1d84a24afe60a6dcbf7a81144b5d48cd1132d24a53199a9a3ac75a790b9d8ce0

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/09/2024, 11:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

da44ffe5e01d627742ba7ba0f8951601_JaffaCakes118.html
Size

175KB
MD5

da44ffe5e01d627742ba7ba0f8951601
SHA1

f7e949b2ce1b33128a5d0e617d43dc85f9178a81
SHA256

1d84a24afe60a6dcbf7a81144b5d48cd1132d24a53199a9a3ac75a790b9d8ce0
SHA512

109c65f5909e047f3b2eb519211da0b443ecbf56884a84fc1dac69dcfaa6da24e8187106f999c10ad5c8a8d6644ac38b971fcad4c54d814e7885019cd23f24cc
SSDEEP

1536:Sqt98gd8Wu8pI8Cd8hd8dQgbH//WoS3gGNkFFYfBCJiZp+aeTH+WK/Lf1/hpnVSV:S9CT3g/FwBCJiAB

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3636	msedge.exe
3636	msedge.exe
4612	msedge.exe
4612	msedge.exe
2668	identity_helper.exe
2668	identity_helper.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe
1184	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4612 wrote to memory of 4208	4612	msedge.exe	83
PID 4612 wrote to memory of 4208	4612	msedge.exe	83
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3240	4612	msedge.exe	84
PID 4612 wrote to memory of 3636	4612	msedge.exe	85
PID 4612 wrote to memory of 3636	4612	msedge.exe	85
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86
PID 4612 wrote to memory of 2292	4612	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\da44ffe5e01d627742ba7ba0f8951601_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe80f946f8,0x7ffe80f94708,0x7ffe80f94718
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2868 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2936 /prefetch:8
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:4600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5732 /prefetch:1
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4212 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,11228929154519939745,10567693536861625335,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2472 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1184

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3076

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1824

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2196

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
a62ccd60d05a13c2e721a6e3165cac2b

SHA1
8093711de2dc87c77c86c100d5694660e305d915

SHA256
3cf4682c2ca0216a9ebdbd7e49b18fd7ab82f9642fc2d98118858a3aa8d22938

SHA512
de80a2a30fd6dedcf971c554cfc54662c2ac5733641f74e1ae4616e1e14f8eab7c22c1dcaf11e3e9ae1e010aac0d7d5cabb7fdbea677a203c9ebe531c63579e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6f4271beec9cccaea0e665fd6a892758

SHA1
1a078bbc467898a3723615adf1aecd9c70873359

SHA256
2a6a61a84291ca3e0f7c0c1e38216e4570a431911853c6ef9d9aa05d61da8d77

SHA512
34ebf13a0dfb0fe976ab8585c57101b5e815ee00a29b47910a07915f0ca5c36f9873c51c46e6fd3b55162ab4ccd3a112f10d94fb765b607475c246d31d62be0e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
943a1b79fd88bfba4e66edf9aba2655c

SHA1
b0485d1c9e1218680bc6c9283090ab8dec7ed53e

SHA256
23c9910591f05efdd029d9f9aaec7ae22ff90420e64e234ab7d00e67a1d655b3

SHA512
2d2be3819ed1da12cd5c0fa6740ff21fcd92a299142a3c9203b05ea7c3cfd0b9ab6c45aa61a868c1775056579c984f76706a132c7cee06831d1500325d441263

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
d481151ca44054c653abeeba55be1225

SHA1
140221f37afa0aa380ca260aef911baf53b96042

SHA256
df189fb9f78e5affda094007e4a0d9419ef6988e7e43cb6e490a25f55412fc12

SHA512
a03bb1a7990e6e4ec73c6aa46cf75242663d2f25e65ccfb2c1ad21a547b5524d682a49f0f3b35fe699753f7787668215a62a09b5193d18386c8e7b67e7610436

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3579a250bb28b1664af7933d0706b078

SHA1
1697acb7107171318bb4dc279e7eb2cf4101ae39

SHA256
4828150d82cfaa847eeb84e7c9df723975dac46fc89e35515bdd56e4878cab2a

SHA512
f9c0afe5a4094af86ee0fde53ab5572b24c4fad7329de5bbd2ae9284d2659eeab706d1fe260d7ae835985d75f664b7d9fbb508272ca57b1fc8889f8c184e33e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
88a1edde1eeb1327fb94b70fcc7a07e5

SHA1
0cc444a97a64b660f10eb98df4faed538f9fe612

SHA256
ad629ec6644642b57e3832572cae4c2086beea9bc4a73f63569631a001cc0e24

SHA512
1970aa4a8225f6058f291ca68df73e0ef925d16de2639e29f0243d84d647b0373fc2833d6751f4190bbfe7a6738fa362fe3f2226a1a0fa66467152f799c78311

Download Submit