8eeaf2ab6bf1fed32c58ce4622e3553e9f6eadebe1881fbbb967e04e8b0df275

Analysis

max time kernel
136s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 23:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fb1571d106a8a7b729c95ccad7c18b1b_JaffaCakes118.html
Size

41KB
MD5

fb1571d106a8a7b729c95ccad7c18b1b
SHA1

7dcd62f45108799722c8b86992f1d6bd0c15c0d6
SHA256

8eeaf2ab6bf1fed32c58ce4622e3553e9f6eadebe1881fbbb967e04e8b0df275
SHA512

0f33b7d1ae3d62134c63b444e398b4347feee1575911b9332b6ed16319b9475654eaa480b0914289bb155f35de165a096c9dcc0918b2cf1b6e08cad8419c58b0
SSDEEP

768:dFcb01bIpub2vbvOPab/e9bFqdOjdmoGeb01JD4JEYAX2VIQnP:dFcqcpuSjOPab8BqdOjdmhTdZG6QP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
3508	msedge.exe
3508	msedge.exe
2736	identity_helper.exe
2736	identity_helper.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe
5004	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe
2324	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2324 wrote to memory of 4836	2324	msedge.exe	82
PID 2324 wrote to memory of 4836	2324	msedge.exe	82
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 2092	2324	msedge.exe	83
PID 2324 wrote to memory of 3508	2324	msedge.exe	84
PID 2324 wrote to memory of 3508	2324	msedge.exe	84
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85
PID 2324 wrote to memory of 3236	2324	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fb1571d106a8a7b729c95ccad7c18b1b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8e3a546f8,0x7ff8e3a54708,0x7ff8e3a54718
  2⤵
  PID:4836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:2092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2528 /prefetch:8
  2⤵
  PID:3236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  PID:3800
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4808 /prefetch:1
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,10852731095779112905,4694238981578463186,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5040

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
b9ad45d25b04c3f50f2ce0a67096f9ea

SHA1
dfd514b80aa8f8f44979a1cbc40aa752289fe212

SHA256
b4ee31fd78dc775a555f4a3a904a701df791b4e495448f35c58f9e1de846c700

SHA512
65b05dc786375f323fdcba78b2499e5b9ec54e6b7a3b45fb6c23cc16a7c572db39e6e9b72147c33b05cd4b9fa419b4fe37d04898970a8ca2adb39fa2a239f3fb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
6733e12cb7a8c2f8caa25dd49f7d92a4

SHA1
fc4389c73385b1ef55c85d1ae32ceee656666c07

SHA256
6039d1d9db20d62640244159e47d59b59b5ec4f9cf197cc8bb178549bf2516fe

SHA512
514d41d37e63460036f7b79071d18c0de18843d4e5ca99a5387fcef3337cd356ddb191548c99541cdb822876078a35e1ed911ddaf66c2f785f5e4e5c483b1bd1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
987B

MD5
a9ac8e3497a9faaa8de58d54635f9046

SHA1
732906a51d6e3abf3e9e9c8f78fce93999fd33ca

SHA256
7b57bee410d22a017c7b52695df202d25248a91bbc7cdb4c17f5b69250fa4ee9

SHA512
da5a8a761c3d739fdffa0f6eba8559900398a5f3321a05d1b27d5a592024faa65ede4ca18263946c1e363e7295d0c13acf76f54595765015d80c608023e945e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
807419ca9a4734feaf8d8563a003b048

SHA1
a723c7d60a65886ffa068711f1e900ccc85922a6

SHA256
aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631

SHA512
f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a907e0e396682179b158043f6a7ac309

SHA1
b7108ea81f1b6d0023d8c5a8d30498b5a5fd79a9

SHA256
469e22c5911f77ea02e0d8faf87cf07a98085f6a5241d6c5386b968a09e3d885

SHA512
e27dd450f8d23aeb2e899571ca3463622fffd5c213aa5a75e8bcd7fb0d357298adcce59868ee0f0afba45e9c3ebf7fb73da58d27326385c076912c6ef962fa62

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
6bbe59320288a38855049292910880be

SHA1
f43306612ce3406f4fe0a8c14dae90a1377433fc

SHA256
915306b0b87d4739bcc0c56cc04e59275ce7c8e2db0a8b0b58e229ad9b9ec1e7

SHA512
a2ee32ad122548185aca60864289a2e807092bce1111fab43666d1a4783ca84626fb9f6244a73e3788db58708c6dfe3ccc0fcf2611e2bf078677b385f5d179bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2392b433e27d31f8a74f82fb2be81a19

SHA1
e6184de9b0bc5695540a374d5517293a828908b1

SHA256
a71c3c2cbca5217fe3f73e9e67a50265844e1273a65441a1251c69b4f7db473d

SHA512
93696dcae3ac9ff472a74f3fa8399c735dc0428359bf208a41a2ffdfd5ea017ed8f609208342d3c11dbabdc6845329099be21afa8fc13d722806705debf7a5e3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
cba4916e6dc8d9cb9d00eeeaa2c7b6cb

SHA1
3db5f1482aad630d60862a867c079b95526c8f4b

SHA256
3c4a1a6cda73e62be8e51fec9eb25fcbbed7f0df2e0ce507e2b806d4ebbf7563

SHA512
fcbf475e4dadf9e71fd9f3f0bc2ff7ae78e88cc51a2e9220b6af8cfbaae12d7ceccf783df885482c6602cbbc3ece6587825514b0a0adacdc3a2910162215a82d

Download Submit