48c0200d27712008e03a8b696ce250011feac0d4ff59e6466521c110be221ec0

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
18-08-2024 22:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a872459275d34e2eae311578721ff137_JaffaCakes118.html
Size

57KB
MD5

a872459275d34e2eae311578721ff137
SHA1

3a9f85fffd1773f47ce1ea4535656afcde4a1d6c
SHA256

48c0200d27712008e03a8b696ce250011feac0d4ff59e6466521c110be221ec0
SHA512

d6c29989d4409c94e11d30d8e9921ed7b7075701d2d8ea3f9213bd545913f4d699414b5b873b6338ce49a786f395a4634acf6d0e466381a94bcc469f7dfa2da6
SSDEEP

1536:gQZBCCOdx0IxCszWlOalFAWmgnbERAxRAx4uj8JIi2LHAtOfGXOpUnnQppir0p0K:gk2v0Ix4lOalFAWmgnbERAxRAx4uj8JS

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
2000	msedge.exe
2000	msedge.exe
4044	identity_helper.exe
4044	identity_helper.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe
5512	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe
2000	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2000 wrote to memory of 3720	2000	msedge.exe	84
PID 2000 wrote to memory of 3720	2000	msedge.exe	84
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1696	2000	msedge.exe	85
PID 2000 wrote to memory of 1576	2000	msedge.exe	86
PID 2000 wrote to memory of 1576	2000	msedge.exe	86
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87
PID 2000 wrote to memory of 2604	2000	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a872459275d34e2eae311578721ff137_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff882f246f8,0x7ff882f24708,0x7ff882f24718
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  PID:1696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2944 /prefetch:8
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4072 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6136 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:5284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,14234896086733004921,1086363006247225126,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2744 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5512

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3632

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3256

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
209KB

MD5
3e552d017d45f8fd93b94cfc86f842f2

SHA1
dbeebe83854328e2575ff67259e3fb6704b17a47

SHA256
27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

SHA512
e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
ebea87797cfac3ba59c672f829a03a9d

SHA1
fb39ed401483465a9d8a32dc2cfe4f4f322f34e8

SHA256
817aacce035e93d5335a88d46f07ed1033067d9e5d3b19f952eab969d8992dc1

SHA512
bbb89dbb67ce8eb875ad3d1accc63bb02260c97b180d0c3c178f68299b5a7dfd8bc741b0a59aec6025f474139d28750f697ca9d2f99271e8b23e8a3c00b2bff1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
37f41d254862141fc366ce258db627cf

SHA1
d2963fa36cdf34666c15a4f4e95746f14334e9e6

SHA256
42a0a5334f3e4511a4e801ef9e9d0ec5b9dd681a89a2f408f9cfdb5f96f7424f

SHA512
cda6e237c674098f0c2f6a3af7818e367994fb004174d891650983c2383cb3d8111054885d352ae8346d2359d3628318562f53ed43fa0dc6c5533b325323b922

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
196d425bfa633a7d5c63f3ba32af1365

SHA1
a5df4a7f250713ecfdce802f11e53d6787f49e59

SHA256
607cfcdda32dc03eb371b59adc00d6bfce548f9fda318b0145b23a74c64f4d77

SHA512
0449e0d169f14c0012040b8523e53a774a5d1936511bf031444a5ad99c854a8772f7c908a8d2eaded627f714d90cf4c0ca0a5123423da2f0490a479e6e1c76c8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
80eb17ea05841d8740ba5442def5b143

SHA1
dc86251119145d6e34c2281ffda68b1e688793c9

SHA256
e2e9e853e2d2a973414de66df3ff62cbcbadbfe906dccf6b6128023da5ef8250

SHA512
f3c973b526e5e1c3f4481bf4684d474453998359526dac8993ff2ec9aed8b55831a78311a9292fa1bbd97ccd3ec09ee8adb2b4dbeb9686bc5640fc3639e67d93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0d2396ab9ee6e076cac4ee724f7b795f

SHA1
061226c588a19f8b228a1e35ca1343a0f1e50099

SHA256
d25bbe8b3602d2414d3c886941b2c62574efa99dc5715459b021abd69f0db1f1

SHA512
ebf5753144ee4a80e61b9417878799a7e92b6fa348739488451f982312388bd60b42984235d03003b16e43d340387afdc0404e4bea425537814e7086bf9efd3b

Download Submit