04c63389afe1d202512da80a60d2fbe3a8c359890a3e5ede40d9d3bf693795ae

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27-05-2024 21:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7a9a953e4a7b5980bc7e3e9eb3b5b130_JaffaCakes118.html
Size

291KB
MD5

7a9a953e4a7b5980bc7e3e9eb3b5b130
SHA1

7516d90a4df06167e89390125d5a48b0ca48d235
SHA256

04c63389afe1d202512da80a60d2fbe3a8c359890a3e5ede40d9d3bf693795ae
SHA512

e9d6e3adb363c58dab5291a67d78fcaf71b546cef65f5e464a0d6d35b96c997b4a5487e25d2499a585b375863e804402ce052e77bdc1e68f3b00748a135ffe61
SSDEEP

1536:W2qRNgadTpp/zpz2PL/KQoLpUVNm+FVziwD5JBWKI0lZGPbA:PadT3/zB2PL/kUDm+FY0h

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5056	msedge.exe
5056	msedge.exe
576	msedge.exe
576	msedge.exe
8	identity_helper.exe
8	identity_helper.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe
2356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe
576	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 576 wrote to memory of 736	576	msedge.exe	83
PID 576 wrote to memory of 736	576	msedge.exe	83
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 1416	576	msedge.exe	84
PID 576 wrote to memory of 5056	576	msedge.exe	85
PID 576 wrote to memory of 5056	576	msedge.exe	85
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86
PID 576 wrote to memory of 2912	576	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7a9a953e4a7b5980bc7e3e9eb3b5b130_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9053046f8,0x7ff905304708,0x7ff905304718
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2676 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  PID:4424
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5908 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4016 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,18424812861044141502,1506897861143390521,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5236 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2356

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
3c0875b7408c1437cce780943fa30e36

SHA1
aa3c794afe83b1a4f5d09c77710acec0f6009bdc

SHA256
154974a894fd4bac2034b1cc5e6aa2a7e424dd26b9a155808635284e836cf108

SHA512
5da3b58851228a4b126bdbad0caa335c416125440839a137bd47adcab4fdf28de0dd9102662ba65eeea1ae79ecdbb5b23237b8115dba39a90e766a77ec259b59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
5e506faeedb945627ac6c84261d824ca

SHA1
3ce44c8adcbd621783f16deb5f809a598321c848

SHA256
dd49a7245adbd4087b03c50318e1cae47e2ad00d027651ffea6cf6224efba596

SHA512
d2737494655069556e191942efc6ebf59c76f7951e708640f3d9012e97fc28df790e4403ecdfa1a4c658d122e72a87bc7a879f77c093a6a9fe24518056f95b1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0097353c7d2b113d7e44eefdf1a85c5e

SHA1
fa9ee3b54650241632787154f93cd5e68a6cdc95

SHA256
220edb160f3e45b84122ba62dc442e1d0515a4f0c6813d8145b0de459376190b

SHA512
40251e92a8114234e9052668b9323e1a1cd4a497661eec3ca7056e635bc7cd60499a4f6fa509a4b839db236c8b948bc2d15854f79d947a551a15eca12c82cf8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1d04fa73666b912b820fe1cad20af5a6

SHA1
27c9d7233799df02b15e044efb7694ab88b9c7f5

SHA256
c036950936dd2438229d994b70259a4a71d4a8cc4846e1dc7cf0ee7ab0355cf2

SHA512
ff3d86c63cdca77fde1f3d15b9f30ceb284523a5fc78f50193be456ccbceb0039c95633bab53070b9f7296a345269f239917e42c263f6e20ffee7fed3584f82c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
49991a8c8f524d26c06f4eb6fe41ed8b

SHA1
58be1a13e3779fae85f5f7bbd5b51936289c4960

SHA256
bf0ac95ad71d73c70b335ab079ca41ec8d898730822250eee5f75898a2e95250

SHA512
50479ddf77fb4159efa13ebb029e872d888520724dc3a4e3bd93bd9349635ef20862d0903b04eb5b4ac5f712e7c42a3368ee3eee06befb5d232e7bf0fd1618d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c112c82a7f320c3a88ff84651d852b63

SHA1
fa7be045716df8a4e8eda2020f5f5f4e374fa872

SHA256
dfcd0e351ab671b2cb58aea4128ffec73ff8cb1061b9e892fb7e39f8b8e216b2

SHA512
bc34b771e6d2a0a94a2128e900772c5a6244184996c546484040db846acfb3bd38c37b012c906f8a87b0df09bbfdd1ef6991f2a7af0a008fd0478e76ab99fbbd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6973e995e929991ab52f6bc33e147046

SHA1
27bb991852f1576734f4afb2fb7140aacac17df3

SHA256
7d763d5231e6e026e15e9abf65dbf0559d76905932d0c3db1f5f94032eab1372

SHA512
5dfab514147f8918eecb300c058735230694fd84bdd4089bd378bc92f5fad42f0bad58b912847950bf62b967005329de58f8d7ca812b605d907186b581e337ba

Download Submit