99fb0d9d5e04e7be21a1173a722180e0b14c1b798e431b0e325d38c41d147141

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11/07/2024, 10:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

38b9864a6e5ce57f62b71e744d61920e_JaffaCakes118.html
Size

15KB
MD5

38b9864a6e5ce57f62b71e744d61920e
SHA1

e226ff9bb24077aff2605e2758e9d87a64859eb4
SHA256

99fb0d9d5e04e7be21a1173a722180e0b14c1b798e431b0e325d38c41d147141
SHA512

aec39fada1c000613ddcbd4c7bc03761a1c4dde0f5c91de3d6b2fb8727834c9879f464d03618e5f154916bdc075695a68b3ae8042205d8d6293c273d943bd196
SSDEEP

192:Pt+h+5jcL7LR60uNaqao7+4fMQ6mLOZmaO06s3bEzCPifxhjQiAWjy2b257mIObJ:P4GcL+LJxhdFjNsmK3l1oTHB4yQvx2V

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4464	msedge.exe
4464	msedge.exe
4388	msedge.exe
4388	msedge.exe
3160	identity_helper.exe
3160	identity_helper.exe
2760	msedge.exe
2760	msedge.exe
2760	msedge.exe
2760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe
4388	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4388 wrote to memory of 5096	4388	msedge.exe	83
PID 4388 wrote to memory of 5096	4388	msedge.exe	83
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 3328	4388	msedge.exe	84
PID 4388 wrote to memory of 4464	4388	msedge.exe	85
PID 4388 wrote to memory of 4464	4388	msedge.exe	85
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86
PID 4388 wrote to memory of 800	4388	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\38b9864a6e5ce57f62b71e744d61920e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa091646f8,0x7ffa09164708,0x7ffa09164718
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2284 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4396 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:60
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,9798202078767358977,7236576335483789513,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1732 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2760

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1464

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2428

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d406f3135e11b0a0829109c1090a41dc

SHA1
810f00e803c17274f9af074fc6c47849ad6e873e

SHA256
91f57909a10174b06c862089a9c1f3b3aeafea74a70ee1942ce11bb80d9eace4

SHA512
2b9f0f94b1e8a1b62ab38af8df2add0ec9e4c6dfa94d9c84cc24fe86d2d57d4fc0d9ec8a9775cf42a859ddfd130260128185a0e2588992bca8fd4ebf5ee6d409

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7f37f119665df6beaa925337bbff0e84

SHA1
c2601d11f8aa77e12ab3508479cbf20c27cbd865

SHA256
1073dbff3ec315ac85361c35c8ba791cc4198149b097c7b287dda1d791925027

SHA512
8e180e41dd27c51e81788564b19b8ff411028890da506fbf767d394b1e73ec53e046c8d07235b2ec7c1c593c976bbf74ed9b7d442d68b526a0a77a9b5b0ab817

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
e57dab77a2375967c9d890e63b75df04

SHA1
36cbfbd589b26b4cb4129a3bf22c1f133690b12b

SHA256
3990b672d95804931a146711181e8833be0cf837d5698de95ad5e963f293bdd9

SHA512
6b3034c38cbfcb674bed787888eada1e2c2a94ffb957da36a5aab0dbe7dedc08404710375cd57525036eff87b5e9b13aed433183e9ae519da8fb2c4f0da19465

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
15e299bb385b7894410e31d3f1fc3083

SHA1
cf34b4c9f712fd0363ee5269c51ddb3c6877c26f

SHA256
df94613b982fb66d7c154509674dcbf1e9039c093b060d7bd4c07e8f526a10db

SHA512
1cdf8859c5e2e65b380950ff095365cb5490e34b13fcb9ddd2c8f529d963330b8edfe19c8d7ed4b2f4f19637d515139bbf6adcf5402eaf82a3bfef9ca7b71fed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3e7d36cd8ffa4dbe2d2a8d2a77e59395

SHA1
47a92f4d2cfc11a60db9b5f123a371053b0bf8d4

SHA256
619584fa2f6a8d38dc97efb597027dd01202f6578ec43d0bec0f1a22eb511751

SHA512
a10a6fbe391ab6df88dc9ff2300b7efc1e23cb01f38344e589adf9253d6e8342060860b16d50a0c41acf005cecfb2156fd6c7c51df9ce0d4817315faaf687107

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4ffee8ea340a8887b696b6a2f1e62545

SHA1
8aa7a39a662ce1432e90151ed20bb5bf950a4596

SHA256
980ef552653c75c6f8a677218b2028406559c9721b1c6bf69f3cadc61d606ec3

SHA512
005d15ed70cee1496051f146285580e86221622d826c10508a5862f85caca3c1a79f7714be30e51ca5fcb98f3b4ec93db3e4bdae7dea01c6a1422256d207bca1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6a21e752211101409fd18b2676b6b35e

SHA1
1e9e4706dac1b395a8ca2b28625f511ab0cde84a

SHA256
8466b3812e301fe22edb766751b1272d08e70aef1af84c9ab4eaa7a09242f777

SHA512
ce892205419d7a83e3053088ec8492e919d2960024064942b1f7c37d63be1ac6cf57620f5a5649843ef719229cae891247a2bda77678806d335d38fa66c366a4

Download Submit