e97881eadd0721b6b3ce59a69b645ffa4f25b0d1a5947a7d1b79403adb3cf390

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20/04/2024, 04:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fbf1da19a6e68a5eb953b716c35a3ce5_JaffaCakes118.html
Size

16KB
MD5

fbf1da19a6e68a5eb953b716c35a3ce5
SHA1

0c041c8b6705b58fb7f59cd97eea324a3791dc29
SHA256

e97881eadd0721b6b3ce59a69b645ffa4f25b0d1a5947a7d1b79403adb3cf390
SHA512

86a1ee8cc578c1781bbf89d29df4e392668616aa5a7ccea6d32e50b72702d8eeab316269f530fd384e31171071f0fe89e015bad54196e3d38fdefefaaa2f06ad
SSDEEP

384:sHycF5ae5KtditIJ5/vbIO701GSb7JAJ/I82ZOh2V:xcF5aqSkIXMp/Ug8yz

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3068	msedge.exe
3068	msedge.exe
1904	msedge.exe
1904	msedge.exe
3012	identity_helper.exe
3012	identity_helper.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe
1904	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1904 wrote to memory of 2956	1904	msedge.exe	87
PID 1904 wrote to memory of 2956	1904	msedge.exe	87
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 2340	1904	msedge.exe	88
PID 1904 wrote to memory of 3068	1904	msedge.exe	89
PID 1904 wrote to memory of 3068	1904	msedge.exe	89
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90
PID 1904 wrote to memory of 4624	1904	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fbf1da19a6e68a5eb953b716c35a3ce5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe901646f8,0x7ffe90164708,0x7ffe90164718
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2252 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:2676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5972 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5608 /prefetch:1
  2⤵
  PID:3292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4012 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3708 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,13021384763115724457,15197126271092870674,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3688 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1504

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a9519bc058003dbea34765176083739e

SHA1
ef49b8790219eaddbdacb7fc97d3d05433b8575c

SHA256
e034683bc434a09f5d0293cb786e6a3943b902614f9211d42bed47759164d38b

SHA512
a1b67ccf313173c560ead25671c64de65e3e2599251926e33ce8399fde682fce5cb20f36ee330fcd8bb8f7a9c00ef432da56c9b02dfd7d3f02865f390c342b53

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
cb138796dbfb37877fcae3430bb1e2a7

SHA1
82bb82178c07530e42eca6caf3178d66527558bc

SHA256
50c55ba7baeebe1fa4573118edbca59010d659ea42761148618fb3af8a1c9bdd

SHA512
287471cccbe33e08015d6fc35e0bcdca0ec79bebc3a58f6a340b7747b5b2257b33651574bc83ed529aef2ba94be6e68968e59d2a8ef5f733dce9df6404ad7cc5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
198KB

MD5
319e0c36436ee0bf24476acbcc83565c

SHA1
fb2658d5791fe5b37424119557ab8cee30acdc54

SHA256
f6562ea52e056b979d6f52932ae57b7afb04486b10b0ebde22c5b51f502c69d1

SHA512
ad902b9a010cf99bdedba405cad0387890a9ff90a9c91f6a3220cdceec1b08ecb97a326aef01b28d8d0aacb5f2a16f02f673e196bdb69fc68b3f636139059902

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
262786c76764634d3c8fb399dffc34f6

SHA1
3e718ef2ebc5f1245d109165d9caa47356d16a37

SHA256
1d828605681583edaaf3678cfb3322c6431e5656ac40efea98dcbe30b6550b98

SHA512
923a5140d33f9e06ff9a29598c72632e85a1ddb6df904b47d1ccf28362e74b4faa77dcad52703104fcf7ebbdb2713ac8ad98f72d3dacb726bdf0a4cb696aaf2f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
447360e4a65dc549ce261f74491f5575

SHA1
9b02c544ae5b1893e476010a12f9a3cb3b4a07fa

SHA256
3df72d97d2a6ec1dec9b7361bd7bb40d5a829310497b9923bbded9d11f625508

SHA512
b821e072b01697641c3dc20150a4dc526e673db742a09416ef3dd2f8abc2ce8cd1a7bd1fb24aaa002e5413ea78663143c8b8f1b9b585bbdb99d67df646ce76a3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
69d6e74fdc6c350c6b1bca12e0cc79e0

SHA1
42580273a7c01f6c1306566d41029778b04ab596

SHA256
4f7fad97197f07d75e781a43f3e3bfd8ab296d9e3a345e88e4969504594bc33b

SHA512
f113f0fa5c31d05408efa0e06a07f5376a4ef9c146a56f8d418f1aa4146d0519ea0997801eff88bcf844b39da1f810c05f00802e5da8d5b5d1f2cd90f53f5655

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
79f14f16d6e7573040b889f058a8b05e

SHA1
2d54909289f6ae943daf7ed9397253f4b630d2ca

SHA256
cfd45fa83ab5a2eb6c67c865bdc17a39b4febff39b066ebcb6fc9167a58a4da6

SHA512
a630d90f8987001e6f021a76fb47d093843dfc52e67ad849631a50bd580ec1610a4b6471889109687d9b404bb634b9544080d092dad3c3387cf7b90e1f9e3345

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
63f18d05d201c463001d6ddcdee0dd52

SHA1
a45eb1fbbb6881cbd36ff62123e73d63732c45e5

SHA256
00b591d31a06e45b27b34a392af03cb92d732e9fb280126fb89fcec48f700c9a

SHA512
1fb9272f2fc9ae4bff999358fa0d7c4d11a772642a4c249779e24cc7c94d64edea43d2da59c60929a82a99cb1ed264b4bb894202f4dba2acd3828a9781f4e127

Download Submit