Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240611-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/06/2024, 23:42

General

  • Target

    a2fa72374b8c2acea629affece102559_JaffaCakes118.html

  • Size

    105KB

  • MD5

    a2fa72374b8c2acea629affece102559

  • SHA1

    88c10b80700afaabe3e2599fe5a5d39a43e35cd5

  • SHA256

    65ee557b2acb693914f404d0dd00039592668185c9a2f6c3aeaf474015a99f6b

  • SHA512

    d5eec66735f5d58f23b2aa3cba766b5e1e0421c9e67e81b7739f1aa4343b156835002e1f46d9651c6e45971234739afc6297ad3638eb80d24cb53cec4698c1cd

  • SSDEEP

    3072:MIFHTWAW7NoAI/oV2xBnmjR8BdC2+BK9gF2B/:DHTR

Score
1/10

Malware Config

Signatures

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs
  • Suspicious use of FindShellTrayWindow 25 IoCs
  • Suspicious use of SendNotifyMessage 24 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a2fa72374b8c2acea629affece102559_JaffaCakes118.html
    1⤵
    • Enumerates system info in registry
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1096
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4fd346f8,0x7ffe4fd34708,0x7ffe4fd34718
      2⤵
        PID:3188
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1996 /prefetch:2
        2⤵
          PID:1124
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:5112
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
          2⤵
            PID:3120
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
            2⤵
              PID:1732
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3444 /prefetch:1
              2⤵
                PID:3172
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
                2⤵
                  PID:2924
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
                  2⤵
                    PID:632
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
                    2⤵
                      PID:4812
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2212 /prefetch:1
                      2⤵
                        PID:5612
                      • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6916 /prefetch:8
                        2⤵
                          PID:1120
                        • C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6916 /prefetch:8
                          2⤵
                          • Suspicious behavior: EnumeratesProcesses
                          PID:3800
                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
                          2⤵
                            PID:5864
                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
                            2⤵
                              PID:4376
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
                              2⤵
                                PID:6020
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
                                2⤵
                                  PID:2668
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1952,13878743142838107657,2919071301089497181,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6204 /prefetch:2
                                  2⤵
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:2388
                              • C:\Windows\System32\CompPkgSrv.exe
                                C:\Windows\System32\CompPkgSrv.exe -Embedding
                                1⤵
                                  PID:2828
                                • C:\Windows\System32\CompPkgSrv.exe
                                  C:\Windows\System32\CompPkgSrv.exe -Embedding
                                  1⤵
                                    PID:4988

                                  Network

                                  MITRE ATT&CK Enterprise v15

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                    Filesize

                                    152B

                                    MD5

                                    db9081c34e133c32d02f593df88f047a

                                    SHA1

                                    a0da007c14fd0591091924edc44bee90456700c6

                                    SHA256

                                    c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e

                                    SHA512

                                    12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

                                    Filesize

                                    152B

                                    MD5

                                    3a09f853479af373691d131247040276

                                    SHA1

                                    1b6f098e04da87e9cf2d3284943ec2144f36ac04

                                    SHA256

                                    a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f

                                    SHA512

                                    341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

                                    Filesize

                                    23KB

                                    MD5

                                    e1c71f7c04be834f5587230db2ad24b3

                                    SHA1

                                    f3bab9cb99d9f343bf7ed3981aaa7450515d2424

                                    SHA256

                                    9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

                                    SHA512

                                    205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    168B

                                    MD5

                                    2412ea8c2ed0bec5904132382469100f

                                    SHA1

                                    a3c7d3d569fc74c3d514f2c613d76f78ee690e94

                                    SHA256

                                    b5869d366246ec488c4961cc1a2e3c8b735c09291a96a32e61c8ee90b972fc6f

                                    SHA512

                                    3185d7175ea8981f1a2db7664711fa9e1a67112d6a96690bc947c4b623b44d2e576688f777fd531253758c04035b2eefffa8f21eb979b818a9ad6c41266b9b2a

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    264B

                                    MD5

                                    857efac0d20005fe005568b8eef4a4e6

                                    SHA1

                                    38258a1c88ecf8316b6414504b113eafb4f44e72

                                    SHA256

                                    c34908208d0ab3e5fa036a9b52b20c515ceec2fb73c426f574de4010522a150d

                                    SHA512

                                    b402f78c65cb80fb31a1bf87b1cfab57d9863fae2e0af6731b313a0bdcca0230918e761cbce63198fce6240b31563483ac8c47ae4f95a907898bdabee54ec2ac

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    240B

                                    MD5

                                    e169014821929c24217d400c27ae3365

                                    SHA1

                                    88c2c603810489c1c40ff8b5d1c1d0288c1703c9

                                    SHA256

                                    669549c31ac99ac66282bbdb1e4c55956064bd9a6f6cd85a5405548cabb0a498

                                    SHA512

                                    250754ad3e15d1c715cd5f85db2ca43ef18a637b3c57b45d980a629cebe34f15391d8178ae68bc390eaf17188ea20a84e449c0297c9f7149b541f562124aeb7e

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    96B

                                    MD5

                                    53bff734631b2b9051743631d3d3b616

                                    SHA1

                                    34975d2d3c5a51eab1a7cd1d117bc2076f864459

                                    SHA256

                                    f48e2bda997b86d3ce80ef861478ecd9ddbbc4160efae2bd3250c4901b359255

                                    SHA512

                                    feacc6df8767109b6c2af2920ad58237e7d23e19219a08e0a4bcb322aa394ec2d7e504440e62ae326b0fce88e3cee64f4d530bdd5aa7d98e1401a0e432ce79ab

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

                                    Filesize

                                    216B

                                    MD5

                                    a5d25d8d53bf18aab394c2285cd4aae9

                                    SHA1

                                    e9e3c67953bd77a79ef293f6a7e5808386c7da01

                                    SHA256

                                    7125170e74cd66efca3a0c450fa8b9fda82bde90e55fcf9280fc725a31212fab

                                    SHA512

                                    700b6d5bccc793d798073bee81127618e0071a37694280fe73864dbd83b0b1a949629797f069f228b0797b3ea7ce0e658499fc2056e6425acc487b719dd90e8c

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                    Filesize

                                    3KB

                                    MD5

                                    0118715c2f309b101a19a98da7c16a69

                                    SHA1

                                    fed18e2ae4d6fee65281a1e142393d5947082a7e

                                    SHA256

                                    b713b2f148d2ab681b499082419327fbd36ff4d355104d06f38db47ea8c718ba

                                    SHA512

                                    a837e2157563e9789802a67d895c18a5c7a3515b4c480132b6d773827ebf1793fc86826d180d9f29841940341211f87a0a0102e056f9bc7bea83ca80be926a41

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

                                    Filesize

                                    2KB

                                    MD5

                                    bb33a11927903afab82751ebc8d1c079

                                    SHA1

                                    4d38224a9ed70c5d84d90171b17a18f2359bebbe

                                    SHA256

                                    cb0764af525bd40b22ddf0c600cb63af5ef51b87165ab50bf89729002780fb34

                                    SHA512

                                    383565b26e608abfb83435e1b47317b47e77716eeb83ee169107241743239192444a27379b108bd7e15d32d11cbae26032b00660b0211b6f2cd84321ef36d07c

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                    Filesize

                                    6KB

                                    MD5

                                    7f4c27f2650dee3a394b7b8a02cc76b7

                                    SHA1

                                    2618dd90b6f0cfc6810bb93494140a2dff42565a

                                    SHA256

                                    72edac005d6c57e1efb4b1993b0f22e4ef60597d6a1cfd862436437a52953e48

                                    SHA512

                                    b781ee47e9a91bcf0704cfcd305d7a51f52f7d476efff4da9a05346a685f25a43ed31d27507ca1c689a730a8b1ba34fbf90d62eaf65305bfdad543f718fb8412

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                    Filesize

                                    7KB

                                    MD5

                                    75c91961b6b47bc8030f2810f58a20f0

                                    SHA1

                                    0338e79f6664325ddc4015ecc22e34164e073799

                                    SHA256

                                    6fd787608c4695b5aec7e61ca296cf34365c45290004c4ffd815590cb1305dc0

                                    SHA512

                                    61d831647f6ce4928db6f13260b52b91be310ea3a73a88581653ab47a60acb0932f31b32e8e4efbd85c885ace2c16f245df32a97626bcca6fc56d76212d8cb5e

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

                                    Filesize

                                    8KB

                                    MD5

                                    33d9f1a275579a45667e51de8a82613b

                                    SHA1

                                    9a3c37196e517717258cab12ab74fd6d6a154827

                                    SHA256

                                    9ad2677c0ac5ffdca0662085f365713ed662ade8aa3e54852e1c2d40025bfdd0

                                    SHA512

                                    d469fb9ef93118bdf62524b118a1ae7158f9b53465965154221231da0ff7f88fe0957ca7b86bcc9003fcf724eb39c424bec31a84da654ee76f6ea69b0c2efee4

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                    Filesize

                                    537B

                                    MD5

                                    9f3998751ef8b23e47a54fc81c513b0b

                                    SHA1

                                    da7981b7cbaf50fbe5dec1b28e65b025e33b9b15

                                    SHA256

                                    530b7126319c5829ede866004d1b2fca0b967a090daa96ea52d5561755a9d5dc

                                    SHA512

                                    d2d144a046138bd2d78ff47e1a202243535a0dfd923a2130df6d548d24d4a17c2d37fd2097542654e27b3e48e09e81a6434cca901e839c4b3a2d71d45aa4ba3a

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                    Filesize

                                    370B

                                    MD5

                                    8f17eca26ef1fb4a7b45835afc4dfd36

                                    SHA1

                                    275c377ee5f49c49f9935954e85c8595a07e1505

                                    SHA256

                                    c32cd5b5b4a6493deac4bd01607954085f4a332abee32d5ec1c0cd3ef86e034d

                                    SHA512

                                    8140328c9c16c76d299fb0e8c625474f36163c91342894f9709dfab3f9f5f97b11856454ea858209d88bbc29c813cb9c6f819a40ef0b494c95aca2e364ecdbac

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

                                    Filesize

                                    537B

                                    MD5

                                    251cb7787b0341784cb49241cfb06be5

                                    SHA1

                                    95fe5cc4302b79bb5f431e2d5256add8737b532a

                                    SHA256

                                    8b8ae690ceafdf2820bc87dacb9a65af681b1a317e9e676c9bd60dc956e38351

                                    SHA512

                                    bf997ac1585a9a15b8485debf36e8e624fc7a42203d200a86e8a129d91bc7d0e302c9e08a0b55cd563d6343019b38e120398aaf52b0eef275e7fae6a00380612

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b42d.TMP

                                    Filesize

                                    203B

                                    MD5

                                    6b429c01f617e5196bec92b11e598477

                                    SHA1

                                    ed631b99f08617673a68073feec12e0590402148

                                    SHA256

                                    da4093f2c26679c2983c62dcd21db27fc6bcf665fe28e55ff886543f9130a4ac

                                    SHA512

                                    a19f665d170420a2d3349ab0fa4785a2d6c69c86683aa3b4c45c94943440af2ac629525bcfdba01331ba3f189fff493f8a729053acb40ab504e0c0786b8e04a0

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

                                    Filesize

                                    16B

                                    MD5

                                    6752a1d65b201c13b62ea44016eb221f

                                    SHA1

                                    58ecf154d01a62233ed7fb494ace3c3d4ffce08b

                                    SHA256

                                    0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

                                    SHA512

                                    9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

                                  • C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

                                    Filesize

                                    11KB

                                    MD5

                                    842bbd3d0e9e312799e2360bb0364183

                                    SHA1

                                    a7aa25e9a67ce2f84efa23287667c73cf04c90f0

                                    SHA256

                                    cc3f500ecdc72bcd16242d9e830c1258788f9e1d649210006452ba5da76e1ecf

                                    SHA512

                                    bdbf387983cf5ba39c1c1153f4ed0c5ab143e275b13db4d6d424c9694ddadfdd823c73fdd9a1cd8ec94009796711c9b62fc7e6f37a0b14ba02934b2b45ca79ea