8ff586a7e3afe88a876a2c4f4cb5159a86aa15ae4fdccbc1616af17833b3f68a

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 01:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

61a6657f90c61484ada38a8b723fe24e_JaffaCakes118.html
Size

46KB
MD5

61a6657f90c61484ada38a8b723fe24e
SHA1

2d95aa32a0f9d281dbf3df9305f5f56e9d62abad
SHA256

8ff586a7e3afe88a876a2c4f4cb5159a86aa15ae4fdccbc1616af17833b3f68a
SHA512

5b7db1439f9aa869d3605b36e0dadbcf43354abe558b2a9a56cc5329330894d9b2e7a81c6860f66c218417b46fd137deecda33fd65442d6c2ba7db7f7c72edd4
SSDEEP

768:nkclux9o7Lq5SpK2n7nMmpj94cKmxof0lRc2ScxoBpS:nkclOWW4pK2QmpjU0lRWS

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4228	msedge.exe
4228	msedge.exe
4348	identity_helper.exe
4348	identity_helper.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 2752	4228	msedge.exe	83
PID 4228 wrote to memory of 2752	4228	msedge.exe	83
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4628	4228	msedge.exe	84
PID 4228 wrote to memory of 4856	4228	msedge.exe	85
PID 4228 wrote to memory of 4856	4228	msedge.exe	85
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86
PID 4228 wrote to memory of 4828	4228	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\61a6657f90c61484ada38a8b723fe24e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe6b4b46f8,0x7ffe6b4b4708,0x7ffe6b4b4718
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1972 /prefetch:2
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2596 /prefetch:1
  2⤵
  PID:2392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3076 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1964,7404835366899988647,10852835457402009341,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6160 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3600

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3888

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
bfe7178bfb9c7542f324b47612f56ae3

SHA1
4e165f2409fb3e7598854fec97fa19715e8f73fd

SHA256
6e8bff87e655dddc502ff23891c4c04bf4ae75da1767b5a8c906ac1aa30e06c5

SHA512
708706e9fa500a790b1638c385bd5806c5d95a1b6a50f4c83bfe85440a6569ca764987d88236a96bd01e20d4c26c9f6f8ec4786a43214d46b7f9d1a30706a1d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
925B

MD5
97301eb1b9b721b5b6e73dd0b9b974cd

SHA1
6d352967742a04773d158ecc573f474f85ebd54e

SHA256
f0934da215d1e7f2ed0f5d3c64ddb29f9c7e57c7496d47d59d7093c9703546d5

SHA512
8acccf5a5cde1ee4fd1cfa57ba165354cacf41b0e5695a75e098b19f22ad8b1a23d12282741dc81b2daa6078e84f3f75b02aa4716dc6d1ca5ecd159bd4b5629f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
339f1abc0a1f40c3c5a605ab8641add1

SHA1
715f2c1bc98921aa3f7957661974d72e9cf49ca2

SHA256
f27b3be900207af554ef67f6be56d592c325763885217a67d04be4a959e81a9e

SHA512
11da895649430b2970d5246bb14daf34d2dd0d5b384999d2f7857c54cd00c0ebad0082c1d6f49bfe129a698cecc8ed0cf31363c9005ee578077a78a4a05fe6b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
62c67b26d1581e1b8635fae82c17eaef

SHA1
2d6b073475b1b846d39934697277d5546ed1eacb

SHA256
381fc4c98fe3350f2bfec7dba67a7de6c6d8f40dceb588efb3acae152da6aef8

SHA512
ad51d4b185eb607936c1ec4cd2fb76adf2e3325fa82e57e652220b2e046a1cc86196e0372f9357db8cd879b2e5b474afd26979e332493ff34ad3b9afe8b81bf1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
06f104554859ec4167a1779794f8c9ed

SHA1
e5951b134b80924d3a65aef15e26483118293f6c

SHA256
e21bb521d879e85a980e5bf7a2fab6059f8fbf78ce0310380673799a899859cb

SHA512
0a0d70b9758d8bdd5165cc7d44305375696b31136da42566760d931db69d0e4753f602057a2261c8d76446b2e86ba9875ef52b7eaa226d1d4d1eae70c2019240

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f783536b8388d6de7890227862d57c77

SHA1
c1b829558e85dc83b88d627450da3be82c0d0374

SHA256
8aef77896569c746b8b48614105a71c3f95185bba6930b23ae695724efff5004

SHA512
304cbf5f19ede534323f03f9743f7397ec5faadd1b7b66115d1459543b5d0b2929f416457bccbd6daf348d606e5896e0cc458606da1c3f3a1a58a8985e49d3ae

Download Submit