7f3eddb5ea6ade9f6e9c67352cc5e9cd426166d562e4c90f1a1a0b798c08479b

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18/04/2024, 12:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

f7f6f16e2beec3af7c15374f427de87b_JaffaCakes118.html
Size

16KB
MD5

f7f6f16e2beec3af7c15374f427de87b
SHA1

44742b27125a6a95360280d1f8f6fa24452fb556
SHA256

7f3eddb5ea6ade9f6e9c67352cc5e9cd426166d562e4c90f1a1a0b798c08479b
SHA512

5b8b35d14380896c94a6f79f4738bfccba924ac6d9af23a9591924c48eee338105b014a53ac4668a46dbf345af9b530b801a1f75d5adc6a24b9c61ece4fa0d8e
SSDEEP

192:128QoZVxnZP6CVerhCKp+05mA3AJcs7PZSfVH9oEqTZ0NcKA7zd4pJw:12yDpXSCKo0wA3AV7QNdoEqTZ0Nrw+A

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4916	msedge.exe
4916	msedge.exe
2868	msedge.exe
2868	msedge.exe
736	identity_helper.exe
736	identity_helper.exe
2984	msedge.exe
2984	msedge.exe
2984	msedge.exe
2984	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 1168	2868	msedge.exe	82
PID 2868 wrote to memory of 1168	2868	msedge.exe	82
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 1752	2868	msedge.exe	83
PID 2868 wrote to memory of 4916	2868	msedge.exe	84
PID 2868 wrote to memory of 4916	2868	msedge.exe	84
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85
PID 2868 wrote to memory of 4872	2868	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f7f6f16e2beec3af7c15374f427de87b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff90a4046f8,0x7ff90a404708,0x7ff90a404718
  2⤵
  PID:1168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:1752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:4712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3940 /prefetch:1
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:760
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2240,15200447427252491985,12961220476405872001,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4996 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1764

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b1931878d6b8b22142fd7fd614add5c

SHA1
0e20ec0bec5a9fe3b6666c3009626f0420415bc7

SHA256
d78e49cf9c940d8a407fca2338e30b754e4579c64e88932c46c3871f62c15904

SHA512
1e7a63ff7340719736560277601ff43f30937dbd4a1fbacbcb0d72fa708216692a4bb4ba658edf227b767975b430fc94e7c4f0b5dab29bef9483bfcfb38e1cf3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
70ae4bf8f75c69610c1d00131c1ec28c

SHA1
eab92c184a3b655377f375b1b25ef85fb06c7130

SHA256
9f46453862eb083e85697631455185c0ead19ec86c1ae3d15274c06c9a38731b

SHA512
29299dbc0114f01525bff67ec421a28056905e8f5d21f00502554f446883b6086f8b9a2c27a591f364077da17c21438910b8dbf163a59f6f80272eb7d5f05c68

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
54fd25b7185667dcb0ad0345f3d86021

SHA1
47cb618b7273c6d157d7cad6f22aa55dac6a23e3

SHA256
94c045818278382b50123dd609e5058eecf15f108045b1837241bf25b8e446b2

SHA512
419d5fe0a66e71003e1b97a50ce83269c6a6ce7c707e8913422f458d2883d4d7cf488162cee7ef914a6ed3aae7be96d427a94a139b108655f2afa970e66d453c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
09774679e511e147c680970117acc506

SHA1
758ef1e36e83a7fb74a4bbd607f9ff3989a1ecf0

SHA256
34fd0a061499d0c66ecf3665e6b844298b083d0b39ca8e9a52a26e2047916cf4

SHA512
ccc0de5e5b417e1de3479487a5ebf4ee223f377a039d2d5f388e554b4c49da0e66e68a9e7234e3f4cc4ee93a75042a6374caa714fc4dc13f1c0cc0e95079688a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
738e1b27fe965223d4dc6583ec179d93

SHA1
236c622606d063404465b04caa3fc68b17093f71

SHA256
eb12550e8cd719106747f38da3c141077f2e37688364186dceda03e35c1a8d7f

SHA512
1e1ca149259200b6ddd8e4f88bac623b65323e54b29ed1a2353f971a35a0a9840c5a8ce23c84da980bdd08498883345e4e3bd585993609b94036c9ad12183f3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
0af9b40a54d94ba476278a9ac1fb5319

SHA1
6e604bee384c560e52be201e3b0d801296441b20

SHA256
1c7033e454d59910567c653e065922b2592ae04c7f47c146158dbb9073e149b7

SHA512
f459b4be32c1b0f96ce60a287e35d00b0acfd662420531302202cd884b4556b08dc87f831d19c0c8e5c69c46522c92787bc0be57f598948c59d3987428ea40de

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
20072b61e6ee9030003ada6c9ddb6112

SHA1
d9e5a4002040dc4c4f4b3d862c0f626092833615

SHA256
ca8035d914b3454abaaff7a5662f0e6d37f16537644badc963ee048b7a720d6e

SHA512
f3ddf009658cf41c0ec7ee4304fc501b12620539a598345053e0235e95775447609d6f8c68dab7c637e4860ec9d1d21ae6549d732b5c801578d7bd55158d8a61

Download Submit