0ae4cbc8a71725ee7023d803edd2fbb519d35900b29b5d7c09159d22b7e6e852

Analysis

max time kernel
145s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2024 20:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

107c5b879d47d7bf8b5f57f1d8bfe1a0_JaffaCakes118.html
Size

46KB
MD5

107c5b879d47d7bf8b5f57f1d8bfe1a0
SHA1

ab752fdf29b83ca7bd94bc8f533552c31a2b4e5b
SHA256

0ae4cbc8a71725ee7023d803edd2fbb519d35900b29b5d7c09159d22b7e6e852
SHA512

299f7cfe2f0b584b52bc1283072fa696eae1c68d92fbba9514a1c587936730431dce068afdc4a4c66ec218b9a4694a8a43475df6df2742ad17f86569507a3f08
SSDEEP

768:GZCxA6zB/lopRnTuoAKCc4lRYjKyqKjIMfFbEv2Dzw92bjUuMuF/ToKB/i43TJ8H:GSVzB/lopRnTuoAKCc4lRYj+KjIMfFby

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1492	msedge.exe
1492	msedge.exe
3632	msedge.exe
3632	msedge.exe
1636	identity_helper.exe
1636	identity_helper.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe
3396	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe
3632	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3632 wrote to memory of 4888	3632	msedge.exe	82
PID 3632 wrote to memory of 4888	3632	msedge.exe	82
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 684	3632	msedge.exe	83
PID 3632 wrote to memory of 1492	3632	msedge.exe	84
PID 3632 wrote to memory of 1492	3632	msedge.exe	84
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85
PID 3632 wrote to memory of 3324	3632	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\107c5b879d47d7bf8b5f57f1d8bfe1a0_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe955646f8,0x7ffe95564708,0x7ffe95564718
  2⤵
  PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:3468
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  PID:1804
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6100 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4124 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,4817882318609654820,9065436401633808658,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4940 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3396

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5024

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4612

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
73e62f164fd3492244ac813d37aeb5a2

SHA1
3ccc31abc011a0b694a53668b8933d6ef257da9e

SHA256
9d3327a48837f41d4418a9f02c1ac28cef18e97ffe58d496526824908aefb55b

SHA512
7d716bf3fc317dfdb2d30e5bf800a48a87435e5f3094eec87898ab96810540f807c69132f35844a5ddcc19490f12f829c9e05c812472fdac7b3d1beb85c65711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
2c3ff6b978abb1909566ac3738d21866

SHA1
3d1fc287314f705535ac5e1758cf40b03bafa6c3

SHA256
4f4952cb1d9a428f9fe9f145265e4f4cccdd24853806645d845b8662076bb1cb

SHA512
12ef26870db9ed7b4687882e2876391c55bb455fed14e4f5defd629c0b7b0e3c3f6e745f9440d74690eb2156c6fb4f12631cd365edd5e9abb2528e42a97212e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
1646e89e924038c25590514db6233ccd

SHA1
0684649a7299bc715dbe2a448f54bf82d6eb936d

SHA256
55cb9b0abae5ea9be05d7a7a67c2113fa570f18721da6871c3cef4fe6c40a250

SHA512
96ab6da79edc302a1b04b327ffbd3a853fc74e7ebc589f6e56afc8b7be14e71f7c54b4ffa062dff9e4510a33c95a15851f9f8f2b06f91c07ddf7306bdd4916e7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b0e242757b169b4fcb847904094e344b

SHA1
258cd5a548d58a3d05064bd5e8882ccac4cba64b

SHA256
e2945fae6bcbfc635256f51e43007f22e0dbc308e1859f4bc4ceb121a73a3b01

SHA512
08eb16a8ffe14909380afc9078b3a250ec49c853e10b8f48d0cf8f417c543f5046f51075de7600ed8fa1688bf002712af8a3cb9a4d3c8cc057f465bb2cfffc0b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0cccb6c225cb478905dd88313d8cce4c

SHA1
1fec18b2a0267940dac334ea0ba88a0d12c3d474

SHA256
301db0985390edcc099022cd109c6951b68fe58e27851b3d2d845e534a241044

SHA512
139f4fe794b19d9ca6e8465c0358d3eade53a5953e652bd5cf544ea7d68380c0400fbbda99050e23989f71ca0d66fcaba84c998a5f7ca89650d170d54e762175

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c36fbdf974794c8a79648fd8f0c47519

SHA1
89b4fc23a39ab149103d96b0a5cfdbc6e8793abb

SHA256
d38f4153adf96e649e5e03ad4fe2341627d768642932b3397d36560b4d33cee3

SHA512
41d95237c40fa36776bc545343dcb09cb4d35ac174658328c7452352cbefd794e4f2d23335395bb7dc1a2c5473f62a653ba5043e0bcafd85b4c356d3f027ddd6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
91b803c8b3a27ae764f0adfbe77240c5

SHA1
3043b91b4a6389eedd7da3700a245b4d4a5423af

SHA256
f2d84dd2893948ac4ec195667e2f45588cd0a4c81c2c024259f6c1f86b754831

SHA512
e0e6d92396930b114ef426ee6232ab5d0ea7dbd28d4b93f017f323fabd88b867f1e1b9e7967b33b78fa1a1020bdb8f7f721573791b5ff606c94756ec762c089e

Download Submit