cc850de03c0e6fbe3700a19ff737fffb8308e97f112544029245f2f4fc182705

Analysis

max time kernel
147s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10-06-2024 14:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9aeeb489d74b9c28d9d06e38000a6055_JaffaCakes118.html
Size

42KB
MD5

9aeeb489d74b9c28d9d06e38000a6055
SHA1

e5d8efb852741f3d5d65a9f9bdf25562d973e052
SHA256

cc850de03c0e6fbe3700a19ff737fffb8308e97f112544029245f2f4fc182705
SHA512

0de29cfe8b25a7f76264fd1f04a214c3a28552b9c71be4c2136945f2b34aa39666d11170dffeaff4ad323effc38ea8f2aa268f33777353be8ef5c51986c5204f
SSDEEP

768:DSajNb+ng4fhQx/RrO1JFS7seBl9s6L2NqKsdeEiheYp10lKm+q7o5EKYCUly0Bo:DSajNb+ng4fhQx/RrO1JFS7seBl9s6L6

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1208	msedge.exe
1208	msedge.exe
4884	msedge.exe
4884	msedge.exe
1852	identity_helper.exe
1852	identity_helper.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe
3504	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe
4884	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4884 wrote to memory of 4000	4884	msedge.exe	80
PID 4884 wrote to memory of 4000	4884	msedge.exe	80
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 6048	4884	msedge.exe	81
PID 4884 wrote to memory of 1208	4884	msedge.exe	82
PID 4884 wrote to memory of 1208	4884	msedge.exe	82
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83
PID 4884 wrote to memory of 3672	4884	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9aeeb489d74b9c28d9d06e38000a6055_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa1ec946f8,0x7ffa1ec94708,0x7ffa1ec94718
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:6048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:1600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1796 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5688 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,2730438264187667417,14879298313260854758,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5652 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3504

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1384

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4804

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
32d57bbcebf0892afab54bc8f6d035a1

SHA1
88133c2613353c3a1e4ce3938a13bd6e1ca1b882

SHA256
b38684273f0af7b3673862b2e98aad8b42e172223be8f6196eee5e54e8c55f64

SHA512
f68734f062d48ad6a141e1f116f5bbb201cff74e68833a019d4f2eee721c248019bacb6ff15cdb3a7d0e11fcaf58fa9aa324939f927b7e3638ec8b2800b854ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
601B

MD5
26d4248fca58047be442d9a0c96eb147

SHA1
ddf54be60c3273abe4f8791bedbfef1f874e7a6d

SHA256
559e2aaf518b2d674bb42cae755174fd1e4187e611beea6fa9c32a2c94b71b0d

SHA512
a48daed26af57a38d4ee7443a34b723e5eb0f734d365b9c285afb593cb531c7835e2c7aebb9ef9671c31ea5661619eee9671d357858d8eac691cab43b50226c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
158d4f42960e30c53f781aa6d83c6a0c

SHA1
b2e539220abb2a2faab3a4609242b7a99c537930

SHA256
67fd63a6187bed36842a9ca8a29e93a7d3c05a1c13c8b6ba04290b210f1d7208

SHA512
02c4f54e4d7725621aca0c7bedab96b89929f465f7b63ef27fc5059746fead4e2aa154e70c5546ebcda4363f156018db0b71e7fda9092a0e5a0260513e26d1dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
30778e8c29ca55c6a0f5ead7ce7fea73

SHA1
8b4a230b7b3f8a23e396ee97ffd761f242c5bf65

SHA256
4005aee906783c622845d3808516d48fd985f9dc87c1800821e0cf159d8a8001

SHA512
308512bb7e9ca360d4dad0d37b9cb790ac4f5b8aaa7a4ba3cfb617d49b097a325be0678d2f92eed7d23ca94beff16ab7645908452233cdbbababcf1e58f05c01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
611ade57e8655a46e54df4314f5d3b3a

SHA1
e5c1c807c0cc84998bac6306fad9b0d3c1036b79

SHA256
9f20c01e3d55d8e6a8b518827c9214cc32db657f1df8d2f226494bf802d909b2

SHA512
15f7ae12cb8ab69d508337c8132b6464fdeaec58fa7b4fe7ede91e278e5e0d54be0ac876b5a3d60c2831b04432d2c7b7569a0b290803fa3f38d109cb15bebad2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
537B

MD5
6aa2790ee4329c5b6fcccd0f73a923a5

SHA1
ede9f14e2bdee9de6150345f3a7cc3ddd069a9aa

SHA256
dcbde35d5f6b213ffef75136221309d5144376973eb5567f6b182b57cfe05788

SHA512
5e68f682baa156136874c1a13a882b4cda23a1bacc56a5bd53355e4c64f53f98f0424f4140152be0bb7441f7abfcf783cb64a6979d3e8c44bd903042b0264338

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580e72.TMP

Filesize
203B

MD5
9dbc5ccd790be61fe3899ba858af5273

SHA1
f9a2e36395c67a91a0e72ec6fbc9632a3c0bed50

SHA256
0f21007365a3b693eea96e2952164b1562710f44195e61e44c953f3ec8058b35

SHA512
883c01e96448d8b705f175aeb4c0c99e3ccda95c5698d715e6e5b857770cf6ed12e8a9ec50aeec196c09f11e32bfe7f4db3db420014435530d05b17c435c49c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3f1df5ba54c5f49b9d70c2697f7f18ca

SHA1
de6b4e65a18ff213b271576f2981b4332562c7c3

SHA256
5d00c6a9b4784ce73a36f3c93c3e87228da35c97f8fcc2c4a7d9fff40c4bff0c

SHA512
ba7ae9b9186917cf6ca503e9fe982738343d47e6363729a463bf82a8661d93b12b4a5ccdad0dba9d11ac2b2ee5dfdac077a0de85bc1a176912cc4af9a34d733e

Download Submit