3300a257935179c856bf0b3f682674b2069a12ae969140418aa024e13de418bc

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
28-02-2024 09:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ab827147f04d4d58e351d78a43efd8b7.html
Size

34KB
MD5

ab827147f04d4d58e351d78a43efd8b7
SHA1

0c34fa1f802971d633c6f311c5e4a2f48ae91959
SHA256

3300a257935179c856bf0b3f682674b2069a12ae969140418aa024e13de418bc
SHA512

00f6fb909614d7682b5e49394f4eab1bcfd8592e163d2cf0cfabb6401da0cce877bd3031fe12657ad936904d4e8feb8c897534cea139aaf38a36e46d30a4be76
SSDEEP

768:/uCCm/BVcSEwx7Vo56kg0NccHRmR0JlgSW0rUrDouPGlOGpeGYF+TGRH9mDru9C:/uCCQKxu0wJ0IrDouPGlOGpeVF+TGRHu

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4020	msedge.exe
4020	msedge.exe
444	msedge.exe
444	msedge.exe
2320	identity_helper.exe
2320	identity_helper.exe
1432	msedge.exe
1432	msedge.exe
1432	msedge.exe
1432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe
444	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 444 wrote to memory of 212	444	msedge.exe	48
PID 444 wrote to memory of 212	444	msedge.exe	48
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 1436	444	msedge.exe	88
PID 444 wrote to memory of 4020	444	msedge.exe	87
PID 444 wrote to memory of 4020	444	msedge.exe	87
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89
PID 444 wrote to memory of 2768	444	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ab827147f04d4d58e351d78a43efd8b7.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb62046f8,0x7ffcb6204708,0x7ffcb6204718
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4772 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6280 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1728 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,738055041776059376,7492022620143154857,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6212 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1432

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7c6136bc98a5aedca2ea3004e9fbe67d

SHA1
74318d997f4c9c351eef86d040bc9b085ce1ad4f

SHA256
50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2

SHA512
2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5c6aef82e50d05ffc0cf52a6c6d69c91

SHA1
c203efe5b45b0630fee7bd364fe7d63b769e2351

SHA256
d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32

SHA512
77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
21KB

MD5
4270891730df48beec95782755f2bddf

SHA1
542a7aafb3b04814349565f39ec419f36947fdea

SHA256
756221d34900d2995ab8b653808ce1ea6423a582638908699903a19ce3a8e53d

SHA512
91c508955a0bd4426b6cb8b6f6b8fed2ca6ff7ace689cc44638d8c698cd0b61d0b29bb6d6921408a496c6c6e2cb956876e8c3c8d9912608ec31bd81f586efa5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
44KB

MD5
15d236690ae6ed6285bc3260340703be

SHA1
3b8475145f5f25c9b6b93a260b30ada4a4279b76

SHA256
bf521348d31946bb4e6d31c338e6efa0961ee907f4f871b1e9781a849dafa792

SHA512
2eca25be9587131ba4e4e4fed86283dbab3f959299d79db056619da072788c6480e5244095de5c84a58c40bf1f5b7bc808ec94c84fd7dca99464eba4f511bbd7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
63e90fd9e41fda25e0587713540275aa

SHA1
d6ecf678edd3563755199f6ccfc841be6b397819

SHA256
b5e7c915e8ffd05f576060bcdb72525e22578a0d8342f9e089bac644f8d4bd98

SHA512
751d858d7f181c1b139afc2e03c948888f3d1a951155762d1bbe48ea943a8abfa9b3d1510cb869453b371d9a014f16a1a9f3146ee3f387acc64875084667f3d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
64052dfa3c1cfa850d3266617592cfc1

SHA1
2d1321b0cca7aa5b385777aea9226f3334c8eccb

SHA256
5a8911cc6d4d0a6e9401a5a261bec61cc3a3457b041b6c90f32e5ea1b9e88e82

SHA512
0cef72260ebb31535592df964a6cfcb713b1a85bd0b33af3f4bded7217ba59319c8eae909339f9fe56239949802d27e30cbeda400000ac1f1f4f0fa43c542b8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
448e9adae1aeed733dfd5bfe9c41cd43

SHA1
bec8f0d30900215bece8e0ef353d561a59f2b7c7

SHA256
b198a39cade1cdf47be4b01f21e140229cfbffa3d4c417897524a1ed591321d8

SHA512
8c49f069af71cb676507e886840fa20c5a78c89f3a21d45459fa3c9bbb30d8fe58585342188c76045507bd886b38bd7445ac543c0e16e9b23c1b8618678b94a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a43e77a6bd7717cb61c020a8968ce82b

SHA1
fd27dfd817b291ed47077fb6c089592ce305354d

SHA256
05ce393082c93b797bff512f19f4c6fc94611bc43dc241c8d2ec7da9869e6642

SHA512
9a14a2d9b8475b35e273142005fa018f5b77cbe67f6e78cbb815cf2f032a3ff0d30adca91074aa78f0c19f4e562165ab94d0550a4d209e17293cbf3627555de3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9ae83582cec07820b72e5494eec6ee70

SHA1
250352608c27cff6aebe62028e5be5ad91e8a4d8

SHA256
6a89480b00676321a93b391a2ae05835942c28139d5d95727cb23cfa94d85757

SHA512
1c77626870f28d7343da5add26a353ac48cf511db2ac9675873ff5de00cacc5273794376316c1a990b72da4341312629cbd52851a7081842cd43a8ec3f541511

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
29ed92157458c5f9e348f5e858078d4a

SHA1
84740019cbfed26e021d01d390627e6f6d5a01ea

SHA256
c100662a2a03a443de113cb29b2071153e2f31dde52309335f437d49e5a74d58

SHA512
9356629c5ca69f1acafcedc238542ffedc27b63464fa5e2458797ccb25f6408253c75ed6f9748370f3562bb01a81455dd207fb6ecc668f461b0dd8bf0f0c0902

Download Submit