7663ebfa4250cae1f64d9d7ba0cffb9f0f2648b7df43b20a0bab5791eb59278a

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16/05/2024, 05:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

498fcd785833b2c0bab2b62eaafa5f1d_JaffaCakes118.html
Size

175KB
MD5

498fcd785833b2c0bab2b62eaafa5f1d
SHA1

7465f4a6d00f4772fa20ab441800965818006606
SHA256

7663ebfa4250cae1f64d9d7ba0cffb9f0f2648b7df43b20a0bab5791eb59278a
SHA512

798c64123e79bf05c6ac7333af2618b2b37a87c6e2ff9ca2786b3c50c6744b72ffaad8f88fb91187a16fc7b0c9eb42b0d5ccf13a739a16253e4705e64aad5226
SSDEEP

1536:Sqt58gd8Wu8pI8Cd8hd8dQgbH//WoS3iGNkFrYfBCJiZ5+aeTH+WK/Lf1/hpnVSV:SHCT3i/FyBCJi8B

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1044	msedge.exe
1044	msedge.exe
2108	msedge.exe
2108	msedge.exe
1576	identity_helper.exe
1576	identity_helper.exe
5548	msedge.exe
5548	msedge.exe
5548	msedge.exe
5548	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe
2108	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2108 wrote to memory of 2620	2108	msedge.exe	83
PID 2108 wrote to memory of 2620	2108	msedge.exe	83
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 5080	2108	msedge.exe	84
PID 2108 wrote to memory of 1044	2108	msedge.exe	85
PID 2108 wrote to memory of 1044	2108	msedge.exe	85
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86
PID 2108 wrote to memory of 1244	2108	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\498fcd785833b2c0bab2b62eaafa5f1d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8fe9b46f8,0x7ff8fe9b4708,0x7ff8fe9b4718
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1956 /prefetch:2
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3128 /prefetch:1
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5864 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5924 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4644 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1908,14069006915507357638,1593642004659116160,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5228 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3720

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4816

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2668

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
4352d75bb7cf00ecdde95d6385fbb355

SHA1
081f2ca2d3bab73688c1fdfeb375b75d9c8a87fb

SHA256
5e2efbb11cb05fea2570b16ec50e5653fffc584a7d496bfcffbc173a0f7dba2f

SHA512
8db7cbc3ecda926df64fda97b50456986befb087ba99c7944fe27a65f81db497ec8bf97c0e5facc1b3e1cf116a750f81c3a4598c804b83d1535298cfa01d6f6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
a44ce4a7ef65c96d27266d23f37aaa39

SHA1
9139517f76100931d8e83e790c60475ad807fb6e

SHA256
8e442539c558dd3d558a1c6ae6693e991ffc607ec38b65a8dc18627187e173e5

SHA512
cd23bbfb80972113404a618b86e021a005dea5fc41af53b56c5f519db11dbc56cd3e5557e8c4836c6f78d8c8a69981515123af09c0b6821f058ffe64895cf702

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6d040add3ac43e8cfbd596089d94eef8

SHA1
d36b92e78af045d6dfceaa81b2cb494e91e74b80

SHA256
3ee6e320d22aa076bd3184a0bc02f49f0b7c054da87df66753ff259be5a38f08

SHA512
97cadf6f691ce8671446e347555b32daf2b91a40b41a13504c0f929c3be6afb770b46f09beec278965154b235f095faed8a951d4bc7233f5c9327b12d9abebff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6921f3cec5e0e64f546b2d6f2e965996

SHA1
7e6a54ba35a964c968a21d0a294e8bf7d31673e7

SHA256
0804442b627ab77b9a8ce06edb50ff9316f18373afd1e2ae7e5f109b5362c01b

SHA512
f9a11f57c908746d7278a04d34d1a6737e1bb40527d0f54b9ae996a3658aeb77afbc26205ca8cff3d424d7ee313a88c7de3f04e7032a2de3cc340f1b857d066a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
13ed52dd39ca1c3b4afe97b5626bf61d

SHA1
4fe0cfe4812c95e9141c20a67fd23d46114d7d82

SHA256
f38e1e376f0a35d7b330e87ff809b6de20fa64dad4f9fda13454c6d9ea200043

SHA512
d26b5d74d4f36c4712a2f27c94f7e3ed7a40451769c3a4ccf47f43a549326a8d31fa013a851f087022931c916c3cd8f020876fb2f20ae7d32b3eee0b9beb22f9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
c98698a2ff384c0417d23b18e5f5ad16

SHA1
8737a16994110ce50aa3b087f50696f1294d95b0

SHA256
13b43d940af3589e0436f89f8a88b8f7a62bbbc7d99445af2e45962f296ad682

SHA512
1f643e371e2728000875f0dce08097c3dffb8070d6522d39e33b90fcf1f09f7c74b98fd83d8917ea4b9a951a08123650cd6ac2997d1a8550bbde06d509084394

Download Submit