5c3be59eda216343c7075fd9151dfbe3d1f4a6b96246a971b505103dad0fc22d

Analysis

max time kernel
149s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22-08-2024 05:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b682181391396f06375aae5f6e37b3f2_JaffaCakes118.html
Size

57KB
MD5

b682181391396f06375aae5f6e37b3f2
SHA1

7de19e323cbaa5d840fb47fa5a34516691fda391
SHA256

5c3be59eda216343c7075fd9151dfbe3d1f4a6b96246a971b505103dad0fc22d
SHA512

3f6faf4f1c46b9b98d469f7bacae95585d432bd8cb74a40d4502d20cea9d6e10bfe3043a82b396f62a2c40975ce0473523478377d1c2ef34b9a75aa7eca782fb
SSDEEP

1536:ijEQvK8OPHdsAeo2vgyHJv0owbd6zKD6CDK2RVroDowpDK2RVy:ijnOPHdsK2vgyHJutDK2RVroDowpDK2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1544	msedge.exe
1544	msedge.exe
1980	msedge.exe
1980	msedge.exe
1848	identity_helper.exe
1848	identity_helper.exe
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe
6076	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe
1980	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1980 wrote to memory of 4496	1980	msedge.exe	84
PID 1980 wrote to memory of 4496	1980	msedge.exe	84
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 4532	1980	msedge.exe	85
PID 1980 wrote to memory of 1544	1980	msedge.exe	86
PID 1980 wrote to memory of 1544	1980	msedge.exe	86
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87
PID 1980 wrote to memory of 3580	1980	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b682181391396f06375aae5f6e37b3f2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff97c7046f8,0x7ff97c704708,0x7ff97c704718
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:1776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15172696186687402593,15415374423867717870,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1296 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6076

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1508

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1724

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
c5c1818e3e445297e76c4f4d27ac97d5

SHA1
2e2c00a2dea5b7f48d758458aa6239e6b313b6f8

SHA256
3060f8795d86c7bb5a8b499414650ff274b4900ebcde4c416adc8e71bd89d0d5

SHA512
3a8de45e9dc6c45e7298820834f92973dc94cd46bec3140eedfabd2555251526d3a76cfd2d10ea418233ad8cdf8942b06795d85ad59263e149b2222e380f6390

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
840B

MD5
4829439bf2c475e1e840bfd5f0f72cd5

SHA1
66d8260dc1e2eece568c2a163768ea8c58fb6d45

SHA256
ae90392c3ac060371afb35dee3f6cf63220ba478396605944301b07f9d5ea484

SHA512
435550ca1a773c731c2ec96f73bb60ae53ea91c36c16ae377d127c379ddc456be2309720d6c5e253f17a66480f2cb1644c30b5b5d7b28188d993744e667c9d49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
626bb4c39d0c088110e7dcf338f92dda

SHA1
7bc45d9ec041f46d3f81d68e5adcb334a887542b

SHA256
1c044137e3cba995042023f34816813958d5d921577f31855357b2f72bf2b5a3

SHA512
35e72d5ea101b07bdf82083fac4794bebb4e6054aad1bcf7d833af6a0eb947465ac4b8f4c6cd2415fb994914062ce67b4a0437f4ad776cf0ca9b5400d674a696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7e46c203b41d755fa8d5b163f75a2dc0

SHA1
838480bee3ad5e299362fc506189df6ff54872f6

SHA256
d99a3a7fe7a25c84a020b969ba9d868f409e9abf241fbad59d1eb5f506ef6bd7

SHA512
5fdfa948d96fb40a7fe26b414dede28fb5f9668c8f72a31add0f10fb93b94e4f52b2304c004c23106d6e96350f88f60f0b1e5a9e8fd9f987ff1bd6562a3b18e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
62594c492576ef7ab7b191abad28fa44

SHA1
5848cd3446404f2a373f4df39a7d7852e8ad61e7

SHA256
2293c73d9f73b460ae265178206511776f4255a56d21ac36872c36beb222a945

SHA512
d60d59bffa52385a9deaa95bee47cde832f2fb1e0ca384388c160636ed56f954160d659618ba94376fcbb0dda86c26f944a7acbda5dbdb72029e60cd86cb22c1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
3ba02a239da8c8becca78fe9c98afa0a

SHA1
e6982f41f18fff80b78865717c748599b25b912a

SHA256
5ee70744521971546b213bac241912a3b4402a922c0d08d04ec53d4957b537cd

SHA512
b6b3429f6de407e9bd5d0965d90e3caf96279c6aef9cb54b098a3e40f749b8538109a488bf5baa9b124047391c924c40490bff249eba33a8db65949b3c8a876d

Download Submit