48c7f00c4eb8c0ed75aec0fdd24f31ea30ae7668fcd12e5542e7c80d71bf1a51

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/09/2024, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

dffd408d19513ed4d2bd45bd8a57be37_JaffaCakes118.html
Size

66KB
MD5

dffd408d19513ed4d2bd45bd8a57be37
SHA1

5f3eaced94fb64f28ea55cde9b678b1c26c5daa1
SHA256

48c7f00c4eb8c0ed75aec0fdd24f31ea30ae7668fcd12e5542e7c80d71bf1a51
SHA512

50bfd9cc57d576c59a9b43a3ece453817c6b0269ef276f1bba71f09fe46146a590ef1355fbc11449e22bb2cdf37f732df385c6e10092f54df18b15ffcfdfc786
SSDEEP

1536:SWkADkAZckABKQbZkAXhTcr0IPGNMxZPdJXxPTQakAr+SOvFSGGDCxOecNL4cxNR:ZkADkAikAIGZkARTcr0uGNMxZPdJXxPn

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
232	msedge.exe
232	msedge.exe
3636	identity_helper.exe
3636	identity_helper.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 232 wrote to memory of 3076	232	msedge.exe	83
PID 232 wrote to memory of 3076	232	msedge.exe	83
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 2428	232	msedge.exe	84
PID 232 wrote to memory of 928	232	msedge.exe	85
PID 232 wrote to memory of 928	232	msedge.exe	85
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86
PID 232 wrote to memory of 216	232	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\dffd408d19513ed4d2bd45bd8a57be37_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb96746f8,0x7ffcb9674708,0x7ffcb9674718
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:2504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:2040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:1676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2260,343394983494757133,17001344952659799816,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5524 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4856

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ff63763eedb406987ced076e36ec9acf

SHA1
16365aa97cd1a115412f8ae436d5d4e9be5f7b5d

SHA256
8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c

SHA512
ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2783c40400a8912a79cfd383da731086

SHA1
001a131fe399c30973089e18358818090ca81789

SHA256
331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5

SHA512
b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
8df08a6a3ef81f73caaad7ae72c261eb

SHA1
2846adc691d0ea7dadd93437e969d1884e0266d9

SHA256
5c1f3d2210f1ef3fdac6f9c392297995b6bb5d3575dac18f96ead9552b3b1c01

SHA512
d42941d3c6c54dc9af4ee6538e05b83952448dd259f0605b9afad5b439a936e35f194ce8bcfef22d4c50b1b4933bfe67ff99e9bd19418fed217c96655a312e01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
e043fcd6c7d71639cc537312f9b6e88b

SHA1
712ca75658d5c8970a952706b98aeb1824f4a6d4

SHA256
e9e8d1e5a1c4f87b75ad096832a0ad1d959afd046bbe70b106a9fa3350c34cfa

SHA512
ff24f1af966e0c3519ada3cd37cc62493ef00cf01174bab7f35a969b7766e7247b51654967d2507558de18889ead63197332397a95a5b366e03bfeecdd0099d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f70094756cc02b360a699a02950d8c6f

SHA1
885ea53ae1d568659ae55469a1481976f044dbd7

SHA256
e30a68ec41308cbb01277b8fdc54274eab68660ac7cceb20ddbbc6165da9d3f0

SHA512
029cc81c3888bddb30890773b0e0cea15c1bf33cca1a8a99efad9d5edd07dc64b72c28d2581344b1a39e2c2290812682d29faa59c13ec863648c33d1a8136f26

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9bbbc0e42d124f57e87e5758353f8d0b

SHA1
a35b57b1272b54ffbe97511a2215b8d156ce85ef

SHA256
f9baa6a952ef5aa5aa673b6a3ff8256e8702325c3d37cb416c0b95e0a9483daa

SHA512
8cd4ce698e648c5d8051cd7879ae6b402cc733edea95d0c2bd1c133f859bf49a87d72a3974a5fa37fbd2a93439028d0be05f8e6676ebe6bdcb234ea39f0fc61b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
9bcb60927d126deb6f3e214803d35aae

SHA1
6c3768c7a6737c49a81d1cd1cb92bd08c3a4fad7

SHA256
bdd01e8feb6e18174f5227a73533b2418758507157ed6956e2bb6cbe44764674

SHA512
d329e39f0d62dcd011f5d40aa337b7dc3ad4c267b98baaf42d98a3260708af3ae4fa5c8baaa666ee21010eaebdffb2614c3c83bf41de2ce7623137264a7da5c7

Download Submit