1169053e89c9a088b58e60decfef29b1a5030f1a77047b469e52828dbf88aa8d

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
13/07/2024, 09:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4120c7bd6b6a1cc2a020932656b307c3_JaffaCakes118.html
Size

91KB
MD5

4120c7bd6b6a1cc2a020932656b307c3
SHA1

14cbb965de0b7932d9625eb2db9c624980642f8c
SHA256

1169053e89c9a088b58e60decfef29b1a5030f1a77047b469e52828dbf88aa8d
SHA512

ca3dc88af14be886bed96b2ac56bda70b4219f068430e524ebed4aee10a9073abd4fa3ee26efe237dd10e8270fa34373cc3716d083a0a23da674f9be0cb5e0b0
SSDEEP

1536:Hlr1qh3fVyYpepmhsEJOiwJ+IMYslmsmlIXiQCGGv4bWVZ9/1liL9CAYIMNAmC9M:+AYNOTXs+rmwEMNdC91B8

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5080	msedge.exe
5080	msedge.exe
4760	msedge.exe
4760	msedge.exe
3552	identity_helper.exe
3552	identity_helper.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe
1876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4760 wrote to memory of 2520	4760	msedge.exe	83
PID 4760 wrote to memory of 2520	4760	msedge.exe	83
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 2120	4760	msedge.exe	84
PID 4760 wrote to memory of 5080	4760	msedge.exe	85
PID 4760 wrote to memory of 5080	4760	msedge.exe	85
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86
PID 4760 wrote to memory of 3440	4760	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4120c7bd6b6a1cc2a020932656b307c3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff934b746f8,0x7ff934b74708,0x7ff934b74718
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5244 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,12036783071658678612,16610007188836036502,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1876

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3320

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c00b0d6e0f836dfa596c6df9d3b2f8f2

SHA1
69ad27d9b4502630728f98917f67307e9dd12a30

SHA256
578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1

SHA512
0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54f1b76300ce15e44e5cc1a3947f5ca9

SHA1
c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7

SHA256
43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24

SHA512
ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
37657cb979f5a7158a8ac4edd0cd5b43

SHA1
556cc8419d3a2e40f557eaca8334e84b21dbccb8

SHA256
36545316a0e5434313057171ed1be2fddf7dd8b6f2188d8427fb639432a2074b

SHA512
b6752b9ee47c64a88d663b5b7caeb8672d55d804facfe0beac50f72fdc9a2e748a36e01a2b3e9939f84b999d1e95b050c2dc86c6a7e77aafe6bc8dbfaf79041b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
814B

MD5
0dd931832b2841511bcf7c1cef00dc9e

SHA1
2776cd16fa467799486534ff5d32419fd1de2aa2

SHA256
51fbb66ad8cc78207c1338e67881d1afd05715bfb28e1fd2401b6bf7e839d06f

SHA512
da53d54dd057558e572ab552faf822f60c7909dd321ba756ea2c1c1d1955e42ab1ca457df7334070a7b1f8f0475a09ffbe93f25db34df39267888a1230c0bf58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
850da98226953733e8747a2a78269050

SHA1
17d1d6f5102bffb9ae38180ecdfae7c12e7859cf

SHA256
45f7cd83a857d266ed2ca384de0b7658fca532a25e7645282fe5fb6091cbee31

SHA512
7ae38c6c016d57d883e39813a79c4af64dbedfd78c1a673d1fbd7e637b137035e710455d868c582ff7b45d68238c7a5cd30f2a362eb3cb17ebff20a21fa13302

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
66cfd21f4e25dcd946b91b603de55d19

SHA1
672b026d16225847541de8c1dd96d0fc0dd5ec20

SHA256
77a907579e4991ab1d716a2179bcaffeb5238298881239d15982a16c0e257a2f

SHA512
74cc8e54e3f1461b4e9110134d1a39644f8377d4d6b25d1907187802147882f1c51feec8d32a4b3e601d25b54662ce30ddd60617cc770c87d98fda6ce0f0a5a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c506262e731b3a401bbb3afebb8ec859

SHA1
0a7839e5124c06a8edc30f8eafd9bef626ba5def

SHA256
3ad542aa99c48c700ed45bd44f7682f598662cbd64e2ea28a1356e2449bb432e

SHA512
ee9b2c30b0d48f9f03bd40b124d4af13112b0581a02a2a163d9276c74158656ec61001ede3544422106a53e3e33ccb770b868f9113dd18bf7ba5838f7004b394

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f78add1ee411668cc8c1cfe52248360d

SHA1
733b5400dd01fa1779b89db2b04bf7079483247b

SHA256
7aac5d9094550e6cd159d5c1e1c70b2926fe5165b72d28353d80925f135aa9f7

SHA512
c5e7fc8fa2e05b6c00d48f31747c8a18d04105c4539eb081073199396a74b2a849e8382c82ad770d59c2667f70d52d28454a072b6675e948574d39556cab8ef6

Download Submit