2d3a41ddd26b2116eb1047af7c00d6169f29781445bb8cdc9acc01f37339a4ed

Analysis

max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20-07-2024 03:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5ef26d04ab38f45ebf7dd104043b82ba_JaffaCakes118.html
Size

42KB
MD5

5ef26d04ab38f45ebf7dd104043b82ba
SHA1

507489dd8ad035e3983b01b5c78925073c4fbb13
SHA256

2d3a41ddd26b2116eb1047af7c00d6169f29781445bb8cdc9acc01f37339a4ed
SHA512

d6a63b83b727f94ad9d1f63395a58088372c53978bc2a94876125d6aeb8903e547e0a55f57b3e355a7ad4bf3111b6c54f08354f3c8d03f08b0f87bc1f044f7fc
SSDEEP

768:Zcd9QZBC7mOdMsEIYZK38uoQQqiPEfyFNQboM0impC5I9nC497+CHtg5kfZM6ZFi:gQZBCCOdC0IxC27uumwBwowlaGPd

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
3180	msedge.exe
3180	msedge.exe
6116	identity_helper.exe
6116	identity_helper.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe
3608	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe
3180	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3180 wrote to memory of 3900	3180	msedge.exe	84
PID 3180 wrote to memory of 3900	3180	msedge.exe	84
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 2656	3180	msedge.exe	86
PID 3180 wrote to memory of 5112	3180	msedge.exe	87
PID 3180 wrote to memory of 5112	3180	msedge.exe	87
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88
PID 3180 wrote to memory of 5600	3180	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5ef26d04ab38f45ebf7dd104043b82ba_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa6dbb46f8,0x7ffa6dbb4708,0x7ffa6dbb4718
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:5600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:5940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:5956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4348 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:5920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,10898247327200908504,1840392024494029836,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3608

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:376

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3076

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
75c9f57baeefeecd6c184627de951c1e

SHA1
52e0468e13cbfc9f15fc62cc27ce14367a996cff

SHA256
648ba270261690bb792f95d017e134d81a612ef4fc76dc41921c9e5b8f46d98f

SHA512
c4570cc4bb4894de3ecc8eee6cd8bfa5809ea401ceef683557fb170175ff4294cc21cdc6834db4e79e5e82d3bf16105894fff83290d26343423324bc486d4a15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
10fa19df148444a77ceec60cabd2ce21

SHA1
685b599c497668166ede4945d8885d204fd8d70f

SHA256
c3b5deb970d0f06a05c8111da90330ffe25da195aafa4e182211669484d1964b

SHA512
3518ce16fef66c59e0bdb772db51aeaa9042c44ca399be61ca3d9979351f93655393236711cf2b1988d5f90a5b9318a7569a8cef3374fc745a8f9aa8323691ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
7529c8e48c1f985010a7a9ac89ab66e3

SHA1
0411b2e1c2afaaecf72c775e394adebb07f0fa8c

SHA256
f63ecc0c8aeb1427719d5ba094259446a354e7a034ac4165525819a68c8d12b2

SHA512
3b89906dffd7ef4dc00affadb3939d51840f8408824da5fdc649b9387b6fa600607f8bc26580b61a0b039ae3b0a08745122d19d5edc0e9550770125d932f8e25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
38ad4ab348a67ea9cacfebe103df49f1

SHA1
09a65be6296c38c1731201e2cddb9bf5a00b6102

SHA256
687e6b386cbda62a76c4424f1693fed59b0900e443b030f49913f63e640e2b4a

SHA512
c133e8c03ea010023fd3a24d9f9b40839f73eefb51fcd871464a70a9017c47da062cb94d2d9423ae90985fc100e1f31f8779225f5afc39f45b7209cee54c0bca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
db32a6ab0b932e537e85377d6518e22c

SHA1
fff7d9eae664c368d87f3ecbfa35291ff1fb79a2

SHA256
2119adec3f91a3972e0dbbb4bdd4383da215206740e2f94350d5dd4bd6e30d06

SHA512
e5620166ad5e5aeddb39b1d44feeb9ffb46b5ec6ef4d94b2f2480a1c596d625ae62b2ebd29ec0852bc8a1a6842c4af2506ad3800a307d26672c01212872d84df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a315829e0ea83711b28627c18f24e83f

SHA1
39d42025e0ee2dceaaa5f4898694979740e8d071

SHA256
e2b854c66962a7325f00f01c2508cff7d8d8d50436d8709972cf372ae92302a9

SHA512
e965a21cf3b2019a4165a5a417b647d3e86edc812f8c1fc561b49e4498b3ddc9bb517acccc07a165632810f51a0efa48b75c989e6252f6217c1399fd1362f70c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b597ac1853c16cb4be6e5d91de929d72

SHA1
f749f033ebc3baf8b80ec4a1547b0bc35dd866dd

SHA256
11426905cb67fe9e58db2b65fb39c49fb3a61138e95e9f6d3401b50d22709b7e

SHA512
f755c6bb9200c13a84d12e4e03a214bf977a89eff77b46499b1c6b26c1d0d60c894d0d90962fdf72d5e4e5b9e2414b67cf3aef1a354747a23f8f928411aafba7

Download Submit