d6ffdbe399ad380ed029c3c5bc1bce49980144a1fb8b962410bb78f5ec09be8a

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 18:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

35f33817b643fc714fb7d47e03c69ce0_JaffaCakes118.html
Size

37KB
MD5

35f33817b643fc714fb7d47e03c69ce0
SHA1

bffca9a4c7c6f472a11cfc1790b83d811372730d
SHA256

d6ffdbe399ad380ed029c3c5bc1bce49980144a1fb8b962410bb78f5ec09be8a
SHA512

f72d0686add2ceda933a0437d5e10541639acf0d353e7979ff1edbd3a8676ebc7ff0957ee883e32730e52b9a401f1301d0259b952098a704e4b56d31385f4cff
SSDEEP

384:TjvHwduTvmBxnxaRLJZGcOXWV+PzCsBSGXNEu0:TjquTv2nx0LX1UWIVB/XNEB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
748	msedge.exe
748	msedge.exe
3992	msedge.exe
3992	msedge.exe
4876	identity_helper.exe
4876	identity_helper.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe
404	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe
3992	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3992 wrote to memory of 1536	3992	msedge.exe	83
PID 3992 wrote to memory of 1536	3992	msedge.exe	83
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 652	3992	msedge.exe	84
PID 3992 wrote to memory of 748	3992	msedge.exe	85
PID 3992 wrote to memory of 748	3992	msedge.exe	85
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86
PID 3992 wrote to memory of 2040	3992	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\35f33817b643fc714fb7d47e03c69ce0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb8a9846f8,0x7ffb8a984708,0x7ffb8a984718
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2004 /prefetch:2
  2⤵
  PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:1960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5276 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  PID:2820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5684 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1988,11968928119041836695,6658382544179580645,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4100 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:404

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4112

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4532

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3296

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
5583d773b2feb65c4f31e53b7ba449ce

SHA1
79dcc021fcaeadc9c1f9a10fd6babf65d4b67511

SHA256
041338fcf5793b3929813f109c785ce003d468b96a36d0103b3e7f804bf4eab8

SHA512
f553ebda21ec5f785a5de4693073e71d87bef91dd12746e88f9ec9b2536fa98ac95ec965523ec3798e45c74c718f053ecca3cb4caea8a1d7385dbb7930fa3a9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
8dd6aeb91c485d0e08e008de57f058f3

SHA1
6dce37527a086230cbb1dabaab83048d135fb4e2

SHA256
32b2f87812cb1d6bb77e80fbc02117bbb055c06a0bab1936c00c134579cacc8d

SHA512
28c7687622479e63d5d350c0f788ae4c08a9c1b694dcf08056614c58fe729bb6a76d1b626b1cf68955f0ef81e05045930a4d2ae139a8d536db638bfff70b4c6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
717e6e8ef5ab8ba2a860ad60d30c739a

SHA1
0b0bb55735dd2856299d336afd9db7de844478e6

SHA256
b88f2f55f97dd641b8f2faa3658eb10bac48e5259631ddd804f6c2ab8008d1a6

SHA512
e78c0f1997e4019f941689a13e36b4e97786024809fcefa0ffce8977b49e02135e16e849556bb578c40c1b632d26179f19c9cd625c0fb582c0a61f040e15bd59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
9f8be3c96a19d568b2b1505de9dcc4a7

SHA1
98dff777dea34e829bf1158a66cec329ff56d14c

SHA256
c14374974846532944e55cc96c9bfeac05544c08c3a4484893d4de9223948d12

SHA512
8fa188f9a625c5bf9ea5a4dddad8e6e3614de3dfea16560fa4106b4733f7c0bde06e79649c5e8db5031b536336d26d69b580d744cddf6c7094bda91c44219972

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
46f6f3a8efbff73ac7cccb9d694330fb

SHA1
4f23326ee6ba7e039c9346f26850d936a32be902

SHA256
aed51c8ce87a84f277dc8fdf29a42c905e7dd84a4b1bcd7884a86403643af147

SHA512
3eab37ca1b896f4f4fadb439f9ba5ddc3012b1fabbd89205ffeb69a776f7bcb65c4a5f1213d5eb564b22fd744d3b05d3d150ad35a58130d49605ac423873fd79

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a184e93ba55ab959d8614dc92bdd4b32

SHA1
ac42d6f61c46ba99afdd54c167977b54f4839240

SHA256
bc8a6ee8c59d7fce2c0acaa1000414bb930b34ece1b18521b0a6d3e1cc3138b1

SHA512
f0707f4c8425cc20de4d314787d80a9c9ff7531119301c1c8c43ba0163ae24d172ed410bab91790cc4cedc73f9901b47c39f0d4b3058dc41a738db5ea115a3e6

Download Submit