8f7acd1656f038b19bd729d5af574944e3b0bbc507d93fa269f7be517cf4a0fd

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
12-05-2024 02:48

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

37d9f011d5346cab81524196b1fdb2e3_JaffaCakes118.html
Size

175KB
MD5

37d9f011d5346cab81524196b1fdb2e3
SHA1

da5335c3609bea8957a69ffbe216c2451baeaed4
SHA256

8f7acd1656f038b19bd729d5af574944e3b0bbc507d93fa269f7be517cf4a0fd
SHA512

9edb44db8a8f3923d4808fe64a4544f7725318ae74836b5613fec813c7ee372dbef5dc110e9c7d986b69b337585974156419fd798ee250d3414d32e766a341d7
SSDEEP

1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS3uGNkFhYfBCJis0+aeTH+WK/Lf1/hmnVSV:S4oT3u/F0BCJiOm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4328	msedge.exe
4328	msedge.exe
1452	msedge.exe
1452	msedge.exe
2992	identity_helper.exe
2992	identity_helper.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe
4316	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe
1452	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1452 wrote to memory of 3596	1452	msedge.exe	81
PID 1452 wrote to memory of 3596	1452	msedge.exe	81
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 2608	1452	msedge.exe	82
PID 1452 wrote to memory of 4328	1452	msedge.exe	83
PID 1452 wrote to memory of 4328	1452	msedge.exe	83
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84
PID 1452 wrote to memory of 1256	1452	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\37d9f011d5346cab81524196b1fdb2e3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ace946f8,0x7ff8ace94708,0x7ff8ace94718
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2220 /prefetch:2
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:1256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4988 /prefetch:8
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4988 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,14639338014848919872,16925829539939768534,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1740 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4316

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4784

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3652

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3784

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
e275c56cec1f584fa9adb6929a882436

SHA1
942f3ec7d23f7b4a8b9d41c0dd5d42bc7b31a6d4

SHA256
b70108f68e0dd577691c111b786fc24d7a8e944db2b6ccf5ad59b31bd9bdc73f

SHA512
68613aeddc09c5525d2d04273d58d8019cd1a01e4cd87c2871cb4642b53f4c1338e8bb5302483d44d1cb8a84b6ecf6dcf93d5bd7c7393f0337e65aa1837f9fa6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
77b166179d166c80499cdf168cf19c3b

SHA1
542c5029bf408c3299505cd7d69980043c0819ca

SHA256
f607816276019e24d9947041c7e249a2568d202859f8ff485dba30911fe6abc8

SHA512
5fd11fe57cde864bafdb212bf404bec3adf63c39c48f27e90ae9b2e0dd009ec4db8e9661cc7c90c94ce1c2328dec4d6be1782a8465d0e431c1424fca4e519820

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
93dd4f4230a4f1dfaac3719f34961aa8

SHA1
c0a8348cb4f624906916c0c8311bc4d38282d5f8

SHA256
e0b9726d01c375f41e605205cbc55fd5ca837eba491c2c8f45478611aa5f9f83

SHA512
d8a80adf93a6ce1c5091294b7d266b9c34d0aa62bf2f896448d3b672e6a3418d36d9af25c240c88ecba40f0a291f95eaa0aded05695d69e6c66bf438daef3f41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
42050bbfeb137d6fb9acccd0a994fddc

SHA1
f49ab0ca8f5945cac49681498d1461adb86ae955

SHA256
e897b7ef05cabeac6fdaf6c6474fa4298f7382f22865291cb91001f65712c93c

SHA512
48ded627d1073caaa040bcfc037d0f9e507d963e63c2005f1da8f4b973ba49fa4c681acb939ff641337da44eaa92ac8e9e2bf48f27ae286f18340972efdbb889

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e975e6b9dbeee03ffef38fddfd7696b8

SHA1
a9768c605c14fe0c19ebcb1576a970993ebf039b

SHA256
d546bf39cd5dd132c9a2e871430c192f9df6f89ad43febd0f9834f43734e98af

SHA512
cd5f46123409118e78188a85c0ec20786cdfe39bc4079c1a099d148c92412ebc718c872d59e7cf901c0a8d817e2778f5d9955a1bb5bbc7ddec4e2efa750b11a7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e0766eadaab90b26a633408725f90008

SHA1
38cf40f5f616b8a70dfdb0ebf0f6f46f43800649

SHA256
df7d129fdd23781a1c4f3d3225bc769a7753ccb92546f6fb818aa39bd9e88d3e

SHA512
9355a39bd6f28a49ba20ae7b0991da204777ed911d72b9c1eb857dc5db4fa1c7b3a209744af44563e7272125873d600fe8479f999f0d12f165e8e42d28e416f2

Download Submit