9fe9847fa8e3807

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
334b2903be7711b0933dcba6644662ee

SHA1
c5e12177483e781112e4e53084b3839d3c54c7df

SHA256
cc16b28e0d943b28265f84e1160d550ea60d5e55dab8eae6489505f46617c161

SHA512
9812ea96dd25f258e5abcca9c458666b25246305fc10bb93c8a0f46473b1aa9ec2cf37dd204118cb1bbd231f20e78adef2dd231a6a6abbea5af34727a79e47f8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d1176f9fccf41f355cab152d04587ae7

SHA1
315d5404693e241c982aa2ff39a2356eeb451afb

SHA256
a9d13259df278d40325d15544cf7aae8a86e546190435b9957975db9b141a332

SHA512
04bf54996718520e6f663bc5f96805a4ede1d0a25c8a8bd03b1fbdbc32586b92a73f916ba4002464176d6c3d9f79d6c998b15e0ec6cca93fa3b5fc094631d430

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8bb02213ae501461cb8784a82ae176dc

SHA1
45285a4b373e37076867625f6615af3328576119

SHA256
5d80bfef5f4b7fa6ea54302136a116d5d40335126fb63b6f02f3263ee80bd8d5

SHA512
28dcf7b3f2f39dd40a2fa558a0a60965d243c1dae82670597358b9e5ee49b85de1f0f9d806c56f245acfcfd753f7ce53962bab04cc56163a3294acba6aa0f28d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
13b51434258e92036f5e7604ed9c6616

SHA1
6a1e2aacd847adb6cb1c33be267912dbc59c4272

SHA256
8fdeaff32c665f102c1cfa1a2690a04fecc841041cd036c364c6a06ab501d9ae

SHA512
7545e652371537c2f941e1a14fbf6c9cdf3e39d505ea256c61059bd4cec6d56bbaa6588d11fb3b5844fe6f1bbdad0bb7bc8987e4feb29f8f92ced46c21159dc8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
99B

MD5
58debc60dff697f983be6d2aa7cd9358

SHA1
58f5b2ab5bebc7444eb3c4bcdde553b344687dfa

SHA256
a264ff63742878ff2343c931d68c4611835fb9c2db85bfc23052405e45e9c990

SHA512
26430591b12daff9bb0f9e6898802f044b8758cdcf51dfd7149f8832e6c3ad229e486025b6672e8ab86c0f8b8ec2605ff976b2d9951e3e37f800849bf2f92840

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\32cadb2b6d359d069dd3f3d132c212a43d223701\index.txt

Filesize
35B

MD5
343859b4ad03856a60d076c8cd8f22c3

SHA1
7954a27de3329b4c5eefd4bdcb8450823881aad6

SHA256
8c79b653c087618aa7395d5e75198da7d3b04c08654c39e56b1027f9ef269c2f

SHA512
58014a4e7f2b4b0d446fae3570196b8fb95d0d1b70bdab0dd34a74d6c62cd8d7ca494a486f19c1a829988a3af83a08d401f18d1769ce1799a02ee09807234254

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2e99f30430e94220c178b1e4dc8d4886

SHA1
bfadc7c68ee2c198cdcaf4a0ea14559961352b83

SHA256
966a9f68b416515e2627ac77fbf78c32e654b22df3a3b09987512406650538c1

SHA512
817aeeed3d5e112c8db8e59e41df07235f1fc24c0203a0deef69755c4ef6319f0b37999664f5ffa1bdcfaf0b441799eba340bb366448a5a7758598ee978834d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
7f7e025d6e9902a2faf8e5e5fc04bf6b

SHA1
7fb77e1435f677f97bee92ca25606080ac27e78a

SHA256
32f8ee8f4b127f5f5a345c8327913549d3c956d3f7083793bb60de67e61e1331

SHA512
5a121d254d9c909e11c88d96ab18c66e631fb52efc30009f75669d237b3c788a6771ab71e4d8b74b277a3edc052d06422edc98fb0d8708769651b0f5c2b40ccd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
505d55c30ece234af60fb3843741ea7d

SHA1
0cff02e66630c8d480a185a52a30e868c87c2bff

SHA256
7cc6b20d4848aca1304bc01ab44a2c9718dc84cd9ca3cc660495c8601c0e9763

SHA512
e11d68af04def54b07f8ef6219c11953fa42aca4d8ed32258d38a4c13da46a9160d69be44e9a9c8431c7f4812f9259a31fbe490e2fd945ee93f63ee6e7aa691d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5814cb.TMP

Filesize
1KB

MD5
b8cc0d10950f382702999cb7d61de216

SHA1
f3e6c5b7d99f10162796b4a54192bec4acfa799c

SHA256
d69a4913393b958d946cbe3550f2497c9a95620175201519334d66430cfbf2c5

SHA512
30da92e4d371e1769e68db5ad249d165bc73a476cb6cc883db00041eb39d7c97276fb16a11e0d8cf15c51c13b7bd2a35e57cf479f879d84769495c2eb71d60d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
8f91cf2772514f7ea36ca62804b25e2e

SHA1
43e61f3ef54632acb2d9d122f64c07ec66d02abb

SHA256
88757b16df57baf5aa2cb1a5cb4edfd64fc8d217d7cd9f430a846b65d8bbd5d7

SHA512
bdd4ac3968d88b121521817c985b62e6e171659100efbc7b0451ae9e036357c7356e8a76f206bcdae7ea02f8047575ed7d9adb51960dddf9372c5a92ae34374b

Download Submit