cd696d9631036f24db429a610e66c87b521e7aef85e99d969fbaec3d338cc9e3

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 23:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3708473647d7f756ad365b82f04d6060_JaffaCakes118.html
Size

48KB
MD5

3708473647d7f756ad365b82f04d6060
SHA1

38d4cb2b03e2b125a7a4788c1cd58b69c56c4747
SHA256

cd696d9631036f24db429a610e66c87b521e7aef85e99d969fbaec3d338cc9e3
SHA512

425f2b206c017ec2ebaaa2defad9a37ebe6aea0fb0a45a5a0dd6872cf795a1eae106c3b154c0f901279389ffab569a741558cf732eac9e7824ca3825d3996d65
SSDEEP

1536:6OREe0xWEta5NHl72WfmRQXBzZtWRRM0Ss:6cGWEQF72FRQxzZt8Ss

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3116	msedge.exe
3116	msedge.exe
1636	msedge.exe
1636	msedge.exe
4024	identity_helper.exe
4024	identity_helper.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe
1636	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1636 wrote to memory of 4896	1636	msedge.exe	81
PID 1636 wrote to memory of 4896	1636	msedge.exe	81
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 4344	1636	msedge.exe	82
PID 1636 wrote to memory of 3116	1636	msedge.exe	83
PID 1636 wrote to memory of 3116	1636	msedge.exe	83
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84
PID 1636 wrote to memory of 3464	1636	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3708473647d7f756ad365b82f04d6060_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9e53746f8,0x7ff9e5374708,0x7ff9e5374718
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2908 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2452 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:4932
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:4812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5284 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,16980628123997555427,4942080695175515255,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6356 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1564

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1548

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
28445dcb040a0bfbc61b1a26cbe486f6

SHA1
94f5bf3e074638164c6d15b5392b1f4596c8f2d8

SHA256
82e5b3a4a821ae6726efa020f9b8819f5fe4cacad355711c2236692ea2a656ab

SHA512
371574e6c9009721ae5e08ab408e52b817c0ecf65df3989578a26c2a0209b183b77771acca7f2c8415144afce2db45deb03cb7c2677903f7528496b6a1abd092

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
3721d799562e9897c47ef3012cbf0d81

SHA1
7562c91899f58e61ed3806700f213b54567a954b

SHA256
bbae50d3fbc494eb26b9555969cfe6105bbec244c5d30136a2f373484f561421

SHA512
08b84f0312ba88e8b0d5697d9e7c94439f9f20c9bf137fec30e1dd4f5e92f4ba4d1fa4234b68c0625593a5285de99c1cfb405ba905782a7766051f7929c15b1b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f335933c07f076a54ca75b70c66ae668

SHA1
24127aacbbba2f1d8cc951e6263b802a286bf1cb

SHA256
8950421f500cc4c2a48424de5befb6400498a426b12466a29c06594cff573066

SHA512
8e8d84f98fa1feaa00ad685598e7c8f3550766b007e8cdb789c534dbaece1947cca2fa1bf17615fe6fcee2fe34e42e072e3e0538312387b550645f6313f67f56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
fe652f194577b12dffc977162b16f18e

SHA1
8d1376c33644774c94e58d50ab4ce4a7629a78fc

SHA256
ba6e8b87d49ec02329efdad35fcd1ddcf4c0311208111f1211e9d748db2654cd

SHA512
260a2096cb7a23b2393fa7a68c39198ba7a2f62c526acfd4c9537f4090d156846a0d12597978f0c01d158d18fa3bbb01fa13b73ffc37100ca0c9f7dcd8b98049

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3d1c6598d9ff26e9583eebb1f4853d6d

SHA1
caa90c6aaf23067df95a6ffacdea52ac63bdc652

SHA256
2c63949c74a6ac491ca8b1a72eb7a32166150c52c4f742a06e15e37387e6e6c8

SHA512
8a4475ad1454b7f33bb3079b9662ddb37285195c0540f6be0553ae4b734f5463db238ecf2b4a2c367e31af019fcd9f8c150b8048d1adb8b68a3f9e20ea62ec32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
6c711985767b580571a6d9a24a1696c4

SHA1
82abe2027c363c02c7f49cd7f2f103fda43a969d

SHA256
9c4fa855cc843005ac994d73931953a45271fe194882a953d1a7d9da572a310d

SHA512
c1d046789b5d095859c3526319c9992bcce304c1e5273bbadfaa9e7e113a971cdeb93fe68b723f41049ad97fc95b3b50d5ad5ce8966ec7a66c1b0200a84188f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
01884c450523c4ba1f50ac71ba91ba6d

SHA1
22aee13a7ba0cf479cc3d40e63fccd5bbe63cadb

SHA256
bf541b18d276ba7abf33638bf4a4bcd73513c434d40705c0b4087aa64ad3b190

SHA512
ec8b269faa0cf49121f2f0558320cd3cb9a38059643f59ac6ac5759d43f74face13eb50223dc30577a0f1bc61cf718d3741453440271fc17a267dee9450f4ee6

Download Submit