hxxp://www[.]ilmiopiemonte[.]com

Analysis

max time kernel
165s
max time network
178s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2024, 13:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

http://www.ilmiopiemonte.com

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1980	msedge.exe
1980	msedge.exe
2100	msedge.exe
2100	msedge.exe
3092	identity_helper.exe
3092	identity_helper.exe
2156	msedge.exe
2156	msedge.exe
2156	msedge.exe
2156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe
2100	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2100 wrote to memory of 4004	2100	msedge.exe	88
PID 2100 wrote to memory of 4004	2100	msedge.exe	88
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 3136	2100	msedge.exe	89
PID 2100 wrote to memory of 1980	2100	msedge.exe	91
PID 2100 wrote to memory of 1980	2100	msedge.exe	91
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90
PID 2100 wrote to memory of 2592	2100	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://www.ilmiopiemonte.com
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc9dc446f8,0x7ffc9dc44708,0x7ffc9dc44718
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2492 /prefetch:8
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5364 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,13037751689231053960,3180142302144866943,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4916 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:416

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
efc9c7501d0a6db520763baad1e05ce8

SHA1
60b5e190124b54ff7234bb2e36071d9c8db8545f

SHA256
7af7b56e2f0a84ae008785726f3404eb9001baa4b5531d0d618c6bdcb05a3a7a

SHA512
bda611ddba56513a30295ea5ca8bc59e552154f860d13fed97201cdb81814dd6d1bca7deca6f8f58c9ae585d91e450f4383a365f80560f4b8e59a4c8b53c327d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012

Filesize
32KB

MD5
d8e9ecb7a5f1c3b3e6941519125c42e5

SHA1
a78cbcfa71a57c75fee0cabcf88363f8a50c3322

SHA256
6e206b6506d597474a3ac86417ad9d0cde6a31c6f0d7d9623f737b3db605059f

SHA512
425833f8c1fe508e5464872a7c0b1edffc9c28b53edb87f2d66ab9dfc08c3afc055c9046c4578d3b6dee7166e08126c08364221b61e750584d3fc01fe4057cf7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
21183f526823b9d0311318c5ff55c665

SHA1
b35f6ca3f7477ac5dc39cc2fc27c73d3663c0878

SHA256
7850fe90978f595740a3c9642b881671547a49fdd010aed832300e59c2ce199b

SHA512
403f05a128f64d98db7852c660c43f0ea9b08abdc86f77e2cc39d2b5900a0347d00cf554e80273c568fb07afd2bf3334bc0a806586c547dfbfc3ea5217c0291a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
902B

MD5
23dcffe4e43d961e06e97e2d0f700ae5

SHA1
945ec90b22589c2b95654bf5c260242c80e8ccd1

SHA256
7fcb6af81ce017c3e65afc2296209d9e2d8293aa56f93128eb701a399004fe5b

SHA512
3fe60d0e73ee00a931b9fd2615d84ed921590e2bfd6c61b6a8b922b2d490984ff9f7147b88fa898caff1de0588f2cb14eefe492fac2b289353dae8c3d5db5cef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
3a802143ff186f4097871b959042f6b3

SHA1
86c87571995bc00f384f233c66ac075d936f0a6a

SHA256
42ad52fcca72627bfb40971d1741cadc80f81a633f291d8327e4352d4d01de67

SHA512
336d59cfe150e370bd9fc7c3e4f61f2a4ea0012237e730ff4dc3a961bfd24ec8c844042cbcb29d1209a2e81d27b6087b3e880d33e3d205b11994ef587ad0759a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6cf2ba41cc61c00c5ae68faa40f97ba2

SHA1
44ef6b2d843b966583138756ebb8c16aee45857f

SHA256
64fa6d5ad4f892f41079dc0f4f9da87be57c7a5437f6aacfe43632d31f1e1a18

SHA512
75be112afae3a68d9e06c87c437cb3fd198f1803e96088f71cc5e2de6c48f122843b45f6299a14b801c58b10b75c9474d477a498d69811187fed89b462a8b7e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cdd367578aa1ebcdcab933c0296d219c

SHA1
cd6b4b6735eb2cf3c348baea76440df1e287e92a

SHA256
940e4c83b751fb22197fc79980a2c7d67f00673593225b4092190bc44c1a4ffe

SHA512
3201f09bfbb8b061c086e09a5af39451943ee466ffe113a1862f2b1382c12686c142537938f6ebd8dc2bb9a5cfb500a18b12bb28906b53d53e5742d87319d618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6aae3a74a7d7fd4daa4d78a3bb34ea89

SHA1
8bff29b151293e057f2db1c3168ee89d8c397e5d

SHA256
ac01c610f3ffb5f3939b03fb6fcc354d1dbf6ed3d984f6d0b9a76fdee415dc69

SHA512
3736ee030ddca3c918c97eed8d41e65e1cc4fea9c8227bdb6249a7364bf50a45d6e967972254f514c6bb6ca561a2aad39c1004fe40d4b0527f32a043d8a6578c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
121510c1483c9de9fdb590c20526ec0a

SHA1
96443a812fe4d3c522cfdbc9c95155e11939f4e2

SHA256
cf5d26bc399d0200a32080741e12f77d784a3117e6d58e07106e913f257aa46c

SHA512
b367741da9ab4e9a621ad663762bd9c459676e0fb1412e60f7068834cbd5c83b050608e33d5320e1b191be1d809fef48831e0f42b3ecabd38b24ec222576fa81

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
aab301c3f032b8fe5a0b1e7cbf10cbb0

SHA1
09395c56b7e7cc0e77423941deca1fa332b7bc79

SHA256
f74751a4e78fac1329642d6538bd1af1518dc2be8da6b7ecb7e76a7a2f1f4380

SHA512
be8522f40588e31d92661b068936b80000679e38fee9f43aff49bf379fed84afe369ddca030a28e75d1217f913536b9ae775d6076e970ed05a3358d06954c790

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe591236.TMP

Filesize
371B

MD5
f5cd66e47f8218a7c80f8701c3252331

SHA1
84ee6df3faf992d4091cd707a4ba455113ad2da9

SHA256
0327a7596c3dd8ec17e8451f123446e813a56e298916b26a5746a0b94a1255d2

SHA512
fb060a49cb9bf6b10569190595d5d15b33b577909901a099661ea214b63f0e8c0e31e749805562d9768a81213d449130f3d199647a938104411f353b117dc527

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
e4f868c13fab19b74d04d1210725e8b1

SHA1
27f20f57c0e30fe850a3b2863f596b2fd8e7d4b9

SHA256
86404b337f98565ab994cbb33fe43ecd1c72a463f7ef9374e4b3f45ffa82296f

SHA512
4e75c9d3733d274422fb28942e3e628f44c19875a22d8d9b58cce7ca31fc248ef68b989d0a52e9e50f43cf3cd50fe96821e00feaee7540060fd0b0b7aa84da5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a988bf137b871e2344b1d1b0f1709eb3

SHA1
14cb3315c1af8436db05c2e8226547dcde0627df

SHA256
4f4f15382c65fc5ff1acd8fdf462f3d5aa9bf61ef4b9efed5496a63df0674286

SHA512
0196924bcb629f2e3a24c09c79532c83859c7b04cc69978df3d265f7ae46311cd6d8576be2d26aa79971f0e0aa458110a55fffd5cbc21cf6440ee4aa181a05fb

Download Submit