64525161d74617e8134133fad9775cb996abad218e613903ced2b84c6980f28f

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 15:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2aba661fc063a8760edd64d8cc9b44f0_JaffaCakes118.html
Size

175KB
MD5

2aba661fc063a8760edd64d8cc9b44f0
SHA1

e59a00c7d9b0f5419f8e80cffd02b8caf629e5fa
SHA256

64525161d74617e8134133fad9775cb996abad218e613903ced2b84c6980f28f
SHA512

5ba92ff6f8f18cab67408736e76c008ccdd55615c5ea15c36cc8c4a613fd980d8bb92e4d7ca95eafc3b8b7146348a581043f9019c4fdcb41e7e494870e83161f
SSDEEP

1536:Sqt58hd8Wu8pI8Cd8hd8dQg0H//3oS32GNkFVYfBCJisS+aeTH+WK/Lf1/hmnVSV:SOoT32/FABCJi0m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
4768	msedge.exe
4768	msedge.exe
984	identity_helper.exe
984	identity_helper.exe
1408	msedge.exe
1408	msedge.exe
1408	msedge.exe
1408	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe
4768	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4768 wrote to memory of 4632	4768	msedge.exe	82
PID 4768 wrote to memory of 4632	4768	msedge.exe	82
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 3320	4768	msedge.exe	83
PID 4768 wrote to memory of 2684	4768	msedge.exe	84
PID 4768 wrote to memory of 2684	4768	msedge.exe	84
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85
PID 4768 wrote to memory of 3140	4768	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2aba661fc063a8760edd64d8cc9b44f0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb315a46f8,0x7ffb315a4708,0x7ffb315a4718
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2244 /prefetch:2
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2576 /prefetch:8
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5776 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:5548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,10874357598584459024,3022709618065493046,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5208 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1408

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4608

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3260

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
e3b788f0117f41a6cb3ba9ade4874f25

SHA1
e2f3cc682e677d8917a407e39d0c36dd17fc17d0

SHA256
a83cb4cbadf480eba2b7b7c934ca1b8b95a5e56185aa82ea5a12de0d36b5116f

SHA512
60bd6133488a3202043dbf183b4ab44e831c58dd6e9a1a543a5196dad5fea5048bf364560bd401ce25a82bed1a16fb3483321818e490b91cfbd600456ec5975a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
50aa97eaf5c9ae5cee80c9a408e2177d

SHA1
55799491587c21d2c44e9d350bc62e9757a7701b

SHA256
ba375bef06f1752151cfd3d1d410586b61ca052663b3dea1e52608731c1b5c96

SHA512
dd7e6d34bce5097834f5b3987dbb0de99296c8d4dc0a94e0c1e0f3e478bec1516cd0ec52aca19cbf1327c6d958552cf388d41631c40325548ae158de2ed79f61

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
e1785444256f51861365ff9640f7d9ca

SHA1
6c8b2db076d5a1d12ad13540002ed9f15c705686

SHA256
0e9f75e0fc7571a523351bed967c28f7ac8d4bd64448ba24563d4294835ab08d

SHA512
f843869adc309f05536aedbc73cb456dab161aec33746ec20a8abd0c810dd48d3b5c6aae86e870befb09de5a6db5de493d477a72afafb39de188d08595d7dc8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f8ab044b94b06e5c8dca59f53b2007f7

SHA1
b854526d4d73b0c4362ebb2fd060d2abc4b730fc

SHA256
da170c49bf2cb244c786e8bf0cc41f1c3616805f1d9b693457d035f57cb8e735

SHA512
719c056268f2b0ec9ee78c1987c7a1ef482d5264cdf978adf9f159a92a3ce36c660e3de9d52801e012fbe9330acf999eec8f4b27e775275ad5e82b52093ef453

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
79ff2cfa6b2709087be9199c6fe151b9

SHA1
be313e3a306d095777e2af6316fa18edc732a5c7

SHA256
5f7df7c77c596fa9c63f96142a5ec65baf5bcee3a931ceef959225b97c409658

SHA512
8eb071ac43691b4da839c4e8f9e8362ab9ac21f3ea70c334ce47f7e1b15e481c075bd8d4aa5cd78aabab1625b2f9b9f59fdb4409741e37c08be7e69c32727517

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d9120e3bf98d3b2d7f648cfda6a5d496

SHA1
ffd8bd88e0a1b43f32c6d70a198359356a7df795

SHA256
e17271d02f7f9d097e8e235b92edf73c6e40950e5c21a4722287874a3b6f8fc6

SHA512
8f1e1f3e91975722fb5b27761a2026aecfc600f022ef329e03cdb39c392adb1fd0632119634cb9143801589a85d1cf770e98a3d577857e0ed1eabff0530999c1

Download Submit