c8c7a52285b0d5c1bea213c425e263c70e5695afa99ad20503a6ebb2067bd025

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
07-07-2024 05:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

29c658b670fa427e5a11bd8cb44f6f7a_JaffaCakes118.html
Size

57KB
MD5

29c658b670fa427e5a11bd8cb44f6f7a
SHA1

2d4a720df56f16f7fdd4004ba960e80cde1df0ad
SHA256

c8c7a52285b0d5c1bea213c425e263c70e5695afa99ad20503a6ebb2067bd025
SHA512

7da94a40203c86b980c52c3dc4427d982e66b33b6b2d63432081f1b6642ab9c907e14c920f7aac6239615a75987ed5e44a0bb4995d0a16093de65881d30cfe8a
SSDEEP

1536:ijEQvK8OPHdsA3o2vgyHJv0owbd6zKD6CDK2RVro76wpDK2RVy:ijnOPHdsL2vgyHJutDK2RVro76wpDK2m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
4332	msedge.exe
4332	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
5084	identity_helper.exe
5084	identity_helper.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe
3484	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1108 wrote to memory of 1940	1108	msedge.exe	83
PID 1108 wrote to memory of 1940	1108	msedge.exe	83
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 1840	1108	msedge.exe	85
PID 1108 wrote to memory of 4332	1108	msedge.exe	86
PID 1108 wrote to memory of 4332	1108	msedge.exe	86
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87
PID 1108 wrote to memory of 3816	1108	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\29c658b670fa427e5a11bd8cb44f6f7a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c89d46f8,0x7ff8c89d4708,0x7ff8c89d4718
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:2700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5116 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6408 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3352 /prefetch:1
  2⤵
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7008 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,15473783474719559898,1463068924763433522,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2728 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2088

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a27d8876d0de41d0d8ddfdc4f6fd4b15

SHA1
11f126f8b8bb7b63217f3525c20080f9e969eff3

SHA256
d32983bba248ff7a82cc936342414b06686608013d84ec5c75614e06a9685cfe

SHA512
8298c2435729f5f34bba5b82f31777c07f830076dd7087f07aab4337e679251dc2cfe276aa89a0131755fe946f05e6061ef9080e0fbe120e6c88cf9f3265689c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f060e9a30a0dde4f5e3e80ae94cc7e8e

SHA1
3c0cc8c3a62c00d7210bb2c8f3748aec89009d17

SHA256
c0e69c9f7453ef905de11f65d69b66cf8a5a2d8e42b7f296fa8dfde5c25abc79

SHA512
af97b8775922a2689d391d75defff3afe92842b8ab0bba5ddaa66351f633da83f160522aa39f6c243cb5e8ea543000f06939318bc52cb535103afc6c33e16bc6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
792B

MD5
7c5963db27bc6c5b4a8ca87f4984e638

SHA1
33e873791893a42663be92fc3fcd078185b39884

SHA256
2c7afdd30c9a7068ca0f9d9041579b4cc309a85b2555290f1da112dfea4cf293

SHA512
a80af4218c59b8cfef2b36020674dda2bcdb616fe673621a29e560c6ac89242484ed12a1249dbac84125381a567e37bd5fd79b74dbba2969d6db9c07f601fb54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1b6c28723a13f208c9fb9366eb0f96e9

SHA1
8f5b200e44b135723969db9a12dc1bdde21a7049

SHA256
440e39b508238f93b49e3e2031e5cfe0b082954d822164ae9ca805f53690a9f2

SHA512
2d7402ee875511e5f83587068f938d9c36bde6569c2f5a4e059fd19de78a2ce2e5329fa5986be64369d661fc6383c66f55db6bb3e4fe4edb3ca94043687b4c6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
36fe7ae7125ada09e2d6689ffc042d09

SHA1
58aae593f0026761fc86c8a7723afb728227ca26

SHA256
155a5f916e30a01342dfa257d6894f6606bdf24c90f43c57bcc1b783cd0fbc52

SHA512
82821569b01bac8ebfe86b1896ef80e868a8d274d8f321eb1a7a3ef84bad97fea2807678e517bc6b3a690e8fa81279aa014120f2c424db446aa7337a7c1a0c6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b03b1e03bdc6b3d193a344477b7660d6

SHA1
21f0b1d64c3f66a6796bd321ea98fc3298700a63

SHA256
0adb7da8532706e700beb588de3f3fdc993559de04bcc27a8f802106beaf87f3

SHA512
62a2dd263a05d4a02f9f92dcd195d41ba9ebecab4ddd6e980583a211ad2dff1a39a30be012a1071b011ad2310c6a3bb20df58d80332a0542c8ca15e76bee6e29

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
47002b473e4814eec271dab31e94d723

SHA1
e4415b5a056ab4ba3f0b756dd9cc2ff09ca91090

SHA256
c528c15d2bb14a6de8a90371508299ea0f15c928a3dff239b9ededeb580efce3

SHA512
2f478e76228f7416cc4782c51093936bd5f8059441856a215306921d2b94cb19c97d0901a18c685354f9932f5672a9a74d07139cd65bed7524bcf2e81a18bd68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3b050b96ca7786af5dfdff63debeed40

SHA1
f2fbd733f28b989e05f88145f015260b649ececa

SHA256
f2edac8d5194ed9eb27826b96a9c0240df5680c6d26cf98266f8f13b260ec86d

SHA512
466b4ae8d002b67f56142466e33d1f022305de0eec0d69d7ab646c2fb1bdb69d89705df26c262071f9a10cf34100bd7acb4bb6ea2fe3968f771765fd19a2c16d

Download Submit