081b37b6f1b970811d98de7bf8465fab29ef3c5695e6130446194541c82ff107

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
13/05/2024, 11:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3f33f4a47f03e8430e3a8ee647a10d95_JaffaCakes118.html
Size

36KB
MD5

3f33f4a47f03e8430e3a8ee647a10d95
SHA1

a2b753c859f301726ac0fa5ee9bcc67a251b9b79
SHA256

081b37b6f1b970811d98de7bf8465fab29ef3c5695e6130446194541c82ff107
SHA512

82daa7548d633f09443071cd3db5a50d3913e8bfcc4dbe7a0dfb631de523cb324bf404557812912402f80d2007d6df86026c88f2c2304d60ee08670dbeb6e207
SSDEEP

768:hLwwbKOESv3nZlNroS3m4LFb3Wnf/uUXrTlks+y4/zkMDE4scR2+v4jS3tSI:hLzbKOESv3nZlNroS3m4LFb3Wnf/uUX8

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3564	msedge.exe
3564	msedge.exe
1548	msedge.exe
1548	msedge.exe
4368	identity_helper.exe
4368	identity_helper.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe
3752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe
1548	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1548 wrote to memory of 432	1548	msedge.exe	80
PID 1548 wrote to memory of 432	1548	msedge.exe	80
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 2072	1548	msedge.exe	81
PID 1548 wrote to memory of 3564	1548	msedge.exe	82
PID 1548 wrote to memory of 3564	1548	msedge.exe	82
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83
PID 1548 wrote to memory of 4416	1548	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3f33f4a47f03e8430e3a8ee647a10d95_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa632546f8,0x7ffa63254708,0x7ffa63254718
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2588 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5256 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3724 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2996 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:2032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4020 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,10520973633833119062,17990764756957713873,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5460 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3000

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56641592f6e69f5f5fb06f2319384490

SHA1
6a86be42e2c6d26b7830ad9f4e2627995fd91069

SHA256
02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455

SHA512
c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
612a6c4247ef652299b376221c984213

SHA1
d306f3b16bde39708aa862aee372345feb559750

SHA256
9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a

SHA512
34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
96af9b1902c43a2678d4730bb13d46a8

SHA1
d9c9cd1655a572f4cc4dad52ee2bd359543d39c0

SHA256
b74dd8022820702f168dc18f3a53d23a4bf26f09de99c55856ecc522c148b0a5

SHA512
eb99e6350018ea476122ec9a56b5d44c7985bcaa0201481d6e765295e3c9ca178fb75e89b94c57c3065f2f64a804fbc6adaf4d1643bb4237bfde81bd4dacee2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
621B

MD5
1e5c6782d6bbea125c7a7b7ca448cf78

SHA1
1c8f130c06331c0bc773c7c7ae914fd3ba748898

SHA256
ea1ea1402c63277925cdde55ac8ddc6abc09ade921bcc5d24bbc21901f5407ec

SHA512
c7b8b6230f1ed03f0bc29569d53521b3d83b24e235706e727b9c32a0567829e94b8c9234af36522ec2d17b0fac7fdafc645f0e10328319046837a760d326412d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0ce76b9ff1a2bd2fbcc8d85c1decfbc6

SHA1
fb8e26e9ba8e5fd7df181774cc4c1c88cf07b36d

SHA256
188abf6dfac68b58df423ece97a71b2a8e28f811602c50f05709762d2dd9ca0b

SHA512
9edfc30441a4d50cca2e3ba78d1e8b1f438732f51b984ec59069ef11ec9f4e040161c7807eeb058631aae79d214de8074d58afd32946d41202c7925771f97204

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a60145ea51442c3e1583e7c92722339b

SHA1
a4e9bb38b5fd5616752269a558e61ad887cd2d48

SHA256
b3bd95fb1aa92e8dbf85c3f94357def7ef4185e7e940a1d126ebca1de157c527

SHA512
4989bc7d9c2969bc79e9b5af7480adf77d087f64dbc42022666a74b827f8c35cdc342ab36ef67ff19f7c15cf9a0a5d32df94b309a92de68595afa9aed333cefa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
93cdbe64f55c712b66f3e25267ccf0b7

SHA1
410f82fa0352621c2a368e23d1477057006e3617

SHA256
6214eaaebc8f6093b43d065c1d8a27039c5e90172a5d5ff59024ce9c4b6e8985

SHA512
33d10e0cd53008c94e2e289300ad6277773b17b21160ef670a0ffb68bab2cad0f36571df79b402535135b6e9f63c7f6b71f4280aa1614bfd99ba43bc9ee6a14a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
538B

MD5
dc17521f66a821a85779aca5d3d9bd1e

SHA1
659566023e8de9922434254196fee1fd2c4ec1ec

SHA256
43a709e3a50c13f4db3429d14b1de8f8fbf02f05d83131d7557f3e8b90c18895

SHA512
a73e83e14029b70321d7d51f57daf038a53cf31475b553d8cba85ee960765b23fa00e20e1e3f0e5d6512372137cc3d7ce29746ceee131a75bce3406a7f6d47a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d0bd.TMP

Filesize
203B

MD5
b094cc4adf1746fed71d1987b268c967

SHA1
9f4b34ca7c0239ceb22c4b21548ade6f826b700b

SHA256
c96d44094bee37fc571fbf107b829b64fb6d24800c5b7735da69128962d62257

SHA512
d3686484252a28b3a8c837b898593ac5970179b81ac90a67d75d9fd41ae97c849ad0989f87873724f2642f4f9d98bab986d3624f92fba229e30a59d7dbf5594b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
88f64203c1e5bcf31a2be75d8d46bcbb

SHA1
19f5f474d58f321055b5a8c237f8ae6261f95daa

SHA256
92959fb772812e790f80ba7ce2518ad1e0d9de9af604a69a9abe8a05d0e82df1

SHA512
8124ff884ff61e689cff61d4148b7ced1decd226f492f7573cfb4d0f7a0edd62204dc16cfc32815115391e7a4897c507f0f2e76396a82ef8673e45967fb9651a

Download Submit