882298a95c8fdef87128dcc42b36985142e2339094efd5a2188723949fda7e8f

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 04:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6214a54c46aa2bedb048bf0c069c7fa1_JaffaCakes118.html
Size

175KB
MD5

6214a54c46aa2bedb048bf0c069c7fa1
SHA1

831bf389e1d208728a23339fad0e07afe45981f9
SHA256

882298a95c8fdef87128dcc42b36985142e2339094efd5a2188723949fda7e8f
SHA512

890795cce243c3b62a326156a0d6c3c7a5f04ec0afc88ebc71a87952e8864e1a1aa68ec4fd2bd4657754887f1829629791d1f7eb64048dfed4b229182f0b7d3f
SSDEEP

1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3+GNkF9YfBCJiZG+aeTH+WK/Lf1/hpnVSV:S9CT3+/F4BCJiRB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3080	msedge.exe
3080	msedge.exe
2672	msedge.exe
2672	msedge.exe
3096	identity_helper.exe
3096	identity_helper.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe
2672	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2672 wrote to memory of 1500	2672	msedge.exe	81
PID 2672 wrote to memory of 1500	2672	msedge.exe	81
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 2040	2672	msedge.exe	82
PID 2672 wrote to memory of 3080	2672	msedge.exe	83
PID 2672 wrote to memory of 3080	2672	msedge.exe	83
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84
PID 2672 wrote to memory of 3000	2672	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6214a54c46aa2bedb048bf0c069c7fa1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc6f0146f8,0x7ffc6f014708,0x7ffc6f014718
  2⤵
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2032 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2112 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  PID:3692
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5796 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1896,2440190548837073834,13658494854004098686,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5064

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56641592f6e69f5f5fb06f2319384490

SHA1
6a86be42e2c6d26b7830ad9f4e2627995fd91069

SHA256
02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455

SHA512
c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
612a6c4247ef652299b376221c984213

SHA1
d306f3b16bde39708aa862aee372345feb559750

SHA256
9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a

SHA512
34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
edbb2fe5d99e1f896b2da35739e2f431

SHA1
7784efbae478bfc9dda1387603da37b769b74289

SHA256
df5a2dac622d562027c6a924b10776aabe01d4179c79d562ca93639c58468f2a

SHA512
1d861e853bf7067f049b27f1056b3e6d56abf46837af120e93bd3585b6a73b57380ddeb7bda8209b1edcac900be52efed5c34d22c0a242cd8af546759423f121

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
398ac2d3b0872534fd2fb60add129c40

SHA1
a7c20424a2fba85dac66c7a0f2eb084abed1c93d

SHA256
1a7861857736f2786239f7be26c8828abe847b12bd215bbe36738fc3c64acc6e

SHA512
797696d75652bc3badcb1f206f9fb5d56eb986db4ceb988aa26c75c3b3d26bccdf726787be8df5987f9f4029b734b718849e9a75cb25ffe645d3fc875d4b2453

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9b1596051b7866b6bfc6fe3b1cbc5725

SHA1
ebe6faeb660fe643c3a782b32da2a37ad14d1ee7

SHA256
b5be412d3178b51561f16c37e2a73bfca42ce4ba56666cc2efd599b787e59100

SHA512
dc10dd0d8e9b00ec4d54b358852db8f1820c0bfb81c32baf57331f98aae33a8866b39d7ea6ad4d89fe9e406fe7d9e1ee3b7362d722ca5ceb24d89128ff9fd990

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
59a07f4f9a688e2fbc28a36f9448ff96

SHA1
094e8443845a09d084d40c83cf0b6d01e6f2cba5

SHA256
59b45af7c183b27e95b60312d8888e33e711552f0bb8fa1bf9af9ecf99941e3e

SHA512
a5307aade34f527f1605d09e29e0f1f2180a8776632dcf0264488c5522ff817c425ed8ebb78cdcd842252f3e9aec6119cfe77e9b3da2d050f9a986bfc1d0ddad

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5022bd29076254d0487cde75902619ab

SHA1
40b7cedc1c30748a9e9d32dcf09b082ba76ec41a

SHA256
b1c81a90ca9f4b670e7b40926e4d38067cbc693aaacf7606129b7952b7970255

SHA512
497033b815be843cfbff3372c44397c0f0915e2015996720ae76a26822c06aa420329aa3e62cfe5917d0cabcae01792c86ba47763eb8d31ff1fecb201b7acc9d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0a0792c6a1021a68e0bebabbc14c52d2

SHA1
1345fa90dab096f2b0745b08d330355b8fe1e092

SHA256
f0f582630630d78d99cfd20eca28a184de118993b49a824d8a79be925501c310

SHA512
db870ae66e2c08d0617691caba64c5fc35215d66648ab5e1697036204a58f0bf304b143f983bcef5b620262f7e44caec915c2db14eb2cb9580a466b6d42981b3

Download Submit