e4197d61b315a8cf5764ffff91f68b513344d68a491ba55cec9cf7cce4931d2c

Analysis

max time kernel
146s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18-04-2024 20:55

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f8ba28ad80c62d7baab8b1d17f83587a_JaffaCakes118.html
Size

93KB
MD5

f8ba28ad80c62d7baab8b1d17f83587a
SHA1

3539f9b1bf773ae20dd7de3098850b9fe40a5798
SHA256

e4197d61b315a8cf5764ffff91f68b513344d68a491ba55cec9cf7cce4931d2c
SHA512

8f282b2ddddaab00f4e1e2da684053471d65525c71091a2629d431d1094a330a6cd5f039de11ee1e806067d555e4c2882c20df72444d11abb47a3b4c015c644a
SSDEEP

768:1MTceMFkHkq+MSYNp5XpynnekNGE6RRzQBuMrUwb5NlRlZQ5W6kj4dEB:GTceMFkHkqvSqbYnkMrUwb5YW6kj4+B

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
760	msedge.exe
760	msedge.exe
1948	msedge.exe
1948	msedge.exe
4908	identity_helper.exe
4908	identity_helper.exe
1916	msedge.exe
1916	msedge.exe
1916	msedge.exe
1916	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe
1948	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1948 wrote to memory of 2340	1948	msedge.exe	82
PID 1948 wrote to memory of 2340	1948	msedge.exe	82
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 1964	1948	msedge.exe	84
PID 1948 wrote to memory of 760	1948	msedge.exe	85
PID 1948 wrote to memory of 760	1948	msedge.exe	85
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86
PID 1948 wrote to memory of 1520	1948	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f8ba28ad80c62d7baab8b1d17f83587a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb346f46f8,0x7ffb346f4708,0x7ffb346f4718
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2684 /prefetch:8
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6192 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6476 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,14071162260089699782,8724988855999697079,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5752 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1916

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2888

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
846ce533b9e20979bf1857f1afb61925

SHA1
4c6726618d10805940dba5e6cf849448b552bf68

SHA256
b81574d678f49d36d874dc062a1291092ab94164b92f7e30d42d9c61cc0e77c3

SHA512
8fb228fae89f063159dabc93871db205d836bdb4ec8f54a2f642bd0b1ac531eea0c21234a8ca75a0ae9a008d2399a9bf20a481f5d6a6eab53a533cd03aeaaa2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
104aab1e178489256a1425b28119ec93

SHA1
0bcf8ad28df672c618cb832ba8de8f85bd858a6c

SHA256
b92c19f079ef5948cb58654ce76f582a480a82cddc5083764ed7f1eac27b8d01

SHA512
b4f930f87eb86497672f32eb7cc77548d8afb09ad9fdba0508f368d5710e3a75c44b1fd9f96c98c2f0bd08deb4afde28330b11cf23e456c92cc509d28677d2cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
6c6bf8ee2d3b6ba2acf9bcedc941fceb

SHA1
b67246a7833b2018c40472223d69274c1ea25c4c

SHA256
d166d1e5cd9f8f38c5f3ae6071a29db471fd4ed0b555dcd4b033979cb190e12e

SHA512
75f460e98bdc13f0425566c39092690116babf164550906de9e219b60603cbba63d7b6bbe88986122a50e59b78d9c45896d91d7ad4a161d10937499a0b03adf0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1fb82034b4c8d55665695ec758fba743

SHA1
f8a57d0509491f02c2f64b41889f207ef94b406b

SHA256
8847f70fb87114ddcec640f71328aec7d3907f80ca2edc355f10c80dba737cdd

SHA512
d2e2512bb2c2a575a14cfc93f761888d51f5787276d4ae09a46a9513f8a68d4aff8880b226141544c536099bdb2ae5846ca11cf5fa6b03e2a986679aa6ac8e4c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
98f9b548ec610fb1ae67baccea8fcf52

SHA1
c67491771a350e290d6dfd4181c00791aa4415ea

SHA256
bc3f444ae0e11417ba45b64a665654841519ec250e5c448ab320f3b41687f8d9

SHA512
88c697f3d7e6171552cfc6a403f27f7b4c4adb381c7d95148073d12c20e584f2dcb4dff2a386f6c39b2ebde486d1f5c2c401fb6bd5ffb8bdbdd19eb2302d9620

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e0478a8ac3fd43e9281688d13e12e20b

SHA1
79ea3b2995ed81da478567687476326032224603

SHA256
77d5266f5a3facf901fdf83af57e1d47eb9afe873b3d9ffa3a22065b52c1ba1c

SHA512
b5c28812706662736caaca0ed72c4ab66c98c7aaaac3fef846ad3d78bd4bad66d07e57f59a8842f44f74e3c7a27815eff5446be8b611f1aac1aaf642168f1798

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
4dbf7c8491a1593f9594ee9e25e3ecda

SHA1
fa0a4ec5a4af3ed028f192aa6d3de297d7ba425e

SHA256
7f575c8b7f3bf36336558aeb33674d1d86fccc3c5888500a2151486feac2a4c1

SHA512
731af31bf7bb90e9d66cc75c162e66727a44f589e17a9121bc65dd844c833ebeb25862d6dcd2911808b8131c3d1945da4b818e2713061841e9945ac727ae9daa

Download Submit