c71f99e5ef2a1ed6b335c4afb358fee4b0af5cb708bc9a461a1aa3c0f6cc1949

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
17/04/2024, 21:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f69c58366171e25bb4688c3e20044932_JaffaCakes118.html
Size

49KB
MD5

f69c58366171e25bb4688c3e20044932
SHA1

b92979d46775d9709ae64d3660b0083bdde93f4c
SHA256

c71f99e5ef2a1ed6b335c4afb358fee4b0af5cb708bc9a461a1aa3c0f6cc1949
SHA512

3925f7ab68e3c309e9ca3da49532a9282f72d2af3beeafb9ae621b16178e9074ff9f8f46209c912e79eb2f9faa084409954145b5949c9eb396dd605a0f9b74c3
SSDEEP

384:KVbUgZ5G8z93WZn3j5rjyX/CBIy07lqBJ/ZlWMyaKNf:KV3R3WZn3j5rmqCy07atZlexNf

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
3296	msedge.exe
3296	msedge.exe
1452	identity_helper.exe
1452	identity_helper.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe
2748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe
3296	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3296 wrote to memory of 3288	3296	msedge.exe	84
PID 3296 wrote to memory of 3288	3296	msedge.exe	84
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 1860	3296	msedge.exe	85
PID 3296 wrote to memory of 3488	3296	msedge.exe	86
PID 3296 wrote to memory of 3488	3296	msedge.exe	86
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87
PID 3296 wrote to memory of 5024	3296	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f69c58366171e25bb4688c3e20044932_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe2de546f8,0x7ffe2de54708,0x7ffe2de54718
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:3204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  PID:1440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6320 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5332 /prefetch:1
  2⤵
  PID:768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,7331918772633702059,8756765592649937563,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3976 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3168

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1840

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
846ce533b9e20979bf1857f1afb61925

SHA1
4c6726618d10805940dba5e6cf849448b552bf68

SHA256
b81574d678f49d36d874dc062a1291092ab94164b92f7e30d42d9c61cc0e77c3

SHA512
8fb228fae89f063159dabc93871db205d836bdb4ec8f54a2f642bd0b1ac531eea0c21234a8ca75a0ae9a008d2399a9bf20a481f5d6a6eab53a533cd03aeaaa2c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
104aab1e178489256a1425b28119ec93

SHA1
0bcf8ad28df672c618cb832ba8de8f85bd858a6c

SHA256
b92c19f079ef5948cb58654ce76f582a480a82cddc5083764ed7f1eac27b8d01

SHA512
b4f930f87eb86497672f32eb7cc77548d8afb09ad9fdba0508f368d5710e3a75c44b1fd9f96c98c2f0bd08deb4afde28330b11cf23e456c92cc509d28677d2cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
9e7c443c947853ff1976d0bd5d7a9cad

SHA1
f0e2d1512b987a90cfba05e6eb757b8042279ef7

SHA256
dea01b274cbd7dfdfa560d7fd2e633b9a17303a6e0daf1965682145d99e1b4b6

SHA512
888ee2e7be45b7b6c275f0b70d7a8eeac1380a3ce31f0308fd135cfaccd7b0d0d69f710bf18c3126fed8264730466e8f277e57c7c18ce5f61f8315ba15a4bc4f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
c6668670de60439a20b280bc73374ad0

SHA1
da60f059535f935298f9cd588f64561210fbebc3

SHA256
40df4d7fc7f17b806a29ec16f387f23b38e768f5de51524ec067e4e626f27eca

SHA512
5e28d78182b2c8ff9a9e7210811d30efbc7fa31f994b637b50849dba5022b9b2c1757787766518b63624cd262e1ef4d96baef90910b08b7e9f468c617e89c01f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
686B

MD5
df11fc0c4f34e951de8c6b455472ad4f

SHA1
c724fc50e5c7231df1205058d570a45c1a7cca45

SHA256
f5af90e9a1c58e98e4e6eaa64bcfae375c3d7ca66385e6d9a0fced146fb98b52

SHA512
8809f9f33084229e07d78dddf30cb6c296287c76b4c40cb1321f793e10e4e596e0ba72c610e5eab0106d53ec0a1d94f870c618cfaad8dc9a314e062894083f0c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
6f0926be557349247608bfa73e8ed42f

SHA1
e77b75898fe33ba2c220d4b204a522a36dd18453

SHA256
fb0723da7e427b9fdad6bebd36472811506c5f4b99009af07fbb487592e16106

SHA512
52a8b7538ffb5b4f7335531522d5825c948bdaf8cf438f83a1fba3e18cea0d030d7133842aae52cacac50f6ed2463e2e6d2c8e24a9c99e4250467c2cb256c475

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
56471eb6a05b4b76247beb963691e485

SHA1
5b7a4efebd00599803dc45a1bdd9b0cd75dfeb73

SHA256
dd2c0addadd2395fd51da7dd9110549022fccca6fb96bf0c8fa3e80355ede472

SHA512
3d2d2a5c91fcc1ccb3cdc9c1760127ceee739193cdab81f53225233c8b29df7a9f1a56fd241906104d33c6c2b4c67bf753e8350f7125d716c70864b3bc8193b9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
670bac3c0743b3ba6349e8ae732e54f5

SHA1
638c711756d183ddf1b33e498f0eb8e559a79f8e

SHA256
5197914078efbdadb0e585652632ef3648980cdaff59699390c7bce27718de94

SHA512
96317d8c474f91f389d618f1d9be2f0ca85cf7b77eb4231d0ad54f094699b6d4a7da76c53a7fa8b4bb2224b1d79a900e4d2826a19189812dfeb7981138d1061b

Download Submit