b78194a62458a56a93faddc5abb987d48189e2bbda635a8f3a4eeab136e3055a

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
09/10/2024, 08:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2dab5d8470bc8759ce8f4799bca031a8_JaffaCakes118.html
Size

17KB
MD5

2dab5d8470bc8759ce8f4799bca031a8
SHA1

8d54dc152c4781e929fcf119652c8d8e4acfe01c
SHA256

b78194a62458a56a93faddc5abb987d48189e2bbda635a8f3a4eeab136e3055a
SHA512

bed5bdd7a4c0c3968eb042ea904d9e7a5bbfe03b84e2c35835c3e43680940573a539faa3e627d1faa54138721c4805955a8fb4980229f6517bfc9bf41c0d750a
SSDEEP

384:m98DcGydiNF4vh35Y1JxcmmX01gZfBMLtD6WQC2V:hcGydqW35wAX01gZmDXm

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2384	msedge.exe
2384	msedge.exe
2160	msedge.exe
2160	msedge.exe
1924	identity_helper.exe
1924	identity_helper.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe
1760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe
2160	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2160 wrote to memory of 1624	2160	msedge.exe	83
PID 2160 wrote to memory of 1624	2160	msedge.exe	83
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2236	2160	msedge.exe	84
PID 2160 wrote to memory of 2384	2160	msedge.exe	85
PID 2160 wrote to memory of 2384	2160	msedge.exe	85
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86
PID 2160 wrote to memory of 948	2160	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2dab5d8470bc8759ce8f4799bca031a8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd22b146f8,0x7ffd22b14708,0x7ffd22b14718
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2500 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6188 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3996 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2260,17547019551123621134,7071837380820064804,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2492

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4576

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
4e1b0b266085b90c10e7e7f0ede3e4cd

SHA1
fc0c09109af792dae30c80094387d2915942bf0d

SHA256
fc78c5dd46c116e67e0827d87d1ae20c68af4d732c8e57f8982a3138b4ab1ffa

SHA512
d3a71f1d878da3d88bff793f39753218b1a53b610f8846923bcabfc2bc78dff851261b1e64e3d72417005ea4a118f7c48870448139a8cf83c3add1f80558ade2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
88babe6bdcfe34228cb0603e072b5ddf

SHA1
e0968d1c0aadea2c899081a1b2b67e91f994a8bb

SHA256
db34e94a2a5f7fb24b567c5d810c992f425da6382b5c0a589029f8d4c87c540a

SHA512
dd554d91a9d007591f7434cc94c2c890fb2b5bf0818e3f266ee3896b9dc15e900d09da1fc99f69f8d7c5847169c16d3ab0720db8de6db89b29561bcbf6950b16

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
79bfe173ec0155be5307aa743dcaab6c

SHA1
bd8f165dbdfc308e58d7e9d92ed71d0231af185c

SHA256
6d0fc72dc4a3d2dc0eba4232dfd860bdeb62f76c1e526e78a2c41f10f3096496

SHA512
302ea817f0538e5f665e96daa31fde3c190fdadfd0f5bd505d093067d1f8d7abc4507e005eb7348e5a41447da2e2a7d04e49b528401df26068c649a313fd73de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
26fca011e5592c505e523e437376cf84

SHA1
4d80b2188371972099c6880bb7ca65307f2ab64e

SHA256
90ed580109ae9a48a7aa126e80e8bc809addfa0f7d1fe3d5063ff8be9435f963

SHA512
43cce0fcbaa6a15719a840ef574e763e7bc8bce25a576c043a8a626acd013d0ee59a8e5cc6aaa881006f03ff53b35fa128ae7ab83beec00e85cf5a721177ab4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1473f6770596cb6452eac6a54883691b

SHA1
f8e8a9318596506f88df1dc4579d2de8c1bd85c4

SHA256
c8979d6048a9d4acef96060ff8bd89e2451e2c8ed8f850d36b91cde595f5d339

SHA512
3890da67f8a713f59dc05cd6cb68e0e809e11052f4a357d177a0bd266531bf45eaaeaccb4e756e5087beffa646649a6bbe3b530e4d0e5d390f05617545effdc0

Download Submit