b6d258163b5a65aecea2a1f3948ae9697f8242fc2ba4b5e2890e2cc41d0221c3

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
14/05/2024, 09:53

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4113313dc454061e4bdf2019edca692f_JaffaCakes118.html
Size

175KB
MD5

4113313dc454061e4bdf2019edca692f
SHA1

187582b765843d667f6b19dfcbaae1d0137581e4
SHA256

b6d258163b5a65aecea2a1f3948ae9697f8242fc2ba4b5e2890e2cc41d0221c3
SHA512

bd178058ac8ee33e23af8eacb369f64c6d7fc283df3b20cd4114278a552cae94e12fbb16c4a60dd4ccf011f4b37eef29e68644d25c2ec9b18c58525b0d941c91
SSDEEP

1536:SqtK8hd8Wu8pI8Cd8hd8dQg0H//3oS3EGNkFUYfBCJisR+aeTH+WK/Lf1/hmnVSV:SpoT3E/FBBCJihm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
1556	msedge.exe
1556	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
2172	identity_helper.exe
2172	identity_helper.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4856 wrote to memory of 2432	4856	msedge.exe	82
PID 4856 wrote to memory of 2432	4856	msedge.exe	82
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 4816	4856	msedge.exe	83
PID 4856 wrote to memory of 1556	4856	msedge.exe	84
PID 4856 wrote to memory of 1556	4856	msedge.exe	84
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85
PID 4856 wrote to memory of 4312	4856	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4113313dc454061e4bdf2019edca692f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc840f46f8,0x7ffc840f4708,0x7ffc840f4718
  2⤵
  PID:2432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4696 /prefetch:1
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6020 /prefetch:1
  2⤵
  PID:2380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9908269911835405129,16241927117345956907,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3348 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2544

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:856

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
f1817d39f55452e8348063769abca833

SHA1
34a3e072e30cc6d31242c93415b74298cd0f18be

SHA256
efb1bcb68b71274a9fbda8f63fde4fc611d0845aa90adf6a08f25f58dea32f1d

SHA512
a001e271c50ec1923e85b4d7229ffa715da4ace5a1e4706ddc0a8b0a5e614e5d05def8316435fd99422c2735ee804520e72e46433c1d58c0ddd1cc15ecd5d4e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
ca0070aeed000209294d34a0743d3714

SHA1
27599ea53c15635470a013e97a4ff907708aa354

SHA256
3cd4e8933676f5813d21838452bb9eda8e72f12a0033a55fe4e774944d4b7def

SHA512
f694573fef17492d8f8a1669c88c8fa6b37af94d1f01a1204a1ce3d4d33fe1b2fdfda96c3f13bbf5a0682c9474b716a366af932b94d340e2a6048d14a635457b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
efbbdd340bab46ca2d677e7b15821f24

SHA1
31cd3115a682fecccaf3681ec17533407d6dcc14

SHA256
f47994b5cc5dede68a421f8c921fd281b085b196017f4ab085cccc3b05e3e204

SHA512
9d360d15077e293b035fcf9153f8deaea62927179102cfb3f5e79f7286fb8c170888cdce83539f6b6d3db333424bdd7de2ffcb354339ea0736699c4c1d9a3187

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
edfafa758dd74ec9abc3bf4943b0c31b

SHA1
0389e6cf2276f063b1ae792b0d6d1183c4cb0bcb

SHA256
61db91c29207acb6dce2bd80fbf1c89e6adbcf9abd649675961938ed47137f2f

SHA512
91449399adcd1d3c0b927101da2ef217415d701e0820bcc16fb7d93bb6595b04348cc638a4a5f5449df3bb5901d0b978b979df82f942cee7c85e5918479a72e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
87417b3b0d4d203c0d1493e333e7672b

SHA1
1a37df03cd95c98f0834b1414d760b3153d6b690

SHA256
c5f80ee3bd72a9d759b08561bff12e41c0a0af4b162daaef21bf425c0f8e495a

SHA512
80a48bb05a4c8849e58ef0a56d383fcef7b1800392c9bbea64da9c4805ff24925eedd2f5b2df5b4f1d60ee43f3e20f87f0754ae668e84b35328e5ffbf1a2887e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
6591d760791d975ae1f7dbd337037567

SHA1
a0a1f4e090f03864bb2f7726b97b0aacddfa9f61

SHA256
c10a67a84cebfad770d5cee765c9a846d4258a1d3242edbfb5ad7b957d694982

SHA512
8be892df266f73bc3e03c0e2d10dcfb9bacdfbb86c1d7ff0b367ff2001a3fbdf98b631ef0903ee7f8c015e8aa02e56a3dce081304b8e5967592518c9e26f7d02

Download Submit