7c439d02098c8e79f36dea2bce12c6a8cac8eb14ad73cb5c701a4710fa991490

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
06/09/2024, 23:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d09eae821aa616ec5f0f85076bd57981_JaffaCakes118.html
Size

46KB
MD5

d09eae821aa616ec5f0f85076bd57981
SHA1

444ac63d86e7c4fbba22d0dda9d62588e84a640c
SHA256

7c439d02098c8e79f36dea2bce12c6a8cac8eb14ad73cb5c701a4710fa991490
SHA512

015fbb97f3dcf28040eeffe7bfff7bcb71c0358fbac91d6b672feb56f594ca72d6c2d578bf8848522a67245132864d2adb4ef6dfb69b0324e468b2bc5ac3e0cc
SSDEEP

768:eX8Jnpje0DVWlmm2H0ZTCI3xIE2Evwe/ac1RcWmyWaG7M7FvqkNv2eb71kd8XpmW:e4pje0Il1fJf1YyQ7M7FvqkNv2eb71WU

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2364	msedge.exe
2364	msedge.exe
1852	msedge.exe
1852	msedge.exe
2800	identity_helper.exe
2800	identity_helper.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe
1996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe
1852	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1852 wrote to memory of 2340	1852	msedge.exe	83
PID 1852 wrote to memory of 2340	1852	msedge.exe	83
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2324	1852	msedge.exe	84
PID 1852 wrote to memory of 2364	1852	msedge.exe	85
PID 1852 wrote to memory of 2364	1852	msedge.exe	85
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86
PID 1852 wrote to memory of 4588	1852	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d09eae821aa616ec5f0f85076bd57981_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9e2d446f8,0x7ff9e2d44708,0x7ff9e2d44718
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:5088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6236 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,12132253570674057663,3611311543274213715,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5196 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d7114a6cd851f9bf56cf771c37d664a2

SHA1
769c5d04fd83e583f15ab1ef659de8f883ecab8a

SHA256
d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e

SHA512
33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
719923124ee00fb57378e0ebcbe894f7

SHA1
cc356a7d27b8b27dc33f21bd4990f286ee13a9f9

SHA256
aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808

SHA512
a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007

Filesize
24KB

MD5
d1c8fc93e329cfdb4cef6b1363e40db2

SHA1
2d034d8d0056a8c1596714c7129fc31c74a2565c

SHA256
facc5d448f6e3267100a4c236f09aa98bea1cc3b19e2b2a0985501ca499c4ca2

SHA512
07434e4af30064d5f67158d10b704afccaa31f974ccaca5e76dc9f1b05d76106b44f124c3a94af93eb1b44a5aeaa70ebc33e0f9f904d1cd4c8386b281735d008

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
1c4a20faa96291f02aad27dfb0e24568

SHA1
9848304468f1cd0446a1ce21bf9c4eee420eb035

SHA256
431013e26029d0e7c19ac861c1d507de6e1189ac22a9dbdf4869b937161bda24

SHA512
8ee6faa3952ec95fafab44f78851e279c787de369dd1d5c9370c0cf52def2193080b91015d17ce7dcc2a6921dc1dd353875aea309670f17e0ccba0db3581c3aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
b3181ef9978e953a8998818aa8b274d6

SHA1
3737ab30c9b2ef6182ea314ef5cb29f269fee803

SHA256
b544e5b572fea976fea3ffbe10fdc83326232d0722cbe0469c229bdf69fe1eda

SHA512
c78c8e889060cb6ca8d0f87e954f68a4f162199a3447f40271b36b19f4dcdc88d027545c87cf69ee03da479618486a4c0e7cb494e3e2bf133a6efc62b57f2fe2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
7a368642223a1f38be8a723d74cb53cf

SHA1
df6283bbf2ceb533d02f0d78632a376ebbe7c3e1

SHA256
a8b0996edb23f7e62e2dc1f0c72614cd7559e7f25cc9e346ae7971653ba0ecec

SHA512
7fcb45df431b52a5900127346e7e2b12765e8a1586ec7b44aaea0637a54e79b534276438a4ce54faecb7a00afb0a50bc3ad134624c2f519c4c93e8c551e25355

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
5651f73a9ba87dc60403067a696cc8de

SHA1
8ce9aba23696ba8ada3e2de1f1986197de8728eb

SHA256
61278580bbcbf676f68360dedae0f9cd15472117329d1b8d3fbdecf7715b63bc

SHA512
08996cea593a63b425a233d5843291be471af2802237d4b0ee257b223c6a84effd5e1369d19f3b1e73acd8489d224649a2db26e5da999e30a060a25cd9af03ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
465b73e674c4a5ce45500edae73dabb7

SHA1
3e99a57175591845796e8df6ce6c911fc6656c56

SHA256
fe1504b11d8ddc83b12ae4463ba6dde31587edc299e3ac27aeeffcced757d087

SHA512
80b1989659c4e70c6709e96415492a94ce8d0bdb294b55361800090bd5ff090a5d7e4109f553d444acd90ea6173f3bdf063e9edb29dfdcf8c6f3c783feec09be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
9d47b217cb37416ba7f86d5c0159c1a2

SHA1
0423721249fb92fa7e2762ea46922917e03ffb3c

SHA256
934268f04c4bb25049bc8ce55db7e59753e6b80d0ad373ad60004779fe14e8e8

SHA512
5086968ddbc1f3e06498180baff635ad7bbb95c0bd82ce4c719d5d724ebcf0e5cd0077254db4922ec4f8db802cbcd3f56531da0069d72289e3f1000c43568255

Download Submit