b4132607e1e0243e866c65ce3b79cb180a3c57ba98a0c3d4b29a429ef01ee971

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02-10-2024 01:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

083e66287e06a6ce4d1ff3b615fe7a76_JaffaCakes118.html
Size

57KB
MD5

083e66287e06a6ce4d1ff3b615fe7a76
SHA1

06ab0908d17a75e4fa12ff599ddbab242afcbaee
SHA256

b4132607e1e0243e866c65ce3b79cb180a3c57ba98a0c3d4b29a429ef01ee971
SHA512

a559026847a904c7c0076ed348aea16c25a9f69ea1ba430f5e6b2e91e675dca613740dc5c7dd5cd80c8b39a44b37b5f7143a91a666440d4d1ead187ac06fd618
SSDEEP

1536:ijEQvK8OPHdsAlo2vgyHJv0owbd6zKD6CDK2RVrorrwpDK2RVy:ijnOPHdsd2vgyHJutDK2RVrorrwpDK2m

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2544	msedge.exe
2544	msedge.exe
1148	msedge.exe
1148	msedge.exe
1528	identity_helper.exe
1528	identity_helper.exe
6040	msedge.exe
6040	msedge.exe
6040	msedge.exe
6040	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1148 wrote to memory of 1888	1148	msedge.exe	82
PID 1148 wrote to memory of 1888	1148	msedge.exe	82
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 760	1148	msedge.exe	83
PID 1148 wrote to memory of 2544	1148	msedge.exe	84
PID 1148 wrote to memory of 2544	1148	msedge.exe	84
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85
PID 1148 wrote to memory of 2968	1148	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\083e66287e06a6ce4d1ff3b615fe7a76_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaf28c46f8,0x7ffaf28c4708,0x7ffaf28c4718
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3512 /prefetch:1
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6056 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6540 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2272,12682499022423330647,11076962040097968233,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1228

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
d9066a8c19714d45a782ef0ea10a99dd

SHA1
096e2ba6eab6fcbd67bb6b564edeb71d9c8b27f6

SHA256
bfd00cdf1b60001966e97483995238e30f4dfda53885ab1430bcb4c5e7aaa1d3

SHA512
27232eeb194c4a2b287351c5df8a5b04f28c87e4bffb46ae4fb43a896fbf7f53796ed00304b88473115c886b786fe62cfbb51fa825e409eaf6d68d2c03d4997c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
792B

MD5
ea35f5e915c0be8c0766c85ce5424218

SHA1
df8e61d7eeee6eef41641f2411a20919928d2f09

SHA256
e8be288eefa83cf96896ba26e7353a2b7d53ee28de497f28e9ca2f8ffdbb11e2

SHA512
1028528001fd735076970065fb8ec3f0fefe28686a8392a2a83f9f64be99ab8e74f92bdf1f636541e29293a3c640a1236805a36aef0e430d0596b64093b66680

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4982517a8514a3695efea18d1fc98696

SHA1
647fc40c6d911e9e4db79e33f3b408c7add09034

SHA256
6754d4f7ae55bb2010871e9ba336288fd8687f8f7bd39444ff5542040feec2d1

SHA512
47cca997c74f521fb80798f056b6413aa812e3d62b298a8906dc2f5410cbd63fa7a692ccbd28d55c82c7e2c7ddf5421b3a9a46de64461c29a2f9583533dedd6d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6d1626f9fb1fd9d5d5e469125a2ded86

SHA1
4e8a63d464577d299a72443661a80981f920402a

SHA256
3556873e3493ab7e4c9add64dfcb214dcbabca63cfb6f17fc406200ee2ba7089

SHA512
cb396dfd5c1ce10b442ab59e6037a7d9ab12e3ff50741635096d37f71a164564ab581851225c39cfaeaa5055bec563ab8ebd9a1f638a36770fe32c08fa2928fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b91e7c73aa2cbe9af6d1ab0fbdbc41b6

SHA1
d6c426f5c766f5a42ce1fc1ea18c499d7c1aee67

SHA256
0e0f0d64c679d3e21d9379136cdc66d2b3d22a3ac20ef92dda6176de25095cc2

SHA512
29e7ee424625aba776765fa0d109b63a69fd43ab7058cb34d4e601357e898fa669bdf31b4e7e8ad9c4430bfe172b8b234386cb6e39da2b5cc179c5c40ba3ab3f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5b2a26151b91852acb13d7d2209aa380

SHA1
13714c878936c026d556647c331f64c5816926c3

SHA256
0ac5144ad4946fbb33070a58250fb570660c8793d63ff5f268eed9dbef6a188c

SHA512
fc5d4f08b3a297d9f86130c11f68db5db994fca9c4665ed728d61a9ead1c2032e402014a0ad207446b7b46262a077d3730aa1d50b6e518076e9f832a4737ca82

Download Submit