14aa50fcab4c4d8d4ee7dc672156c04aefc2aee582f3ea645fbe4798da079c08

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07-01-2025 22:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JaffaCakes118_7cd37b9c9f87a7c550a63e51c964e96f.html
Size

64KB
MD5

7cd37b9c9f87a7c550a63e51c964e96f
SHA1

dd6b483acd45c9eec8cbb30db8b041bab9c042b9
SHA256

14aa50fcab4c4d8d4ee7dc672156c04aefc2aee582f3ea645fbe4798da079c08
SHA512

4921a96106b1308eef11eaf36e90824b006b19e2586b3728dda1fcf1ad1d2e58771d9dab933e05e6fc2d40342d3ba4807adaa1cad6c45dff9756864156752ae0
SSDEEP

768:JaNP+oSFRhvqveMApv+m98CEjPwmdtPseKxH0Fa53B28HedtV:JaUJFRVqve1pvV98NbwmdLFa53DedtV

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4844	msedge.exe
4844	msedge.exe
3820	msedge.exe
3820	msedge.exe
1732	identity_helper.exe
1732	identity_helper.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe
4480	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe
3820	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3820 wrote to memory of 3868	3820	msedge.exe	82
PID 3820 wrote to memory of 3868	3820	msedge.exe	82
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4828	3820	msedge.exe	83
PID 3820 wrote to memory of 4844	3820	msedge.exe	84
PID 3820 wrote to memory of 4844	3820	msedge.exe	84
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85
PID 3820 wrote to memory of 5100	3820	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_7cd37b9c9f87a7c550a63e51c964e96f.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ff93e5d46f8,0x7ff93e5d4708,0x7ff93e5d4718
  2⤵
  PID:3868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,3950189764347499837,4030742488383104964,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5244 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4480

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:444

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
215KB

MD5
d79b35ccf8e6af6714eb612714349097

SHA1
eb3ccc9ed29830df42f3fd129951cb8b791aaf98

SHA256
c8459799169b81fdab64d028a9ebb058ea2d0ad5feb33a11f6a45a54a5ccc365

SHA512
f4be1c1e192a700139d7cff5059af81c0234ed5f032796036a1a4879b032ce4eedd16a121bbf776f17bc84a0012846f467ad48b46db4008841c25b779c7d8f5a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
c4cee03432a26d5575155a75f23d5dad

SHA1
4a2d1a7a89fe31c5127e8ba2deb72aea1efb0bb8

SHA256
34ef4c94bbd9e402e5696d19d9ef4e321bcbf0251c08b21064a74abde4cc39ab

SHA512
7e55f32b9fe34ad9a2d87fba3782e19de5d0e122f1c845bc15b304248602eb8d26e3cd46d077744a13f63c9de4f1aea1410f6b6c6f51377660dd3a4e570d993e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d8254f5ce4c02d4685352043af81b43a

SHA1
8e5ab5e435a79bedf38a2130f5b5ec7b088a78e9

SHA256
9d4cc0aeb89b3f55ffb8d5f1b9ca0722eed374000eebd600af81cb2bbecee259

SHA512
7e72e567b8dee9ea1eda2114065c9d87fc818b72c971917f2c26099fb71163436f11907a291edb8a21c48e7f6bd9cb4b65daaf63bfb447f8481e273cafde4c15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
5e6767002a102078027c643dffd2ff84

SHA1
9874ac1da2d6341fafa83be08a74a3a3309ba60e

SHA256
ad2737a3b633339b48b08e93a0d33c4411b869cbb63d96bb3e4c2186c677988f

SHA512
8ebfd0ba78eebbe75d27e63d223a844370a7731ca690d843af39709b249d35c3a3218f93b414395b91e9bdfd949612712617a0a3ed4b27ac8d6ab3f4da59cfbf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2b3af93eabfda0be409ecab3a9ecb912

SHA1
b1d3e8639adfb4fd804aa9706fa548e2512165fa

SHA256
90ffb296ff09e479add7ceb5b7a2ff9341d866e0a7ec34418b79790d0faa40d0

SHA512
9eb71c1dcb88298fdbfca25f1336f50bee6a01a4001a7046cc7192c159c4790ea963f2e5705e34e345c8b278e2d7332b42fbffe17c598fbee7dd448919570455

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
314d0533c04c4e176684f7bb27b2d363

SHA1
d8d8a14de8617628921b1d1bb9bac046fed55010

SHA256
93f2e0425ca5a57a96c17d8fe958d8f541052a7c9d271fc4ca848d5e477268b4

SHA512
f979de5345317621233ade09878c6f880deff1dc13ab57b46619c065d6d0009e65aa51358f1f11faad0ff2188d13f4d8c9d33714975375ff297870c68a11ef62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
579bc59385fc1a1dfc10ceb980c4ed4b

SHA1
dc88bff9e1dc0c10e8374597ec1e9f4d81066968

SHA256
d42dc3be1ac2cc69db1341f93cd7a05b9bb16b637b6f45a6de3a74184844180e

SHA512
98141c384fda8365cd01e1e54233813c46c1c19ad4b89d6ca3fe5ba722c2b859be050ddf6d56e3b783d2921380201cef02f7615c8dce398ad35d35d77a648a38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
712a1f2dcd92c21d2e8b147127845ca4

SHA1
8efcab86844ab5502a39c1280747e3dc7d502d50

SHA256
d4da339d9b5196932261b5c1f217f8606e751efd73b6827c516fcb77a69acdea

SHA512
c4bb3d081cdc6c35abee7581050952e931f393f7be3d5d470dc2e9c7cf9bb146e85dd378060e41a543c8042383557568911be6fb1edf6e2bea5f8fe3ad7346aa

Download Submit