afba89ddd6f06c92eaa5815bda7fffb6ba0929980cc1c132c324a074c871d3dd

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/10/2024, 18:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4167c1f2b81d105afc0c7ecf4506c257_JaffaCakes118.html
Size

15KB
MD5

4167c1f2b81d105afc0c7ecf4506c257
SHA1

e088e65b7513c4129ded1ddf8d75981fea138c90
SHA256

afba89ddd6f06c92eaa5815bda7fffb6ba0929980cc1c132c324a074c871d3dd
SHA512

a26067c70a99666f007dafe4d3c6a299ed87b0b9917f64248944a194f0bb327fec035ed8ae68165ff25e25b7b029037c7b0d176f6cbaf9262a377f05b2432d91
SSDEEP

384:goco3Qw+ufXf1Qx8vn/ACdJgBFpGogqJ2Dk2V:Tco3jjX1Qx8voCcFG9n

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3924	msedge.exe
3924	msedge.exe
3136	msedge.exe
3136	msedge.exe
2044	identity_helper.exe
2044	identity_helper.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe
4580	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe
3136	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3136 wrote to memory of 5084	3136	msedge.exe	83
PID 3136 wrote to memory of 5084	3136	msedge.exe	83
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 692	3136	msedge.exe	84
PID 3136 wrote to memory of 3924	3136	msedge.exe	85
PID 3136 wrote to memory of 3924	3136	msedge.exe	85
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86
PID 3136 wrote to memory of 4760	3136	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\4167c1f2b81d105afc0c7ecf4506c257_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9ad0646f8,0x7ff9ad064708,0x7ff9ad064718
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3864 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  PID:384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6132 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2264,8311355377453764561,14439219596759349006,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5744 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4580

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1608

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e55832d7cd7e868a2c087c4c73678018

SHA1
ed7a2f6d6437e907218ffba9128802eaf414a0eb

SHA256
a4d7777b980ec53de3a70aca8fb25b77e9b53187e7d2f0fa1a729ee9a35da574

SHA512
897fdebf1a9269a1bf1e3a791f6ee9ab7c24c9d75eeff65ac9599764e1c8585784e1837ba5321d90af0b004af121b2206081a6fb1b1ad571a0051ee33d3f5c5f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c2d9eeb3fdd75834f0ac3f9767de8d6f

SHA1
4d16a7e82190f8490a00008bd53d85fb92e379b0

SHA256
1e5efb5f1d78a4cc269cb116307e9d767fc5ad8a18e6cf95c81c61d7b1da5c66

SHA512
d92f995f9e096ecc0a7b8b4aca336aeef0e7b919fe7fe008169f0b87da84d018971ba5728141557d42a0fc562a25191bd85e0d7354c401b09e8b62cdc44b6dcd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
215KB

MD5
1585c4c0ffdb55b2a4fdc0b0f5c317be

SHA1
aac0e0f12332063c75c690458b2cfe5acb800d0a

SHA256
18a1cfc3b339903a71e6a68791cde83fca626a4c1a22be5cb7755c9f2343e2a5

SHA512
7021ed87f0c97edc3a8ff838202fa444841eafcbfa4e00e722b723393a1ac679279aa744e8edde237a05be6060527a0c7e64a36148bd2d1316d5589d78d08e23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
cb6c32997ada395b75aa1c53f4418d54

SHA1
cdc62dc3d249f1a52840eb3de69e711f31e4b63a

SHA256
ac9dc371938d278b0779030df2e8c5bfd03e63a64992c3e81243771e3a666130

SHA512
94df17b6c774a4a8304b48fb1564bd9ec22715282a4abb608d6a661847e9e7ecf7c2725babefd12abf0f9617e5915d64334694a29949b5dbb4041331319d9ea0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b5c1eb9c0af1cb10aa90813cdf6b95bf

SHA1
470077f184c9f03b05c48c6133775266888d2cd8

SHA256
bcfc5d24353aaf588f2cb1c681eae666594e2fc4846a9d8e0efc964121764b48

SHA512
f15a13cc9aa4aa714b42c219b338dc3d83b060170f3d5e73d37b0732a4f07fe6fcc531e9dbdbe811ea3b57c3083c4c482c77d093a98e9310667fd50e8dbf900e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
1bb2b3fdb6a4769e9e75be292dab7640

SHA1
b9eb20c331bc1f086e6edf63b02147e3623adda6

SHA256
0871d7ece3b1ecaa2a3d08dd886271c7d47307e70c765f6011c098206cef5a17

SHA512
eccadedf5c2b9d06c5a54c0778c97335a9f10a3486b54262968613912c76af806df6d5618ed477f25d736e549d482bb5a1782fc87fa58a9a299a172c3b883c1e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b00348df69bce8a529621ab7353aa479

SHA1
9e1522e220fe6106f1b77c1b8d01587a2207283c

SHA256
c8aef553676feb204561c7fd5249963730eb284a3d53e889518b15f973bdb99d

SHA512
5619c4ec56ea91c5ed79d622d09fbf9c665b4096d5b7b221d52674a93e446e013e5fd5465e0251138437571fc0529cf36f0782d277dcf6681208657f1f23d5ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
78b26bbe2e4737e2e1b861c3b6fa73da

SHA1
8d508821d42e4bcb0323036bf755ed22199efa7d

SHA256
fcb3d5714aa1a9b7e3580dfaf4c9af66527778a6c3ccfad065051883dc468863

SHA512
2c780699e305a1caba57b51a55e9dbde7e515826f072b8ffeca58a365516ca6c4eeb210aa991929c33251cd84ea3a75d5a51d927c6f64735a777d7eec581a431

Download Submit