94bb50baa70b32093071fd8d7cb33511a88fbf405db5ff7ebd8e212aff582513

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28/04/2024, 08:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

04d4b1a51fd8ede1b636580523d8d0af_JaffaCakes118.html
Size

24KB
MD5

04d4b1a51fd8ede1b636580523d8d0af
SHA1

e17a29b9c769cbc22498c0a7d70c95eed3f53777
SHA256

94bb50baa70b32093071fd8d7cb33511a88fbf405db5ff7ebd8e212aff582513
SHA512

3dc9c0457f57687542a2a08e98a66f6ded6099f7acd6e07a494ba628e0dcc4acaaa92564028e8d4102ce4cd0d5410e375cddca5c3ff4302f07cedc1ee4527e51
SSDEEP

384:SYTYT0pm6gzR0/eXBMsBM/BM5BM1BMTJ/zPTVWyCKXrDkxxg9d3GJ9:Sgg0hgt02XCsC/C5C1CTdfV37kr

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
3660	msedge.exe
3660	msedge.exe
3140	identity_helper.exe
3140	identity_helper.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe
4540	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3660 wrote to memory of 1660	3660	msedge.exe	83
PID 3660 wrote to memory of 1660	3660	msedge.exe	83
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 3108	3660	msedge.exe	85
PID 3660 wrote to memory of 2208	3660	msedge.exe	86
PID 3660 wrote to memory of 2208	3660	msedge.exe	86
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87
PID 3660 wrote to memory of 4684	3660	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\04d4b1a51fd8ede1b636580523d8d0af_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa439e46f8,0x7ffa439e4708,0x7ffa439e4718
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5144 /prefetch:1
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2044,17845987847891594015,11953976965616302273,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4764 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4936

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
7a543dab3e2b24eb518bb08ca72a4642

SHA1
d0bd34acb544dd00cdd2fdc6f48f9985ebddd72f

SHA256
5175dd89a0808216fa3ca5afb3d779537530aa8625b7347bf7db0fa35d7eacea

SHA512
28069047bf54971e03bad06c18268d12e970a9fe639fca1d00bef9d4e0adc4d1d627724cd947a3e741b4c4d50312e8020dfb641c178309ed0baf199a519aaece

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
8ada180a160daa8e33785e3e73c8f1f7

SHA1
ce6136aaf9571656353987eb90008902048c82a2

SHA256
1929e27eb547640dd8c84fd0d8b5e4b7beabd564df256781ed8c139ea468c4ca

SHA512
177cbfa48d27d32dfd7b8cba6e992c43f72ea636999e2c4e7dcc8c96ecda82ff1a01cde880169bf6f1a38834f3d3dcc99b87051e403045c610dfe98a54caf0ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
413f770de082a3e8d8ba5911ef498513

SHA1
f3fb668df753e41808eab17402a3d771be0421c2

SHA256
d894a87e3f14931b4b19e3677c4c7057c46ca690836be676b93a635b40b21f95

SHA512
0503f9a02a4e6a0dfa013bbc9aebeb6f5139f827578228bbd316b01a8a52ca9a4ad77e4169ad7e33ec05dcca126b4a85be47227246a979b19affa12f30bb616b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1fc009f49dbf04dd931818aa5b4bbfbe

SHA1
cc93fe83c356e0d9405b4ed9eb8a5c5a68f5ac01

SHA256
ad0a20fe044c053fff2f390278a3ff1541027c64e528453ab128100ed819b497

SHA512
d5dd82ae78cef6cb43b28819b8378158866414f895370ed7848ad7efe0ce7265963eb3a7473bba62758a05f0877dcc92a759cb05abfddafcdd60c8fedb173f75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4821a8fdbc320abcc95681caaef58d93

SHA1
b088578fd5bbf0c0d2a5f3ff81b91045188e7d52

SHA256
da392876b432c83a6daa9e79d0a98be0570d150c7d538736caa22ece230126c1

SHA512
c462fc7ea305c3e6019e75ff6c78499293e222893de8fc39c179e8ecdc80674c402894c9908efb746f3124ac47b808ac1f71585e5c701b2c747e290b45800ef1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
19b81c8d7fe7d37fd4b75541a9694a77

SHA1
e42796fbd89f01b18cfd587579559c4b961ce12d

SHA256
95fcfc19f24ca7a80a660c5fdea0e1daf7b43be5b5537fef2993e765687c50a2

SHA512
48f37799bc2e775afd54500450e5cff739833723a5caff2022ad1eb28b78e379bcbb50816fbbfd4950219a071c8cb88488c5ab8bcb6c30eea3e592fdda5253ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cc3fb8b3-992a-4f41-b810-9986126856ba.tmp

Filesize
987B

MD5
eba9344ffac1b32ad8af165b56eb1e5d

SHA1
671d712a7bfc807cfc9c49c2e165d7c4b6c5f85d

SHA256
c050c0b4de67bb5063c4bca07cbcad112311665d2e9bce5245d79fe9e1e86540

SHA512
cb22981bd646b4d79be5d615afac34a1d61c53f6c444c43ca1d2aa712b4d1e3055485a5175c70c1145bb84f7ef291e52aebeb0d55ea6469323da1f622c9d96d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
9f5e56b4f1813a7a4e798aaf667b17de

SHA1
4af377adfaed4bb014acdb3ea00c7beee190d57d

SHA256
e0b9a8aed1fa3e359add55e42c379fe9f261ecd28f78050a84cf407bd8f25217

SHA512
069a0ef0d501bb9d793777939aefdc1101be101ca6b1b0d59a71b66c8ede7a01d4786274623b5aa722b8cdbcefca766a3230894c95b4027e4c5aef5503d7ff36

Download Submit