e7647bbecc462f4f31cb71f99e8a9c24ae84e9e0fdd7edf51ef6a81dc47aaec4

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
16/03/2024, 08:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cd97ffe68a56a838c3a926c38dfa6a39.html
Size

17KB
MD5

cd97ffe68a56a838c3a926c38dfa6a39
SHA1

c3579cd6cabb5577ffee37cdf4df7a3c58f8d5c5
SHA256

e7647bbecc462f4f31cb71f99e8a9c24ae84e9e0fdd7edf51ef6a81dc47aaec4
SHA512

1f36c475b9d692c69d8673a7e3a7fe20dea0da551f317218e561480aa9fbc2909310e8682cffa45ec4f28a9680992a8a0b0bea47dac8ce019df528705bf87476
SSDEEP

192:vYlH5Khp5jck6FLbAra2jrmeKJn4G/HptS2SBDEToz7kRmYNdxpu9AnBSmr6lmPf:vYlH0VcTbAfjrk4atS2kDZkRNj8mS2V

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4468	msedge.exe
4468	msedge.exe
5020	msedge.exe
5020	msedge.exe
4992	identity_helper.exe
4992	identity_helper.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe
1944	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe
5020	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5020 wrote to memory of 4520	5020	msedge.exe	90
PID 5020 wrote to memory of 4520	5020	msedge.exe	90
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 3968	5020	msedge.exe	91
PID 5020 wrote to memory of 4468	5020	msedge.exe	92
PID 5020 wrote to memory of 4468	5020	msedge.exe	92
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93
PID 5020 wrote to memory of 2420	5020	msedge.exe	93

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cd97ffe68a56a838c3a926c38dfa6a39.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb19a846f8,0x7ffb19a84708,0x7ffb19a84718
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5316 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3416 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5984 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:5408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,11982774794070936682,3822234216745279076,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4804 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1944

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f35bb0615bb9816f562b83304e456294

SHA1
1049e2bd3e1bbb4cea572467d7c4a96648659cb4

SHA256
05e80abd624454e5b860a08f40ddf33d672c3fed319aac180b7de5754bc07b71

SHA512
db9100f3e324e74a9c58c7d9f50c25eaa4c6c4553c93bab9b80c6f7bef777db04111ebcd679f94015203b240fe9f4f371cae0d4290ec891a4173c746ff4b11c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1eb86108cb8f5a956fdf48efbd5d06fe

SHA1
7b2b299f753798e4891df2d9cbf30f94b39ef924

SHA256
1b53367e0041d54af89e7dd59733231f5da1393c551ed2b943c89166c0baca40

SHA512
e2a661437688a4a01a6eb3b2bd7979ecf96b806f5a487d39354a7f0d44cb693a3b1c2cf6b1247b04e4106cc816105e982569572042bdddb3cd5bec23b4fce29d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
198KB

MD5
06d38d9bf028710762491328778f9db6

SHA1
83e1b6cbaad5ca5f6dc63453da324f8df28de193

SHA256
91558d69c027808e375e11c80166dc6ba245fbcfce715c9588decc55b4a33dad

SHA512
b197e5f92add72688396a07246ee9842a3b0de36508aa57f0254531cb109c77d0392e00ea28e006f9fbab1b8fee9b333998946de47ca7526b631e8c810780781

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
fb49482f5c1a2524db26ef88d49ac71d

SHA1
c7e4cfbefd822507ab3d3ad138acdaa95febcb20

SHA256
d53252828402b8f5b44e9d3cbb89caf335ad815320bc750ad879e44e3a63d0a9

SHA512
b05945b09eff3f8fbc295578773f688e79fcecefdf0299709378db4729e15a73b8a9cea51e6cffa8d61b4f95461f4f55429da182e487096cd8206d22be1acee5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
204b51cc4e24e91f657b8aebc8d0c737

SHA1
29dda3bf877646a75f1851b499e68bb28ba29ee7

SHA256
28800a5fe8ace89014d47aa5789850f1ec1cb026c896135467a2d0dace3cc0f7

SHA512
9190e0052fbaab0863944f2897229c46ac234c77ed636ff1f3d1d38d781a2df09c1fe2857e72f6a81b3de8aca9db35542c39adc3e3f80f0ad033184530977bf8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a381c8b7fad7d5f54d6f4b36d9de3bd2

SHA1
c900deffe00ec0a7d17f4aab13e5237101c83205

SHA256
eedbe2a5e7434eb07fc94b5cb3d8d94fbf6769e306f4f64de8c746a20c5dfc47

SHA512
0e1c66fa77a96bc79dfe0bea871052a8fdf23ed042962305597dd1cd4cab9e8c10aedd622e89fd0a00fa667b905257ed7671ccac08a58428d2dfd27bbec3b922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
76c74569b0a445788241425e65d7a365

SHA1
46e67cb9cb092ac6d402b6e61bf977a77fe5fcfb

SHA256
c7fd4e0f0bcc8462f1cf831da98c1c2686ac085fad5ed0435a59176b6f25ae59

SHA512
2be348bcb4cfd44656ede144564851656d225fe21b878ab45a384e632b5d1a5e9c623ca96065f89938de182897585bf470cc6b0c617539fa6cd2b00d7b0f858d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1f263120000e6a08766a0026e76ad9e3

SHA1
972af71e6ce8a08d36ac30b7f015dffc89ef6662

SHA256
646579066cf5f0ba19c7a7fc6b0240b40d64d5d61177f68117e6544cfef1a5a0

SHA512
cc5217f7ff1595ccd4fdea5ba8a55f730aeba2f746a37d1d035c13a6e08bebd3f8e065e043a277658406e18faf7a629489d0e7866d1b99c34fe85e592b8c4052

Download Submit