e8d744132e4932f4df7c04f21fc139ba951911a590e31de155dd209b4480dad2

Analysis

max time kernel
147s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23/02/2024, 23:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a0957d8fa9a1bf16b4df9556864f9edd.html
Size

20KB
MD5

a0957d8fa9a1bf16b4df9556864f9edd
SHA1

1f25e80fe7af9489558899bd090d59ae7decc847
SHA256

e8d744132e4932f4df7c04f21fc139ba951911a590e31de155dd209b4480dad2
SHA512

207026f4881d9562fc1494d9474f157fb1d0dbbf1784fab117c35aae666e069aa011981b60b26dcf89139d65124f6c43c9b78a89ce8feee0c6fa8ca81c57f622
SSDEEP

384:R0c0wuHZK9ObashtQvEHRW5xEDZu4HxThTYYw2V:mc+zaZ+UxQxThTZJ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2640	msedge.exe
2640	msedge.exe
4060	msedge.exe
4060	msedge.exe
860	identity_helper.exe
860	identity_helper.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe
4060	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4060 wrote to memory of 2232	4060	msedge.exe	84
PID 4060 wrote to memory of 2232	4060	msedge.exe	84
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 4804	4060	msedge.exe	87
PID 4060 wrote to memory of 2640	4060	msedge.exe	86
PID 4060 wrote to memory of 2640	4060	msedge.exe	86
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88
PID 4060 wrote to memory of 4056	4060	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a0957d8fa9a1bf16b4df9556864f9edd.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9eeb846f8,0x7ff9eeb84708,0x7ff9eeb84718
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2600 /prefetch:8
  2⤵
  PID:4056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,6081651847775600082,9370531521734178878,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5232 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4372

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:920

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
360dd5debf8bf7b89c4d88d29e38446c

SHA1
65afff8c78aeb12c577a523cb77cd58d401b0f82

SHA256
3d9debe659077c04b288107244a22f1b315bcf7495bee75151a9077e71b41eef

SHA512
0ee5b81f0acc82befa24a4438f2ca417ae6fac43fa8c7f264b83b4c792b1bb8d4cecb94c6cbd6facc120dc10d7e4d67e014cdb6b4db83b1a1b60144bb78f7542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6fbbaffc5a50295d007ab405b0885ab5

SHA1
518e87df81db1dded184c3e4e3f129cca15baba1

SHA256
b9cde79357b550b171f70630fa94754ca2dcd6228b94f311aefe2a7f1ccfc7b6

SHA512
011c69bf56eb40e7ac5d201c1a0542878d9b32495e94d28c2f3b480772aa541bfd492a9959957d71e66f27b3e8b1a3c13b91f4a21756a9b8263281fd509c007b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
195KB

MD5
873734b55d4c7d35a177c8318b0caec7

SHA1
469b913b09ea5b55e60098c95120cc9b935ddb28

SHA256
4ee3aa3dc43cb3ef3f6bfb91ed8214659e9c2600a45bee9728ebbcb6f33b088d

SHA512
24f05ed981e994475879ca2221b6948418c4412063b9c07f46b8de581047ddd5d73401562fa9ee54d4ce5f97a6288c54eac5de0ca29b1bb5797bdac5a1b30308

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
1905fd83058770c06fb206d1b5f77995

SHA1
4f4d48e80caeb84b5256e3371ae39b4658ea790b

SHA256
51e7883a256342933c14396e5803491e3a81edda768a50b3ceb8df1fe03bdb80

SHA512
15ec9620dc620c345c94592fc523ab79dd33218b7883a83814c6b2917b984381f686a7b990b7155247aec435ba35b225bd3b7cf05e085d13a93e2a37ef2b68ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
46cad9107f0164bac6f2e4a48f752bdd

SHA1
c4a242663207a902deb11b4b060414868aeb65a3

SHA256
350358204f0c5c32e8d7595db8d672fe8d5d4f20edc8263830c92f2db93a0b0e

SHA512
8f4dd782f32ffbc9efae77622d9a5095c26a3cc215778952424696051ce8db6018df2d00971072707aee046ed4d051b8155d4e6af580cdc961951da2526b057a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
be701944c45de40f8cd04b9d2cb2d702

SHA1
6c0d16c5caa0fe95ec1860d3fda0967a6161b634

SHA256
344af0ca3a46d32163905cc67f090d253a45507dbb04a39dedb75fd3239fe4ba

SHA512
b677794986b2dcf34eab02a98519ce55ea99d33a2c80dc1be8d7c71cee701d517557420776702d344dc07883de55a671a2c4ccd668870a618649c1782c55e300

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
306d4a1aaede6d9fdb35ae108b974893

SHA1
09436886c2bb3d87eea9cee66f1053bfc940363c

SHA256
6d1bfb99f5cd6b96d62dbd674f2eb82de476313d9f30a6d074399857228599da

SHA512
8d291c6fff664358845ca25ea2ee01b83ec82f3ad0136084a19a7950c33609b4fb7bab2c69c861c3ed9ab3dec6dd007b0b7d4869ebe7d988e76104313960a05a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9c931b8a063e976bc75ae79be59d2d77

SHA1
e43abe4e8f36abbf0282dc4c96e806eea3923a6c

SHA256
b31e649568108b514127f00bf4cbe6d584a38ba99a6fc6439505c92e71e90701

SHA512
ec5273e2568b5ba6a38972eb233960ce9c56af2905244dfcdcd6fcf44de2ab8608945d6fe2ca73e80611d3017d45da4475e2119e00015e2ba9fe182065fc6aa2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
255494da116719a93d0fd79f42b96b24

SHA1
d99333a82b8996548621bf183fcb7bd90fe51168

SHA256
c094ae54eb73159153a3e5db40141c8ed9906190d0a237f2e7e4f051fd7f47f5

SHA512
ded9f46e388694059be44b1a782e3d5a7816af0a02fd29929501256d89d16ff1084d65cd831c3403960f3a0d2da74317151a63c739fb791254a86aeea41e6d04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7547f24b809c331a9ec3d9eb2e716911

SHA1
d06528c8a580a0bc14a9b4ecdd15bf0c2c672ceb

SHA256
93406c08ee4dcd4eac7f8b16b22d64d61667ea9f5472f7196339b7e7049d98ce

SHA512
e05fefad5d49c0b288ea054b293cc848f9dc17740602392b3b478d80f2d6a745e584095102230f2576c95eaacea1eafbe900763cd41b5c609609e81c481ea6ee

Download Submit