e76119fbdf60d07d08bef1b10b9de6f6dcb328d94f83ffd3c816fe7dd4fee28a

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
16/07/2024, 02:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4c86d86ba3593083f5691fc8408ed071_JaffaCakes118.html
Size

15KB
MD5

4c86d86ba3593083f5691fc8408ed071
SHA1

b21d98ac9a43de9f01e579686810e86021a5f0de
SHA256

e76119fbdf60d07d08bef1b10b9de6f6dcb328d94f83ffd3c816fe7dd4fee28a
SHA512

f168213cd0b67a2dc7c457d6c875f935f8e6ba80946088f7dd7da9882bf398335d50c3efd25fcae1321923cbaef74ad74b69558d92f4d801d783547c8ba264b3
SSDEEP

384:X2jhZycIEYY3Nb6haPijpsym5aRIPGuh/BigC17gJ2:Isc4YMQX0aJrZk

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3088	msedge.exe
3088	msedge.exe
1564	msedge.exe
1564	msedge.exe
416	identity_helper.exe
416	identity_helper.exe
1764	msedge.exe
1764	msedge.exe
1764	msedge.exe
1764	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe
1564	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1564 wrote to memory of 1976	1564	msedge.exe	83
PID 1564 wrote to memory of 1976	1564	msedge.exe	83
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3324	1564	msedge.exe	86
PID 1564 wrote to memory of 3088	1564	msedge.exe	87
PID 1564 wrote to memory of 3088	1564	msedge.exe	87
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88
PID 1564 wrote to memory of 4368	1564	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4c86d86ba3593083f5691fc8408ed071_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8291c46f8,0x7ff8291c4708,0x7ff8291c4718
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4244 /prefetch:1
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5312 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:2168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,13799126672631118070,12820191107618984721,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4696 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1764

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4740

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4040

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bafce9e4c53a0cb85310891b6b21791b

SHA1
5d70027cc137a7cbb38f5801b15fd97b05e89ee2

SHA256
71fb546b5d2210a56e90b448ee10120cd92c518c8f79fb960f01b918f89f2b00

SHA512
c0e4d3eccc0135ac92051539a18f64b8b8628cfe74e5b019d4f8e1dcbb51a9b49c486a1523885fe6be53da7118c013852e753c26a5490538c1e721fd0188836c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a499254d6b5d91f97eb7a86e5f8ca573

SHA1
03dbfebfec8c94a9c06f9b0cd81ebe0a2b8be3d1

SHA256
fb87b758c2b98989df851380293ff6786cb9a5cf2b3a384cec70d9f3eb064499

SHA512
d7adcc76d0470bcd68d7644de3c8d2b6d61df8485979a4752ceea3df4d85bd1c290f72b3d8d5c8d639d5a10afa48d80e457f76b44dd8107ac97eb80fd98c7b0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
5051be41e19fdd779fda18a38b160ece

SHA1
7956d62fa5b6a21e0301960caf78686e2460ab52

SHA256
eca49c522ef336f93558c9799c399a4c9bc58ed709cfb054036cd38d994e4f9d

SHA512
8676ef6f43ae5686235d35f939343c41bb4f21f7c7599e4c9e29dd267d7f354accb5848d162a820a96240177d00692bca2c4ce57cd715ce444e66bdb36760916

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2bb22c3023ff4628854cd07f4ab08797

SHA1
1f0b5a3ab8abf585d40fb8f56d681090f8042292

SHA256
acfe259a86dfd348b340648c8b6de04105c13211e95b1fc7a06c0d218ed2e30f

SHA512
29fab12bce88c7bf1e6a6d6261c61ef5fb0ec3c89fe192c40bfdcab341eec32f801809aa8d7bcd05d3fc5d905082cba7bc6b4f8c00a0c0d60ccb967c38fc59a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a1b23b68f608ef741698560d63b71cf9

SHA1
768bfcbeb69b60b2ea8e790524b0fdcb6b6d5419

SHA256
9b635bd00498adb9954d32662ead759b1929f342052c47979833bf3e89fbd351

SHA512
206d02e548fba43a6ad47832bba56f0e940d906ce0166535a585293d099d0f4ef06121488a1c0909bfeee0220b8d1fb73c73d3d4cc3316fd2b0f410c66cf332b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0dbcd2df382d7666598b7783bafb1dc4

SHA1
3966e23d0b2c56bbb9d76e686ff39860b843259d

SHA256
69ebf9a779ee9ecc17a123a3f3b24f8a703c27aadf4e318df331169f15ed48f0

SHA512
31fdbb17e26376362092e27f6499e91219604d8b9785189a66bbd683fd4e8a412a6a6bb1f460d6faaa1223ee22322f2bce4fd9a8952234ac2afaccd6639f17b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7715e9e14c1b2a96681b05c41d7e9e5e

SHA1
8451f2d39005a815c66d94803860259c7c8bc8a3

SHA256
b35c58ba6c6033b58f7d84fb4d616968dcb67040570f0246f636d1828152799d

SHA512
33743b478445cc0aeea748cfc57c61c78726667f86a783154109b0f171eb6d607467e7d29be0938b110fb132ec375eae1693beca0ec4d75595b64db7ff06a848

Download Submit