ac96e5b08e4054ca0a89a8ad90d2b15c853f85b3e90a982c8eb544b000b41231

Analysis

max time kernel
147s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
24/02/2024, 13:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a1fdf641f580428ee0009875357890e7.html
Size

95KB
MD5

a1fdf641f580428ee0009875357890e7
SHA1

040dc9d9947a141ca691b85c7428cede780c0de4
SHA256

ac96e5b08e4054ca0a89a8ad90d2b15c853f85b3e90a982c8eb544b000b41231
SHA512

b4f6ba3cffcd62f7a92c10fad2feeb249244ba1b0eadc06c6b2f76283803bfb9d3feca79bf0662bc73d7bcd4d79f0244ca059e235a06168161866842592be93f
SSDEEP

1536:ug5G35EDI501Jsvs48oMrQQQHsPFIWP9wUXATjN2tf2eeueiej1pd0FZDPT2NHdM:ugi50Tsvs48oMrQVHsNXP9wUwTKbIbw

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1224	msedge.exe
1224	msedge.exe
3928	msedge.exe
3928	msedge.exe
4220	identity_helper.exe
4220	identity_helper.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe
3928	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3928 wrote to memory of 3012	3928	msedge.exe	51
PID 3928 wrote to memory of 3012	3928	msedge.exe	51
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 404	3928	msedge.exe	88
PID 3928 wrote to memory of 1224	3928	msedge.exe	87
PID 3928 wrote to memory of 1224	3928	msedge.exe	87
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89
PID 3928 wrote to memory of 3128	3928	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a1fdf641f580428ee0009875357890e7.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff99a7c46f8,0x7ff99a7c4708,0x7ff99a7c4718
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:3980
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6276 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:2532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,9537222216995035843,4044675473267594324,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1712 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3684

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
58670ac03d80eb4bd1cec7ac5672d2e8

SHA1
276295d2f9e58fb0b8ef03bd9567227fb94e03f7

SHA256
76e1645d9c4f363b34e554822cfe0d53ff1fce5e994acdf1edeff13ae8df30f8

SHA512
99fe23263de36ec0c8b6b3b0205df264250392cc9c0dd8fa28cf954ff39f9541f722f96a84fbc0b4e42cfd042f064525a6be4b220c0180109f8b1d51bbdef8ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3782686f747f4a85739b170a3898b645

SHA1
81ae1c4fd3d1fddb50b3773e66439367788c219c

SHA256
67ee813be3c6598a8ea02cd5bb5453fc0aa114606e3fc7ad216f205fe46dfc13

SHA512
54eb860107637a611150ff18ac57856257bf650f70dce822de234aee644423080b570632208d38e45e2f0d2bf60ca2684d3c3480f9637ea4ad81f2bcfb9f24d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
33KB

MD5
63f8ce93cd5b30f76b0a6cd029b7d354

SHA1
3ff83134ad10ff1e5c8da09db619a0274e5e8546

SHA256
35b6dba4a78fb19170305143a6f3740fe43a43ae35471709431d8391786c55ab

SHA512
7adf420a457e00639565a3f5918c8dee5026307ba37d71b3471cebb4313ac29897f1860ed22eda7caa44a563911987efdc4ff9f686f228d1ea9876e76a9484df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
dca1c5fe2b0d973703042ca9342b4e4d

SHA1
d772d4c7c159c565462b5ecb83bd86f74a251997

SHA256
a0aa11a7b15d1dc220c184d45a9c38609476a1c967a5018719131284de0dde02

SHA512
e7aaf13d8597eefbd382f44ddf58803d96ad7217615e9be8960c5cc7428c87a38f7668261dfeebb2f255ce3220b78fcce65356a45556aa1e10177dc2191c5666

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
113fbbb6016f5f96009b91d740cf7816

SHA1
54f984fbf01a881d0098bf7e49df4456ea89923c

SHA256
7827aa4fe2138fde79707e1286eaa0024035cd60547c56595b6ee6fc7c1c956d

SHA512
385e9525a69c0c2f4216fb23325a9418ee1ff4b2493274702a5ec21946d29b01593b803507212d0970f888babcce7b0350451f51fa890d94d6f5f90a5e80a5ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
d5ccb7247a19133c1750e1aef00dc867

SHA1
1923f3742b04905e3b57024a744594da52a58b91

SHA256
1955d36cd8178eac950467491533773cf72231d7138a5b793fa479ea21195886

SHA512
fbc5af84d4173179447e3a16ed77cb6e998585b01236db7a5c923b63716942d219ddbedde48dd07a61aacc147213a463c2313d3ecfe8276e8b9442c462e3e563

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e0ac95b9e7f1a54bdf256318b04ab448

SHA1
b98452be7fffa0fb5710aaf10d3c1013952edbc0

SHA256
b4bef79521526eac0198e7a0a5321f3aacf8469025361bf856d232258836caf0

SHA512
fc7850b62032c41b320f608f5581f4e4895694ffa9401389b87c755a2f8e5229872dda4b1d760b3f90c851ba7d99f60f1f52a04f449d489d7f5f9039dd9fa6b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0b254b66a8d8286c242ea28d24ea8b1e

SHA1
913ff0ccc967ffe6bcb99b95b981fc464f8ead6d

SHA256
860ee930a02dee75e8aa022afb871e04580830ce829aebb1c97a8f62383bd902

SHA512
f4ecc7daf39799209af852e947335ac1abea37ca304f0eaf76c2d87930d55d8411fc693e254c23c51ca4f58f7e809dfc7eba4a6fd5b81c2b7fb0f847788f69b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
87de4e6f9a27b90a8e7bff7c83838351

SHA1
509c96847da1235b9d830d28f69ab6db6c301846

SHA256
f58ba8434750124f8068552a0c056bcb5baf6e68425504bdae4b05b0c8cff91d

SHA512
9eab09335c9f9963a288a9af1d25d4e0d5c915af2eec4191cba5e49135e29e4dbd55bbe66bd7b2f3f8bb0cc6dc0ef1aa70de61d69bdd655754bd31935a92f556

Download Submit