413c56e42d5631bfda63425ffa81bdea3ff341824ed0b76726f33887dafec9a4

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
20/07/2024, 09:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5fe6db5615adcc3d29436ae2ec24af81_JaffaCakes118.html
Size

14KB
MD5

5fe6db5615adcc3d29436ae2ec24af81
SHA1

c58567b6f2ec66b53404dac42cf3a4ddd295092b
SHA256

413c56e42d5631bfda63425ffa81bdea3ff341824ed0b76726f33887dafec9a4
SHA512

46dcd89900519e15acba499d92320c81bbd9c2e8be15ffb070a09ee205769839e0b54260aec492520e3f4992e94bc7d44728f7d4989a491d2a5ec72f31d3d692
SSDEEP

192:NuFLhi5jcLY8sl2drkf/mnBcFhQsHzfHuVmlrpTjVoZMMAQNP9HLl4lmP3KTAL3N:NW6ckSdrkmBqPuinHqNdS2V

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3200	msedge.exe
3200	msedge.exe
1612	msedge.exe
1612	msedge.exe
2508	identity_helper.exe
2508	identity_helper.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe
3448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe
1612	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1612 wrote to memory of 2604	1612	msedge.exe	84
PID 1612 wrote to memory of 2604	1612	msedge.exe	84
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 1452	1612	msedge.exe	85
PID 1612 wrote to memory of 3200	1612	msedge.exe	86
PID 1612 wrote to memory of 3200	1612	msedge.exe	86
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87
PID 1612 wrote to memory of 3820	1612	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\5fe6db5615adcc3d29436ae2ec24af81_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa8f9246f8,0x7ffa8f924708,0x7ffa8f924718
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2780 /prefetch:8
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4228 /prefetch:1
  2⤵
  PID:3588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5568 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:2312
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:1468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5960 /prefetch:1
  2⤵
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:5144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,5200968239852509458,12991041473489211971,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3108 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
312B

MD5
0e5cc3e08172723371e1c138252c8896

SHA1
d30aa48be12d51017b4ba9393d0a758f880f9d34

SHA256
fb745486b039b9443dc7b2bd331a2c8d4be276d216c62104e43386b26d19dcbe

SHA512
405b277571a012176bb7d8f085b8999a200a7c6282dd62db26473bd1a41b68b2d4f1f414da9e9a8f3c4d2e254f230ae6ae31f07668939eb92237dca79fa69783

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0b55224cbbc23c7c181f0e76f80caf51

SHA1
01603930cf3a2e3c9346b8e1d12c5ee60606ae89

SHA256
34c5608d07c0de1c19eb2efed5be4f31856a3499de94ae0ef554b261fe5f90ed

SHA512
862214da72678bcaaae59913ed9d985c8d3d863f0704123a5889fa574025e933c3316d99ba02da955176e3a2dcf8dfdcf5b0a12ec5b4b11cc350df3b38992097

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
071f198487f5c5792750fd4e79e15690

SHA1
05894a903d1da36eec9014ab0035cf3d1ef038a5

SHA256
cd7f823ce82704cf8bf17cee442604e54f8efb6fd6a0d06527535999ea2c210d

SHA512
567db0e4014dd1aed22604bebe4e94db532584d8a33997d02910667da8ce0039e2d7b6b8a24c006c90224a3da6a6ab8ef6eb983f0c0b488015f71669e449c40b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8707af19dd6bd2976f2ff19896e8f8bb

SHA1
f36cc68326d7f89a27c5a2bc21220fd1eb074554

SHA256
57111748d1724005d43cbb76410f428052f3dad2db7fb1e2936711aa567786a8

SHA512
225307a5978999491aaf26b1000659e7847b707014370a967fa09d488fd3df713392b29ebba959a95c88f87c887b1db93dcac8a07d2563d8233cee408659f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
1e4aa7b3fa3292aaf42c39daa4a01813

SHA1
51dfdb007047dd8d038cf66747e82b90181ed831

SHA256
1dd378e76e4b5f98dd78c60e3f5f07ded077f97d0cd85ca4699fd1bc19138f7b

SHA512
75c58736cfc678838755921f5af606e6a700d36bba39edd7f027d91bd24d4958f8a9782328ad56c05dc9c2d3a093d3de6598dc0c0d2627290473ba191ac04f69

Download Submit