91128c09d8db1ea43e0792c934c4743072ef459cc0d27dbce5252a4bc54dc379

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
30/09/2024, 09:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

00b573fa9a78b4402d8f7862a7681bd3_JaffaCakes118.html
Size

18KB
MD5

00b573fa9a78b4402d8f7862a7681bd3
SHA1

02921242eb6766e8eb89a6d007ff5059690483fb
SHA256

91128c09d8db1ea43e0792c934c4743072ef459cc0d27dbce5252a4bc54dc379
SHA512

4f846bdee8547a4650471470c64f7eb95d1ffd1042da5df183c7a5b0e6e1d3ec91a67f6f8041e3a27f7f7d83c0f470f09229fb2bc7c3d5a6fd94b3f94b378918
SSDEEP

384:SIMhiuJ+unqvSBgc704u54o4M39Li3RT7hgHh2Ld6vzUton9LAht+hqdSlECGGXP:SLhiadqv9fr50shmhtsqdSlyGQwX

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3420	msedge.exe
3420	msedge.exe
3508	msedge.exe
3508	msedge.exe
1568	identity_helper.exe
1568	identity_helper.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe
3508	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3508 wrote to memory of 3188	3508	msedge.exe	82
PID 3508 wrote to memory of 3188	3508	msedge.exe	82
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 4836	3508	msedge.exe	83
PID 3508 wrote to memory of 3420	3508	msedge.exe	84
PID 3508 wrote to memory of 3420	3508	msedge.exe	84
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85
PID 3508 wrote to memory of 1180	3508	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\00b573fa9a78b4402d8f7862a7681bd3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff6c0f46f8,0x7fff6c0f4708,0x7fff6c0f4718
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5344 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,6990369737277540892,2881427043062497055,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3396

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5104

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3916

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
eeaa8087eba2f63f31e599f6a7b46ef4

SHA1
f639519deee0766a39cfe258d2ac48e3a9d5ac03

SHA256
50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9

SHA512
eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b9569e123772ae290f9bac07e0d31748

SHA1
5806ed9b301d4178a959b26d7b7ccf2c0abc6741

SHA256
20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b

SHA512
cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e4172a4-5042-4716-876b-b1971ee1759e.tmp

Filesize
5KB

MD5
252ba39df8148a0cd79c8c478d6483e0

SHA1
5f2b28d7c28e49fd0d20d8b55a8604348b48454a

SHA256
b97c44849174efa8da1d5b966b09c5ffdf4817c3c8a5e84e398e46ced7ddde96

SHA512
53cdf7348c3f0d628c7f1bf772389ac505fd228c92a1b478e2a0d48c561d6e84eea5eefe021c6fcda97a2285722cb7be9eb7cf28d10fa5a3b35c905af55fcaed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003

Filesize
33KB

MD5
e2ec36d427fa4a992d76c0ee5e8dfd4d

SHA1
47ec4ace4851c6c3a4fe23ad2c842885f6d973f2

SHA256
36488e81afcbc4d7018b8764c18032b10be21aa45521c9671fde0cc77f70b2d8

SHA512
d1ae29d19f65ce74b9b480c82b87315634ec2e96d199f5feb423918af9ad6e24c8b436e03904d452f71562f04c42acbb250256eed73bcd592a79c08911c74976

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
70a7fb6400a394b1e23a0a6d60b3aae0

SHA1
943e700650b3670c97841e6a6746376cd78de1a2

SHA256
63b17f97e034560e4d01cf0a57b4b89742fdc26dee7d718e0674208e396dd3ca

SHA512
cd6b38e35ac33edeac580ecdda616c11af5f0f7a2f6007f8404f7f18012014c5801670f35a1c0c096af93943eea8e70b55dde2b174e2c5d2312da30052ee93a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d0424b2ca691ad61ef03b7710aef2fd8

SHA1
d93c92d1af35a98552ef9882a2d27398dc889ead

SHA256
1bcf7da0f2c9c8e7a1786e75d0072495c624f97f139ce5f13d148b1c75a5245b

SHA512
638014a5a97b912e7a1b40106c006d151bbd3a36cb95993d91ee2b956acc6138efb98b6482b675e184d817b3f8cc8d13ed5ab5114be9ccaa9e40d0e5479245a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
679b1060ac619cbcf07cd65dee7c2f93

SHA1
846c539ea6b5d5c27ce7f57ad930cb7d4eda5da2

SHA256
4aaef47061c4f0364a86cf7c3e636d92ed67b211e82647efcc2ab3857b658112

SHA512
abd71b39cb276a90966c86060e6e074b854476db79a5a07e73f3fd4a826178c0646862332f979cebddcba23bca7e8316b888bad60806fb69224c396e843eec0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0ab3c8d9cdaf3c3e19a5c595414dc996

SHA1
0717d1ecf1730d100d0a8180d3fbe4477c498360

SHA256
70c85b846f506fc9e18355bd3c89b1ca2a1b6774e061644180cde934b5a0b5e5

SHA512
7d2537c138e5cb6059c0e2d09d54b44889098b66f75aa64e08891438683f996d275d00b60b5cd9f621f22110b3959e98901fa77756f3682e0f5be07221df63ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
6a4b2ef2fa599aad20fd60e7868bc22a

SHA1
d0fa6ee597d70a8e0bc01c5d295b4608c4f8ac36

SHA256
a97a642e85053c7a03fae970c26145a9fac8d5dd2d83c63b25a7004625124fc4

SHA512
90e2e6ce729d327046e8c00c7455d30e66b732b01230d81df2b863df88662eee6d0b9435bc8382601996f8985a5815ebab4928e75f7b5134ed4d0d70f3f98e03

Download Submit