0ad854354c9b0e3003adbd071a7f5e02499caf6d60634a973275975474853604

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
29-10-2024 20:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7cabbec80790ca5bd501a5210258d921_JaffaCakes118.html
Size

69KB
MD5

7cabbec80790ca5bd501a5210258d921
SHA1

4850599a657d0bac3a1c2f08b795b724b67e627b
SHA256

0ad854354c9b0e3003adbd071a7f5e02499caf6d60634a973275975474853604
SHA512

351df21ba71e9355b0320103351be394b1fecb9cadbd2733ef925d2cbeb29de428d9723d9ce767966e21c5b4c75e5b5d4fbb082e283d407a5fceb3738ff92586
SSDEEP

1536:3HvYoJiP88SnOvZqxUvC93IxgdR6TJGv8X7IACFaU:3HA4A8XOvZqxUvC93IxgdR6TJDkACFaU

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
876	msedge.exe
876	msedge.exe
3408	identity_helper.exe
3408	identity_helper.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe
2212	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe
876	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 876 wrote to memory of 3876	876	msedge.exe	84
PID 876 wrote to memory of 3876	876	msedge.exe	84
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 972	876	msedge.exe	85
PID 876 wrote to memory of 4252	876	msedge.exe	86
PID 876 wrote to memory of 4252	876	msedge.exe	86
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87
PID 876 wrote to memory of 1840	876	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\7cabbec80790ca5bd501a5210258d921_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff80db246f8,0x7ff80db24708,0x7ff80db24718
  2⤵
  PID:3876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4724 /prefetch:1
  2⤵
  PID:4008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6052 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:5252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,3542252167159687729,6007001737836693459,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2016 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2212

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3744

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
99afa4934d1e3c56bbce114b356e8a99

SHA1
3f0e7a1a28d9d9c06b6663df5d83a65c84d52581

SHA256
08e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8

SHA512
76686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
443a627d539ca4eab732bad0cbe7332b

SHA1
86b18b906a1acd2a22f4b2c78ac3564c394a9569

SHA256
1e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9

SHA512
923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
42KB

MD5
101f2295c59a6c129b95bb68093aed06

SHA1
12f5843daaf99bdb874dfebaf10660c54ede2120

SHA256
9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7

SHA512
f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
1378976282f1a5ac95403c9c5d0dd5c5

SHA1
8aca22e6db3b4ceefbdf3a940e1d6e5301c3a275

SHA256
49449ee1b904c8a0e9071dd7fd5830e9f5be76bee8f4da8b233d0c32b3eccf6d

SHA512
405cf1b428f3463dcd5b993100b835ffe424e3b5cd31c41bf24e31917171c4339af9bc686c382afb0bc99008e68c0c7925f0cca9755e2f4d02e4904dbcb5964e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
145250477b36ae9e7954154409ce669d

SHA1
19c8ac8cd69649ca8baa996b2e50224536c1d5e9

SHA256
1d5dce8359e595b30d34774a0dcc0f1ceb620c90e92ebcd9e6dd9fcfb6d2a9e9

SHA512
e4c388168a298383cf8497f4cf75513dd24c240e5f185af518bb7395d5101b0d08eea86a3bbbe36d82fd085c08c7f855cf292e598b970a070f091960d3add348

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2151cb605f82033c870bb6fe1d893f43

SHA1
5d80ccb75e0fb48a7deb6331d5bc6b557fb2d671

SHA256
749418a29ac18c03f28bf50d3c0b2fb982536229d19a722757299112d0150cf5

SHA512
cd6125a2f58566416230401a0bc1fd1f02d0c23699eefd5149f3203f41a9850fed67426d30572fe1b706ec51c76ca3dd1e9d09a49cb759a02c9862196e8fdc8e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d565f2eb2f02b44d89bbf257cf19c136

SHA1
10a18a34b605178b0d0fb30d2a5d65310930c927

SHA256
5b08a68fc9d2b8ab9787a187c8a76c4e43655fca4b6e939e6ad1bdb7156c8827

SHA512
c875ce773a9ca08d51125be7a49256e334799e41ded36be3de12d5561e8086c2b9cc506cc6ec190247a659cac43396f42d9bd292452e5e111a1f6f56d6b7f7dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3e2cd36d63f5286a524f2b3a95edb3d7

SHA1
2dd717b38e875c1fff17241d8d8612a1f1dd9e44

SHA256
22f004f5209f7a29c7f10735e4be43494769b2dc087f1a2c20fb397a605c135d

SHA512
79397aaef17850cabbd340e78add0bde5c6ca6e8a580e2fea7b70014d5dad1f9944a5ce212d1f4c3a32076ebd86217a222b9c9da4076f8e064dc39682d20688a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3bab28f3b0ab0413848f4870be171c11

SHA1
94fa379e53dc9803a271161f5b2b3f21a496abe8

SHA256
08710579b3d62091792671fc48b735d108f089bc0f8f44d20132727f0eaeeb5c

SHA512
29758c851040b64d9a015c4aea0bdd80b80395ca781a0f23d52c6efe0c966da42119913d588768c27e2ebcd7b68f7f795976e5a011302026474dc5869f23a7a4

Download Submit