03a1a641602bbef57408295f4b5fbf29b58d83d48bd6e5ee6c5f3bc7a84382fc

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12-08-2024 13:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8edb41ed010843e03e0ce615bdfa6b47_JaffaCakes118.html
Size

58KB
MD5

8edb41ed010843e03e0ce615bdfa6b47
SHA1

92415dda28e65577ff7e48e9758219deab7aad02
SHA256

03a1a641602bbef57408295f4b5fbf29b58d83d48bd6e5ee6c5f3bc7a84382fc
SHA512

3c466b165fc4a07303bf52f1ad1f0d0799df43833a4001e12b93621931c3365fcc3f0475a242e0d3761bbee35997a2e7c354b208b667b2b6941376fd58215cb0
SSDEEP

768:iCDrPIpBcPY1fmwoI4nh0twRCWeSHRbfbPNJWmhb92SH1:iQIpBL1fmPhnhM5TSHRVJLhbV

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1988	msedge.exe
1988	msedge.exe
3240	msedge.exe
3240	msedge.exe
4408	identity_helper.exe
4408	identity_helper.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe
3668	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe
3240	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3240 wrote to memory of 1728	3240	msedge.exe	84
PID 3240 wrote to memory of 1728	3240	msedge.exe	84
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 2832	3240	msedge.exe	85
PID 3240 wrote to memory of 1988	3240	msedge.exe	86
PID 3240 wrote to memory of 1988	3240	msedge.exe	86
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87
PID 3240 wrote to memory of 1976	3240	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8edb41ed010843e03e0ce615bdfa6b47_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd76d846f8,0x7ffd76d84708,0x7ffd76d84718
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2528 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7032 /prefetch:8
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7032 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6484 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1468,13716783363820259712,14044423176919342101,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7000 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3668

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1164

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4928

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
cd3bc348723c7500b82be37738b8f8d1

SHA1
b48b182c2921f9b7a0ef1ab6d7662d5e7563b5d8

SHA256
470282cfaeabc9d300927fe022a5bff017d42c9c507613a0d479431cf290ac03

SHA512
5fd976f99bcfaaa980f82ef3b9115ef21221adc77381d1d55e51b02dab328edd80850a8d0a58847b42240b9d7832e4e432114444bed06517405dc1dac34d58d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
da9e08905a5de1e951b2a1d12748f9d1

SHA1
b004ba49bd9c1a1a3c9febd63c1d588eb0c43358

SHA256
a783354a8463f0065def6a8f1e439023537247587d341d20449eace4a7983d01

SHA512
6e4614f040c33b874be598df21c119d1fac0099cfb82f22b32d13407c68bf3f6a7312de0d91462b96aaeadf7dafcfa9cb32bc106d172a5830bb4a55c381aac84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2ed35e50f5d1a095f6fecfff0af04af0

SHA1
aef1ff0dac7726788ef1a4b10cd55389a4971527

SHA256
f82c85ab521aa0fea19eacb79af7e51bee777f28c0a075dafafd95e315554a56

SHA512
3e4ac389bebf4d115d935a8063dc8a6ba3a88c3bd6d58f71f114656114c7dc5ade785899f28d9b10dbe9c97ab23f8deac69e79af979ce2b15b2302270162abdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
308f3d905660389c5dae3ded053aa8e9

SHA1
2df0b9947ea1176828ce7532b43439f6ff7e8695

SHA256
6faa4f7b53607560645a66224f08b957bce793b28c518d3b6a299a07f184b087

SHA512
10ce0347199582fb56ffa1bac9cd8dc3f653732557215d47bc4bd48de5554bf1dd570b80f40a1d61fd2480d20dc43026371be974224c1a28afc481a27618cf33

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a380111a2cddcacd6a98e7470bdeffe0

SHA1
0e0f3d5f2141a6a2f36add97d086d1224279122a

SHA256
00d2ffee042ae0ac95220e8d92b234b6656a73a61d3d5823fdce78478ef8f31b

SHA512
46b6c21a9bc483c84c9e5bbc952885874129427d3266f9918308c5150ff8f1bb526ef8cbaaa30f7ec8c35718b99594cd242d1b573b14d2a047352f3f83dbf09e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
981b7c165a427000e29f425268d6922f

SHA1
5ad627f4c9436609feb2de2c1e407113cdce269c

SHA256
91fdf3bbef03c8f9b3515ee3c37bd31e752d6c4a35b06cca2c96bdbbf3490ba2

SHA512
66acf4a53815cd0cfe0fccd59bb848d882e519446e9f84629a8256643aeb9644b783f3ec2a1957e77159bea9a7257e82856822123ffee97c5f37bd5171e52f3c

Download Submit