1e51958a69f6731fa524b08eaef4f516e05d1ba2d1a1122f169d9947348925fc

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 23:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3700684d4edff4c28e970e5c561e9330_JaffaCakes118.html
Size

72KB
MD5

3700684d4edff4c28e970e5c561e9330
SHA1

bef6bb53379e03c413d1448f9f32e3ea92cc5441
SHA256

1e51958a69f6731fa524b08eaef4f516e05d1ba2d1a1122f169d9947348925fc
SHA512

a809d7043c3c5e8d1e5e4a0ab1eabfca66a107f3284906af3d5e3289c91925d384a0e2165da0edbeba40434ab173a56e99362193360c3067bf9c8892be8cc9c7
SSDEEP

1536:6yWrkEEfifseqIvcYgSzKQAI5C2OBY55NzTDAAkFCfV9fGuquwwg9jLkR31KXSOi:vWrkESifs1IvcYaI/+Y55N7AAkFCfV99

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1712	msedge.exe
1712	msedge.exe
4120	msedge.exe
4120	msedge.exe
3000	identity_helper.exe
3000	identity_helper.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe
4712	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4120 wrote to memory of 8	4120	msedge.exe	82
PID 4120 wrote to memory of 8	4120	msedge.exe	82
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 3068	4120	msedge.exe	83
PID 4120 wrote to memory of 1712	4120	msedge.exe	84
PID 4120 wrote to memory of 1712	4120	msedge.exe	84
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85
PID 4120 wrote to memory of 2192	4120	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3700684d4edff4c28e970e5c561e9330_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffffe346f8,0x7fffffe34708,0x7fffffe34718
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4996 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5928 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6048 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,17255296513121447737,12342455805107060246,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6080 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4712

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
459f5c2c99133412f973bfa43b5e08a5

SHA1
99fe4c538f515c1fc0f6c310a480de590fb169d8

SHA256
fc09575f8d05e37ed9d8df92232afb7c94cb56074fa8a2a0c4902af0e415ccd7

SHA512
20f5ea3a898f84be1263cc11d5f22b53c45fdac75e020034dd83407ff1d9be08ea61c6967a65b10222d9604d90905ec07f642670710b89049bbc8bfe7ed3e80c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c3eb75ec79147ce02011928d4ce78ec3

SHA1
4ba64607b65f154c1c6306781037d523c878c414

SHA256
895e05ec8ad25d6211b9854acd5b36ad49415c844dd4044ad871ae4eec78a3c2

SHA512
976b4761cf762c495e87a5c74fb1d15838a401395b2b2471f44f989837c5efd04f0f3429e1cdec934190543da27552c3ee13edb8e24b966225853b10c91c1a83

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
35b3c4af7b2f6702ec0501b87355c497

SHA1
2d9eff8822ce60ee10f794a71a313812c69d1d95

SHA256
cbc426ad977aee2d4121a0c962d6915d8cfaa7cf32a5b85f303ade7e1816d40e

SHA512
e3bc0962b8fa61c52f7c1d17c2e6556dd9763f9e457622ee040da49592602b94c8dd37c3c0de562014ba763fb5d0cb0be0827384b8231755d9e42631e8580735

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7f90dce0240a1ac9affab6b3f712c8f0

SHA1
cd6c02beedaa3da3fd3b8babc07f32dab66cb133

SHA256
ace6266e23f1e47c04d474f76da700311cfa78b5c0cc2f491dfae299fa190ec6

SHA512
9d0e7d3a175bd17594f9c18fc044ea16dd69ef2a62b0e1da25c80c79173bfc7d4eac8558924acc1b49bd340b72254dc6509ceab297f195c9ba72e659bad8222b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7700f59e1ab3e9a5f8965d18192be548

SHA1
3ffdeca919cf97ae04d5b45349128ac842de1dbc

SHA256
21b0625d8e62de031d68b21d6554704bb87d73530cf5ceaed83ae9004a8be548

SHA512
fa68a3046cb068bbbd8c480069d2fc3cbe37215aeb624cbe6b52300231e99060dbf121ce016e977d81b739610a0e2888ab804df33d5b0e68da8f1f5cb785090b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ec375d460d3c8787c3d3205a4405a07b

SHA1
57daf971a4a33900b7635fef77beb0905fafbf07

SHA256
ab788277f24ba4b99a4d08b756a285c4e9b1976bc11a453434740dce911bff5f

SHA512
09cb78f42650bef0e8e9057159d4bfac5c2af0107d9709c7b3768c100b7babcd8da5b40ea96a265763c2104057ac43efb1b343312f26563269bbd1cf7a0199f8

Download Submit