c5b71e2d71322a57f8c9d4aa700cf2e9e05d05ccb7ac3f6cef6ba611d4d93aee

Analysis

max time kernel
147s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240704-en
resource tags

arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
submitted
08/07/2024, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2ac4d8f3613ca580e0e7c24ae81dacc6_JaffaCakes118.html
Size

56KB
MD5

2ac4d8f3613ca580e0e7c24ae81dacc6
SHA1

38c480ee1a5d261c237bd226a2e3ed5800e30b25
SHA256

c5b71e2d71322a57f8c9d4aa700cf2e9e05d05ccb7ac3f6cef6ba611d4d93aee
SHA512

0840d7e25f6a64104bf24312b2dbf17dc0feefeca392d5509a728ad45b606d9b8085b46d80ede9579a84dc51cf318f9ebcb43b5a934b69b73a122459cac700be
SSDEEP

1536:gQZBCCOdW0IxCTZUuf2fCfXfVfRfOfbfRfwfsfEf1fffHfNfGfWfYfZfqfgfjfaB:gk240Ixs+K/tJ2T5o0MdX/1OeAxS4bSB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1940	msedge.exe
1940	msedge.exe
1748	msedge.exe
1748	msedge.exe
1836	identity_helper.exe
1836	identity_helper.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe
1748	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1748 wrote to memory of 2728	1748	msedge.exe	82
PID 1748 wrote to memory of 2728	1748	msedge.exe	82
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1560	1748	msedge.exe	85
PID 1748 wrote to memory of 1940	1748	msedge.exe	86
PID 1748 wrote to memory of 1940	1748	msedge.exe	86
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87
PID 1748 wrote to memory of 4020	1748	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2ac4d8f3613ca580e0e7c24ae81dacc6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8105f46f8,0x7ff8105f4708,0x7ff8105f4718
  2⤵
  PID:2728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6432 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,4086242209876908407,17290857964658142428,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6224 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fbc957a83b42f65c351e04ce810c1c11

SHA1
78dcdf88beec5a9c112c145f239aefb1203d55ad

SHA256
7bb59b74f42792a15762a77ca69f52bf5cc4506261a67f78cd673a2d398e6128

SHA512
efad54eb0bd521c30bc4a96b9d4cb474c4ca42b4c108e08983a60c880817f61bc19d97538cc09a54b2db95ab9c8996f790672e19fb3851a5d93f174acdfac0ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5b6ff6669a863812dff3a9e76cb311e4

SHA1
355f7587ad1759634a95ae191b48b8dbaa2f1631

SHA256
c7fb7eea8bea4488bd4605df51aa560c0e1b11660e9228863eb4ad1be0a07906

SHA512
d153b1412fadda28c0582984e135b819ba330e01d3299bb4887062ffd6d3303da4f2c4b64a3de277773f4756da361e7bc5885c226ae2a5cfdd16ee60512e2e5e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
824cc3863b6b1ad9e79a87e8d0a36622

SHA1
240b1ab0bea5798c85793ad7a5cd25660287217f

SHA256
9baf09b88abf4af9c36b03559031997cbe31c2318f48aec38d0ea57633949a26

SHA512
6fda4ae43c6d013c7a051af55c6e095982e211ad9f3f4355b087b029e3a5b2b82455e11239835de0aa849e926b943fb130a4142f64bb724d495a904fb2b719bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
c1bda271b4dea295350d3e363a581969

SHA1
c2c7c59d25b5cb2abd4fb9ad28e04efbf52f6c9b

SHA256
51522a77483d49ba66345fc06c06b72bfc456dd27c31e6a6443aee3d345a5cc1

SHA512
0fda220d6fa29b38b6044cbba2924c96d6e9151868e95d696ce1011ebbcaae78ae8922cab66419f084f864374a6c43b47a7a42a38fae266003bdb38efd85bdec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
193718df05a9934120f65e9647df67c8

SHA1
577380c855c49c9ae2030e5a6aa09026d9518c8c

SHA256
12b27c119807690e79174b631625043770d956c2877d846a7d2ab20a3acbd3da

SHA512
1398c83c6ad472177a2ca578b9c1d4642c022f367744f27a702b9d0f320369e8f23cc3c86ddb71524210390e27924d3ac99c2ae983a1df80c93543d685257a6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f77f27aaddac89172ef9dc7c3676f031

SHA1
7a6fd963a1f2a4709aa9dbebeb1f1747d8f27959

SHA256
867382fe74952596acec10b56b34e5c972c3aa633d9ef0f01cb31c6505b1ff15

SHA512
83703f7924026d041e52661008de859407968749b7cbdd34694935e52d0ac8b94541ba6f56dda0668d013966197947457a0cbcbbffb356eb6b378facb530e5f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0221219c5309cf244ce705d17cb244b1

SHA1
8d0c8439ac16004ae8ec16c699a4dc1aa4ba2af3

SHA256
1e3c6be9877b1dedb1300d90a30052a7485b7f041cef12b686d93d882861063e

SHA512
c190dc998744df5dc8425f664cee5cfe2e5f08b7392794a64d96518318435268af77f6193ec892dbd81760613d3737d5ac8cb53ede739688f7c369020bd388c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ad41a88e15df6368fe35ea298cd26055

SHA1
82f26c35703a2122964494342bebd97ff73846e4

SHA256
2ac2a15d6125daef8957f50e8e44f52b1563a677c17c9f1affa952a341679f95

SHA512
eccb13fb8fee7adf7c6565512bf1ed3ec8dfff1ab6718fe63ed305edb8aa4622a88b91149e03a58a65b8c0860470cc36e4f266a0f8147fdd148e3a49280c05e0

Download Submit