04d84e77ed35d420c784fe77be82c0c1ec41a49000fa2fdb8c5a6f8ee3642bef

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 23:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8c1ede1758de9fcb1a6c76907587c3d2_JaffaCakes118.html
Size

51KB
MD5

8c1ede1758de9fcb1a6c76907587c3d2
SHA1

b9bfdf67b1a04a63f8b56c3eaaac97d864202598
SHA256

04d84e77ed35d420c784fe77be82c0c1ec41a49000fa2fdb8c5a6f8ee3642bef
SHA512

55d78bf41c15e849f23fa1b69930cdfdc79f54faf50a76bdcd9e6eef14872b821de4c5edf6de8736c09f59c487d754561511b630b52f44ffc0a529349f83b91c
SSDEEP

1536:pNob0M6o/B+Bs2Ltg7VgDCgHXXVV37XvaM6EsB+BIbLdb:pNETVgDCgzaz

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1764	msedge.exe
1764	msedge.exe
3640	msedge.exe
3640	msedge.exe
4324	identity_helper.exe
4324	identity_helper.exe
2176	msedge.exe
2176	msedge.exe
2176	msedge.exe
2176	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe
3640	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3640 wrote to memory of 4020	3640	msedge.exe	82
PID 3640 wrote to memory of 4020	3640	msedge.exe	82
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 2188	3640	msedge.exe	83
PID 3640 wrote to memory of 1764	3640	msedge.exe	84
PID 3640 wrote to memory of 1764	3640	msedge.exe	84
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85
PID 3640 wrote to memory of 1544	3640	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8c1ede1758de9fcb1a6c76907587c3d2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa439e46f8,0x7ffa439e4708,0x7ffa439e4718
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  PID:2440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5488 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,1527090543364227635,11782414344574324696,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3636 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2312

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4624

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
c8f921204d55a0a401701051acb89cb5

SHA1
fecc93d68a74e21c080eef77d01171f1fafb59cb

SHA256
f8244fd38415ad045fb54547a57642bfbcb51c233fdd421d3ce74d8887a92cb7

SHA512
1139353dcb441339752cb4a857c979cd963885a7a09e1e5726115d6904a3a2b8180826c77b7f22f5628973875dbb2f40b78fbfd6a0471e102692678859b7fb22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
b57c5dccebf7fc4d1889bbe3ddb70cd4

SHA1
baff81bc2f4f01e6577d6f885f0fd3c1e6d48365

SHA256
644f2be81f24ef1a6c1e1cd6cc8410d2dfcf1ccc70ad271c07e4f90df0e4a3ee

SHA512
dc4f67cef4215af5b4b8d39252fe4303311649e8cf627a2c36fb2e65e4e69422b8b9371e30bacd0a8bc44071fb34527ba6062a1f8969aba4f5642aeb76ac392d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8e28f7016ac82fbd24aebcd7a53a4924

SHA1
6b238a056ba48c30a11a2361807340989e028776

SHA256
f74dce045bca55774915a0f71cac70d172dca651760ec874df12a8142200750b

SHA512
a55170a8b394178b2a0e692de26c23d76b13dfb1e4bf0f00a5aa512af2332130b721254a43b9efd635e7832e349701bfebaaa83af017136fc971c9d370e8c4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
398ee7e79841d749118495399e687b28

SHA1
6b9618f26029517c72d57f5a9b51fc980738d3b0

SHA256
08fd704395046e93daec4300986b7dbbb6bc4f42df6426d51822ee3c94efb1ca

SHA512
acd9226b5864250931e12456fa321ac65a28d181fa869c7ea3dd49e1bc8a47330910a13e38a844c07642b190933d4ece653c935cd16ada0dda89f62fade74ef4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f7c1f44782413e051ab13189ee77772e

SHA1
330869bfbc6da9814c560de1c956a5cf46a2101e

SHA256
741e0f730bb98261cccc3ea57c1b86f3ed26c80b973a5391f104548dfdf6432f

SHA512
05e65869d859f8499cbd326ff022a889022b4a90c146cd40321403a2cff7d0ccbcded6d472771465d930814eae44ea72f32a83a4853add1bb9e387d28b763f99

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
62036bdae7c6470edd65bdadb5a17b1d

SHA1
684fcd36353ff33c22aa99eba8812d3175548694

SHA256
3b1c24f7738511bb6abd5813108b0237457870d693c23afd2a43fffe61cf68e3

SHA512
0b2e262a9a5ccadf95450e564d39d17a235e1bb7513b17d032884d4caae9759d38c141a71a69e645c30caaed35f8b6c7cf44a590e1d37f0ad714d8589e953eee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
196b48f01a559712f7dad98537c04e81

SHA1
487bb6980411aa0ae2a2d42731815ef60b5b20fd

SHA256
e35ef7369a765aaaa3eb0d5b69cd47ad5382887f36c13be0629783869437fc32

SHA512
90cfd304c9b9d8a1a4c3885deef8e6c5eb5adec7a570229a21230b41bd9303398b4fd94f8ad56b36fe997d120529964e8e0bb038d3946eee5f44f820c9466b4a

Download Submit