cfd03bd66b4f89ae9e2ce1482c4f034edaa5b71b3ecdb0e856181290c357c98d

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
23-05-2024 07:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6a2d0699a4f04d195b92e1243839676b_JaffaCakes118.html
Size

175KB
MD5

6a2d0699a4f04d195b92e1243839676b
SHA1

1b173314f030d503e5e4dd48b8269b6689140bf8
SHA256

cfd03bd66b4f89ae9e2ce1482c4f034edaa5b71b3ecdb0e856181290c357c98d
SHA512

eacc384672e2e8289b437e10e3918b5578bd81eb3042d07acaed678d027ddb9b984a38e6e6087b6e98a887ed0835bd70e80312a71275575aa351d631da7856f6
SSDEEP

1536:SqtK8hd8Wu8pI8Cd8hd8dQg0H//3oS3XGNkFbYfBCJiso+aeTH+WK/Lf1/hmnVSV:SpoT3X/FiBCJiWm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3128	msedge.exe
3128	msedge.exe
3456	msedge.exe
3456	msedge.exe
2744	identity_helper.exe
2744	identity_helper.exe
5796	msedge.exe
5796	msedge.exe
5796	msedge.exe
5796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3456 wrote to memory of 716	3456	msedge.exe	82
PID 3456 wrote to memory of 716	3456	msedge.exe	82
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 2332	3456	msedge.exe	83
PID 3456 wrote to memory of 3128	3456	msedge.exe	84
PID 3456 wrote to memory of 3128	3456	msedge.exe	84
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85
PID 3456 wrote to memory of 2068	3456	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6a2d0699a4f04d195b92e1243839676b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff61f746f8,0x7fff61f74708,0x7fff61f74718
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2868 /prefetch:8
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4040 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5840 /prefetch:1
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2104,9934009006027811074,1256594950531821802,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2672 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ac52e2503cc26baee4322f02f5b8d9c

SHA1
38e0cee911f5f2a24888a64780ffdf6fa72207c8

SHA256
f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

SHA512
7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b2a1398f937474c51a48b347387ee36a

SHA1
922a8567f09e68a04233e84e5919043034635949

SHA256
2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

SHA512
4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
1e4fc11ee12b2582e24410fa3af43c3c

SHA1
6b5768de15a1f0521d5e115db51c0da583e5fdce

SHA256
16d891cd2bb270377d7d88661ace18e2d6a6e273ca9559605d5cdb5ebfc2879d

SHA512
fe3a492d752ea3091b082327c344fbc19c9f3f09005cf8fdf27a314e05f648f553cf8a6b81404b67fad250f71c5a9bb77e3424bfe9c014712c26d4bf61a4dc26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
e9160f86befa0a236a49facf396ff117

SHA1
0cc7d6b56badb781db8567980148b0d068caa2a8

SHA256
dad827f56548ac244d0a034ff713a73f1603333f3fb83ded305d2804316101ce

SHA512
b926de07c644b2877fbee99945dc078fd02a9db0e29d289f4bb80b90adede8a49b9079eb5806b5d0e36fc5fdfadbf8af608dc94a0961e7df10ee8c44b0966c74

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d3790e8f38453d14b1faebe0804c04ad

SHA1
3ec2484af328a76ce0483d2f5addc116d0f99602

SHA256
93690ae0acd2aaecb01fe308c6676fa63aaf198887d1de5ef4bc5aef0cb583b2

SHA512
8f1539588818b6a00c2118d6293785ffa37e5f460543ba2202aaeed86f8b367a7a54585323a6a190849cecaa3fc9249eb9f443eb93e6a61630c129a598d3da7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
805bc81395267e1975d2ebe89254b6f0

SHA1
d775e6125c69c0b34eb6aeff40e8ab8f3066b866

SHA256
03113b5170346d87aafba57e3eac25d7a0428f4c6111d56cdf7ee91ebee67646

SHA512
c6eb4e8b35ead3140690c6004546e374a7d2fbdb40d842fdcbd55b9230c316b221adefc998e4700a316b6fc1ce98af0f9fbf3c2003cc79dd8e2a59a45724543e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d278d66bf39c96a50131f6fac2bd4605

SHA1
239330e65aed7aa06b54a21ab3713ad2aa370130

SHA256
272edd6c3cfbeeb6896b17977d0aa82b19cb73b7221a69d6c8c7ef55f00ad4c8

SHA512
f4f74972c4c6deacddd1b7a60318be03f5e31794702cc7f4ec6d5cc8e5b2509c7b17bde3cab51d9cdfb58c8dd0cc5b9088fa4e6c0eed9e6a897b00fbb8634591

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
084eb8e06a3b98dc89ba51b0b8e459a3

SHA1
68b07f24ae50cf9877a295d60b375324debb51d8

SHA256
510b2282f838b7cbe712deda6d72b30fcdb9b84de38d54a32cf97581fe300175

SHA512
9c32c2158000469c4c1c1aeedecc3537e042cb27b06051faa6f874a1f1e097598f762775fd2050799ecd96fb2e839436d774b3dbce65e58321eb01c8556f0cf6

Download Submit