bfef005712aa7e17aa2fde467d569614c37c58e90fd3f70c54c48e8efee980aa

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07/09/2024, 00:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d0bf0630504a22d94d87f56beab461c3_JaffaCakes118.html
Size

107KB
MD5

d0bf0630504a22d94d87f56beab461c3
SHA1

8a86a3c49b2f5e4c36ab37106a48fb7732ebe129
SHA256

bfef005712aa7e17aa2fde467d569614c37c58e90fd3f70c54c48e8efee980aa
SHA512

317f81e51792ff32c7c8aaab93bf73bcd300cd2a62fe48d593826e99cefea20725f5e2060ea5f8945c0fd59da72066cb45de34a4808121dfadd73daf0844cbc2
SSDEEP

3072:jbxJwtdiYaEfZViiAuEoi1QwJxOWoklfle6VagIs7aaFyR8r:sZ3Avb

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe
1576	msedge.exe
1576	msedge.exe
3280	identity_helper.exe
3280	identity_helper.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe
6096	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe
1576	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1576 wrote to memory of 780	1576	msedge.exe	83
PID 1576 wrote to memory of 780	1576	msedge.exe	83
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2188	1576	msedge.exe	84
PID 1576 wrote to memory of 2452	1576	msedge.exe	85
PID 1576 wrote to memory of 2452	1576	msedge.exe	85
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86
PID 1576 wrote to memory of 3396	1576	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d0bf0630504a22d94d87f56beab461c3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa2f5446f8,0x7ffa2f544708,0x7ffa2f544718
  2⤵
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2040 /prefetch:2
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:3396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2724 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:3600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2704 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,12432147073221309954,4011733632103933036,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4968 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6096

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3928

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
5d9c34734404c0f185ffa58ad2509928

SHA1
311185807315e4f1af4e69326ba686b5718519ff

SHA256
0b82a076bb924330f587b839908de7ef2ce2abfe41d9ab7485614e443d1a6b5f

SHA512
2e85d3573bff468b92db15ff03e5c6ee953dd0bdc106f192f785623cb25af87d4df656e5872cc3e59b867eaa3200f22268ceb50862f687c11d39d8fe7c9872e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
da711891f14203b09a304d467dca9291

SHA1
6833bc4e1e8d6438596e5dd89ca18cf925e62b21

SHA256
72230edb5aeee973f896a7df9acea3643c130e767cd32b736bc3dbe80eb419a1

SHA512
05a14d91d564ecf275fcc6be03087794d604a5e767491ad7f886bb3418691271b91afea4ee44fdd460f9a87c43b83aceb3871289c991ec0a217a1319b19473f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8c535bd074af16bc118458f9e3bb957b

SHA1
664e456a1e252d28a3632c991fe18a140b537406

SHA256
7a98d39bcc9fed8eec9123e7d2cc9aa44b940f7c6aa8606e702f2404baceed8c

SHA512
70007242950219c71e2e4e5832a38e1cf61cd8610bf0c92accf59495d16d9bf4efa70250eda1c84e5043b678622074737be7b47549d551ff1329ab9135e01bc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f49b72ebdab9f7f07de2c91afce06336

SHA1
68c9da3237d076c2009bb2740804003988804622

SHA256
93beac66242c6dfad337332f878f3a548508a6153ca601660023ee45420f9bfa

SHA512
386fb2dcdd0466c83ddf0a329361e1ca54c8bc1c2d69ed4a11e7fba7a9cbd01415639920c4cc7770de19e78c40d1b13cfbb2124e148abd27bd94bb30ff521de6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4ab944e97a5b0f5d39a49b7837d189f1

SHA1
8a6e20fe984ec159b67babcd918e640d5acb2c8e

SHA256
c701447a7db9968ae77b4495ae32ba0caa4aa8a4bb9d442c954306f65c493fa9

SHA512
94fb404a066864998b615d50ab7530117d128e7a81a5b7296c4d3b1d9187e3a13886e05e1d9fb3588d88f70e46940aa8c30981555bc686830b925bdaf2a25494

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
d04a7597856992251dba006496e4ee40

SHA1
26361c71b44b044bf88cbca91863777230115abd

SHA256
a2c8e54724d5a490cdde0130bb7c44940c5092a7e1e321bcc7f83b6f1a85b8d9

SHA512
f09f4f98dceaa474546fb59e8c59b0acad863f79ca98fb871ded860586360faa29b33f84b68799957fde0e6e214894cd0b84461fcc4405a869bc2c669c4d29b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5851e4.TMP

Filesize
705B

MD5
a9b7f0bc495c2c0fc662fe2877a9b6ca

SHA1
f046aaf365bac2c3a4f1d4ca5913648caa590b30

SHA256
cf4883982749eabf7017a61a3de336faa34f339d015d3070a6d3af9a6a9e5935

SHA512
fe2fc2d3f75f7a3dc71215bc64bd42812bfda566214382204c90330bfe691c67d87e3f0ba7b2a24a4d2b8e695f5643a7a104dd3566fa8233eeb4491a3609a0ca

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
8ac51d21bb92d860d94e0cbdb1d152a9

SHA1
bcca4f26a033370eed1bb27009ef52a578d7145a

SHA256
b38ee340ede70bc99744bc77932c496ae7c3c8ee9287b0f229e1bbad03a7e90c

SHA512
bb5ca41adea5daeb3367f9b7c73c1989a0a2980f070067092e8df9301f83ab34cfc8f59de691d6e506004110b4b7d245ca5b9d5f6369483890848be38383598e

Download Submit