d7a2dfca1845be0503378b7ce0da142be6cf832d30698a304906b8f03c958b62

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
14-06-2024 08:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a8b2e71785bd81276a770499fb49b524_JaffaCakes118.html
Size

175KB
MD5

a8b2e71785bd81276a770499fb49b524
SHA1

b1083eb1beae4df774090fde734007536728bdda
SHA256

d7a2dfca1845be0503378b7ce0da142be6cf832d30698a304906b8f03c958b62
SHA512

e70f7ff2b70cb7049f29293a6fa0235e58c21b4bb383566e77b7a0d1d19c7193cf87a79e3f39d74193db9cfeaf4a2b3839bb57e8e16c795e14f7b5fbe0bd5c25
SSDEEP

1536:Sqt58gd8Wu8pI8Cd8hd8dQgbH//WoS3VGNkFwYfBCJiZ9+aeTH+WK/Lf1/hpnVSV:SHCT3V/FlBCJiwB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3400	msedge.exe
3400	msedge.exe
3636	msedge.exe
3636	msedge.exe
4296	identity_helper.exe
4296	identity_helper.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe
3636	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3636 wrote to memory of 2368	3636	msedge.exe	81
PID 3636 wrote to memory of 2368	3636	msedge.exe	81
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 2752	3636	msedge.exe	82
PID 3636 wrote to memory of 3400	3636	msedge.exe	83
PID 3636 wrote to memory of 3400	3636	msedge.exe	83
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84
PID 3636 wrote to memory of 1336	3636	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a8b2e71785bd81276a770499fb49b524_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb2bd746f8,0x7ffb2bd74708,0x7ffb2bd74718
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3764 /prefetch:1
  2⤵
  PID:2772
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  PID:3736
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5800 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,8705432239478864398,9558867910458948034,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1340 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4596

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3688

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:744

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dabfafd78687947a9de64dd5b776d25f

SHA1
16084c74980dbad713f9d332091985808b436dea

SHA256
c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201

SHA512
dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c39b3aa574c0c938c80eb263bb450311

SHA1
f4d11275b63f4f906be7a55ec6ca050c62c18c88

SHA256
66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c

SHA512
eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
0344357b4a64ada79218e42fb4dd11a5

SHA1
559bb2b2421376f97355e4a3256529ae69f61667

SHA256
d6935e1edacaa45419842ceda1d833edb62b77fddfad2aeb0240e05ec6b77a99

SHA512
8131b52e1c53ab7990cb8a17ca95a0c153ba58e9b6e61c8478ce6a28bee623c91fc51b59c2b9c63c18ac1f048136bf582ffd737a9a25d707226fc3ecdcdb657f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
59a4f3594b2b83aec063faddb5b8769f

SHA1
81e9833bace31fdd5f074d06c6e302bce1429c42

SHA256
37602a5d63b226b8a92e9be44e2850c5d2eac9dcdc0da9e30848112b84a45f09

SHA512
450ede82cab3e926f28670d4682f16a425978711e978a0abfb232d6d9becfe39b45293a4ff6e7cb331c55b09c4b1df4dc050cc349be60bfa9e3c920eec24dc32

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
ca4273ab130b67b6c849ef9861301f94

SHA1
9495cc3febdfb0552630983e8a5480ce01a05716

SHA256
8480b4208950fc267e22ebae402ded2a4cff852d9aee539ac5ff96c5cedf5915

SHA512
863d18af01616c7a64b7e0668b53d6222a0f0849fd1fe9d8a76cebadc4edcd15475328184e10657c71f6ae2bafb252330246fd6ad8aa934bedd37f3934f61bf2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a96c3cee890c3eb4247ecea65ed34054

SHA1
fde4456bff57633c2c92c26cf484dec069bc0d11

SHA256
f2017a4be41077cdc29d0bc457852b80120fa3359b33dd616b1a259e50f05b5f

SHA512
75d8a1ee5cac6d066f2ccaf8f5e66fede252a21aae82b194749fd4f384b13197073c9534781f5cc916796e8c9a2223a54e0565005ad8c6c0bdaa96e41f71e725

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ce46ef291cd56f85cdbc1ab4384caf62

SHA1
63b4d51f419cba2b350cd28f4410dcc5ebd30f43

SHA256
8645d8574c51353af7982ce424529727e738095ed8e5a89d537c22450e013679

SHA512
2b321d081481492424506fb47abdb66ac7aea661d3555a34489d3b7effbc37483dc6fb00146176d7a9e26a25756183dcaeed04a00b63120c8a2a4827ad85d4c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
bf7e8c702b4d09efc3b11847716af013

SHA1
1907afe62bdfd39cf32d1061578aac1a705c0a98

SHA256
46989dcf2f77f5eb872ac110c00b78653521d3073cd20456c2900984c5a29ecf

SHA512
6f75a5639c6f623e9b457cfcedfb980a6e40b0c97615a3e2624effc352a99dbc748e0b1db6c0418ca1c0ea88c0328d2d077be8b70321ca242378b38d71c350f6

Download Submit