cfd4bbecbb158be99b17de5cb6c25a4271f133a2ec51afc8bb3eff487f2e75c5

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
11-07-2024 21:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3ac00e1778a97031287934eba617aed8_JaffaCakes118.html
Size

16KB
MD5

3ac00e1778a97031287934eba617aed8
SHA1

351f1b2234b161b3c94726547f5e7e3c6b42020c
SHA256

cfd4bbecbb158be99b17de5cb6c25a4271f133a2ec51afc8bb3eff487f2e75c5
SHA512

cd87284de6d085e8b7f7252e7b3fc5e6ccceedf1af01759e4ce6b02afa4fa319a94c763f9026fd8c06ac656cab1bad44deb6f47aeaa7037590371e7a8d948bbf
SSDEEP

384:785eRcFdbdWXWlDZgpXcqr1y7Lq8qyxnJfOTKUJ2:dcFdQmlsz2uyxnJOW1

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4172	msedge.exe
4172	msedge.exe
1704	msedge.exe
1704	msedge.exe
4564	identity_helper.exe
4564	identity_helper.exe
3392	msedge.exe
3392	msedge.exe
3392	msedge.exe
3392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe
1704	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1704 wrote to memory of 740	1704	msedge.exe	83
PID 1704 wrote to memory of 740	1704	msedge.exe	83
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4828	1704	msedge.exe	84
PID 1704 wrote to memory of 4172	1704	msedge.exe	85
PID 1704 wrote to memory of 4172	1704	msedge.exe	85
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86
PID 1704 wrote to memory of 1940	1704	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3ac00e1778a97031287934eba617aed8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff967b846f8,0x7ff967b84708,0x7ff967b84718
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3488 /prefetch:1
  2⤵
  PID:2556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5372 /prefetch:1
  2⤵
  PID:1268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5948 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:1160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,11780679402204698459,8691497794413382979,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1184

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1264

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1f9d180c0bcf71b48e7bc8302f85c28f

SHA1
ade94a8e51c446383dc0a45edf5aad5fa20edf3c

SHA256
a17d56c41d524453a78e3f06e0d0b0081e79d090a4b75d0b693ddbc39f6f7fdc

SHA512
282863df0e51288049587886ed37ad1cf5b6bfeed86454ea3b9f2bb7f0a1c591f3540c62712ebfcd6f1095e1977446dd5b13b904bb52b6d5c910a1efc208c785

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
60ead4145eb78b972baf6c6270ae6d72

SHA1
e71f4507bea5b518d9ee9fb2d523c5a11adea842

SHA256
b9e99e7387a915275e8fe4ac0b0c0cd330b4632814d5c9c446beb2755f1309a7

SHA512
8cdbafd2783048f5f54f22e13f6ef890936d5b986b0bb3fa86d2420a5bfecf7bedc56f46e6d5f126eae79f492315843c134c441084b912296e269f384a73ccde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
195602dbd2a6f01ec7ec47d406778a4a

SHA1
be6360df94b60c08dac0d1d3b655083c759cae33

SHA256
a90ee55185fa6be2e6e704da1d9f8045d1831d99cb2ea474d546dd1d47c72982

SHA512
f519eceb258766e37cd2d48ed347a552bba4f0d5839f78390f9d846d2f529702eac5e2018eda89eda685f9b734d88024a442c58656e13d4c3d1f55afc4594a20

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
11180198d079dded89eba48ed223b219

SHA1
f925bd5f3883fb99e4df38bea44b181faf63057f

SHA256
e54ff6de88f4cc9ba1c520e31d16b9aa209253dc630fead292e28fc9cdf330f3

SHA512
f78ec689b3763d98d20fc64c9219e073de5d7164cbe0f4ef31a73a3d6b2924ceae7adf75fcb2e1bd1fa1b47741e438b519b1caa54f8e0401f47e39ff3524c0bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b0489dfb907cf8ba09da658ccc219212

SHA1
0883d4e7ea4a362fb9241a665b8abd3a7cc4b89f

SHA256
222ae11a34436527f0bd9af820d62cbc3d96d9cea01f995582dc3dd9856961e9

SHA512
c7e7043e117f7894420636e9e8ca71477b72a95030663433af02e0659de5191a07c163217eb5a5d776b47d0228aba4ec02c2b9d87c5017f9c2ef9917f92190f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c4780293c9fb5ae0a84e2187f9e71834

SHA1
f46cb32bb0ad31908126b2bd69c19d82db757429

SHA256
31c044a98b6abe83605d5b3de01e5fef4377878ae9174d0b7ee4cfb7e1af58ca

SHA512
21479005546ebf3aa7d3a55236da9103ee3620b05fd213cb14f84b851d14dca948c0e0f0b1e09280651ad80a8be91c4669ff92eb7b42fa03fac8995a4b55bff5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
8b3e64f14f81284686a300b94d2c9c6c

SHA1
db17c2d15a9e5100724620aeb9cb3e2c3f57a52f

SHA256
7471e1db5af6bc6d65acb811858f316217b040d5e37029cb6e25177e2705ccd1

SHA512
e1b3691d9acb1e75d6e228a26f7338c24e07196b2e34945ebe350c7ed6a63ec529d6df0df056b4bf7b2a92272ea2c14f8ec9e144acf885acb0bdc6533ffd22e3

Download Submit