c94c74707711236f29723e101e332c35ea1c5148cd50ea869c37f5584b049d14

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 13:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6fbd9d442d2872b76b8de392836750c8_JaffaCakes118.html
Size

71KB
MD5

6fbd9d442d2872b76b8de392836750c8
SHA1

6aeb86aa48062d5cbd4f088c84972b3067d605fc
SHA256

c94c74707711236f29723e101e332c35ea1c5148cd50ea869c37f5584b049d14
SHA512

1a356ad2cf6829501c332f4391792a6ae5b2b816a6e8c6e7af916c0b992cf3d0cadb389530178b812c64debc12a749c38c08e626451ec15acf08048837421c16
SSDEEP

768:Sr0hqGbIiP//mdvsYSgLj/DVWmTMYq8Dfr7Vq3t40MSxjfLD+PHgkyMrj3DZ+/VV:SnIk/ntnwOHgHucp

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3532	msedge.exe
3532	msedge.exe
2596	msedge.exe
2596	msedge.exe
4312	identity_helper.exe
4312	identity_helper.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe
4340	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe
2596	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2596 wrote to memory of 3036	2596	msedge.exe	84
PID 2596 wrote to memory of 3036	2596	msedge.exe	84
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 1068	2596	msedge.exe	85
PID 2596 wrote to memory of 3532	2596	msedge.exe	86
PID 2596 wrote to memory of 3532	2596	msedge.exe	86
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87
PID 2596 wrote to memory of 4300	2596	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6fbd9d442d2872b76b8de392836750c8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffafb2746f8,0x7ffafb274708,0x7ffafb274718
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5992 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,13395855969392078075,16493985943301619309,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3012 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4340

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4540

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
210KB

MD5
5ac828ee8e3812a5b225161caf6c61da

SHA1
86e65f22356c55c21147ce97903f5dbdf363649f

SHA256
b70465f707e42b41529b4e6d592f136d9eb307c39d040d147ad3c42842b723e7

SHA512
87472912277ae0201c2a41edc228720809b8a94599c54b06a9c509ff3b4a616fcdd10484b679fa0d436e472a8fc062f4b9cf7f4fa274dde6d10f77d378c06aa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
9343bcf84524d74401c92dddd5576c58

SHA1
b6dc3a9786cf746fe224354e0d50c24959b3946b

SHA256
7a56bcd3b11ea9046107c130fb3799e98553b994131c3acd4f5881d0a04dabf8

SHA512
14ba69ed3e769117b882477670c74db99fac5fab040de48f9d791d6c417692acb8940315ab78880754bfed053478806909f33b92077997ea50958523757b6ad4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
812460d0c64b48155d63ee3c656b1921

SHA1
f8bc27ba6b331b1ef6b4cc6103ef193c2c3cc4a3

SHA256
36b2687ae95d01b262be1cb0fd01b223ef71d3747a3adc1094e5c9254f1f4678

SHA512
3177af1b8580ff9dd99f08e4fcf9956fd7b23c75337bdfc44df5602fadd70b3a134089aa5b0b799d1fe8df8c18eca5be133271e605ae6bf6485c3deecd9f3d58

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c918f85e134573e44c4e07d4ca6e46b1

SHA1
baa99784c67c7ef9b71b29a95f420d82c7e9dbe6

SHA256
eeab7e012d34b1c096162069ee24a02924649a3a02e237a9275199b3f77ac31c

SHA512
a527d9206db1f03eb2601372bf72e300bd785e92025c56c92ce0392f1b33b751fd591b2d7119fb1c53a8d676b088d31efd364ffde0f668c9a7d2d46865b6ab23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
685ed2ca189aa384f6f6ad9842144a29

SHA1
132995f6d9c4034a90cc329d7473c085ab0d7cfe

SHA256
cc903ee82efc2c921c81f74517cf995cbb6234cf243576529ee6f07f4469f0d2

SHA512
b94979e30da18955dc3b2f60d510e690aac0d6788bb758beb991b244688892adab9b4e70c97846d1d1b9383eff63fd14ba0c9b21ed82fd0a88fb7f85d968a745

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
667e9f256b52341ff0332cc7efd9f55a

SHA1
3ad893035103b157c7fc89440e5deca74d117d72

SHA256
7560baf43aa1b4258f043ef363b1828e83ec722c3404e871e0a8f53bd4c171ed

SHA512
9cab0d2f32693c6e3b79abddcff0c8f840399f9cd3cdcc48da515af09f86a07d0df65d5f2f74136abe98c0338eb9bffb414d37e5c2d5c0c37224dbefe29c050f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
21f8bb8c792d8d10fbcd24c7a714b14d

SHA1
f37991af18120bc08ae71fb0e1aaa89555097d64

SHA256
0c679550fc11dd9c149c4fe7a053501f547d89e6b71721db9c0239506a896e2f

SHA512
232876137ebc4b574c2b3db0f0e76086bcad685c9ea453ce6dd8c868020f0670392281f5d7e9a7838516467f4bbdc8dafd467fc8a0662cf9fe0a061d9e3315bf

Download Submit