1d220cfb396a2ddf369a08c4ac78490d7263234748af0b44a43d100714c4b00e

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 15:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5c87a27c419178bb7c8b817e4c1cb8de_JaffaCakes118.html
Size

57KB
MD5

5c87a27c419178bb7c8b817e4c1cb8de
SHA1

f4304f5afa44e647d6771e615dbe7616ecf7fbae
SHA256

1d220cfb396a2ddf369a08c4ac78490d7263234748af0b44a43d100714c4b00e
SHA512

30f97e0735adfe6ddb3decb9c2a5cb14c2b8a92b4c9898ffc621598be2a9d8cb252314b1efba7dcfa46fca088a18bfe424fb9377ef9883bba423eba0fa32447f
SSDEEP

1536:ijEQvK8OPHdsA1o2vgyHJv0owbd6zKD6CDK2RVroN9wpDK2RVy:ijnOPHdsR2vgyHJutDK2RVroN9wpDK2m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2396	msedge.exe
2396	msedge.exe
4804	msedge.exe
4804	msedge.exe
4352	identity_helper.exe
4352	identity_helper.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe
1528	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe
4804	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4804 wrote to memory of 1016	4804	msedge.exe	84
PID 4804 wrote to memory of 1016	4804	msedge.exe	84
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 400	4804	msedge.exe	85
PID 4804 wrote to memory of 2396	4804	msedge.exe	86
PID 4804 wrote to memory of 2396	4804	msedge.exe	86
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87
PID 4804 wrote to memory of 828	4804	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5c87a27c419178bb7c8b817e4c1cb8de_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffbb6046f8,0x7fffbb604708,0x7fffbb604718
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2164 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3796 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6124 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6236 /prefetch:1
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6456 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,4686359524100292882,18393413007019319421,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1856 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1528

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:560

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
2d8480c2d7e9ffe335e0bbdff266c6f3

SHA1
1ead2c1876f686b217bae62b214f7fd855432ff9

SHA256
df503dd43db362e0280664cb86c74a0a1295719318729808355d46109fbe590e

SHA512
47235bb7581807c9c248bcabd28543ea25a46198c00b3555bdc6dcd2756012e8c52bab7b73ce0a2e7c96b73375738aa21b4f7d3d5ac7a19a2540a1359df0363a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
768B

MD5
f7f063403aeb8572f2c9625807106c52

SHA1
cd037c1e53c3774ea9933a8deb030f5d8465c20f

SHA256
54d059f941aa76974e30aec4bf1fbd4ca4de38068ca97be3c29ff34b9e7b086a

SHA512
03f8087e7581618805e8f3801424f1e673ec0c3e5adb13ffeb0e6d005224b511b1b94c7188b0f33a557751a27741f4e1890aefb2f2e4a487a6a5fd93b54a527c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
f99c69fbe841603697324dcd821d027e

SHA1
914b0fa4ba8e9a417518d6e0acbaf37205d302bf

SHA256
31886fe112bca4716b5bca3fd85edbba2da9be497cc46216997594cbde82f1a2

SHA512
c894fc9405c78e09284a1efa1e94e666c18941d8e7ce499d74f5f5293bade9aeb58a00716ee318f22ef89ab61e79460341e8f4187b4081cc121b304aa68385a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c0976d475e4203adfbb590d990600803

SHA1
78a75a46f2b83216b99cc4cddd03485468b00db8

SHA256
9c457d527688707c30baab7d9b8ff74b22e0a9777f4aa5b5bfbdf973fbb204f2

SHA512
24a6614b8a04de889d34f5b59bf19bd0ea35d621f5ff290ed04db7a56526e27a0e729a44f7798fd54134ab642fe08a0eb77c54f0cba1dda65b6156634d558d1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6eca38368dd4a0149f31127122738989

SHA1
e642ad361f598c12da43d2cf68b6ac31efb03d57

SHA256
5e89aa8f5c7d077b56496c7810db5415049bedf393bc080b0054589c3efc89f4

SHA512
26c43d9d8aec4c89ad7fb501912deca839a340e33abbe53b9dae9fb7b1f5acfb4bc762425e640035209661256a654b11e32294cde03f0b8f8f9f53af551acfdb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
ddcc9790b9c177b2d9f446b27ecab02c

SHA1
f505163c78f8bebfdd6a61a582703576d7b47f97

SHA256
f26d83120452393589d6101bcfbccd426436e3392dda7786ed9320e1971912b8

SHA512
6be442437a480fdefe1c2fced07d92c738cd6927125add408950b67aac5bc1a0ec0ce4acb2c842a3d404a784594e11dfb5fb0b3af130ab6649faf9ffbb3d81b7

Download Submit