00708e39606046b8d7598b798ca3d1108c7f186a9d2d884bf42dc83e78823d1c

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
25/02/2024, 10:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a387463fd79c55349a1963e51720db3b.html
Size

41KB
MD5

a387463fd79c55349a1963e51720db3b
SHA1

245ee86aef0a67637f5e63eb79b052bdb143b180
SHA256

00708e39606046b8d7598b798ca3d1108c7f186a9d2d884bf42dc83e78823d1c
SHA512

be3fbc03d0cde8357cde55a4ee28e6e64388d93041ff109794db01852dd9d2c4a4af2efc851f3c3be1cc0109e597b995e90bf8d9f1274d36674ebb5cd72f92df
SSDEEP

768:SfZpU5cTqsAx/scN65IpBiosGqKIlNlOTN19N3dZmd08:SfuQosoHml

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4848	msedge.exe
4848	msedge.exe
940	msedge.exe
940	msedge.exe
4212	identity_helper.exe
4212	identity_helper.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe
4296	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 940 wrote to memory of 3940	940	msedge.exe	32
PID 940 wrote to memory of 3940	940	msedge.exe	32
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 2272	940	msedge.exe	89
PID 940 wrote to memory of 4848	940	msedge.exe	90
PID 940 wrote to memory of 4848	940	msedge.exe	90
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91
PID 940 wrote to memory of 516	940	msedge.exe	91

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a387463fd79c55349a1963e51720db3b.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdccdf46f8,0x7ffdccdf4708,0x7ffdccdf4718
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:3700
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6388 /prefetch:8
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6388 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6576 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,14349655501756283226,13797365810147628866,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3748 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4296

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2788

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e189354a800c436e6cec7c07e6c0feea

SHA1
5c84fbda33c9276736ff3cb01d30ff34b032f781

SHA256
826adca1e688de79a3ec5b91c75990927fb2a33ae717f474608c68336053f427

SHA512
ceb069a5e83a634503e253846fa17b8bf7aaa539c3353ce61251633d69068e24c5eadd1b496f43058790d2b513e65d2c0b0213730813d0b58bb82a00596e05e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b9e3e150cfe464e9ebf0a6db1aa5e7a2

SHA1
3cb184e2781c07ac000661bf82e3857a83601813

SHA256
2325a6292907263d1fb089a09f22fbcc6bad56f4961d427efdef1abaef097bcc

SHA512
f5eb1e76eb9441cf5000d8d4db9296077b61714ead5012779c084b37f4bba07614055738f5dce69b13b25975d9b7c03eab049b7685eee09b23fd8d4a7d71a039

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
3386310ba48fbdc59954793efb4b8c4a

SHA1
2951bc59f532bc9d9b29be000bc250b5ebb739cf

SHA256
51d6bc5e08fc5116f264686bb624506bbc60483e17404ed525ace2bb0fcb0715

SHA512
82f691bdd4bc28af9a23ba2298655de5074b75c7753d2c84ab5635f02cc52499d2ecf246596b24fd40a7e28f3ce9d00a87d0c0d21dfbcffe260c7821e613bf2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
898B

MD5
428b01a6a1dd31f623bddcaaa9c9e932

SHA1
62d6d6a63374879fd000b8192cae83568aa0e434

SHA256
fb38ad004a7f4247262c580f02145da196aa582ab093b425a98766f9a85b6924

SHA512
0bbb1f651b3659d238fc42220cb425008a0952b453fedc8390167211cda0e2ed42d4b628283fc3c97a2025ee5708070e57aa27380e515d74dfaecba67d7b0264

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a6657afe5f09bd7f350839afd9ae7185

SHA1
66ed8e3e40c4e2a6a080c7077c02adf341be9b2b

SHA256
d284ebc89ce1b1c1e4c1b8bc8d30a910aaefebac0ec0662a0e610b30b514d032

SHA512
8841cf61c753957259b3e523ab437b74c3d59ef0a80a1caf91dff667ed8fb31ac213580c6d9e6cbc0dc881d1320fa7bda8a48c5ea807d211d1cb954d31acb81d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f025446a59f193d26c13a20845ea691a

SHA1
e03c1a4eb25fbb1511d057435b0b3d242bdefc89

SHA256
bccc8d52206669a2dabf8117a81ffcaf884c721483876b6c4f2c430070d8b880

SHA512
f2749bc47c526b631dd1e24131b9cad467bdca6edcae2f2a68d11d2cf631721e3ae4cb651d9eca43f1b8bf35edc80a387c551d8e186a30b8dddd9715cde9b766

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
17016154082a81bd8e38fb99dff3ccb0

SHA1
7da50899088c777235b1adc09755d573498babac

SHA256
73d4fdb8fb86191ff01ab2d74268d7a7e769769c406b3f465087d85e48581161

SHA512
a9193e3e930d84ce04b587fed7156760c1eee1d9ab3a032d05ef46ccc663736454749db0621c309170fb9b87780ce4212f47b3efc1dff7f880f7368a7c087f50

Download Submit