3e9b09ecf554fc122f598c6fd9b19f36f9e4f0e9c62ebf9ce6c9e9b75f6361b3

Analysis

max time kernel
145s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 13:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

72223fb9814ffa8867a4e84adb2c1b10_JaffaCakes118.html
Size

105KB
MD5

72223fb9814ffa8867a4e84adb2c1b10
SHA1

779f7208d6848a8b7eeb6a82ea391e03789269ec
SHA256

3e9b09ecf554fc122f598c6fd9b19f36f9e4f0e9c62ebf9ce6c9e9b75f6361b3
SHA512

a12fd1fe7ac6a13b85342a7f1274839c7df87a0f6acbd514928a2c3902f15ad261b04c7aed633c9f71f4cffc8667a9dc24a043107913d3314896a4af4bd612aa
SSDEEP

3072:R96/TUcuUFYa6rkqAtKjfDkVCj7+grPD005K7oH:R/UQrBugrwK

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2404	msedge.exe
2404	msedge.exe
4560	msedge.exe
4560	msedge.exe
4076	identity_helper.exe
4076	identity_helper.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe
3336	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe
4560	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4560 wrote to memory of 3412	4560	msedge.exe	82
PID 4560 wrote to memory of 3412	4560	msedge.exe	82
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 1140	4560	msedge.exe	83
PID 4560 wrote to memory of 2404	4560	msedge.exe	84
PID 4560 wrote to memory of 2404	4560	msedge.exe	84
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85
PID 4560 wrote to memory of 732	4560	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\72223fb9814ffa8867a4e84adb2c1b10_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd5e2e46f8,0x7ffd5e2e4708,0x7ffd5e2e4718
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2204 /prefetch:2
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5732 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2020 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2088 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,14137463328517397496,17162227516658527300,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1676 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3336

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:8

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
d16212c059f0e4fcdf0b6e3211f293a1

SHA1
e8691bbedcd0065c4ba05648c5f998383d2a2640

SHA256
8dd811ef19968938319ac156af670f56469689ee12b588886838bc9d762f722a

SHA512
b4be538ac31a293ae1173862da706729784309ab9f1f3c723d9265cc572e1a14d17c122b0d2928f38b53159c160697b19d66e0afe41bd4f444f39111acd360e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
968B

MD5
4cd0d604065c09d621a1bb8ed3f1933e

SHA1
a41bbf78f5a96b00b6fdfb12676fcd2e19dd4257

SHA256
a48292a48bd2f26969beb061d81213bb7db33d594a85ab75895ba96587960bb7

SHA512
f24084f27c17a86982eb6f71642beca12d42c8ff425c6fe8b445e40b071c80be4d198af652b2517db29a0cf9d2b6386ebf00cc74f26213f8f46d4eb28de2075a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
968B

MD5
f5c208c7aefbbb752548fe6854e205f2

SHA1
ba8b32417859c94ef629b37ad29070edf0e0ae8e

SHA256
b3b6e5ba6a4edcdc6a963acd2383d06add529bb0039d29cd78365899598b2f0d

SHA512
79f4f60c5810225b6e7d4ac7edd646d0fa768952d8f11f5933901e08e20e5cdbd82a170638d3446ba80f1edf5368ffd00b09a83b32b48d7c4f111e322d8a5e77

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
bddbdb06617e0897d01704b5c814bd5d

SHA1
3e6e610d3246c6a0028369068395bdca3ed4f8a5

SHA256
e9963dd80c9473aac4d876c0f8a9e5df232b083ee6a6b1a69a1fdd1c36eaf139

SHA512
eb6bedd56d2ad0ff4d62bfb66ae42c8149bf70462c9496ac6a1866af9e34e6f24e1aef5649336d716e5b05d9c178a3bced2a325416fba5473a4c5ef1b1f715ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
97daced3cf9b123b99c04251682e17a7

SHA1
9dd076d1e1fe731db05f43e6f6de55a4c07f9cef

SHA256
633decae02f59e9eceef81e8e8ddc427f4493fffc07be4173e198e95e0d36c5d

SHA512
08ca2c27ba912e01faa90ecdd93996b7557ca89393a545a5015e8c3b70f387dcc398db6c27928fd0df153d66783aed0974c3c913dae407126ba51f26bae5e7d8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
184acb4035ae77bbba8d7e2e447db2f5

SHA1
fd46eb58f74c54476ca11be0e9d57a378abf45e1

SHA256
11fb7ca8bb434635508a779dab52ce0c50d3b05470df324a99b3aa5ff7c733d8

SHA512
4ff0b6eb5de3aa05eaa8a47754bade348e200e7a44d81b2d17b214507e62f8a2e2ab6f730fd5edfb28b6bff226263936547fc764d342b1f53e6876f239db0291

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a63c90c9236c8fce62dbaadc1e68ce27

SHA1
ce4cc868963adf417022af032ed7a51c539359a6

SHA256
f7cc760c957229ad80c33ab01eabe44d8b729e7bf5ca2f06413c52abdaa0ba72

SHA512
e7d9ac6440b4fa09dad9dd0f896a56ae73150ea42ebde4389a59349ab35986a2eb5fbfd47901fa360fa90a160a57c42cd4fe9e8e1908b9ced1eeabf7c217b0b2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
31fbfd3b1bf25ce36fa809cfaa23bb6b

SHA1
b9045e9f8244ce505d719aed852a1a6e2181d223

SHA256
5954cb322f5c2610434cf7e9d21cdda6d99354b309bb8a1b53031ccf3b5ca931

SHA512
b9743e019b9b465eacf3bf05eff72ff809eb5aa80a4a248a5b9ad58f77eb0f778bd1c3bcf1c7886182d976e67d243c6366a7cbff9620da185b608b8c843344e6

Download Submit