hxxps://www[.]google[.]com/collections/s/list/HAS4cEZqRbeupPGzBuPVuQ/Pt9zmcghTn0

Analysis

max time kernel
55s
max time network
60s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2023, 14:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.google.com/collections/s/list/HAS4cEZqRbeupPGzBuPVuQ/Pt9zmcghTn0

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
236	msedge.exe
236	msedge.exe
1368	identity_helper.exe
1368	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe
236	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 236 wrote to memory of 4952	236	msedge.exe	33
PID 236 wrote to memory of 4952	236	msedge.exe	33
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 4864	236	msedge.exe	84
PID 236 wrote to memory of 3488	236	msedge.exe	83
PID 236 wrote to memory of 3488	236	msedge.exe	83
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85
PID 236 wrote to memory of 2148	236	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.google.com/collections/s/list/HAS4cEZqRbeupPGzBuPVuQ/Pt9zmcghTn0
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd2ff846f8,0x7ffd2ff84708,0x7ffd2ff84718
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3396 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:1096
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3964 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,1377785262215911584,11452786373870245419,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:2932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:896

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:876

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fc99b0086d7714fd471ed4acc862ccc0

SHA1
39a3c43c97f778d67413a023d66e8e930d0e2314

SHA256
45ef01f81605bfd96126d5520c5aa0304c7fa7d5fdb3e4d5b2dd2bf84e2afd96

SHA512
c308fa3eda9235d67a506a5f058fefb9a769ec01d7b0d4f5a2397892cc4f8155301c55c1fac23bebacdd087ab3f47f1eacc9ff88eff4115a7d67aa7b1d6581a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
78c3aea9317b8c9284a996348fde78e6

SHA1
22c1dca2805447b2e80b8f80633468e970871760

SHA256
f8b7a4ff13ce566b36cf081c9acace8bde207f21a0906ae756d7f83b20a34844

SHA512
46d7e0ce6b46c7f16d023548a137ad73e58c82367374da02e20ecd3b24eeff36c6860fd6108252b798a4865dd31d61b61592d9dd21974efa588f7ecf71df0b0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0de0f788905184086c65480db7759940

SHA1
6eeddd7461cdd034b92af862e500dc70f1e882ac

SHA256
83a6a1437565382428df81ea03d7dc9875c607d4fcbee8cb902de01f8328a7b8

SHA512
0551814bc266ece30323db73f3eac942f05d0ce0d02d2d620c877e007d7c87dd26c49e49ae7889d2419cba21db61f64fc080fbc826cf781fc512db787791881f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
924ff4f95469bb7859329e2a1d88416a

SHA1
345b93c641d6678c0976a1c2e3f4963d7098d590

SHA256
af4839e3b5ee6cd00b4d0235f184f0ce92dbb1242670930752b7aeb60756ec63

SHA512
b80ed5655a9827c886832037ddb44ab1b928f2a478f5e4ad8b089a5a15100cf0d9d7f56722542968930dc5633dcc3a608a8abf2e5015ec0b1fe92c13ad9753e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
96f00bbd6a174879c58220f95f0115f5

SHA1
d3d7f82b0bf27daf1b3903bfe050c2d05422050f

SHA256
644442e740a8c0bb20f712f6f84f5bf4a81bb29d4e9446b2832ca65618961107

SHA512
e7c5e90eb85aee7b81b9c163f618ad3789a48b256040f6f00eee7fce52c60e1ff491bf0538b9c846fb115b73163710e46a45ce056e3b41ca59d88c421502ccea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
372B

MD5
791eba938a535e574fe205ca1513125d

SHA1
efe8b26e09cc62b9a84c340af5b12bca002b85db

SHA256
9341047a3cc7cf03085e71d4858c1e115b450df075556b87aee1a6b1a88187c5

SHA512
d239d69ee5c23a88bdd6cecf5fd5cc91a3b54751db725dc1da7c2db8eb400ec6fcd9341c3087c53b7e1a4b9b69a8efacbc2f109e9fb39bdba3bedf9e7cb4a7ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
8725ca63a975299c034382bf4fbd2998

SHA1
70d6d6e16ccf110d4264cc6149f7e1d97b55b6ba

SHA256
a29995b7c81c07d119e0362f13abfee2e2b508af6e49ac201e3e2f8fa9003d18

SHA512
6fef6a12aadd905f4a5da203f7047c8045768cddcf7373a4c22a2909d731939ed0d58936c96701944fd07d8e6f984652ac59ab1729589d075b25de049f740b7e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581a88.TMP

Filesize
372B

MD5
ee93c9409ce0305ef430242d80626907

SHA1
dd4e786580f67ad9eb8bf02911b64bf54bf6ae45

SHA256
22fdbf58d2564b2178ea8499d9df50ff9bccdbc35113955cfdab9f2433b48df3

SHA512
97d15e2b6a783ec2f04979eb10488743b5aed690c0a9dcb1aa93c2e70006437c9446071e9fda70450318886524d262668e59aabfca661a41282a5a4996fd339d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
06dd431f81fb4bd8df55c1d78cb0230c

SHA1
b80c768c6a50ca3485a50e3077d8ac1949f59a4e

SHA256
6d6cf7cc2efcd58bc2873bec1e6903c7d892da547293f58968219a93f253c438

SHA512
0808a7faa72384408840d7f4ada745fdb9fc793d95db76cd4990470c77fc2e2175b5df8453947ced98e5300dc29ee9d037b7d1e2c0a88fe7a2306c1b8b77d9d3

Download Submit