f224d367bbd5a45455a459234bd8da3545170e16becc34aa5dcb11e401cf12f0

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
24/08/2024, 05:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bdf5e70974f3e7dd99c8164b1606fd3b_JaffaCakes118.html
Size

175KB
MD5

bdf5e70974f3e7dd99c8164b1606fd3b
SHA1

75744f2f6c13730e366f25be51349d0c74824542
SHA256

f224d367bbd5a45455a459234bd8da3545170e16becc34aa5dcb11e401cf12f0
SHA512

e49ff593bf8db6db6b54ac95c266778f5796ded79770d3fb43dab5dcd75ac227a918adf5dc770693a7d8ac90bd680258285c78a20cd18dfadf5bc9d0607ca928
SSDEEP

1536:SqtY8hd8Wu8pI8Cd8hd8dQg0H//3oS3XGNkFKYfBCJisy+aeTH+WK/Lf1/hmnVSV:SBoT3X/FLBCJiIm

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2768	msedge.exe
2768	msedge.exe
2372	msedge.exe
2372	msedge.exe
3960	identity_helper.exe
3960	identity_helper.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe
3420	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe
2372	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2372 wrote to memory of 3284	2372	msedge.exe	84
PID 2372 wrote to memory of 3284	2372	msedge.exe	84
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 4596	2372	msedge.exe	85
PID 2372 wrote to memory of 2768	2372	msedge.exe	86
PID 2372 wrote to memory of 2768	2372	msedge.exe	86
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87
PID 2372 wrote to memory of 5116	2372	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bdf5e70974f3e7dd99c8164b1606fd3b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x110,0x114,0x118,0xec,0x11c,0x7ffdc66846f8,0x7ffdc6684708,0x7ffdc6684718
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2544 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2772 /prefetch:8
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:3272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4792 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:1196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5592 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6012 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5944 /prefetch:1
  2⤵
  PID:5244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1464,17534006338264377555,9345329399839945768,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5680 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3420

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3596

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
08a85a2a1900d4a4f571ffdf41a0f807

SHA1
d35f37f3b07a175f784db3f55daa87ffec029399

SHA256
f2f0d4dfd37d3f90916181ff71cddcb84c5e49f233a94d6acae1b797c03ee6fd

SHA512
e2d7afe0a1b8b0c0508c05c6893af6c4ca6a66420f16d803448f5054a81fc0fbc5de82181dce040f17ee00e36893902afad39320069bed46df8c59ec13759a9c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
23761961869eda86eb06227cfb83041a

SHA1
b243d004787b31a8401a731f7cba8ef456748f6d

SHA256
d4442f3e2be24b4a228a5895085a1c4a1030793e9c100a771fd2ffb5c29b5a0b

SHA512
0fe354c0f48e90afaa1f27c183aa62343f2437d7bd3fafb3f544c385d028be58dca9499897f37cb0f693f7fe278191fffb301c3583129fd1488d345ba6ebf15f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
4d2c22c75565be19d7766e4a7830cd43

SHA1
cba75e937156fce977f34330d39259750b9ad5a7

SHA256
8234af47773d93c0762e34830ebaa60a4c9eafd57ce10fe031963ecf288a7bf7

SHA512
b81e22530e2f314912c7c7731eedb0bcbb1e2823cfab834b37e341d1ae9bb5ad505819337dff58996bfdae6a727208a931a2df5ec26c4c473f2ebd5d073d3f93

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c39a67d3a297f731ded73047b04c848b

SHA1
976e603adf34eb02ce645fe1e7051e22c89b9856

SHA256
cdc389c7b453d5e3543d44f026b07eab7d54c4b8a33d5b6f44aa8444570af9b7

SHA512
2e2567aa365b0588b9e1cbd108c617b7330dcbc95d03e809c584b5ac480e592097563c3451606d5e59a68a9354d246017f299d05533059711b7547354c7cfd14

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8fae44ca4502e2b79bab2869827599be

SHA1
86f5199bcb91c118046f778d4b0e0ea00154e801

SHA256
b598867b6fa5f52e7881ded5ce968b52e689e77e387ab275b8d8f446e2c46bf7

SHA512
ec85d8c0eb3efccc4dabd5ea90da5c25d234b85f40dc6c4f7023eea294802a55a3e2e01dab64f1d36ddcd112dba74a370157504c7906905295364501e32944c5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
42293d5ea07315488c8390b758778d72

SHA1
2c96ebd75bd5bbc298eadaf3de54cd7360453bd4

SHA256
35a7fc9008d778ffe24c773ca1567a9a1d63b0e44e7b2860737aa0c1d4bacb67

SHA512
b1c172786bee8281b40212039cbe6cd5507f29a38aea9f1fa56a12e0ce74a89b2daaa330ce5ab2b1203e7884cfcd89e2d534bf223edb30383842a9a50e384ff0

Download Submit