90c37ab3997de17043aec8f848e5eaace1cc5d39ec2d6883040a310d884a0919

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
24/07/2024, 04:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6a41f82b31f4344f19606a97fa637ac0_JaffaCakes118.html
Size

109KB
MD5

6a41f82b31f4344f19606a97fa637ac0
SHA1

75b2a48150d70a1c6fb5572ea370d2bbb48ce6a9
SHA256

90c37ab3997de17043aec8f848e5eaace1cc5d39ec2d6883040a310d884a0919
SHA512

3fc032622b3de02e5696b152eefd00759f67cb041a061410592dc153c6515962a47995bf0636f738668152c211a204eb872c59d1c4250886050f573c68917895
SSDEEP

1536:f3Orm46BrqScH5YZLPcia82dDk+Uevc1sVIWlonFnZspee2u6fq9kHXl3TQrM/I1:qhZqhPyyOsVjQgwR1a8q+s0

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2112	msedge.exe
2112	msedge.exe
4552	msedge.exe
4552	msedge.exe
2036	identity_helper.exe
2036	identity_helper.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe
4552	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4552 wrote to memory of 3544	4552	msedge.exe	84
PID 4552 wrote to memory of 3544	4552	msedge.exe	84
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 4728	4552	msedge.exe	85
PID 4552 wrote to memory of 2112	4552	msedge.exe	86
PID 4552 wrote to memory of 2112	4552	msedge.exe	86
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87
PID 4552 wrote to memory of 4704	4552	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6a41f82b31f4344f19606a97fa637ac0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffbbb6146f8,0x7ffbbb614708,0x7ffbbb614718
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2256 /prefetch:2
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5484 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,11914583750323008987,5211690530010733818,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2324 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4124

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3988

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
e47b76510d924fffbea166beb43c4687

SHA1
073b143d66c5b1fe1573db329b9fa3417f122817

SHA256
4a2919d383ca294fd5be0b2d8847b87cd64b351116c50b03f02ed87a066fa671

SHA512
fb1f4a6d8ab30a7f93c66b78741757c7637615594fff590a1c26211f675f35d9ff9528f2f8305236f7c390220c6f9173f8e8b4a5b8e45438e3f46005631f03ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
85375493f244df5e868966200915be6d

SHA1
65813dcc279c640de725daddb16c812b6a12c765

SHA256
98b84622e91788eaa382cf1537adfa6ebcbdee8545a8fc8511cf614afd0c7781

SHA512
2b75173782542c532bb8e086d9afb16e380739daceed7aa8062d23bf24a0ef4c7ac3fde531ee393ee94f2c65b9541bbae495c8f007b22e7c1ce07c670ff3eea0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
405cfa2420b77ab006cf4dca5a68310a

SHA1
26eca76ed91fc22b512c3b3ce6916b5cda2ae2c5

SHA256
d12edd5b0992225cc5e654debf02f5710c3732c3305342dc11cb2e39c9ad8100

SHA512
833680308cfa0aa4ced9fa8d4009020b66daa7cf63789d1b4f126e86c230e88cbd82d742b308780760f2fcc9d4a079a873b7d797f0c91cc633f0c492e10a8537

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
68245f5f6f303618acb196d4995c0fe0

SHA1
20832ff3e6dda737d1df527f2a8f0b2010bc586f

SHA256
96824c49b980f6013d2f13bb687f19b283b8189e0385d8538a039fc029f9124b

SHA512
73e7a2c4ad67f5ef272ce73e223dde556cd8c5997d4bd1623242abc8fdafef296ff39e8504993db51ebac81e3e62c7b8da7627a029ac2175ff9654dae577610c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8295569b35037015586343bc4cce0014

SHA1
8a3f571f83a932851a8f6dc4a3597326fa48c50b

SHA256
76fae9ddbd6879e9c460e82604d9952ae871d87d3483e37004314f258aac9c1a

SHA512
99e0b63f5b5cb9bebfd1a811c5fd549c66a71caad7bcf296107b6fd7865b524f8c969381ab5cbd93524a10036e7e1408994815c39f55d50fa807c98b4226a1ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f5639ff3006f45e0259f5e8befebb8f7

SHA1
6d3fd935103355b37e9a4e7676f99c41947dc846

SHA256
e71cc8982e24d6384ea5f52e467f4c97725f255d50b5fac86e10376921f3d68a

SHA512
c6d6bb624425aa06555e60f25afde370e04ea9010e5e403920ec1778b8a46ffecb8cbdaefb1d81cebeca316350ee52bfe1b503873dc34c72390e8fd730abb7a6

Download Submit