0d89d355ded61090e474f7cda5bf38b31224eb7cd89696642f2349f846e4193d

Analysis

max time kernel
146s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15/04/2024, 02:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f022ac5dc60f4f639e4ce30b0620469f_JaffaCakes118.html
Size

430B
MD5

f022ac5dc60f4f639e4ce30b0620469f
SHA1

b6f7e21f351889b8dddd79c536640ae0ec6e3414
SHA256

0d89d355ded61090e474f7cda5bf38b31224eb7cd89696642f2349f846e4193d
SHA512

2e91768e6b48648020e073eeb202b0a70d964aa865b0191bb3a175fed1749d49cd9e9dafb22dca755fd899b83ba69c34ef00b034172e472d59f49ff92ddb5472

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1952	msedge.exe
1952	msedge.exe
2372	msedge.exe
2372	msedge.exe
3272	identity_helper.exe
3272	identity_helper.exe
632	msedge.exe
632	msedge.exe
632	msedge.exe
632	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 2116	2372	msedge.exe	85
PID 2372 wrote to memory of 2116	2372	msedge.exe	85
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 5096	2372	msedge.exe	86
PID 2372 wrote to memory of 1952	2372	msedge.exe	87
PID 2372 wrote to memory of 1952	2372	msedge.exe	87
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88
PID 2372 wrote to memory of 3476	2372	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f022ac5dc60f4f639e4ce30b0620469f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9dcc546f8,0x7ff9dcc54708,0x7ff9dcc54718
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2904 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3140 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 /prefetch:8
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4680 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3992 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5856 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,13118846255684839169,4204449536237571376,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4208

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
22bb6af63c7710354ac7070e45ac988c

SHA1
34d29d6b316e39ed8fb8c5efb42c4269040fcf1f

SHA256
1a70d5d3dfc04e6f5cfec1ceb06676039229f895f30007fdb55b043ed48ab4fb

SHA512
42c12820b5237caa5b4d5149901f84db6619a69e85cb869df06e07b3cad1b51e0c2d0545ee0129cbc8e7947fd8c2989def537ad2d58a1d5bf2c2a1bf60041ca3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
62677bdc196e22a7b4c8a595efb130cd

SHA1
bd2adf18caf764c8f034c08b6269d9693875f3c8

SHA256
b540616d7e73ff22642f4fbe2bea0f9daa2f1166391e76cf817b2a93e0bd41d6

SHA512
d23c3b9662eea6a75382242fb8e8084abc1127afbd2632f161df71a2aefaf223621511e1bf6229cf7e86313101a8d9dfe2f20e1c0bd481066e1969cd6fa75e32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
360B

MD5
6e1943f5a783b2412c667b828592af5c

SHA1
983becf61c44577a68cbc6f75993f411a46884d7

SHA256
934af73b3ef7ca400e625fbd37cdbe89439c25a5fd7349c206a82b99f3d61969

SHA512
e397286603cce28ee158163246d9a788ba47c4fe340e5825f9b4b0fd7154f77663f6235bbe5e8adf18a4e1a576260186b4e29b4223c6a7f82e801fbc74351175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1ebd74bd430fb8ffc20965d8fd062ad8

SHA1
cbe8e986fa9079bcb2422456c1a5597aef5f2150

SHA256
d442907c51f02e62e46f513a4eba6015ee663e1bc51d03232f531ce538c7e26b

SHA512
e8fc7bd2fa19ff976c683444bdfc71407174efefda326d240049c4cc2480a2933d6e26485f5a04c65b25b4413d217ed14c7fd0067dd5a676cce3ee21e572cf56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
98b37fb0d5c5e941ea2fd23b99e59f46

SHA1
4d60e3db0cb410447573a3935aa491b606e4f88e

SHA256
01fa4ae93f003dd7f67b44189f7474c03dea8ac64d17ab0bebcc16e76afc2d55

SHA512
739aced20c4f0cd2cf5f6a067faa6f03db81c630989ad10261915143d100d6224f56918377a9616f360404f06d2bd9c2f508c0d9caed93b292463358cd4514ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
72B

MD5
6e5a569beae8a336318d0b5748460bf8

SHA1
90fc6a4bd149776782c1bdf5c8b5166c1a8af803

SHA256
3dad061e5d1fd5cd8d82b885581e6b67bdc78074290191a4cec95d9131931286

SHA512
e4bf1fb6c33efac8ea6b730281a970831b0c505853e1b03a9db00f7afbddb40d83d6526625f984915ac416046e70f8739ac22b08d5661ebc38dc3c08680b09b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57cbfb.TMP

Filesize
48B

MD5
7f09c18857604e3a474a870e1433d6a5

SHA1
44cf5bf6e7fdcc7cb3912560b04d440ee727782d

SHA256
eb9181f040f65190351b587c81187ea26bcdba80f6bea34248b0c21089c2c9b3

SHA512
91e49fdd4c975fac1187254a5ad12806ceee49ae4021bd3cab616ea310da54b79250e42f6ef34a75a003983aba80fde1185b6e75f0079305ed1ae7f41cd59479

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a58567383f45fc90279a4ff7274603a8

SHA1
6f94220eb7f84c9a9bdb40247e982ccf499a12ce

SHA256
25f9ae995b7a3cb5810eb044da95c5a17cf800c801e241d840400f4bda05a49e

SHA512
f85248b893f32d0974718f796f74ac7a3cd425348b37e0b89af0569027ae2bfa409f2229aef05ec9140de6ee668b481f3829683195d3d42ebb97ec7b1b0139d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
5a361621e87b36ecc4a89baa72171e95

SHA1
24c799cf27fd1f784b7cd8f87044d22950ce02aa

SHA256
7e92f0caa37de96f5d8e9a894237678870ed38acb2eb3815742685cca242c4eb

SHA512
f2dcc08f2d566e4297af0e1a5b6815f1dc7032e217150d93b541ad63e86252916e75bc7861d35f71320c878c6024bf6d1bfd03a6a691c6c2bade864c9ca8015e

Download Submit