14e688d0b20646ccfd6e6cec057814e7e82d7dbb1e773178c2680cd9b9cd7b28

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
04-07-2024 07:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

250cb80e6f399de5f7a2332fcf40434e_JaffaCakes118.html
Size

12KB
MD5

250cb80e6f399de5f7a2332fcf40434e
SHA1

49fed2407b505234e94871dfa364aefac10e265a
SHA256

14e688d0b20646ccfd6e6cec057814e7e82d7dbb1e773178c2680cd9b9cd7b28
SHA512

a7e8266ec4ea3b10f6b643742718939bcd78203a1053fcde153688a6fea20a556bd5c568c31f5b073e38b8219b5cb19374ac9c13ad3cec7dcaa0fd3e17154312
SSDEEP

384:mxdDbztJc7oYIZp/0VkEVvh2VQGvP7K6mV2EmihK8N3ZqH3rVaWsR2V:kcxKR49Ae5UlijbS

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2560	msedge.exe
2560	msedge.exe
2724	msedge.exe
2724	msedge.exe
4744	identity_helper.exe
4744	identity_helper.exe
648	msedge.exe
648	msedge.exe
648	msedge.exe
648	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2724 wrote to memory of 224	2724	msedge.exe	83
PID 2724 wrote to memory of 224	2724	msedge.exe	83
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 3836	2724	msedge.exe	84
PID 2724 wrote to memory of 2560	2724	msedge.exe	85
PID 2724 wrote to memory of 2560	2724	msedge.exe	85
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86
PID 2724 wrote to memory of 2320	2724	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\250cb80e6f399de5f7a2332fcf40434e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8d79046f8,0x7ff8d7904708,0x7ff8d7904718
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2952 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:1304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4224 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5540 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3632 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,12251618875174158209,18046277420756280472,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5392 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:648

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2616

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c5abc082d9d9307e797b7e89a2f755f4

SHA1
54c442690a8727f1d3453b6452198d3ec4ec13df

SHA256
a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716

SHA512
ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b4a74bc775caf3de7fc9cde3c30ce482

SHA1
c6ed3161390e5493f71182a6cb98d51c9063775d

SHA256
dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280

SHA512
55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
a94c5a0d2221d0507f68755de0d67ac4

SHA1
3b46b5e8c9267d4d06505a17d2b6991f123c38e8

SHA256
e272e165a26cddef29ad8470430d5c252153980a4eedeb3b6605b3bb03d9298e

SHA512
345c99413e4496bc4a2f246dd38359c94f59b8d1171f24b5cc80faf9fcf8558551ce666ac927f217e4763de92c7e0854e7fc7cf7bad8bddb08d3439c84ae93e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ef2750a78a1e2d43e1196f3f47bd6dd4

SHA1
492d4cd03ada3034e40ceb9f7998730c5cfba711

SHA256
2d2ca5f506c2c7767119c7572a8e7c1525b917f62288d58ff9a8c68793efaa8d

SHA512
1133bcdd679b2dcc26016daa2d95523807a36bd2eed1dc65b1948297a2fbf73a90ca041a59f52a383864e5c3e5d92b71be82bea318d7d67e9ea00318a2f52756

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cf49fedf6e3e58a5854d14807cf607bc

SHA1
78a8bbdde203c985c6a2c0f7d85cd103b7879ff7

SHA256
74aac4bc91c7ecea1f3519983cf5b62c40ba895073195180c0ae70e2e4926d05

SHA512
bd0c63b14473ef77cdb09229f1afdb572d9ba22c60300f9455c8337c08de872fd34fb9f83f3bb56ac47483afe29549a8bebe9a3e915a8625170a234cc56bfd3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9832fcd13277f0a19e2757e8549e80b4

SHA1
027ffa3d345d2ca0b91041c78b0e3ac8c1bd6547

SHA256
16adda62e5362f420f6557a19ae853609471d98debf3fd97f0a2e5f4a733520b

SHA512
e4d5be048984eb37cb82292fc934638b30ed8958276c6de1e0b45721bf2640f41ede784a4a6588fce77ff90d54754dae317afc6bf0e307d6739a5fb64c870b3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
70465590d231c85ca6595dc443986fe0

SHA1
bdf02ab8878583e440fba8a566364dbb4e3e81bc

SHA256
2f4be464b1b124de71531a6528109ca88edd3326a1f43cfcf81de87b440fac21

SHA512
4cee2f633556bd87195e9b851b644bb9ad89125ab7d33b5816e64a6be955b96d50bfefbb466e79ac2cd8fdecf8d86a3e7f047c64838a8ea4713c3653afc036f2

Download Submit