bf23245d251590493be3905819f6b7841a23bbfd50d2647d04d09a2266463c8f

Analysis

max time kernel
146s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
02/05/2024, 03:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0d612f9423e14bc3291bf0a5ae20ec81_JaffaCakes118.html
Size

55KB
MD5

0d612f9423e14bc3291bf0a5ae20ec81
SHA1

b7d7f4e42354922542847e5b5b59980a88ba9cd5
SHA256

bf23245d251590493be3905819f6b7841a23bbfd50d2647d04d09a2266463c8f
SHA512

741eb98f10bcaee3fd7e2463c8fa8957a8514d4ce92ab6307242da01b3d2df8904798c0614b87cb85456b8adf0567eead508fb73ec92bb4c626b87db2570fb17
SSDEEP

1536:5RRT9rCX7CeHAKsPbQJ1CPMeBrVjTRvRb8FFaUa2zArQJt:5Rx9rCX7CeTsPbQJMPMQRZcFpcra

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1272	msedge.exe
1272	msedge.exe
1536	msedge.exe
1536	msedge.exe
2376	identity_helper.exe
2376	identity_helper.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe
2204	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe
1536	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1536 wrote to memory of 556	1536	msedge.exe	84
PID 1536 wrote to memory of 556	1536	msedge.exe	84
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1512	1536	msedge.exe	85
PID 1536 wrote to memory of 1272	1536	msedge.exe	86
PID 1536 wrote to memory of 1272	1536	msedge.exe	86
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87
PID 1536 wrote to memory of 4180	1536	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0d612f9423e14bc3291bf0a5ae20ec81_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff14d946f8,0x7fff14d94708,0x7fff14d94718
  2⤵
  PID:556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,17979255062148556227,14716369200146600081,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4528 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2204

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4640

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b2290ca03b4ca5fe52d82550c7e7d69

SHA1
20583a7851a906444204ce8ba4fa51153e6cd494

SHA256
f9ff4871fc5317299de907489d466e630be63d698c8f7cb77cc81faddbecc6d2

SHA512
704ec8122cc1c263dff67ddbb5c20ee0db8a438674d716bc3be5b266ee5629a219b0049d721f9eb2dd8f2d8fda0163659eaa4d3e1f0a6e9072a8ffb92bb2b25d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
919c29d42fb6034fee2f5de14d573c63

SHA1
24a2e1042347b3853344157239bde3ed699047a8

SHA256
17cd6de97a0c020cb4935739cfef4ec4e074e8d127ac4c531b6dc496580c8141

SHA512
bb7eadd087bbcec8b1b8a49b102b454333f2f9708d36b6ffc3c82fdc52e46873398d967238c3bfe9ac6caef45b017a5fe3938ebf5f3053e4ef9be7b2752b563d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
bdc03383ba75f940315068b731e63cb7

SHA1
9c5383bbf752942b0d95c225d2570105657fbe22

SHA256
056e48cfa54b39129a1f84e12f0152fa73785b8064474ce2cf7506743ea91933

SHA512
5eba13b3ded1b7d0d3b407ed25df41c84192602107d52e6aea5593507205336def05788a5ccd6ee459851fec54d2a05fb653a6675189ebbfebe40dc94627f452

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
e800626ab9727b17f817ce690b00b63d

SHA1
f24974eacbe620ead28d1899b624fe30d4d2a04d

SHA256
eb349f4fde15de7fc6c150988b55a391a43d2c0d51cd77b04d0afc5e82d70269

SHA512
20f944d17a760e50dc8d2af06e6d97c8c9ae3650627569ffca8e25b1a98f12b177e642aa05b938099ee46f95deb9b9beff3e0e1ef5bb7e5f5bdf928d4d38d790

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
9243b8b254231f5174979f119f0fa643

SHA1
4b01b9d585653de2f4b86559192f28e725bbab8e

SHA256
41d9c29eb1d2e5d3b16e75565737742398cfd537d92e294b9383c07f32fc4c4a

SHA512
5bb6652b7a5bdb0c74e2f2cdf891483cac2f1662cdc9b02ed95a231c9a6836fb31caad756d4868ac5d5fe6e4202676aef5e69e9c988763497b10621eb8201719

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c35b6f79573d4e60dd3c84523e2a82cf

SHA1
e8b38186e80200b9ae90f935e719bc25635780eb

SHA256
9367c71a2980ba586c8b135c46c1ee8e0597d894da315d8711d604508899ca39

SHA512
ab2d32c372cbb83ba5b565d9b70d3e134e0c8f399a505d0f6dae8111b0025a99e6f568a71c207ed9961209a44a7dd57438de77c720bfc9541dddb70c11693ed5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
dfb7d99d147169f942b0d01e13b74eb5

SHA1
b270b40dd8c5763e39efcaeeb00c6b50fa294c8f

SHA256
0de4191055a270aad9e13030e45aa2a26f8236d80a4052865693bd95d80090ce

SHA512
759d888d3dad42b130363c577ca825cb929736c3eff8db62a3bdbffd4b113576d18ad0e2f5d1acecf6dc6c34ca69522d26bfef0eb7b9f331257ca38bf7da4c90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e06684ef57c7cd1bfd352a014ed29cb9

SHA1
24c6ecfb76fef5606d1ce60a36843fac9314ea50

SHA256
820a62f61e88c871f93e29af2ae458d893a92f139ed9a190c15b9376837bf545

SHA512
ee80f64b3349627982731987399f2b4a9bd275acc6d689826ac0cecb2d34db566a5428da4d6383a9962d90bb26c085d5c0d1779a7473bd89591b304c860f903a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
dec9dc098ccd1d126ac2411701857872

SHA1
617e958592cb96e3c4dc1b9e37b1958998530561

SHA256
1df0cc13d67f17d5ab372724ee1719cec30d6e1dc2c00fae8fece8ca7eabafdb

SHA512
6e5b958328d54989420c8469afdd852f20ebce98d48752ae822028d980dae5d83c42fc830c46b683b48c8b18657ce99a2b383406b22a4e703d34c9b861624f58

Download Submit