76d1598c21abb15840aef2ba36ffcb39fb4fc0e1a7be000f036908d57d526aa8

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05-12-2024 04:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c5d88a125019769cc5020709037bf258_JaffaCakes118.html
Size

52KB
MD5

c5d88a125019769cc5020709037bf258
SHA1

6a25cd593c025d83273737080702cb4e4446dba7
SHA256

76d1598c21abb15840aef2ba36ffcb39fb4fc0e1a7be000f036908d57d526aa8
SHA512

2565ea153bdfc7f10d049495afffbb5e140e2894a43f4d2c08ea83baa889becf9910a64445cd75160b0421293fff2005cfda0048737d47d1c45cbe332d400f38
SSDEEP

768:/QqlwZf0HZipkm5pBG11+VWcn8TtmFQzfrj2tN:/Qql+Uipkm5pA1cVZnctmF4fr6

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
3440	msedge.exe
3440	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4100	identity_helper.exe
4100	identity_helper.exe
6084	msedge.exe
6084	msedge.exe
6084	msedge.exe
6084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe
4596	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4596 wrote to memory of 4960	4596	msedge.exe	82
PID 4596 wrote to memory of 4960	4596	msedge.exe	82
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 4684	4596	msedge.exe	83
PID 4596 wrote to memory of 3440	4596	msedge.exe	84
PID 4596 wrote to memory of 3440	4596	msedge.exe	84
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85
PID 4596 wrote to memory of 3464	4596	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\c5d88a125019769cc5020709037bf258_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x9c,0x108,0x7ffd8ec646f8,0x7ffd8ec64708,0x7ffd8ec64718
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2936 /prefetch:8
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:4260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6244 /prefetch:1
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:3668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,11198860034201946338,14761464644929193854,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1920 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5008

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
fab8d8d865e33fe195732aa7dcb91c30

SHA1
2637e832f38acc70af3e511f5eba80fbd7461f2c

SHA256
1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea

SHA512
39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
36988ca14952e1848e81a959880ea217

SHA1
a0482ef725657760502c2d1a5abe0bb37aebaadb

SHA256
d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6

SHA512
d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
41KB

MD5
9631c594f55c395f07b12046cb8fbf9d

SHA1
cd6532d1689166c19477923c73083eaaf8cd21e3

SHA256
a56a5d0f5f612bd39fb02fa1ff7a721a33fcb841f40c48757381b3b7c4a25726

SHA512
5d3bada46dbc583755c279b5ff3c155e15f16d51b6522752ab289bdb62b71abe1d91def5733ef7e77fc01d127508d07e2c67e731bde26a478c4780c8918ba105

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
89981517eb8f7c49462eb6e08b1cb3da

SHA1
62dea3b0c053d37d0a6e75eeb8dfcd53e1e777c3

SHA256
9e07e640850edc48b3ffd8ec4d77c9ba32b72a7403f39467b861f32c2913a6e2

SHA512
7be2704f3882912979c9033d4dfcefea5b9d70a7291fc83a7c2fdb4ab2c552f80b547bb5ce459733d4a9bfda02e6678c6a598c4e7fa046d5d12a24d2e3a8d977

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5b8bb03cf684d40a05e4cfe30621be23

SHA1
3f9ba856003bc9363c6620c2aa08f87367cb238d

SHA256
0260ee8d3a52b3cdb5727e8b78778e22a0058ba34074f0fd982da5d6521b68ef

SHA512
878d879337a1f81577320f52cba1af24c6cba5173df28ccd93b427bd5495d6423412b91f769ab4e2277f78968454bc6002dc25f65a9750795f96f074fa5c38d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
919115a9094d82553ecf7ea5678ee16c

SHA1
89642a58618da00c2923417b36741ca9277b4b0d

SHA256
e39790e36ef49eca4cc4f3d1e221f79cd7f78b1fad4b40783732e59aff57dbab

SHA512
040cb72d05f4e5feefe592ec439fbb8b960506fbec120daa592707aab512c3fea0944bea9c2c743e22b230ae29211879ba6d34baf7fa911225e3c0fa4c2441fd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6b828010b5d772e3ca8a3f2b1680d803

SHA1
f7b4d8819040dc8b08e83a40fb10664079ee2d69

SHA256
dd80282634d6cdf89b04b79b04d52ba3279e7933c049150ca86d99ec4714221a

SHA512
00e3f372a149f6810f5bcd95648e381e737ee83d7cdf9170eabf161f5d1898d82cea86a79df4261e157682f5ae437a7d357521188a95f3e8e84467e892039c1c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b887aca20040f440767d8c5e5a3b80c4

SHA1
25369bb854fc598bfac0c1bc8c0040e5b3f133cd

SHA256
374eb3c7fc97fccc258407f8a7cc1e5bff4abd24e0c7b86b333898a1fbd14b68

SHA512
f79e5c666a7c78cdde4e3ac4e51c31df451a30de22ef34884adb6caac28f661a33e6ec55b2bdc49a24ba10a1c777a4d0d2ce5650afc3ec492051fd8b0793fddc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
cc7f5afe036c5ccf3f5dd9eb416091d6

SHA1
a1b4ea6c1161008182aba05dd2aefc251f896a88

SHA256
f53e7c8a18419e2aaa2f497f48aa0937d0d03f540247680d1a90f7ab8960c612

SHA512
214c624e73fe4f9f42a97c4b18076b6a8857e9bd6c33916a4fa628776b8ef40fb13c70bdc359aefe11ff70f34c9d3417d8ae9e64efe019c3b431e2477a89328c

Download Submit