c50e6024e0cc13742e7910de6b6cb0111a4156da73c1a333cef75b0b3f97c49e

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
28/09/2024, 11:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fc338595e871ee15e1ef5577b7a2739f_JaffaCakes118.html
Size

19KB
MD5

fc338595e871ee15e1ef5577b7a2739f
SHA1

3ac19f1c71a7432a768bc456769b80328cfd4891
SHA256

c50e6024e0cc13742e7910de6b6cb0111a4156da73c1a333cef75b0b3f97c49e
SHA512

fa9b431c34e017fe4c470c52c8906be32894f37c824ba6fe37be2ad3f26f7d464ae1dccbcd79792ce07b59bb93bc20032c272f8b2a7b19691c03edf02bf43516
SSDEEP

384:i7rcpZgrmoSYGkbJgQaLPiQhr7FEj/0MJqUl4fA1psau2V:ocp2rTSYGkdgjq+AhlSfAHsa

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
2180	msedge.exe
2180	msedge.exe
4972	identity_helper.exe
4972	identity_helper.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe
4848	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2180 wrote to memory of 1616	2180	msedge.exe	82
PID 2180 wrote to memory of 1616	2180	msedge.exe	82
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 1164	2180	msedge.exe	83
PID 2180 wrote to memory of 3256	2180	msedge.exe	84
PID 2180 wrote to memory of 3256	2180	msedge.exe	84
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85
PID 2180 wrote to memory of 2364	2180	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fc338595e871ee15e1ef5577b7a2739f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9c68146f8,0x7ff9c6814708,0x7ff9c6814718
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:3420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4176 /prefetch:1
  2⤵
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:2412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5964 /prefetch:1
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5980 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6284 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:2928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,14901189703001265175,72195753156729244,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5140 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2332

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
213KB

MD5
f942900ff0a10f251d338c612c456948

SHA1
4a283d3c8f3dc491e43c430d97c3489ee7a3d320

SHA256
38b76a54655aff71271a9ad376ac17f20187abd581bf5aced69ccde0fe6e2fd6

SHA512
9b393ce73598ed1997d28ceeddb23491a4d986c337984878ebb0ae06019e30ea77448d375d3d6563c774856d6bc98ee3ca0e0ba88ea5769a451a5e814f6ddb41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
e94bed8dc8f113431e5702f91d7a7de7

SHA1
509480f303f07da7bfd8cf751d2f205fb4ff6679

SHA256
8af44107f3927653b17cac40b9220f0e709b05592977a019511ffc26fbac3fc0

SHA512
b7ab8eb47ebf428638530a932aca00f42b18ff902f20a2e9f4623e67e0c3cd2bd4b2ee731907ae0092eb7e84b6bd51b83fd22fb09d7a517a8d68b689c8fc2398

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1da08456aa5d16b7adcebbf89d4f505a

SHA1
53a9e4c5f2891ec8cd42322a6d62cb7a291b6615

SHA256
c5d5d61a23d68274c48fd725190d5b04aa6a73342b40d8ada57ab3c22c44849e

SHA512
856ebea56ebee46ca59c7dd0e20225596b028573b9f0eaa783f7f113d9e5b2a6bdfc4ad125b4647660cb738dc97eb195f4c1654a7eed6b806853e1820ba4aedf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
73cc6e83beebfac13fe878ad7a81faaf

SHA1
e5bbb90e6486672ee8439e55d3771fdfda8ec5aa

SHA256
ee69610919dfc5ee5b5a21385b6397e53c6aab2b67cfaaef8c11fc09be140adc

SHA512
ad80684d7e34972e8d063bfc31f33b595acca3f4f8bb567368e086c5de54418e5e2424343c8caaf4ac25354ce7707ccf9cb7849ea668ea3a93fa5d133daa635d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
51d1c0ac3671e9305d2bbd09de590b68

SHA1
9564b026248986c5808e4618f24db62a42c93cac

SHA256
607e945f4d7c6012570ee79f9c80f215494498993c8e3bb2ad322fa1c6212cbb

SHA512
47b818a6894c0babc149192e774eda20de7f0fb2dd99f44db853381d90fd13a68073c4cd3ec24887b85040eb310ee03444f4f76f92fea6a8ed6155efc55f4653

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
7df8e5ec0ac274d738ff9f6adb877708

SHA1
1ebf90a96fc132adb004efc1142307a1fc130c07

SHA256
a841450d5eec2b17faddc47fae9bef513f0ba8525d2f049b6f4b09c2f83de701

SHA512
89d74e540e9029734dd9d174e639f498a62c0123543b80f502a0ee3fd3571bee6e6f622cfc55ebf288c3638b858e29ba84467958943ee7ee7bc2ca0074542620

Download Submit