103f417366d1557b33840c61f2dab099df987d315c320fdda2b13497fd2820c0

Analysis

max time kernel
137s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 23:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a30a3d8e0bcb48063109da97e73d0dca_JaffaCakes118.html
Size

39KB
MD5

a30a3d8e0bcb48063109da97e73d0dca
SHA1

7c8308faa5604eaa054f2bb70ffaac5c748057a0
SHA256

103f417366d1557b33840c61f2dab099df987d315c320fdda2b13497fd2820c0
SHA512

fa543a965322ae0820a1040a91e630875c758dc7a64febb5adc9bc2eb1bbc8fae510dce49788fb7f62856d6b5dc20355461b5c727311040cd7b319c7f1c997b4
SSDEEP

768:8Flbx1bD8xb2vbkdg1W/f9bmReJuypoGeW01JM4J7YAX2VsnpP:8FlP38xSYdg1W9iReJuypCcWZGmpP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2352	msedge.exe
2352	msedge.exe
596	msedge.exe
596	msedge.exe
1876	identity_helper.exe
1876	identity_helper.exe
2224	msedge.exe
2224	msedge.exe
2224	msedge.exe
2224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe
596	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 596 wrote to memory of 680	596	msedge.exe	82
PID 596 wrote to memory of 680	596	msedge.exe	82
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 4624	596	msedge.exe	83
PID 596 wrote to memory of 2352	596	msedge.exe	84
PID 596 wrote to memory of 2352	596	msedge.exe	84
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85
PID 596 wrote to memory of 4612	596	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a30a3d8e0bcb48063109da97e73d0dca_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdb9ee46f8,0x7ffdb9ee4708,0x7ffdb9ee4718
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:1836
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5636 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2196,12999320448717796820,5675482999730993747,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3060 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2420

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
db9081c34e133c32d02f593df88f047a

SHA1
a0da007c14fd0591091924edc44bee90456700c6

SHA256
c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e

SHA512
12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
3a09f853479af373691d131247040276

SHA1
1b6f098e04da87e9cf2d3284943ec2144f36ac04

SHA256
a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f

SHA512
341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
3f06d756ab52f499b44ad3163d636917

SHA1
2e97aa9ec817b637504c17b644774674c5201376

SHA256
bf2b2ec1d0a2b313f7064f35e0af73a2ac7d3f5a5af6fdea741922d95e7003aa

SHA512
44c7fd67be3e8bc381d6fb5392373248c96dbf7a202c079e5237e6500c03c788de7c0e319e58d2b47310aa5f0529bb10cb5392bfdbf0d174bf6bc7878dbb2f87

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
1ec9161e6ffdf362223c5e50f82fb8f1

SHA1
ba89ef43abe76a8b237aa984c18fa043946134ff

SHA256
4cbad01ded49e3449e4947ecce6893d7ae41c23d41a276223e47f2ad8026b7ce

SHA512
8082e69004fd7b6a3a523d7b92de3afd81612cb7f9a861269d4f1d2d7ce43628af5ce5ebc235360a9c82f8b23e03da6ebddae433e5da43a2da2dc9a1d4d85ad6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
987B

MD5
e832c4cc2ab95f8e59bc9cc5724581f1

SHA1
28e59c4914c50f4aa63e348e3ceffd152d2a6005

SHA256
c7042b4f3855dc3d3dfddcd508ad22939c73d3c46e351656bfd117feda5edbb9

SHA512
673bd6f246a880ecdf63d2cd02bf406bb522bea59e14f892079a6a3355e5b839e44179e5139884429f5c076ef94b7a5d6003dcdf7094987b4e3f0e6b6198facd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
987B

MD5
b76879f48ab6c8bd4499a0bfc5654d1a

SHA1
da201408b0f58e2240b4585f2da3a88488ad03b8

SHA256
8d359e6e95383ad4a970dd80bea99dd7276ce0c59bc9f630a7f16231029fa2fd

SHA512
5f1d424125a49c05f936dfca69bb82a185eeadb0f8bc9df267a77802aec01f6e9af81d827188aeafd87659dc51be000d1a7cc855d124198a5f89bd6953c59262

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2d34d4dd3097dc0f44749ae1887080ba

SHA1
e634af070bc27d5e45bec46c5681bf8644108805

SHA256
e1888f7118fccdfd9ebf235f912d61592b58e472b7417027139b79fa25202113

SHA512
d313c5aba9c6def59589d2ba4a9ef3eb10402a2dbc09cede5667e9042be163cd7c9410cfc49f7f966474e6d63a2e2c8ca65df396b4f7ae2472d679e5d5fd667b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4e0dcff1cf7216038398f3e0e3392af4

SHA1
5b290cfe5180ce552ce186a927bc1a4c98501785

SHA256
10cb875971b685842187c14cdcd82e2a7f111742b75bb3923c36fa54cac15be3

SHA512
04e10409208627ec3f1187e2b5af51535611d6c8c3c5eab5297f48bd6b655b0c2eddceca7285ada991cc5704a4539e200fe0004b33c47c857bad0b4e739ec8c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
97907fa2f4a4e758bf7569c25dbae143

SHA1
a5e7d1e674b3a559c89af1657872d9436ba17df0

SHA256
65563c9712c82512255bc18b771a5947159a3d0660d18d5bb6f58ec95a327518

SHA512
b838169e2a5483b619b1e57b298ed99517d3601d826b9a95d85040688fc1a636b4ce30357596dfa6649844ce3619ba8c23500e866f43a3ca2b3abad8e635d827

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f39d7f403795e37b5c0393c0a41ac000

SHA1
0405b1ac278c85ce60ec2b0b76caabdaae77cc31

SHA256
1714dc8f7f2e6a4d5aee040a85f2e27cefc613231f9523952893fa37f1361be5

SHA512
2cb3b769b793ce4d6a7f54c9a1d20aa7df80dcb92bbf55a0bd22f820e22340bfe68f2ddcf54b5d1a6fcec48f3157d03c50f33281965c6bd6a7575017bc846185

Download Submit