e835b1b356262b4f5c76e5603cd8fe7744e6503eeaf5fe27154679bc73ee7548

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 08:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9ff857f48f59d8ab1f2992839c9d2eed_JaffaCakes118.html
Size

175KB
MD5

9ff857f48f59d8ab1f2992839c9d2eed
SHA1

90553cd9a705c4d66a132d616fca5b39761ccb3e
SHA256

e835b1b356262b4f5c76e5603cd8fe7744e6503eeaf5fe27154679bc73ee7548
SHA512

6d49fe7f36033c5eccdbfe1e668c91b080bc65212615fc3bca6511fe4573cb36f8d3ad0c6bf712dbe70607ced380b8d9e5019ab9840a50583b7877cab59e1a46
SSDEEP

1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3pGNkFcYfBCJiZW+aeTH+WK/Lf1/hpnVSV:S9CT3p/F5BCJixB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2376	msedge.exe
2376	msedge.exe
2464	msedge.exe
2464	msedge.exe
4608	identity_helper.exe
4608	identity_helper.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe
4984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe
2464	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2464 wrote to memory of 4276	2464	msedge.exe	81
PID 2464 wrote to memory of 4276	2464	msedge.exe	81
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 4680	2464	msedge.exe	82
PID 2464 wrote to memory of 2376	2464	msedge.exe	83
PID 2464 wrote to memory of 2376	2464	msedge.exe	83
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84
PID 2464 wrote to memory of 2636	2464	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9ff857f48f59d8ab1f2992839c9d2eed_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8473846f8,0x7ff847384708,0x7ff847384718
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3964 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:4344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3980 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,12954637440810723098,2519069866188916680,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1844 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1608

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3528

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2432

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
db9081c34e133c32d02f593df88f047a

SHA1
a0da007c14fd0591091924edc44bee90456700c6

SHA256
c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e

SHA512
12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3a09f853479af373691d131247040276

SHA1
1b6f098e04da87e9cf2d3284943ec2144f36ac04

SHA256
a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f

SHA512
341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
d83ee6b03356a080ff2bf147fedbcaff

SHA1
a2d2d3f010ba251bbdba9fa1d7f291171426737e

SHA256
73613e70625e4efade4e290eead5825365cd7a4fe01677190eb24c2b6e5e2c62

SHA512
9a8b493d9d52c99ddc7840ad8d41068af7c8c832fdf83ec22e3fe1709e27cea1fadb92ca0e2717485658deaa793da8e2327b0cda467dc50318fe69130efa5b64

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b6937fc61e71887b6dc99ac29365f322

SHA1
c73f274a310caec63ff1d44a569710a118f72ab8

SHA256
ba39e0e2ff632b48422b47b3510a8178cf61038591328d3d645b67606c28484c

SHA512
b0f84c5f63b267500a951c5a9ad25b0aa559ebac94af2692d40082c35c74b6a31f11943f83bdcf2e0380eb7b93d7f7d4d45426119fd29d44b374a53204a33d09

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
026e9a2115d45fa99b6e072fb4fa6209

SHA1
77282f61af295300ca3b190893fb33bb93e55433

SHA256
78d421af02d31a5bf8806f44f16f40ddf1944c3ea5cba39351080d61badfa00c

SHA512
8ebbddf655fc5b40c9651f3178d057385dac667ff2a551b35b51442251ce2f15989d471bc3bdea4d83450db76c1f958a148a4bb91831a9b303befeaf18b7a0e9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
33c7ab748292acbbb09401b65960d3e7

SHA1
9a9168ac609f4636ec43cad15640be5b95467644

SHA256
b347cf4cb64bf7aff30e71257d58b1438637f9543ddebaf16826ae622971b85b

SHA512
845809adfa94e12ba5af942653eacddf9dbec3ea7343f7a77624d81b2091325bd827e9e6c873bda4485d7fc5e6f8f3f17ecfd4f33a6ccebb5b4f3b59f05172cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
41ab70104c92ad4b8feacbb9fa20df64

SHA1
a96933b9abc4af40193611e60346ec5ca8e2c7c0

SHA256
c219b1382b387009f6a0ce2b4c274df1a524c9d6c11cd5ae3c215d8fa0177c2a

SHA512
0460d42f5722611e4864aacda6944014f31f6dce229e0b6eff3aa50e24fd43527ecb26bdd6f89b1614ce864d568ac041dbd3d9ab39b0567fd1ae73e1f9985e34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
08dca143fd88f86b81d10f821994146a

SHA1
69d8fbcabedfaf5c94f4678a15964315beac8164

SHA256
5fc83e02b0dc1b2eb84aa5673588fe76383c4c5bdc813d5121b74839885cf82d

SHA512
e429c22666b3a1e507cbcc5e74182d7b46354480cd4f3684d6029c826c91de297bff3e2f733f8bb4e6eb308568cc1bd379bdcf890654db0b32b2b84faca9dcbf

Download Submit