6649211db03a44897f8eba09bbdaea48b75f887586d14020cbda4f3f629ec741

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2024, 05:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

0e11c5f537e212fb7d7f7aa7a9e9045e_JaffaCakes118.html
Size

14KB
MD5

0e11c5f537e212fb7d7f7aa7a9e9045e
SHA1

0461cfdb9eca757cb59c7e3caf3a9e112e2c1561
SHA256

6649211db03a44897f8eba09bbdaea48b75f887586d14020cbda4f3f629ec741
SHA512

fc9a872293bc0d4b012c89519971ab1e086ba78ad64f7c0b17ea24ad19093c805184f5824623520ea5f609c60a69fb83081e65424bd3113f7f7249ec047f1967
SSDEEP

192:jLxKhv5jchc4DPhHg/JGUTsR7honXjogXDY65+TxXn4lmP3KTAL3vV:jLMLchtPBg/wzR9iVTYu4902V

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2684	msedge.exe
2684	msedge.exe
3660	msedge.exe
3660	msedge.exe
4788	identity_helper.exe
4788	identity_helper.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe
4424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe
3660	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3660 wrote to memory of 3472	3660	msedge.exe	82
PID 3660 wrote to memory of 3472	3660	msedge.exe	82
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 4628	3660	msedge.exe	83
PID 3660 wrote to memory of 2684	3660	msedge.exe	84
PID 3660 wrote to memory of 2684	3660	msedge.exe	84
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85
PID 3660 wrote to memory of 2160	3660	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0e11c5f537e212fb7d7f7aa7a9e9045e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff87df646f8,0x7ff87df64708,0x7ff87df64718
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2560 /prefetch:8
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4260 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5900 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6208 /prefetch:1
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,7759222433707503745,16602733517367013655,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5324 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4424

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4916

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
0db48f16b82674becb9c9bb400e15795

SHA1
cfe39391ca2fe23dcf5213433b2f9a01b1880691

SHA256
e8df3b359d946534daa73051cc873872d98106542741399965bca13c944902a7

SHA512
5ddce1336e8b333d16827549aa990ef6d5bf8b6b3c7f2eb8618881546152b44108e70c2eca66371e3dca346b55c940ab80f00270103df77ffd7adcb68db627cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
ad136d50c1c4c657f10ab874a60ae6a8

SHA1
e1acb193458324a4986397d7055cc1186a80a544

SHA256
1a95136039adf660091755461e6f9161bba105f40109d69855da9df30f72df2d

SHA512
048430348393d6840651dd38d23c12dd6d970a7f709b61f0abdc2d05a684499bbfdc1aea4b0f5fe6a1e7a8ad554bc83964c23a96e2049d96e5fa10666c6e37e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6a63a6ec87dde6f9cad15e58fb12c3ea

SHA1
c6d8b4ddfd35ede2936eb8d1d43e32b4c2f423f5

SHA256
b120dd87f5549bd4d25a125681349e990390a7029fef911205808359a45f1e46

SHA512
7be5ecd8de80454f319228856491c51b80ecf7849c1bc9abbf18e8e91c0c36f8b6a204264e522b49902288059f13f10aa7a1ce4ab0d34acd52004fe234152418

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a558b169ac41f4d3857707d77bcc26bd

SHA1
266b18364658639634d098c11f827f9670f83d50

SHA256
d8ae86572bd955470934bd66605a7526da39dd9a26eced1b9367245c453275b0

SHA512
11cacb2d3c02506eb1b127d0b5bb4b37eb9cbf9d92bda4f0b696a9536d069f41c721dbbbe545f5550324b767470c49f9067278a2ad09bb955df5453a67592c3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
138e8aa424752bfd770166539296daad

SHA1
893106431947bed479827601bc7b7a43575a5fdf

SHA256
a9d5f6ff735d91344e43323159a3d1574717298c223b68d6710d8eaffa900241

SHA512
a7ac54aa18bf0c2d9452daa4abcadace99682f81c67e9e812712abccb8c664ec0c36402fb6611f656ab0eb713f85fbf6989f1cece08a148027f7947c1098d6cb

Download Submit