e738a4f89211e827beeb92818f5c357b84593bf195b814cfa53ce0cf12df7b0a

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2024 05:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a838398a52de4d8b584631e277529429_JaffaCakes118.html
Size

175KB
MD5

a838398a52de4d8b584631e277529429
SHA1

e7bdf258c74c48f948e0fed527246b933bfd0b55
SHA256

e738a4f89211e827beeb92818f5c357b84593bf195b814cfa53ce0cf12df7b0a
SHA512

8b8ded980d23d46463943d4d98783b2edd6ebd0f8c6a89b89cd8a1ba89b58c103c7987dfdf1769a69575e5ff819070855fec208c6947b33f6dc0eb19c5ec6e71
SSDEEP

1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS3yGNkFSYfBCJisR+aeTH+WK/Lf1/hmnVSV:SOoT3y/FjBCJiVm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1216	msedge.exe
1216	msedge.exe
3480	msedge.exe
3480	msedge.exe
1900	identity_helper.exe
1900	identity_helper.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe
1156	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe
3480	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3480 wrote to memory of 4280	3480	msedge.exe	82
PID 3480 wrote to memory of 4280	3480	msedge.exe	82
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 3040	3480	msedge.exe	84
PID 3480 wrote to memory of 1216	3480	msedge.exe	85
PID 3480 wrote to memory of 1216	3480	msedge.exe	85
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86
PID 3480 wrote to memory of 4852	3480	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a838398a52de4d8b584631e277529429_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb29fd46f8,0x7ffb29fd4708,0x7ffb29fd4718
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4008 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  PID:756
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,2755310928706206329,2701424947833063054,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1156

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3092

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3100

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4576

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dabfafd78687947a9de64dd5b776d25f

SHA1
16084c74980dbad713f9d332091985808b436dea

SHA256
c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201

SHA512
dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c39b3aa574c0c938c80eb263bb450311

SHA1
f4d11275b63f4f906be7a55ec6ca050c62c18c88

SHA256
66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c

SHA512
eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
7c7fa24ed6cc54b392507550e8948da8

SHA1
1342c34e3c3718655e2e25a630e979713ec24b25

SHA256
dc1d880470d8d95809351f820e20cae95c3ffc864ad0ee1275a3cf9d7fc10c7d

SHA512
f13300612eb7a5a0b3cc75173c2573d9d763dcb14602e94388356a5bd1062089655a2ed91e40aca04fd41ed397b12f4ad0227299cf2c2bd8542666512bcc41e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
574363215efff8c8be69dcdf556da3f9

SHA1
5ae766049abe1149ffa9c7699ff4efe792acbd1b

SHA256
d92e7df95220c847a60e1db6df9533b54fc53c7179e3d22ba7ef76c6d5388ad6

SHA512
0223997599e14f8cf69c70623750b05274c9763aec0604d5e7b35573ffa5254d77c86fc126e7b28f201914435307184e6210861f168fac5213e6609ebc2f11cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f2c90f6a12b0d7b3edf97e79fc3b713e

SHA1
76af0790b5924808df6341724020988e5db1a957

SHA256
e4bc7bc6bfcc0b1041ffbf8ea03d9aded334625058850244604db0d72f3a07bb

SHA512
a8e0632edc07f8267a5fd9f45a420ccc36be9a50b993e7cfed3628bef9c54f522edc09f6671e16a838ee190b048131cfc47e239840bd554191b22923297c4a9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2f1d9b1a82361de088aba4ce78a9e38d

SHA1
67aa5ce82b627214fc7542804c4aacda078c606b

SHA256
72043f46eaab762b07338a4ada6cf5035909a3b5be2b3c1951f2c1e1067d4f81

SHA512
0eb25bc4563328a9f41777c81ac433bd963ee50cd5e0c5e4df8b023f8127d384c33180f5dc0b91ca5c23e75ee683c0b40e27b17487b742c02ca319775c81458f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3eff4d840b5d831e543e3e6f1b802927

SHA1
6f4570e29cd8e8c422125d0e740072b1668034b7

SHA256
b47fe795b61ef21b592708495c16ed529671b282df754f7dd640a0145332221c

SHA512
4f3940a064c53429c048d271b6ef46bd872996bd21fb1cf29e083690aba0f8c9da59cfdcea998f397b79c7bc0a2acd66225f843c70c61f9142152b62c2f9ded6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
877b436b7777a67d611fbd6fc571798d

SHA1
ef036ba8dd60aad03a982d3808f8e8f4c7691e25

SHA256
8900778fe9c0e925ad3f5e2da87666f579644f8bfa4c041ced37f19651561532

SHA512
2fbe36221c30892608d9f867c2cdfbc61b70c02bc135d15be688ea99288d91fd6f613426de417a8e697cfc520230cca56a10426e4dde1e9e686fa63ef0f76273

Download Submit