a51697ccce6dce66ced366363280d797263f599abf4fad0ce82d54f18c7c74af

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
04/06/2024, 01:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

933752cb017cb2435d550dd7468a9e1d_JaffaCakes118.html
Size

121KB
MD5

933752cb017cb2435d550dd7468a9e1d
SHA1

969f755fa954b34eea77ffa3597c08f7e2c48f40
SHA256

a51697ccce6dce66ced366363280d797263f599abf4fad0ce82d54f18c7c74af
SHA512

faa5995ab47ccd36072b96ab93e83a55528551389fc3250ca1c8aadd787e46ffe7891df8f1e5151cc2e684e0b96fa57ec5b617db58f06b5feb10f8c725c744a8
SSDEEP

1536:elyLi+rffMxqNisaQx4V5roEIfGJZN8qbV76EX1UP09weXA3oJrusBTOy9dGCsQO:elyfkMY+BES09JXAnyrZalI+YZSMo

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
4556	msedge.exe
4556	msedge.exe
4340	identity_helper.exe
4340	identity_helper.exe
2660	msedge.exe
2660	msedge.exe
2660	msedge.exe
2660	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4556 wrote to memory of 2576	4556	msedge.exe	81
PID 4556 wrote to memory of 2576	4556	msedge.exe	81
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 1484	4556	msedge.exe	82
PID 4556 wrote to memory of 3136	4556	msedge.exe	83
PID 4556 wrote to memory of 3136	4556	msedge.exe	83
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84
PID 4556 wrote to memory of 2568	4556	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\933752cb017cb2435d550dd7468a9e1d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd521f46f8,0x7ffd521f4708,0x7ffd521f4718
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:4752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3260 /prefetch:8
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3260 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3416 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,6095518027605621886,7937261295265585713,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1744 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2660

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2daa93382bba07cbc40af372d30ec576

SHA1
c5e709dc3e2e4df2ff841fbde3e30170e7428a94

SHA256
1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30

SHA512
65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecdc2754d7d2ae862272153aa9b9ca6e

SHA1
c19bed1c6e1c998b9fa93298639ad7961339147d

SHA256
a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7

SHA512
cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
aa9eb89383666905dc531daab2e0a696

SHA1
c2d716c89b3feb0086d488037c8825f74bac72da

SHA256
304e3aeba929a9db2381aed52403bcd8c74a3b080f0666575f31fba193a8bd4c

SHA512
7e6ff0876e0c5889460bf2a202fb704264ce1d54092ba92f9193ac115e3cd57c1d67204a8463f053bc8ea8a51d4208a718220aeb852f009edeb1bc151a125914

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
99daf72c6c9677774254a93b4268bea9

SHA1
d620305c16931d45a6055cd490fd186c416e0f98

SHA256
c5729d5871666a15285bc37def8bd0bc7bc497edebcc2172678da70f72c5233f

SHA512
4935cb4d44499e36e4d42104567e01a49d7496fd93dad84fe7bdf8afe5be5d128ca90a3ba1368b8def162271fce0c3e5c37fb0876f63b432b56334bd39b62500

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5c3e055f214bfa6c8192df334b4c9bd0

SHA1
ca8791ae2bd8ed1798640ed681e825aae7d8feba

SHA256
992946b8f0c1781d8414350fbdff5b28e9348069d5ac7d4525d22a3becfb912a

SHA512
582304d2c733973129912b971a7b681b926923cf57bf3cb06076743acce7fb82d153de2c6ec383428905430af9251776221ccdc750705b27ad58469b4a04b0bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
dee115bcf992af0f15aeda6c814513fb

SHA1
6d60f7526f1142710c801495a914acfb3706b981

SHA256
85bf36923fa93c7a6198b5ff7cc53f594ebb13401e650d3a1f61d9b4a8327bab

SHA512
ee669693d945f1455cf03a26706bd180d3c5587a448bc0121aac7b8a4e1417199376b07ba9deb652bac22203b33b88915b6cdebeb9b35d38ec0cd0df531b41d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d04a7c923df0ecb7614350274fab93da

SHA1
31a0151131f2ca057ccff950b8a50aafb04841b0

SHA256
13d52523627eabdb423beb9d05f7125a52a28b387d97a3cf35d0683296cf6afb

SHA512
64b3ab0794aec8735a035f9b6ffab562624dae922b710e85da758b2b9d87e4321fbb1d5c262033387f63542a1648e62f4cbfdc272ec61653ce9e16c1115f2221

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5cad48f0c80684dd8eb33201c791fdcb

SHA1
68e60d496f115b1defa993b675213f6d0a27810f

SHA256
8903ecfcd86384e4cb48e3de1cdc378d1022fc827fa419261bbd57c2c9c7aa44

SHA512
dfc2218cdbb1c3d6ef56969b6bc528282b9b371f66d99e87e2c0409759f9447100a97c0cd03b0e9179edffe35f4927101d25b30195588ef099717d9f4e1a4945

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e416876e83ca3c5817b8131c25dd12dd

SHA1
0024dd580b6ffdb427ee3d862bdfc2d0f05e44dd

SHA256
7720f1577579fc8b13733b5a40d9319ba0c863d6e4e571902a975b1b1ffd4822

SHA512
e0bc0c2860d32287e673ffaa9225e10294d1df6c8dea168bdcb380ed9c8582a77e56eb9455d401643aa51e5a637b5d7a2ab879663f57c5dee5cd033072b5b12a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
82fa5ed0783d5e177227a24cc1d1f22e

SHA1
6d44433a7c23613e0ef12e9c01de475a58ea2c77

SHA256
63c9a52030efefdd6ffb12ede83592df1dc4c1b3f1b81dcf6348eb60833accb7

SHA512
36ded43d167c532b721e5df08a634cf06b33b4c53e980bd1bf7d400e9f3bc6bae77660865112774595bfdb8db5300428747a41bb2a0ef2f7aaf7262530bf3b06

Download Submit