0adf10f603dd1fea009cab9af0d458fe66fe0d716404534a1d71accf20bfa7fa

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
05/06/2024, 21:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

993e03b1f1f3c2eb8c94c4485b594f66_JaffaCakes118.html
Size

49KB
MD5

993e03b1f1f3c2eb8c94c4485b594f66
SHA1

50a3fed0a57088ba56dc31e324b985bdd40c0cce
SHA256

0adf10f603dd1fea009cab9af0d458fe66fe0d716404534a1d71accf20bfa7fa
SHA512

b53a5a3e47fd2e6e89a9bf1bc5e6872885123c342f6ebafd3236c5ce0d913cb7d66b4082fda7f52ce789849814b8e234053de26c2da714ccc8ff30db377b7df8
SSDEEP

768:fgOriWNcaSou1WUcyIzzWaEYVJjAP5rO6h10o6efdi2SZf:AfYUPIzzWt68d+

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4448	msedge.exe
4448	msedge.exe
4592	msedge.exe
4592	msedge.exe
2380	identity_helper.exe
2380	identity_helper.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe
4452	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe
4592	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4592 wrote to memory of 848	4592	msedge.exe	83
PID 4592 wrote to memory of 848	4592	msedge.exe	83
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 436	4592	msedge.exe	84
PID 4592 wrote to memory of 4448	4592	msedge.exe	85
PID 4592 wrote to memory of 4448	4592	msedge.exe	85
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86
PID 4592 wrote to memory of 3372	4592	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\993e03b1f1f3c2eb8c94c4485b594f66_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffffab46f8,0x7fffffab4708,0x7fffffab4718
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2960 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4336 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1316 /prefetch:1
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,2977816294225573375,14673890256031479616,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2092

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
44KB

MD5
23536ccfe05b737ae639fe63ee4cc435

SHA1
6d2e9822835dc3e6117a4d2addfc8f241fbdbc82

SHA256
6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce

SHA512
f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
b621ae1b7248f8893a29f9668b232c84

SHA1
6c11f1287298fbd76cb3adbde254e290386fb1d3

SHA256
5e4c4e657acc0ce291928af786385ddc487a30c3250c5d86850875e394f27c1a

SHA512
b889b7574027dff4e72e344c17f7ac16420184fd0a6c7eb13307b3c81151c5f58da8374baa9c80037a0a870308f2a451d1e4b3b1da23ce7a217d6ece7e40bfd6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
528c569fdec0f3f6ffd1e33dd45ba575

SHA1
3c02d057a190745485b4df424c67ea18054b9fcd

SHA256
876054349cd4f83810a3f0d50a5324a22d6b711d2697d616497027be4dc4d6bf

SHA512
ce3e2ea6548c595fc34756a5fed23ce7d45163e1f02fc0a05f6f9523b6243099c2b33ee4da66132530a6a6deef2533e60ae1431787c43d9ff4f72a11c4f2afec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8d3b098ff74efabbdd0c31463e66a985

SHA1
95d4c8d82733ff04458bd4ec0a6835c68bf10d6b

SHA256
25d23119a24ebf317c6f1b981acecc6741bbb6aad0c9ffc60c0b193078de507c

SHA512
759891c93fe0f2089d03924e973cd23041271a6b744a0ed16b587af9eef7cb318ba5abc3a41fc85bbb15a9977455fb73a9494f1116b9fc34669aa5f21305b394

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7c44c31b7bf09f8ba285bf9c387b161f

SHA1
66043ab5baa434b513bb6d5e6a6874912fd8dfca

SHA256
6a673acfb69f985e05f6bd3c22923d70c307fedee48381ee02f1ba434e39fddd

SHA512
e0ddd0fa43a0c6cc3812f5085578ef6f7e7217cbebb5e01f8393ea468d8e0e14076a42a47557268d985c2063cc2f79434fc59baf40cb6ebb45c3677c81e09a39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5513c6fdb5161702633fe3f3a7572a18

SHA1
3e34c4fd7617a4e1ce2dc78d6292bb4a9f3c827b

SHA256
b9d9e23369c819b37d5e87956a9d6e94ecd0763f70b4d01a0b1da6ef0b8384de

SHA512
1d3a7beb859ba3bbf7f0670774b4afb569e346eb3a96c550aece68c8e8a15b8aaf33ae6ed19c45b2365f162e611cb60beb8814384879430ba4f116b1aa68cb36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
12a1bd5b0793dd8c4186fee501edcb9f

SHA1
a1aae679217ed9cad01570270028f71b972633c6

SHA256
72822619c27a45a8fb3c0b7199c71476c6a8b2b0bfcb112dca876f186eeac30f

SHA512
e80506a9fc0d1ff239d83087cafd8cdd80c2a7b343666ebf2253683e2d9c9feb6400b1cbbb7a4724ce694654aa884bdf436516c7e3504aa1808e0ddbc9b7d558

Download Submit