75e42b5700839c9715224cc118e36d062cd02ae4fe81566d0c0eb6c10f33e497

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 00:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7b19169b958ec2573b6027503e99abf8_JaffaCakes118.html
Size

175KB
MD5

7b19169b958ec2573b6027503e99abf8
SHA1

10d8805d528400914b9665c65a897d3a9b5e092e
SHA256

75e42b5700839c9715224cc118e36d062cd02ae4fe81566d0c0eb6c10f33e497
SHA512

b9f2ce906be3b2d24b39277e134aeb42aed6f7031cecd4858e131823ed99941d7400e6a2df75246f7cd257806cb4044bf361a541c434dc363b3583ea44b85e39
SSDEEP

1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS3RGNkFvYfBCJisX+aeTH+WK/Lf1/hmnVSV:S4oT3R/FOBCJirm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
640	msedge.exe
640	msedge.exe
1688	msedge.exe
1688	msedge.exe
1552	identity_helper.exe
1552	identity_helper.exe
6048	msedge.exe
6048	msedge.exe
6048	msedge.exe
6048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe
1688	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1688 wrote to memory of 3588	1688	msedge.exe	82
PID 1688 wrote to memory of 3588	1688	msedge.exe	82
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 1656	1688	msedge.exe	83
PID 1688 wrote to memory of 640	1688	msedge.exe	84
PID 1688 wrote to memory of 640	1688	msedge.exe	84
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85
PID 1688 wrote to memory of 2328	1688	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7b19169b958ec2573b6027503e99abf8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86ae746f8,0x7ff86ae74708,0x7ff86ae74718
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2496 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4736 /prefetch:1
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2076 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5428 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:5152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,7418415936863550259,18248168782669898078,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4756 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3276

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2268

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
5986e0fa5f8eed8a91425af33dbe290c

SHA1
7ff9946886a5719bdf47e9e1ccaf9337df8771d8

SHA256
9c6935299d0ae5f5560db6dcb4630f910d643556c15f666d254a104484b4e07d

SHA512
a97ce464efee1ed7be955fac9b50bc6896d550a1d77b41aa1b78c05eaf1cd1ef193e3989a3d909339372fa8cafb7c5ef8255c3eb91bb6d3fac8c52068727fc98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
741d3b48ce33f0b9ab121259f2aca785

SHA1
ce5341caeeb11b1f498edfecab2ef3a9b5dd3119

SHA256
d22b0a64c134c55c4cde57c5e75a34ac6809ffa848b9daaabd1373a03447df9b

SHA512
75310d62fb61f0ac7700011ec7bd8e7947e4ca292361ef83d17c3ce2b192dd318adc037d684e93ba3ec7c8641d602d0e578c856f44a267c50fa16e56eef768fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
77c85b9d039cbbf327d69513adadd95b

SHA1
a85d04fbd5e4f5cb67d13ec5f55161de7bf075ba

SHA256
d26c44dd0fa8218182b654a2c5944fee4c295e860c05a6ba9197d9e8a894281e

SHA512
6dc5bbc2544ca0007efd6ca9ff8940db2c2c0290a6b4b7df0f402713e051b981dea6b89ebc9fa95348f38db9fd4c8c4e2acc181493a1184f00fc200576f5ce45

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
585f64624790fdcc29fb529b25fedb1f

SHA1
89faeb0e26854dd8933f6b445cca9b15a1771a85

SHA256
99a09182971912fb3b76a7ca0d47dedeea99d209dcd7369b39ac714b92256d04

SHA512
ce6d7ee5a1428f63c0382989f597ff496f9b1f6676dfc1dc7194a79d59ad756de37623c986c723c1432978ec2c78498ff17d44fe252560a2ba7f973aa88f06a8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
72e2f481af6a80439161dc205e528f8c

SHA1
63fba965a2d7dd1ff783dd855114ce279b6f7c75

SHA256
a4297653dedb2fbd4d266828a572bafcf81a74459fc43809936580b56f6a75df

SHA512
b85afba13cdba47d3b9f8be762a112afdbd2c7990ecdf8243c4c6f3670f3c330070402b3ad13f11acd1c1f4441264e9569c917b4c0f12465777c6fac177f1015

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
da6b9eb0cc1a4accb6291e93694780bc

SHA1
b392549925ea4e38feaa62fb1b8097f2315478fe

SHA256
d7eeade93290c8cedfea913bcc871f5f7ee932bb64360aca0945e47b229cd220

SHA512
11ec64f52da6d180172b6e8cb3b5592f3dc0dcd2cc0c47c8ccf868bd5c6f373b4d030734cc65d48873f3d7fcff57787bd045aa22ce06e21be7e1de25ca415dab

Download Submit