afb59b09b987f3e4b51efd8b25d8eee9363991ff729af6c41cacbd113d1bffd5

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 21:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a6a3f2fe475c5b726a76b6d24e036448_JaffaCakes118.html
Size

68KB
MD5

a6a3f2fe475c5b726a76b6d24e036448
SHA1

1d1d07b3d16f3ea37c81d44f1a8104d960065920
SHA256

afb59b09b987f3e4b51efd8b25d8eee9363991ff729af6c41cacbd113d1bffd5
SHA512

2f4cc0f3ffed9621b7a82d325a21fdb0c0a27a8c067e69a6d5c4f86048853bd58a0407654e1e0f0095c4f07e4803ff17eeace82361e477d767dc5766145cfeea
SSDEEP

1536:sjvjaZ+7vB+KsudqaFSwVo2Sq0efX5K1t7HPqjVFMZUxmUqNbrZSIu:kBRdqa10mX5K1t8AqxmUqNbrZSIu

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4388	msedge.exe
4388	msedge.exe
1048	msedge.exe
1048	msedge.exe
3512	identity_helper.exe
3512	identity_helper.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe
3596	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe
1048	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1048 wrote to memory of 3040	1048	msedge.exe	83
PID 1048 wrote to memory of 3040	1048	msedge.exe	83
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4652	1048	msedge.exe	84
PID 1048 wrote to memory of 4388	1048	msedge.exe	85
PID 1048 wrote to memory of 4388	1048	msedge.exe	85
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86
PID 1048 wrote to memory of 1124	1048	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a6a3f2fe475c5b726a76b6d24e036448_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7ff81a3346f8,0x7ff81a334708,0x7ff81a334718
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4148 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2144,6515266072326537971,7027832134139560992,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3596

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1788

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
477462b6ad8eaaf8d38f5e3a4daf17b0

SHA1
86174e670c44767c08a39cc2a53c09c318326201

SHA256
e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d

SHA512
a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b704c9ca0493bd4548ac9c69dc4a4f27

SHA1
a3e5e54e630dabe55ca18a798d9f5681e0620ba7

SHA256
2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411

SHA512
69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
950099c1edf9545d81b258ebb39931e8

SHA1
ebcb1e30e65d89a92402295f93bc678002bec9fc

SHA256
ab32a0e3648213e531744aeb19ca92bc0f03439fa46093f3f8a5033265bb76d8

SHA512
7e0d675f11a9c7ced18e57c2410d48ba13339484baa92e14cc81d84a85b8506808e1bacdb515b18912d06a4481a7b9efffa5778610c5ca7007b127c8874296f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
9ce0c025475ce64b0ea71174c0dcf2c1

SHA1
b947693252d991a2015314ca69077d987547c552

SHA256
8b529a0f27554d6637419b611f742be209eeb64ddf139f8a9ee7a2315cd6701f

SHA512
89f614515dab9b818ac379cfd228c3630d8fe0a6d7549e4bc865a6e8963b86c8a78fa0d025b9dda198dfbaef635fa41bd0d25c7011390a4a908a0588178f4209

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
dbb21f1dc1e579361975d269850853cb

SHA1
6b7b96fe6efbfd5924e5708c899e89a2774c4b96

SHA256
fe43945bdc61db3c2aa02c09e0f269c2f0635157331d7f4056acf28259f86465

SHA512
0dff6de2c490dcec7d79532a597698f07a91769346c75caf7ba8a9898edf3a3bf4be9dbebfc6d7542611be23ad03a9982235cfab1cfddad7a089809ecdd9211e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
882ac79d88aa9fd1efb6aaee3f955a69

SHA1
45e86f374df18812a3d3bf414c5cc0243b3e593e

SHA256
b131577e0da59fbb3196ea49627775b2eee239f4610ddfea80e9413cc27b3e36

SHA512
0fa6edfb987565cbaa8c1e21a0ac5ac65b6040cfbe0a1c781e7d92c0f27d928960bfd28ffdfef20ff06f13117b555925d25e699e8c188a3d800fffcba2c61ccd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
120a28bae1f3055f812018cbd35fcec8

SHA1
aa3d35cba66f075cf92b0284b13c27b375275d41

SHA256
68ecef538b2b74561915b4879d1486d6e930405b87411e68e18a16ae5ffa9557

SHA512
7a8a6ef5d32c367dc7d7990a0d27f2a2319235cadbcace9704c1f0f72a3812b5111ccbe7f498494009ea5f4ad7afa7ead9b6f89e2577ef40dbe8a29b3f42a647

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
b74b68ffb97c5812bf1c4c95282306bb

SHA1
689f56fae70f4048d5a498494a5e99351840b5bf

SHA256
dfe12a37b6f6de202ca05babe3895275d9e724fa278ab795ca11b00a608a6e7f

SHA512
d8eed8dcc1c517b05d0fc3a5b9c76306fef9f85434a23783830c4d5bb5d7908ecd33446aafed2f5b4a0bf487d10868bf80ebd9a81da9ec45ac64fbd49a5c003a

Download Submit