590d2bfb6a0a8ae5012f0eef2f70b44b3b1a9a57deb12649136ef3687e53afeb

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 15:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

79821f3ed697cae1606a0797bd369492_JaffaCakes118.html
Size

175KB
MD5

79821f3ed697cae1606a0797bd369492
SHA1

b39bed1fccf08c0c5be34a10de907110d4b07b9d
SHA256

590d2bfb6a0a8ae5012f0eef2f70b44b3b1a9a57deb12649136ef3687e53afeb
SHA512

93903e12eb47ffc6113bd03ef5d095e8f8e34fbb44f78f8740aab5db24ccb36c0b02ac3f9b3354f77e7c37dbfcbc688c38fd4857a4ab9bd391422491cbe53c0e
SSDEEP

1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3NGNkFSYfBCJiZm+aeTH+WK/Lf1/hpnVSV:S9CT3N/FjBCJiVB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4616	msedge.exe
4616	msedge.exe
2720	msedge.exe
2720	msedge.exe
4868	identity_helper.exe
4868	identity_helper.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe
4368	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe
2720	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2720 wrote to memory of 1608	2720	msedge.exe	81
PID 2720 wrote to memory of 1608	2720	msedge.exe	81
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4512	2720	msedge.exe	82
PID 2720 wrote to memory of 4616	2720	msedge.exe	83
PID 2720 wrote to memory of 4616	2720	msedge.exe	83
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84
PID 2720 wrote to memory of 3456	2720	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\79821f3ed697cae1606a0797bd369492_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaf8b746f8,0x7ffaf8b74708,0x7ffaf8b74718
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:2096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5044 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2156,13188224059766659223,552053220415594756,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2316 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
e58ec25102381676773dcb1d32ec6ac4

SHA1
c70513c074b2ac9756157c0db922f4439ac38395

SHA256
07fab3f5c6e986ceb68a43ddb0456c9db3316e3601edd38a2b3e8444d81895c0

SHA512
348df5b939003eefba6016163b4de7fa4e03dd431bef67f86adc7708d56178ef7f2af16a2735da69105f7fb978d3d03b91028f20d0ce706d9c452691da690d40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
c8d3445e0ecab15fc76752af4ac29e4f

SHA1
868f2bc638bdec82517ab4ff17effa44660da033

SHA256
fb5eeadb0b9e26b5d52e51a4884aff7fbbe3ce2d557fb02558bb9dd99cde5fa3

SHA512
8e1032e5c1dc066cfb36e3fd966902d87d88cc03b2cfad519e43c76f6cd3fe742338fb90b4470112adde2b1421f0eac15d5ac3cb32f95c0b07aea56c5919c038

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
c38a874b7bb8baeca0ff071f4ada8816

SHA1
49d3bdda7656d17a69a1e7a01f7565570185c5ff

SHA256
54c8fbc405c4f57a5d773e9dcc1dcd113d484528edcbdc4d464408974c2ae552

SHA512
b8c79cb2da8ae116d883d7f019fe165d6da94c63e941fd7ad66e55669f6102c331946374069ff0db68fc6f59d64c34a4dc1ce4759b4d4dba8225c17957bc8460

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7214ce1b209bd5380084c4ee3a259b5a

SHA1
7b345a59894cd51425a694c9c143d1494612c822

SHA256
f9edddee2740b7eba6ee517b374584cca5de70dbb029677e5f52fd9f5b99b37d

SHA512
33bdb44b945a82411e99350e40f8a535c46c31984d9b56d90bba8724aa757aa50f22ba1811b81719ef34daadb475737578cb6726aa0f1f5b9ad802a072056190

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ec88675a2f5994bb078b9218e4b589a8

SHA1
d01ed68384bcad1884aeb0f3a2b47440e1b183a6

SHA256
fa3534a769988d69899eb39d11d43e312978d394f03d1f8a8b943eb900882a52

SHA512
2a7f14c73138f74e0197f7686e041442b03a3d4e190b8cadcc9e8717e4f4d9036443e94b4725b56893a1f70b35e6cc51efcd4b3a08e8f1b183452e8750c324c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
2fe303fe5b7988a8839db9985d497140

SHA1
1163895a7754cf9aad8421a0bdbe0382dd9e7eef

SHA256
3ec2f4549afb64a763cac24def37655fe2d5f97a8aa1524bf196ec80544d5819

SHA512
3b7a0de35550b85fc1990659802aec88d6a65a704c90c8112ff6e1a00a9beb7f2703193ea968fe77800cd542446862d2865d3ce757113dd579fcbc9be3f3eb85

Download Submit