9b854ae1cd55f4f753ce27335fc004ccd70408b46fef9577fd284853bb4e096d

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 17:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8b4383c11e48d7d6d795d166aeed810a_JaffaCakes118.html
Size

175KB
MD5

8b4383c11e48d7d6d795d166aeed810a
SHA1

eaf5ab0b13f8fc97a15ff7ce48aa5c97514aee92
SHA256

9b854ae1cd55f4f753ce27335fc004ccd70408b46fef9577fd284853bb4e096d
SHA512

727537c82a821aa38fae5ba228f449c5ad5ef1aafbd18b14ddea079e016d049da68b15dafbcee250406f75ec7677d341e2c3ea2b49836917d33481189146d899
SSDEEP

1536:Sqt58hd8Wu8pI8Cd8hd8dQg0H//3oS3YGNkFzYfBCJisU+aeTH+WK/Lf1/hmnVSV:SOoT3Y/FKBCJiCm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3024	msedge.exe
3024	msedge.exe
3212	msedge.exe
3212	msedge.exe
1580	identity_helper.exe
1580	identity_helper.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe
5308	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3212 wrote to memory of 2824	3212	msedge.exe	83
PID 3212 wrote to memory of 2824	3212	msedge.exe	83
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 4248	3212	msedge.exe	84
PID 3212 wrote to memory of 3024	3212	msedge.exe	85
PID 3212 wrote to memory of 3024	3212	msedge.exe	85
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86
PID 3212 wrote to memory of 2812	3212	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8b4383c11e48d7d6d795d166aeed810a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffea6ed46f8,0x7ffea6ed4708,0x7ffea6ed4718
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4752 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4752 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,11642991567130543103,12685413070152938318,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1700 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5308

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4544

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
a9c93ae5b07910af5b3556979a893b90

SHA1
70f76f6ecb47af85e694df66e1ee92a1262f78f3

SHA256
2bca3ec79cf21ebc1ac7f211b43c7183a5dd84de6e92d0b103289c88bfcee23d

SHA512
2a66d4df6e0a31bd6ed1ddc0dc4b09f6548d4530d6e5e9e5f155e32b9681d99ea6301b625efb64a402149b754724ef214aaa33a7f2e29b2382b74133a182371a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
156f5ed1e038443239b2358956479283

SHA1
5ac5cd56301cf59169d65b80d2f65e166931c09d

SHA256
d6797480ce9a62d70943249125d58a2c96b753378fdc7dbbd8336435ac9b9b55

SHA512
657aefe34051dfc1e72f94dd9df06bea23af95eac32889890155292588fd490630928f1342594aadb4351ff8a5584f472fc8ac5367019c9406190d7c002a7697

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
c3097237aa2637dc3e67216e2341a11e

SHA1
c48d4498d45af153efd649ceb8045d5575119a17

SHA256
42869f460b2a72540c7950f63ed850e7b3c7cca3ae291f93693b256237de5f5d

SHA512
2d9361743371a8a5b4aa275cb0e23215fa2e2ec634b29759ebed335773b512568b6132fb4a44f6a474d6ba2bf154f9a72d0279ac95192e2e6ace1a16cc7f5fbb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b1d98b1d3650e1aeafd4c18cfd40c4ea

SHA1
541be8a3766c24c1bdc6502f19619923861c4e45

SHA256
172815cdbb1ec71e0b3de1442289fe6e5738515e7da9e573a3a584656d4eff89

SHA512
be692ecc3003608222f92770c2dacdf2d9c3bc7d1f7c5d60035d4915fd3ead3052c4ade52b00131abf028c042cf95b5d26968f0eaa8c892c001f094422018a73

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
76b6b972d859583c31dd79334d0d8555

SHA1
407bb595ecaa1fab2d06babe31e05633fd133432

SHA256
1ef687ba737955f6805660057b0cdca01753e9837fe5e321aba0307557a56300

SHA512
ea97427ed7ad17e6a597b56f575d56dd2cb8c34041fd4e79e3fc203a0be5d497a84b210347926a0a66b3a07fee0225890d0d9a3ed7b2f97cdd9f4cd80e546364

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
2268056e84f0e3a38cfedd399bd4a954

SHA1
7db018e476c23b26fe50cc74a308c008823985b5

SHA256
ebf3531d04d1aa6d759753db40c4a8d5e24817c60d6af4d8c6dabf851cff882f

SHA512
79bf9c0cfc5f579e225a93d7e6f029d2b083896907d59edfacf17133158fd039e87e32f0240b876eaaea5af0450d7c59be66f1f7a78f1b278b90437e232e68a7

Download Submit