ff08bb073f1fba1052b481267f20659242646a7bc8a723657dc367f1e2bc9194

Analysis

max time kernel
145s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
23/08/2024, 11:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bb7537f2526e81ff56428f5faf39dd66_JaffaCakes118.html
Size

125KB
MD5

bb7537f2526e81ff56428f5faf39dd66
SHA1

f4e70b8673df327e202e389dc9ceb3f6f4494a9a
SHA256

ff08bb073f1fba1052b481267f20659242646a7bc8a723657dc367f1e2bc9194
SHA512

e78f53897b74d9089a70c7028a1fb72e3821940ea04ad72c297307dfa63f8d815cf6ee3ceb94b7347ad70f41b8cb81dae38780165f59995dd5e7be7caea98b29
SSDEEP

1536:MXpTTnzBz7mXTA8hzXz3zL8MVz5C17EPzUph43t7y3QvIx/Ix6Duw2J8EVK6nR32:W/NXKjjntF5PopMyTxQxd8en72Z0s

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1152	msedge.exe
1152	msedge.exe
1040	msedge.exe
1040	msedge.exe
4864	identity_helper.exe
4864	identity_helper.exe
5164	msedge.exe
5164	msedge.exe
5164	msedge.exe
5164	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe
1040	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1040 wrote to memory of 920	1040	msedge.exe	84
PID 1040 wrote to memory of 920	1040	msedge.exe	84
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 3108	1040	msedge.exe	85
PID 1040 wrote to memory of 1152	1040	msedge.exe	86
PID 1040 wrote to memory of 1152	1040	msedge.exe	86
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87
PID 1040 wrote to memory of 1488	1040	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bb7537f2526e81ff56428f5faf39dd66_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff84d6646f8,0x7ff84d664708,0x7ff84d664718
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3924 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7956 /prefetch:8
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:5344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1828 /prefetch:1
  2⤵
  PID:5984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3588 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,18260726566021536495,2526664922330042090,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4172 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5164

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3716

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
431260e8665c73a1074bf837c940d495

SHA1
185fe3932caa42da36ee679e50dc6802de95f873

SHA256
545118f24daec2aeca91a67577e1e1a016be308380d147a45f005fd62cd1eb5f

SHA512
4b84fea8705558a536ead6e03fe3f98709f0babc0f1a5a4f87ade457d5ba7fce3fd241f70461059232db156530061c50533f367d81996ec381b051220bc6fa66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b63e6d7f95c8978e83eb9859c0f5b40f

SHA1
21986a8b78a02126b63fdbb0ada185754b2cd960

SHA256
111b272d492a7ebc3da57d7663bdc1a5f8ab27f83d1cf7cacc3f45792a854248

SHA512
ad859705b19fe86a84f331daf05bead2d28aabc057ed031082354a78c5f8187eafa63fbce26c96061a355f03c686fc0ce06ad2e6a244b958361635cddcb419da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
790157bc72d0936d28e38209e2f66e08

SHA1
71c6bb83a693de2c43669e74c90f7450b55308dd

SHA256
0f040cf249fbd06d0d3f8c9728b853d4282c573f8002e3db32b83b98af8660d3

SHA512
303999a2eafba5646f2d6385bfa622211069d31484788d938b955410b7c2abc79d45778121ef7d91e005e24a098f428d4a5af7814a9fbf98cab5ecd8d470fc1d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1187884b1d5f039c6431d6e333c5dd21

SHA1
2c3da635b25c6b5f924140502a809c48651a862f

SHA256
b538fd90b53f0c25dfa9a93566ae77f11e304d84790feb19d564c6f4b38653f5

SHA512
3188f1b9b445a63e11e25af8c731bcd0865648ad8783f8cb4ea0c4fb803a6e43a85d4c182f9ff6c309e3359a901256a15d29bf1757996a9faaa284536c5e51e5

Download Submit