d5bbd44bba68604664092473f7f5d3b8b86da5c9b193b78108edf99b67df793b

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10-07-2024 15:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

354c1c1e5269b64ad8e9d47ba8d0348d_JaffaCakes118.html
Size

58KB
MD5

354c1c1e5269b64ad8e9d47ba8d0348d
SHA1

84640a250df2efd3800e43425b5600ba5c96e3f2
SHA256

d5bbd44bba68604664092473f7f5d3b8b86da5c9b193b78108edf99b67df793b
SHA512

26abdd9d851f852f1de743836f68ad59dcf845d72feb2613d61c6fe382e7344d5844eca1d16f70dd84e98421f8934d8a07bfefc91f1e1c69e50a37dbb5dd3acb
SSDEEP

1536:gQZBCCOdx0IxCSx4Mf5f1fff3fqf3fFf/fof/fbfJfkf2fwfKfef9fof2f6fWyf0:gk2v0Ix1RNH/SftXQnjBseYiGFw+Cxf0

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5092	msedge.exe
5092	msedge.exe
4660	msedge.exe
4660	msedge.exe
4304	identity_helper.exe
4304	identity_helper.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe
2876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe
4660	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4660 wrote to memory of 2776	4660	msedge.exe	82
PID 4660 wrote to memory of 2776	4660	msedge.exe	82
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 440	4660	msedge.exe	84
PID 4660 wrote to memory of 5092	4660	msedge.exe	85
PID 4660 wrote to memory of 5092	4660	msedge.exe	85
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86
PID 4660 wrote to memory of 1944	4660	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\354c1c1e5269b64ad8e9d47ba8d0348d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd46a646f8,0x7ffd46a64708,0x7ffd46a64718
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:4132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4304 /prefetch:1
  2⤵
  PID:672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5964 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,4195243470045536801,16452434694764555501,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1940 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2876

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:532

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d406f3135e11b0a0829109c1090a41dc

SHA1
810f00e803c17274f9af074fc6c47849ad6e873e

SHA256
91f57909a10174b06c862089a9c1f3b3aeafea74a70ee1942ce11bb80d9eace4

SHA512
2b9f0f94b1e8a1b62ab38af8df2add0ec9e4c6dfa94d9c84cc24fe86d2d57d4fc0d9ec8a9775cf42a859ddfd130260128185a0e2588992bca8fd4ebf5ee6d409

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7f37f119665df6beaa925337bbff0e84

SHA1
c2601d11f8aa77e12ab3508479cbf20c27cbd865

SHA256
1073dbff3ec315ac85361c35c8ba791cc4198149b097c7b287dda1d791925027

SHA512
8e180e41dd27c51e81788564b19b8ff411028890da506fbf767d394b1e73ec53e046c8d07235b2ec7c1c593c976bbf74ed9b7d442d68b526a0a77a9b5b0ab817

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
eba1fefacdbbbcb0caf6849ba9ee31d4

SHA1
d08e6e94ebee5b345fc36070cfd9582f79dbf891

SHA256
798d137c8feb0964c8e8d392c41c7c22084ad5f53e72332c13cf76210835bded

SHA512
ce86487051fd1f612afdd4b7747160e7d577842488a02080f7c3951b3f47575f718a52102716c590de94aaac159144976f7020b39af236e55c8b2d86a2ba405a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4b12586d81d295e0161665143b70c82b

SHA1
917d8c89f918af523dbb6a47a1c7e4aad95b3eef

SHA256
939a941a09070d027270915ea482f2d237f95e762521817c018eea515d215cc8

SHA512
f2184ec503e735583695719b69d8b057691aec2c9d68b878bb6877b6177ec37e5537282a23357e688e77eb7123ddfccd4d2b2d4b3850c02960b81de69b5d4eb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8fc20b5a5568d0f8ced25fc13c7feb76

SHA1
2d21d79b56a2407bd951347ebd8f5bc5dd89d4b2

SHA256
43b302877edc8a7cb3e3979b0e14763c489ca5f0f7d56c20c03afbad7c237af0

SHA512
74a143afef127dd32ab252d5fd11bb2d5c8895e398cd3ee1a44e3b1566abb21e5bbced7227c795b366143a21a7eec9229517103339a9eff26b4f8f6d9dff1f19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9fd393e7b6ce51cfef6efda60dd53901

SHA1
12b0e5487c634c8e23b2780d004a165e818040ed

SHA256
6b2e9e02c20e714712ea9439f4c525aa9d53caf9f84fa1da91a076d5304cb9d1

SHA512
45364f23145ec0b2d4628aa7d32edd6dd545829e18c7881af96e433a3248e5fce1bf53e2526e88a0dedd2107d3f97a6e2c6c03e7f19434b474c31066b2e42fdf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c48942e2affe8ea0c0cea39c6063761b

SHA1
1075da60add8cac979add4c810c691cf7b40ee01

SHA256
44ee1d9d050f181730910e45db8a140a109e6936fb0f595961b900b2c4237f2e

SHA512
84169a902b68a113412d729c2df12038cf7242194835f16e381e70ddde70e4bb2212b49b29c4897df9880ddff34ae749702f421c2cdc7a8dc580b2b295569e00

Download Submit