e503ad4692dfb6b59808e44b6eef9d56e66935a54579126137ee09b0c38b1382

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09-05-2024 22:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c174af21826d1a3ad90658021395b4c_JaffaCakes118.html
Size

175KB
MD5

2c174af21826d1a3ad90658021395b4c
SHA1

0639b95efd3a2630db0c906ab4716e790c70021d
SHA256

e503ad4692dfb6b59808e44b6eef9d56e66935a54579126137ee09b0c38b1382
SHA512

36e6b76e1591bd8f7a71d9242ec7f15975ddd180699b45167a09c882e3d1ca85cabd89aa6877794d1331dfb625e32c66fc20e02ce419626e155a472b0fc36de1
SSDEEP

1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3CGNkFrYfBCJis9+aeTH+WK/Lf1/hmnVSV:SOoT3C/FyBCJiVm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4460	msedge.exe
4460	msedge.exe
3496	msedge.exe
3496	msedge.exe
3464	identity_helper.exe
3464	identity_helper.exe
2156	msedge.exe
2156	msedge.exe
2156	msedge.exe
2156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe
3496	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3496 wrote to memory of 3672	3496	msedge.exe	81
PID 3496 wrote to memory of 3672	3496	msedge.exe	81
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 2948	3496	msedge.exe	83
PID 3496 wrote to memory of 4460	3496	msedge.exe	84
PID 3496 wrote to memory of 4460	3496	msedge.exe	84
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85
PID 3496 wrote to memory of 748	3496	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2c174af21826d1a3ad90658021395b4c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc04fc46f8,0x7ffc04fc4708,0x7ffc04fc4718
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5108 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3964 /prefetch:1
  2⤵
  PID:1672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,4532444867899357331,18132721139173824823,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1736 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
2bab678ca20aed9af2744bb997850b86

SHA1
c9168fc499570b8f0401c87bba926918e9063e60

SHA256
a00924a8a931fe3f40a149ece27521eafd0dcfbb27ba7cb1a241b354cf85a539

SHA512
4c032287d681d1e678a8eecd0a1dad1eea7a015e44ef131da76426b05aad57b2d5acb73e1ebf4275d6cd7574095b705121eec83d61bb669ead1d0e4927bd5a7b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
498f36691b613af95e24d0f4867a213a

SHA1
a0e9356a97c959c2c7726c9d14717e6beecc3543

SHA256
4e8ce476d6b78e69fe0d180270b14897b9ab12c16953c2dec97516b5ca3eab3a

SHA512
59f33b2ea041dc1373beb06eba6028fd40d8b7d76c84078564cfcbfdfe761c82791b20392437ecbd1ac4833d1431f6b915d552134884cab771b92b7f9135ba4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
55e808173c954cb3668f53040ee35b7b

SHA1
e3afa03d6b31143f40279c92d71f27bcbd2fa025

SHA256
c81654f97f4883447bd0ef4935ee473213c50d27b6844d2cf055096c475cc551

SHA512
72416361fabe60f51dde14e99357a75cd9657723de6fa36bb42bd4734b1f916333446b52f5ffc19d0306e9c20a08cca0b5d74f5fbcbc04d1d87ea6ad8900ee71

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1864532cf51caa71bd376e99e84c7122

SHA1
534f6f61d0978006ca8dcbabc3f1365f7d806298

SHA256
b1a4847c7c3eb11fd94dae7f7ec088f69e2aeb0df22418364855b916dbf4ed11

SHA512
4d88719faddcd8b7f563cbc285a8ed1433f7023c60a7b132c06e9cf8aa448618639174d75f23623c51b57bfb17199565c9d8d4a5b164dde42e5fa09d8c908135

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
765724208d56dd0bad6682a584f0bc81

SHA1
809152f83e5131752d238720a212e3d4855a932b

SHA256
4082d5dbc3ed2883f2da83f0a21b3be28a726f0e32e5e9539cf8cd2286ceed0c

SHA512
a100a99d1d6345cbcdae31cb09d6f1b9b940b2e2812bd24dec58a676012721af952e57c20fa4af25653b8ed0eb19f4ea82cd4acd72f4add849f180d9dfddf669

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c7f729d91f70617d9dda0d554c0b7746

SHA1
16fb587150c964fca0acb3f0cba92d234f22f2ea

SHA256
f3fa2626fea979d8d974006f27bbe4f333684cb0a58032d50472192683e1dd91

SHA512
8ec76cdd648328002d4febd37aa61bb5274cbc3a9ac517aae9b419020eee75454628796351967b3e5769bb2efa878bd17bce25dd4afb80f670a80e2ea385d73e

Download Submit