30d4c5e0f3db814a03e1f20581fa2823ca529388501f0b781ab7439ce666b2bc

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12-06-2024 13:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a0d611982af8dfefef8d94a1fd232329_JaffaCakes118.html
Size

175KB
MD5

a0d611982af8dfefef8d94a1fd232329
SHA1

811b8858fa4b431ba0676e0b5e39949969763396
SHA256

30d4c5e0f3db814a03e1f20581fa2823ca529388501f0b781ab7439ce666b2bc
SHA512

9c1a3184437824e9b35aa0d183814f26432afd476e7a1ae9d0d2ffc45add15284cb5ff3fd0704dc575e9af24269e2d49623174eafc2371e7c5cb89df1cdc11ad
SSDEEP

1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3fGNkFnYfBCJisjC+aeTH+WK/Lf1/hmnV+:SOoT3f/F2BCJikm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1392	msedge.exe
1392	msedge.exe
3140	msedge.exe
3140	msedge.exe
5076	identity_helper.exe
5076	identity_helper.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe
3140	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3140 wrote to memory of 1708	3140	msedge.exe	81
PID 3140 wrote to memory of 1708	3140	msedge.exe	81
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1780	3140	msedge.exe	82
PID 3140 wrote to memory of 1392	3140	msedge.exe	83
PID 3140 wrote to memory of 1392	3140	msedge.exe	83
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84
PID 3140 wrote to memory of 228	3140	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a0d611982af8dfefef8d94a1fd232329_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffbdf746f8,0x7fffbdf74708,0x7fffbdf74718
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:1880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3460 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2160,17333940053313646141,17847996439817983148,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1968 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dabfafd78687947a9de64dd5b776d25f

SHA1
16084c74980dbad713f9d332091985808b436dea

SHA256
c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201

SHA512
dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c39b3aa574c0c938c80eb263bb450311

SHA1
f4d11275b63f4f906be7a55ec6ca050c62c18c88

SHA256
66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c

SHA512
eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
3958110e7c10a410e9c4c3acdd8b420e

SHA1
d666d60477536de38469271b58005e2025631c0d

SHA256
371fdedcbf1b6a3351af6dc386eeaa5f8f57986e38b83e88c59a77cc6e957646

SHA512
9aa865d059d59655a136ad7a6c20cfc8a72353cd09ac17f1acb75418dada03b871b5ba84f8545ebb004bca4533fbef208ed9160aabeadf23648f9dbdb56ee8d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
5ac60df4d1d7a620519ccef0731925cf

SHA1
f2595876dedbf81d163425f2838ae07a58212440

SHA256
113362d1b98d5ec1cb0b3d4a209e3bb2daa34773d8ed720b31506fe78d759019

SHA512
0fb22b527206afb881519c912e0315d220ef7ee951a8c909147c745d30296d7caf17468b01001b6614b4fbcfe2e2e8296eecd7116760bcfb558cb2137a3da072

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
19a8b12fd20194400fe1142ccb6bdf3c

SHA1
97bbac7e98c205cdf23b6988128126c651d8ce37

SHA256
aacff7edb7ff741f4297a137fb6cb31c42a607c1df950f647a3a12403e450772

SHA512
f3b83b832ec65421543f09d987e96ce9f9d8c10f6576db3888f8f1eea8f31dd6b197ebb372687e1f8d1032aed159d02d4186115a002b9dbcf4a751164e65c05e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1617a4f6c9b4de60fa8c062e7afdfd09

SHA1
f82333d542457065728c1e2c644b6064b440f386

SHA256
2942621c73b763409e98b60ab5bab19d65fafd0e9d465606c8c2f6f7ebd28f43

SHA512
b7309693a3990dc63d48bf1ccae68bdb83c282ca5b2e02731eff8bb672462895b0aa5758954a63c9008564bc849f07d8294b8e514c9f9475a0d46326ec0062e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0ef991672866e8f15ae42586475c37da

SHA1
77cfbcd81ea013eb0e37d91794c99a9ccf3452e0

SHA256
5e30ae96adbf7d4717e10f614cbab769371ddbebd36bb1ab3ef03b39ac4bd65e

SHA512
2b1804e7ffdc3a75ba61c386f41b9eb11b66fabf5b289a405f81e48605f14c128b44bb7e97d0a8e97664b48dd18313c0899a1e0b085122cca722a012de4106dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
db5464f5b00d8ab5a6a907d82fa6c341

SHA1
758d17ed43b2054754651356f1e29fcf36c2a374

SHA256
247771c779bb9b040bbc52ddbef1301621889117bec3e2f5ec99c039c1009447

SHA512
8ed548a5562ecb4de45c78164f6a764d109e7bcebb23d71b8ac7deb73c12b803232e032370d609821d868bba356462f62ba64a99fc7b7760a30cbe41619a827b

Download Submit