defd9f3ffd03da941d9c6ea873da75a23ccbda1da962bf3e1dc748fa77c94be5

Analysis

max time kernel
147s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15/04/2024, 21:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f200f4387baaa64b85f7e034441e32b8_JaffaCakes118.html
Size

107KB
MD5

f200f4387baaa64b85f7e034441e32b8
SHA1

c787b37bd837d900a84a35762f5afc45d54534e7
SHA256

defd9f3ffd03da941d9c6ea873da75a23ccbda1da962bf3e1dc748fa77c94be5
SHA512

c3547f1675fa9f69126ac6f3ecd04643c7a6a27c7bcde1cc1549cc3b5687fa23afaa0052708136ac3e2629b36ed2c9bb41f4d80b60973f302d4d05094cb723a5
SSDEEP

3072:delYYJjhzYll2tW168G1sFVi21cMryOjz3ZKUPpXS0l8/m8cYY9RvPujjmu/fJdV:dQzYll2tW168G1sFq

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2112	msedge.exe
2112	msedge.exe
1488	msedge.exe
1488	msedge.exe
1268	identity_helper.exe
1268	identity_helper.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe
4836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1488 wrote to memory of 1580	1488	msedge.exe	84
PID 1488 wrote to memory of 1580	1488	msedge.exe	84
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 1516	1488	msedge.exe	85
PID 1488 wrote to memory of 2112	1488	msedge.exe	86
PID 1488 wrote to memory of 2112	1488	msedge.exe	86
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87
PID 1488 wrote to memory of 4424	1488	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f200f4387baaa64b85f7e034441e32b8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff96b5146f8,0x7ff96b514708,0x7ff96b514718
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5736 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,3878551536671372951,2477511101513470279,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1052 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4776

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1104

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
22bb6af63c7710354ac7070e45ac988c

SHA1
34d29d6b316e39ed8fb8c5efb42c4269040fcf1f

SHA256
1a70d5d3dfc04e6f5cfec1ceb06676039229f895f30007fdb55b043ed48ab4fb

SHA512
42c12820b5237caa5b4d5149901f84db6619a69e85cb869df06e07b3cad1b51e0c2d0545ee0129cbc8e7947fd8c2989def537ad2d58a1d5bf2c2a1bf60041ca3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
62677bdc196e22a7b4c8a595efb130cd

SHA1
bd2adf18caf764c8f034c08b6269d9693875f3c8

SHA256
b540616d7e73ff22642f4fbe2bea0f9daa2f1166391e76cf817b2a93e0bd41d6

SHA512
d23c3b9662eea6a75382242fb8e8084abc1127afbd2632f161df71a2aefaf223621511e1bf6229cf7e86313101a8d9dfe2f20e1c0bd481066e1969cd6fa75e32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
5f2ca2a7d3b523274faaa79628b26534

SHA1
189385e2619b4ee01b605e5ea55abba01dee0564

SHA256
d43fb709f6a2544fc9872a94976ed547832e2f39f1667dd7b7e68ba5e24c2b30

SHA512
fcb50c0e0a5a3800010f3bc4942b8754a11a6db9e64166a1936a8218250f5a03d163fab073b0257df510d766fed124597e772518406ce5aeba69bde6f2462f1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
3b4fde634b7fb40a60007f8a893de478

SHA1
76cb827f674d4a0f7395f4902c1d6d66a2133afc

SHA256
3bea57ec1ca46658449230d5b98eabe9b8675f63dcf1704c000967b9f9ba1ae6

SHA512
95bc343aff9db93ba13425d989553ec0c126fce7acf4b6d459fb4049c3317b16f888f9e1842456f380e7ef5e6d36150d78f8a9e42389239d4579dc6413b67152

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
3beb3980a7472eedeaa322b634172a05

SHA1
65ae33ea6ca3888d02111bd6810f69c641584c6b

SHA256
ad24616ca8a72ea39582443826eef60a60e8112cfa5ef069d0bd994b1e18d570

SHA512
3daf73ac8efe78131ce9f13d66f0ccc8debabe507a5b3a6e2f75a005be880a6c3f0d6f430fc038a34114e31c86988caae61ee35a6680f37e372e5bd8ca1979f3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5ef7217400326bd6b9b3b9a6e547d68f

SHA1
dc1fb00f1c95211693cadcd425a2184bd71afbde

SHA256
cd65e57ab4992609902f343326383e8416af724c44055eaae17800e40a768f19

SHA512
a3b0057d7541132ffd8398c533467a45c444ff593df7017c8a2088cb424cef177062a6abbd6205a91a5b830dda9c67c7450875d074fb2fb2c318b63f4ebedafa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d0d4607848064224233d745f67c3d724

SHA1
59e4ed3b9801828acf9f1e49f7e51b3b6ee16cbe

SHA256
a4de63ef14ccdf26896305d7a5e47639557f39327187abcb04834187d0f82e5b

SHA512
7c27ab9e9e88193a58c9ac50c302165925083f291f79e4b17308183c72f18f8b2c7539fda6ee79d6c59d528ff0b8ef0123eb0548302a71ed5433ca3220b341d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4632d72aa93824703b96db6d705a5a0a

SHA1
85794c8d567a3ddf241dfbc67a07406a3a13765e

SHA256
049ffb4916711035a7ff61d139a2d8615188db714d18b9bbfb7fbcf983d20bcf

SHA512
ef4366cc8a6c9aa2367c25cd4800e095b23a930ea1ac89f551fe86d8e3cfbf4b6f0a8a2bb84de4304980522f4fa8244c6242688ed393d75c80b502dafe7f65db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
439b4353fdc430dac838aec4619161ca

SHA1
d5621da5e48dd0d47a2d06ca03ad1255fac1b665

SHA256
8435d4da37aafc7fed61f7d96b5ba8198aa1acd34659d82d1c1d6d1aaf3bc828

SHA512
225033ea9c8f173b0cab2d9523e862cda1ab33da90392b71f942cb0afe70b488d0b923e376992c7ad368151caa7c3832863f6880f34f381abfd57acb2b69e634

Download Submit