c0751a3826f855531218a39da1987561bb23baa3a2793a5f526affd2d7824e68

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 15:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

63cb0e139d1f0e2af192ee34361e250a_JaffaCakes118.html
Size

57KB
MD5

63cb0e139d1f0e2af192ee34361e250a
SHA1

fd165c9023c2b3133e3380f5fa731fdfc3e7288a
SHA256

c0751a3826f855531218a39da1987561bb23baa3a2793a5f526affd2d7824e68
SHA512

2c379fc750a960f53088cefa2695164bb2c7a72cd165cd9b85bf1e32444237fdafff91f856599145520b847bc5d51e0b2628124acdd6cb0a51309580f4220149
SSDEEP

1536:gQZBCCOdS0IxCwt4Tfsf0fyf9f2fdfpf6fvfNfcfAfffxfgfpfgf3fJfBf7zfqfi:gk200Ixgkc61OlByH1EonpYRIPB5Tzy6

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
2752	msedge.exe
2752	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3612	identity_helper.exe
3612	identity_helper.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe
3876	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe
3008	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3008 wrote to memory of 2160	3008	msedge.exe	84
PID 3008 wrote to memory of 2160	3008	msedge.exe	84
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2040	3008	msedge.exe	85
PID 3008 wrote to memory of 2752	3008	msedge.exe	86
PID 3008 wrote to memory of 2752	3008	msedge.exe	86
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87
PID 3008 wrote to memory of 1148	3008	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\63cb0e139d1f0e2af192ee34361e250a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9923746f8,0x7ff992374708,0x7ff992374718
  2⤵
  PID:2160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4968 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,10572514998416032414,4735406621782234946,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3876

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:440

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2100

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
584971c8ba88c824fd51a05dddb45a98

SHA1
b7c9489b4427652a9cdd754d1c1b6ac4034be421

SHA256
e2d8de6c2323bbb3863ec50843d9b58a22e911fd626d31430658b9ea942cd307

SHA512
5dbf1a4631a04d1149d8fab2b8e0e43ccd97b7212de43b961b9128a8bf03329164fdeb480154a8ffea5835f28417a7d2b115b8bf8d578d00b13c3682aa5ca726

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b28ef7d9f6d74f055cc49876767c886c

SHA1
d6b3267f36c340979f8fc3e012fdd02c468740bf

SHA256
fa6804456884789f4bdf9c3f5a4a8f29e0ededde149c4384072f3d8cc85bcc37

SHA512
491f893c8f765e5d629bce8dd5067cef4e2ebc558d43bfb05e358bca43e1a66ee1285519bc266fd0ff5b5e09769a56077b62ac55fa8797c1edf6205843356e75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
b59842e914b69ae39d4bd0dd2fbed215

SHA1
f27de822188cfe7253960df70811af8944c21030

SHA256
666663987e744fcd8d4603843c01a2a2eb91a63a7cf8394315943bbf39cc4a51

SHA512
d1f8b0c6b6609f4788fd37018859970cc4d57b974dc0ea2309453a5848e1fb6e0f6d1c7488aa07a1d645cb440582d811d00f4a199214bb3593621425a0e39192

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
35afb22aa435ed2b70a96da69a72afdb

SHA1
7a74f3ce53764eb7ba406e4a76e31fd4460eb2de

SHA256
9fb7824804948c55d71d927774652f5752424fc6bebc637011b2d42fdb37a159

SHA512
993b22c34869f7d438f7fb7d1012cec394c75202b1c4beb41c3080b6a9fcc5986bc0380c95c1a30a026b569f24704f031ddccb915b6e9012c61691665acf7f50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4c945da3628fb75f287c21a46569e532

SHA1
47e4c1121a8705f4d9f118337218456d0da1ecc7

SHA256
f21060c4c24816855a3290290713ba09547395cdf631b85eea393840dffb802a

SHA512
bb96ea442845aab232ff733cc037f6ca1eed5c9a15ceba5b7155773f94ffb75fae367a64f0d11ad62967d9f4ac2828dfcf5e10b2efbfb2cee373692eceb856a4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f00c5c91b2872de0d88c3515afcf5fb0

SHA1
9a402fd2f1d36897675ed8136c7a0ae476d6dfc6

SHA256
fccf8ad9fee80aedfd7b8ea83c682c54c6b699b136da5c207fb481591ce3309c

SHA512
544886f34eb4d877bfe772099fb387d37cdc079285b5fbf0ede1485034dbb9b44b925bad4ce235e44d26d1afd7e248dca4f54502a62a11d2248f532e950a1d40

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
41df9e0c4e6e56b1180023486a0f56e1

SHA1
a7a957abd90c0c480cd769bf58460ce46aa6f763

SHA256
4a53755aaed722536ff646c86a3a4e294737856ac7f0a7b8ba889566faee2858

SHA512
24e3578c1daa6deb9538561f641a411c67daf6396069ec7fb280ac5d9d6f3c8379d89559321d25be622aa065033ac0c680f45cec5b55247e31d0cefeedcb38d7

Download Submit