4977051bedd09940f187b50f4f29adcfc993af5aadc4af84102107625f9d1885

Analysis

max time kernel
145s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 05:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

21453e3a73ba14023b152ba0557786dc_JaffaCakes118.html
Size

57KB
MD5

21453e3a73ba14023b152ba0557786dc
SHA1

1b7b1197bdfd0a010d25c6771eecba0c07f33130
SHA256

4977051bedd09940f187b50f4f29adcfc993af5aadc4af84102107625f9d1885
SHA512

38d7dccb199afda23a7f29a5e3414b55ad543ec368ded7dccfdaadc3f450cab449b3af43725182846cd0499d4888e354d8a95937f36ec2770ad05400c970a0de
SSDEEP

1536:ijEQvK8OPHdsgjo2vgyHJv0owbd6zKD6CDK2RVroN2wpDK2RVy:ijnOPHdsD2vgyHJutDK2RVroN2wpDK2m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3644	msedge.exe
3644	msedge.exe
968	msedge.exe
968	msedge.exe
1176	identity_helper.exe
1176	identity_helper.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe
4136	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe
968	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 968 wrote to memory of 2976	968	msedge.exe	82
PID 968 wrote to memory of 2976	968	msedge.exe	82
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3172	968	msedge.exe	83
PID 968 wrote to memory of 3644	968	msedge.exe	84
PID 968 wrote to memory of 3644	968	msedge.exe	84
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85
PID 968 wrote to memory of 3212	968	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\21453e3a73ba14023b152ba0557786dc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd66c246f8,0x7ffd66c24708,0x7ffd66c24718
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2396 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2808 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3028 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4216 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:1224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6364 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6420 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3368 /prefetch:1
  2⤵
  PID:5476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,6036520460379616778,9886475162108125314,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6264 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4136

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3428

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
81e892ca5c5683efdf9135fe0f2adb15

SHA1
39159b30226d98a465ece1da28dc87088b20ecad

SHA256
830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17

SHA512
c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56067634f68231081c4bd5bdbfcc202f

SHA1
5582776da6ffc75bb0973840fc3d15598bc09eb1

SHA256
8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4

SHA512
c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
696B

MD5
1ccdae1d0bfa6a4c08609a2359e90b68

SHA1
663c41377cc5d8e76043df40dd9733cb401f114c

SHA256
a398a4e301a6f228c95b45102e84952c60e369aacec9ebd99267987407baaa87

SHA512
0b5b5591ff3857f013012b0ac2b868bac0e8cca7f21f0dcccffcc9bdb055e0038e6ee7f4dfc4ec08bef25889d9df0ff924b76f5e19d8eedcf00b4921c1435bc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
41b6d818145c60397fefbe3eed5c3ca1

SHA1
aeab516f645c6ed44c7906306e1b3bcd53250135

SHA256
56003d111578c53fcfdab3299068d3d33cc122365d6eeb775cb31843e92ad176

SHA512
92292c3c25f91b8a0cb1a67cba45ae6bfe52124a8c6c385c1849e5d3d473b6fe16ed12f210fa82e0bfb241e60bff38a593f41f5695ff269f71a65d68415eb436

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
815e62b9ba1250d5bb1189d756d3c94d

SHA1
28e7b98bb0bb21795e1d19a2a17b03317deb66d2

SHA256
b9a2e0f5a304d49cda7053de6081a6a1b3adebb7dc472b6454ca65c07e9f292b

SHA512
8c608d2bd42abb6aa82a08da76399a24beea843be149664a1e2c86172fa58d76272ecc2f8638d8ed16a327328e761c641286c74a9683c634aab5d5a675f2cbb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
6a5e0b849e3b4020361cbd493c50c29d

SHA1
43ed52e782d084d4aa6e0f74e8788b34e8f04ff3

SHA256
b9e48a0917ce27e320537f0e9dd5b939bf3c0f683b6e296225535e260a4d1dcf

SHA512
2c4bdd04493fcdde29b3b98055388c68bd80b0b2e9e8440a4b05fabe85e1804d58e3f2e2d1b962847535669cefa1a9533da2b4c0f82a091bea42bb523e0b8930

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
af5424372b643c19881fb288636362f7

SHA1
1e1378b5584b4e5c68c987d0cd2bc98d9b2c09a8

SHA256
3a479823b77c57e2e7e76e47714506f10078934aae49fe49302e05e0da74aae5

SHA512
2be781f0b788f5db9db33ed9f3bf33b54406df0d62cd22bb9f3764cb2bd825543c1c9ce52cb437d03f1a21de70f20f622ff9f405bfc69a3ce0dc66730ba72494

Download Submit