a87baf685c6130152afac424fba785eb676fb9722fe875e8344fb592c8810217

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 22:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

716f30b13b401fed8d214f519f9f83e4_JaffaCakes118.html
Size

14KB
MD5

716f30b13b401fed8d214f519f9f83e4
SHA1

968e19f51ce4409f173685f340cdf39fe21cf5e7
SHA256

a87baf685c6130152afac424fba785eb676fb9722fe875e8344fb592c8810217
SHA512

e8946292c560b5d5a6a7963201e2a4e66e35f5d55a8fc71c35b2d06aa50ccdd75b7e0d39e30b46b6a471d54714beda73f3fd553194507c16b0a1eed296d6a1d6
SSDEEP

192:wwhm5jcUatvyL3rQDgb7HJ9Y0JUj6isu47xVpF7WPkfNEBhepKlmP3KTAL3E2:pqcFyL3ggnHJBJ9uQTW8fOBhtJ2

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
332	msedge.exe
332	msedge.exe
4184	msedge.exe
4184	msedge.exe
1528	identity_helper.exe
1528	identity_helper.exe
1588	msedge.exe
1588	msedge.exe
1588	msedge.exe
1588	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe
4184	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4184 wrote to memory of 2420	4184	msedge.exe	84
PID 4184 wrote to memory of 2420	4184	msedge.exe	84
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 2056	4184	msedge.exe	85
PID 4184 wrote to memory of 332	4184	msedge.exe	86
PID 4184 wrote to memory of 332	4184	msedge.exe	86
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87
PID 4184 wrote to memory of 1016	4184	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\716f30b13b401fed8d214f519f9f83e4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x9c,0x108,0x7ffd6e8946f8,0x7ffd6e894708,0x7ffd6e894718
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6068 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,8151548889619067248,10905243927321152530,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5176 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4508

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
bafce9e4c53a0cb85310891b6b21791b

SHA1
5d70027cc137a7cbb38f5801b15fd97b05e89ee2

SHA256
71fb546b5d2210a56e90b448ee10120cd92c518c8f79fb960f01b918f89f2b00

SHA512
c0e4d3eccc0135ac92051539a18f64b8b8628cfe74e5b019d4f8e1dcbb51a9b49c486a1523885fe6be53da7118c013852e753c26a5490538c1e721fd0188836c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a499254d6b5d91f97eb7a86e5f8ca573

SHA1
03dbfebfec8c94a9c06f9b0cd81ebe0a2b8be3d1

SHA256
fb87b758c2b98989df851380293ff6786cb9a5cf2b3a384cec70d9f3eb064499

SHA512
d7adcc76d0470bcd68d7644de3c8d2b6d61df8485979a4752ceea3df4d85bd1c290f72b3d8d5c8d639d5a10afa48d80e457f76b44dd8107ac97eb80fd98c7b0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
210KB

MD5
5ac828ee8e3812a5b225161caf6c61da

SHA1
86e65f22356c55c21147ce97903f5dbdf363649f

SHA256
b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

SHA512
87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
d9c958d901c20dd3541b314db6c63508

SHA1
c7b5bd56b82c4bd8a0a5c71837c4d802bd96d370

SHA256
49a61c7d7ce128e88a4adc16bc5295fdb8ce713232c828c2716cc518b581d342

SHA512
c8826533aeb70f388ebaa859d1d3df6239f8dd6ffddd8ab53b9de6709cbb2b31a784db47155499a00dafb3db43bf25ffffb0c83ddf6eb0b522eb51b6217a5c84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e49fd2e5f6714c5b3e2523e85d6d2aea

SHA1
ef12da53a46d6a1374bb7172b9a1b24859deb229

SHA256
67036f343de0a9474192c1e785e1e8762ff6e363c1d048dfbaf828b79729e428

SHA512
d0fd70617dbe09a067fa6a5e531c0af74c4d6b4b1cc5869f25e484837cdc7e52576a2ef1bab3e3f0c72d70e93b8406182cd373c3a5aa865e1294abcd2837cf1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2983b2b046ce2fec04ee0662f217a838

SHA1
0b2af0d38c50b924885278770d030178e9290ab2

SHA256
6d455633420353ee7126dc3f471254993380c39c760f78a38ebc5d481dfa242f

SHA512
f140e5f5be3db2dea467ba592d6209dbef28c3541c0ae81bcc3c724c00da5f75754c0d4350f2cec3602c95c3e6402021d108f35b5de2cfe527d170033ed0fc98

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5dbdbc6d681e3120503d8e4e0e72772e

SHA1
a012a66faa7f1cdcfb47fbe545e587963af0b1b7

SHA256
c8d9e7a0188ee1637f6780e091c88732f2cf86f8ddab82477ba2886216700447

SHA512
0eb48ada853d15e64e1171b3506422f4dcdbdffe9dd181bd99533b9b6e51719410c11cc7aa80569f5d3703266ac162d3a4285048f0076be772e1949b575771cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
9e662fffc9d34e21fd368ae98bf2dffb

SHA1
f771a0b09d90fb35864d5b5414e2fc0ed28f0993

SHA256
63176388a279b6fa625d0d5657cb32d85ae0eba806d828c1a5e431866c9096ac

SHA512
2c69fb2acb3d3c8df35e4c9c32f5b04915b826b007aa6f395b37ceb039961ee46fd1ca005a44d07c62fe1a2d8e59cbe67954289512c58dff4396a6d6ec12fd9e

Download Submit