2eb00579779173e54cb22c70507826f5435045e941cc578ad96878d3adb98494

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29/09/2024, 14:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

feb3fd5ac0ce66c4b4e8076b71a6c182_JaffaCakes118.html
Size

202KB
MD5

feb3fd5ac0ce66c4b4e8076b71a6c182
SHA1

114fd934551fd4d99aadfef249061b6df1d40744
SHA256

2eb00579779173e54cb22c70507826f5435045e941cc578ad96878d3adb98494
SHA512

faa9b5c37998b9ddfa62df9915058d6739e4c91726bc43fb19fc7bd969a14dc72c73e5818f786508d277940f91751715aa1aac5a1e24a237254334139e7471ae
SSDEEP

6144:/NtD9S2sTSUlk2qqtTkS3eT3g80pZQ6kD:FtD9S2s2T2qqtTkS3eT3g80pZQ6kD

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
1188	msedge.exe
1188	msedge.exe
3152	msedge.exe
3152	msedge.exe
664	identity_helper.exe
664	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe
3152	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3152 wrote to memory of 232	3152	msedge.exe	82
PID 3152 wrote to memory of 232	3152	msedge.exe	82
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 3624	3152	msedge.exe	83
PID 3152 wrote to memory of 1188	3152	msedge.exe	84
PID 3152 wrote to memory of 1188	3152	msedge.exe	84
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85
PID 3152 wrote to memory of 3032	3152	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\feb3fd5ac0ce66c4b4e8076b71a6c182_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffadbad46f8,0x7ffadbad4708,0x7ffadbad4718
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2700 /prefetch:8
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3400 /prefetch:1
  2⤵
  PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,14769503753784761301,14931770389289077693,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4824 /prefetch:2
  2⤵
  PID:3456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4600

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\E0968A1E3A40D2582E7FD463BAEB59CD

Filesize
1KB

MD5
285ec909c4ab0d2d57f5086b225799aa

SHA1
d89e3bd43d5d909b47a18977aa9d5ce36cee184c

SHA256
68b9c761219a5b1f0131784474665db61bbdb109e00f05ca9f74244ee5f5f52b

SHA512
4cf305b95f94c7a9504c53c7f2dc8068e647a326d95976b7f4d80433b2284506fc5e3bb9a80a4e9a9889540bbf92908dd39ee4eb25f2566fe9ab37b4dc9a7c09

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\E0968A1E3A40D2582E7FD463BAEB59CD

Filesize
306B

MD5
9bb477396354ade3dd8124a130cc2c13

SHA1
ef9a4a0db011e1f125621bc58871e5bef8b359c8

SHA256
9cef86661185c1492170a0b180af2f3056e06b000524465768d5c9ebdc72f4e5

SHA512
5138514827e3e0a7a1677b5bf11a31e66f50ad076c7b4119b2d5a5330d640598762596bdfa53002d86f9a5b8eea07153b804df5dd579c23fa7a735a5188aa392

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\47239687-50a4-4bbf-b053-162ac74363ce.tmp

Filesize
5KB

MD5
5e1151b8893fe866de3266625dc78cc7

SHA1
def75b432f0eac186fdb2f3419820d45dd5cc722

SHA256
4858dd51323c05515b69e3ab3aa85583a58309669343ef2fc8165a4ee1643101

SHA512
bbb7e21c33f40915f93596332fab1d0733a1cea16703d7909ca286d9ca36185241a58192b7e5dfb6cf1a5a3ddd6546a48878acde975927f6b48988da38c89525

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
546B

MD5
c696f6ec3531f6b0022a4d36ad15f6ab

SHA1
73cfc31966bb64a03f6fbcbae3e6218e30598d67

SHA256
54d6faaf733e3d3996e5cdd876f71363ffb6af15a4309b1b882cbf599540e159

SHA512
f2719df0b1c5461716c5e78ad184e1115138ca01df530e29ee877764b70afa0cc46a0222a6245c0e29bbabcb2d358b82093de294962d73b9dca026bf51c2629d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7c96bc620055927dd42c4f3eaa1e59b0

SHA1
014622d9c32e568fbe324459244b13710ff417f4

SHA256
c87f9735d1aeac75af8a5c72666c4fa4210f78585a93cb7c368ee8e34d591551

SHA512
44229708412e52bf5ba05797804a9cc5ce61c6ac43eababa2b2a9897414f8cdfc01b1a4c22f4bd3de70cd36ec589db5a6745cbfb93235d3bfc9f68b5ad5495e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
7039c901af56184cef0c3849df06bfd5

SHA1
d3b15679d40caa613d09024695c23d683211221e

SHA256
b9469df46c6ab8532f95aa14c23c9a4c890b57982ab8822354ddd8b71f79e5ba

SHA512
ef5220bec5800b8c9e1d07f6dbc117af8135a52f227c68fa03786d7c5cc88ceae2749bb9581cbef19160c87709470c60c682fb057cf14d919c18489afbcd0c15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
2de35b1bfe1a8e52efeab8866dbfa8ea

SHA1
842f0b1a2818e58c2c11c4652616e2d185b12b48

SHA256
8d35af26c9391da586b0521d1a785c1718c301713979a642019872938c314594

SHA512
5df701bdfdf25e2075b4c44fc8acd3d056b78b7b6a7b66ed0a83d24f490a791a14c7a158c865c725962bafa2f62e8fc9993022a524ecefa9b271447ba53c2845

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
0ccac30882452cfce3881241b0c9c8b4

SHA1
da1292f11835e161f436210f8abad72af7bebe57

SHA256
fb4a8d4904da80e21ab0c44ec53543f1d76bc50022ae092b22e97b2204ae7b7c

SHA512
f23c226161f29b864093758626f7491071d89f8379d25ec3cfb3b308d9cb68f6b14865fb6f46c633085727b8b0fcd2c1829a4793831e1d9835821f25ebeb7524

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
1919b71fc37a127e1200224a5898ab0d

SHA1
c2daff183f3e795e6286e08e2f96b830dfc8885c

SHA256
08423fa674c1e0b79b5d93d969e4739f6d5e8a9e260f3f8b36400a96b4b77053

SHA512
6873d6ce09ce8cb8777c86aeb7bc2213a1ce7ee032fc2ca1cda8e643ee8db146f152cf6062b957c49dac930acb61384ae7a6d8c937e37ac31dcfbe13012a3b36

Download Submit