3dca78e356a80f7ec1f5a285488435ba405877972f9a52951cc7579397e52122

Analysis

max time kernel
146s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 10:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a19ab1587338282079b03639b1aaf76c.html
Size

5KB
MD5

a19ab1587338282079b03639b1aaf76c
SHA1

a9bcb0fe29c829bd4103c19837e8b9d87370e094
SHA256

3dca78e356a80f7ec1f5a285488435ba405877972f9a52951cc7579397e52122
SHA512

edf37940a4f2903b97938e96e8a27658dac57cdb3ef645ea355724b83a8710386efbf2e91d22d306f6e4530c1346b46e3907b29bc5ff753f56e07aaea3832c38
SSDEEP

96:khVKSpjAmF9SSS0SPsQP48vb/WNwHoMatXM6sQB9WUtEgNYo1krscIqagJM83pCc:oG0SZ48z6wHoMJ6L6k1QsnqagWCpCqa6

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4728	msedge.exe
4728	msedge.exe
1476	msedge.exe
1476	msedge.exe
4908	identity_helper.exe
4908	identity_helper.exe
208	msedge.exe
208	msedge.exe
208	msedge.exe
208	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe
1476	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1476 wrote to memory of 2268	1476	msedge.exe	20
PID 1476 wrote to memory of 2268	1476	msedge.exe	20
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4076	1476	msedge.exe	90
PID 1476 wrote to memory of 4728	1476	msedge.exe	89
PID 1476 wrote to memory of 4728	1476	msedge.exe	89
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91
PID 1476 wrote to memory of 2216	1476	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a19ab1587338282079b03639b1aaf76c.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea23846f8,0x7ffea2384708,0x7ffea2384718
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:3844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3516 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3100 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,9623073575873835392,5830127797340747792,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:208

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2188

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
360dd5debf8bf7b89c4d88d29e38446c

SHA1
65afff8c78aeb12c577a523cb77cd58d401b0f82

SHA256
3d9debe659077c04b288107244a22f1b315bcf7495bee75151a9077e71b41eef

SHA512
0ee5b81f0acc82befa24a4438f2ca417ae6fac43fa8c7f264b83b4c792b1bb8d4cecb94c6cbd6facc120dc10d7e4d67e014cdb6b4db83b1a1b60144bb78f7542

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6fbbaffc5a50295d007ab405b0885ab5

SHA1
518e87df81db1dded184c3e4e3f129cca15baba1

SHA256
b9cde79357b550b171f70630fa94754ca2dcd6228b94f311aefe2a7f1ccfc7b6

SHA512
011c69bf56eb40e7ac5d201c1a0542878d9b32495e94d28c2f3b480772aa541bfd492a9959957d71e66f27b3e8b1a3c13b91f4a21756a9b8263281fd509c007b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
195KB

MD5
873734b55d4c7d35a177c8318b0caec7

SHA1
469b913b09ea5b55e60098c95120cc9b935ddb28

SHA256
4ee3aa3dc43cb3ef3f6bfb91ed8214659e9c2600a45bee9728ebbcb6f33b088d

SHA512
24f05ed981e994475879ca2221b6948418c4412063b9c07f46b8de581047ddd5d73401562fa9ee54d4ce5f97a6288c54eac5de0ca29b1bb5797bdac5a1b30308

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
24KB

MD5
b82ca47ee5d42100e589bdd94e57936e

SHA1
0dad0cd7d0472248b9b409b02122d13bab513b4c

SHA256
d3c59060e591b3839ec59cad150c0a38a2a2a6ba4cc4dc5530f68be54f14ef1d

SHA512
58840a773a3a6cb0913e6a542934daecaef9c0eeab626446a29a70cd6d063fdb012229ff2ccfa283e3c05bc2a91a7cac331293965264715bdb9020f162dc7383

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
27bd0464925a83c879581682c77164db

SHA1
1df5f94dfd8122bf0bea46ddf713f08166762b6f

SHA256
9f23f8082d4b12acc19480de666b254a5e93a289de84699a39f0d6d4cb89d565

SHA512
7b2399cd8d28337e9e15968b9f81f2337ac897a5d13464eb48eb9ee9292624955082e1ef06233c5de92d683bd76b47eb6bb7282bc18c4aed49d21c4eb1ba84c9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4d46357a7a569a60fc892fc89dd54fab

SHA1
b98e4bb634f4ba45a2b8bdd710324fdb5aa250f2

SHA256
cd18e8897f817d9bc5524b518502e97e9a8e15b1c695b947cf23e0b6f499bb00

SHA512
5a2a380fcb31217a0ae6b931b8dde9de3f8356cfa20f66d333961ae2ee018da23e0fd9cece777fdaf2f5d510e4e33df0564bda6f7e9fae97a78136f69c1d70e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fe5d3d10ccecd0ef34ebb80e6d763748

SHA1
24fe2a718f5e43227a46ed0da4c0903db4f49c53

SHA256
fd634e56aa84ab9e3d68d83fca7b8522cad712a47f1e2da754b935858bcbf0e1

SHA512
8925b917b1ec4cbd4746eaa0a170afbd97d165d2761f92e5592bc1b292b4b78502326410f083440dcf074ab1ccd4ce794d0887b654326d8b9b4d3a39b88b66b5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c97cf1931e81f9db1b4b54971b588008

SHA1
5d5216e7037141fd4346ab374294db942904e457

SHA256
1358921294507de31c215147f4ca8a72f5f3c84f2beb7f877234005d3c8d3fc0

SHA512
f676fe10634507a92834ba4bb7d3ab96a897e10a7cf36f9c8af9efe832039605e434c07f2adf88cd0d5a539f7623b5015e5985acf898445b5caee17054accb8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ee4478b35af4b582f3340c5eba3ae261

SHA1
9f78a4c76f4feaa2ade993cdffcac1fc3a583a8d

SHA256
34b7c7cc3de4a847d135e8e8399db28fe61f5cc5b157a116310f1f304a967e7e

SHA512
95c6995bf1f841f266d1165e7efb368ae1e4b71cf6ae1c078762754effde896e0feba24daedb88e8401a74bab24be9602300c15a72b40239a0105b902ce7ce0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c82b19a6278ec7b2f7d51131b865a1d6

SHA1
5e76c5509ada97fb3eac87bbaa245eb102d066c7

SHA256
a9cb3cb53d466940b1395d7ca8acba8a1662e48a4368afc9da4d7297440a573c

SHA512
e0795b77161e779b2693f305ba383fe39f868c9a5066606379e916bad8001e0c5a76150ee3048ba360d0e0afcecc24b9d4a3cf06c09030aa439c5f62171f2d6d

Download Submit