fa918b95f3c10ee005c84a79d55faedaa2a96b7d243bab85bac9f1a2f1247e1a

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
20/05/2024, 05:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5d5ab82c060c3a415c2e4a433c76ab37_JaffaCakes118.html
Size

119KB
MD5

5d5ab82c060c3a415c2e4a433c76ab37
SHA1

23d3c664370953d77cac180df7dec6cd7e762e83
SHA256

fa918b95f3c10ee005c84a79d55faedaa2a96b7d243bab85bac9f1a2f1247e1a
SHA512

5a4419c49ee738215a88f8d4497af35e3bc6f5edf0978aefbaaf58b39abd71d130dd0fbc0815f51bb93aa91a08f35343802100c2e7b0b92fb1608e18f5de9ba9
SSDEEP

3072:QT4lobyqyaQ9pdDSnSFkg3t2cfH+vbLt9V6FEcac0msmen5iWLyoB5:QTCobyqyaQ9pdDSnSFkg3t2cfH+vbLtF

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1244	identity_helper.exe
1244	identity_helper.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe
4640	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe
1180	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1180 wrote to memory of 920	1180	msedge.exe	82
PID 1180 wrote to memory of 920	1180	msedge.exe	82
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 368	1180	msedge.exe	83
PID 1180 wrote to memory of 3456	1180	msedge.exe	84
PID 1180 wrote to memory of 3456	1180	msedge.exe	84
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85
PID 1180 wrote to memory of 3724	1180	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5d5ab82c060c3a415c2e4a433c76ab37_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaf8b746f8,0x7ffaf8b74708,0x7ffaf8b74718
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5008 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1324 /prefetch:8
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,6176685684672763228,18199484068220461093,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3104 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4640

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5052

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4572

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
4003fd730579fecb94cd60946c25fa49

SHA1
48f7dd7551abf54e1c23b9350e167a9096ca5efa

SHA256
7c5e8398d1cbf79ccb3a127579b9df286a03ee39708c86544aff02faaa3edea9

SHA512
fb6dd5980e40b898b2d6cf8fffb918da5241cf2bbcb888dea538a924c4f48eca56726dc242cddf38e0cd86af84bd996a3568e351987fe621e839db2662d2b944

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4f28ab21b63cadc3efb0f7e6cf314e9e

SHA1
eec6147e23a8e8be40d9cb8bcb498600002df1b2

SHA256
a63526294607ae7d83ed461098e944a0e52e8df52d5768045ad058c0a5228958

SHA512
540421c513cb68115b1be9e636b8dd35264ae948e5885b480c3058db98929b3aded5435ef2a01b994d56bfcf2d078b5c5fa21877fbb06388dc6c9e30e4827b9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8e54f4430ab2eb5e0a679c4fac65a658

SHA1
d94cff1ac55ea56152e3fe65a464453cfea4111c

SHA256
b06d15e4240165e49dbd87c1d8c2388be097e71665ec90006daddab755bfec91

SHA512
80e2d69bdb58f0fe660d57881b0c460e83c578ad244c21f186a5e1400f1cd4e2ea98097e9544edaf8c11010de741db4289eb3fb685f5ac32318262b3c9e31cf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
69d24ad01ea3a2a32452be3e53fa4664

SHA1
3c9e5fc216db257f94cf18eb5eb3606a3a7d738c

SHA256
840f568de11ca3173139daf13bd12d9b926e17fd509c531c6b800ee32e2bb694

SHA512
227e6790c77aaaf2334602f3a96a7b9272852fb21c2ee61d2da57852ecbd0f4a21344dbed7089a256401275156595dde63753e6d1119c4897bc718f7e5e5bf40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
628c938e6f58fdfcfe07ad9e9a97d848

SHA1
01041134b81c13e506c679d936512a6f2e9f07f6

SHA256
d3d419c439142ff2aa7697861696202fcbac4d8eed3b7637e350e047cf969ad9

SHA512
bce638e72687f9d00dd0448f668c24699444bc6c9fb41604f16b4eb675e62dd9a7ddba8adb7791abdf7a54cdc493d6f50af108af148240348755555467932896

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
88a555cb2eea45e2e8fda8ca79b31ee0

SHA1
a1ba9f8303757fdd5df5c1f6021af79f5a73c74d

SHA256
f607ba726cca247ee59d35db7f0fea66d00af8b5815487deb7e51c5e7534c77a

SHA512
6ae6c430be36f8552e81f05e88d18959d025fd71b333371260afec64d368c5480125dd715336c90bba1a11c5831396d3874f545ce73cc09f1577bd6a0b2c19cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0842cecb332f8da3c3ed0c5c5cc131fe

SHA1
dfe877c5210591717631df4bfe3817865a21c938

SHA256
478830029b7df26f72face257339ddf8ee2481528d1f3a2f1a663f5afd4e0038

SHA512
d4226f7e3328d25d2d6f03304195b4014611fda0384abdd8cf9c387a5c7a78c550f0c9641eefa52368ec85d9b2f58988982a854c13fb5c50bcf1f92c8a889a12

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3dad904eb77afbe6ddd0ab41be3cae6f

SHA1
fd14a2d22c0a236feccae87be9e572763b772351

SHA256
7a44cceac4e507d2673d6e03dc15cf2b232487237a6ef92d76e847fc2f60373d

SHA512
7eee4464e57aeb3034b78d5ac6bd8b339f7a5626f180dfa4fada9da7bd7ec93719edbd41f2126bb6b9747e864c2e1c3c419ddab0ef3568c1c398661e3a3ec151

Download Submit