d2ba11a684063e77b82ea756bc7c73e04840c1e1cb193772898269d735108530

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 06:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7c126910d1187130fdb68b8a9c019b1e_JaffaCakes118.html
Size

47KB
MD5

7c126910d1187130fdb68b8a9c019b1e
SHA1

aa9c78150a7ebbcb5d1d6f3f1a9ac6e20075740a
SHA256

d2ba11a684063e77b82ea756bc7c73e04840c1e1cb193772898269d735108530
SHA512

65e91c46aa3ba13ba9f9be02c31eb30cf905f6e1f3990f0aff6b338f923551ba75b078c6962b9380e5b761309e2c8e37592dd89cf2a886b8cc32acf9a12f47dd
SSDEEP

768:LF6713IwoH/AHupP1fF5AgPUFTbttTSETXfs1OPyVzCDvHc0lMw94mem:x6713IwoH/AHs9fF5AgPUFTbttJTXASn

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3180	msedge.exe
3180	msedge.exe
1808	msedge.exe
1808	msedge.exe
1912	identity_helper.exe
1912	identity_helper.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe
3236	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe
1808	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1808 wrote to memory of 3412	1808	msedge.exe	84
PID 1808 wrote to memory of 3412	1808	msedge.exe	84
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 2108	1808	msedge.exe	85
PID 1808 wrote to memory of 3180	1808	msedge.exe	86
PID 1808 wrote to memory of 3180	1808	msedge.exe	86
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87
PID 1808 wrote to memory of 1428	1808	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7c126910d1187130fdb68b8a9c019b1e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd711f46f8,0x7ffd711f4708,0x7ffd711f4718
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:1428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2044 /prefetch:1
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6228 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:2056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:1424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,2430093479088151930,10763930905526387753,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4788 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3236

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1248

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56641592f6e69f5f5fb06f2319384490

SHA1
6a86be42e2c6d26b7830ad9f4e2627995fd91069

SHA256
02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455

SHA512
c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
612a6c4247ef652299b376221c984213

SHA1
d306f3b16bde39708aa862aee372345feb559750

SHA256
9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a

SHA512
34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
f8404d199c30bbf88555204b7cea4683

SHA1
c65428caf0c014a0a926a087b934d177b05f7182

SHA256
589afa718a891e27f533062194134a5d80e94dc7466e58f1146f709a9dcf07e3

SHA512
772630ff11383f91d5ac94e473d95a3b43f9c51cdd1ee909909e98b012f696ece7d6dd8ca11b40ee65ab9fa6e33aaa4a3cc58c49bc25663a1b568f9bd5f9fe51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5e9c3bf07d949901d1b8789c907612e6

SHA1
ffcc928ff2663dfead494d7bc61badd3557a83a2

SHA256
1d5a72d976b987e5fd5506fb5ed3609dcae1feb72c974e8a01552154c5d20200

SHA512
6a6c591df034eb0849d9f3f32b5cca1c76d0da50a75ca413e648eefe733402bc53a6bd20ef6a7a24e01267b825117df0d9791467027915d60107207fc1bb21da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
9e3e1fab10a4b5e24962d83a0682f8e7

SHA1
f320b853742c4f1e4d020adab64b434c6b523a8b

SHA256
88c6ba158140f1e40c1ba43e6936dbfb3b8cc8e3acaf204060509732d5a05da4

SHA512
44f1979762d6f9d884bfcf41fed24c3b76a9357114f2b8a782fa44ef9821946c7116cee7f3d52d21be2195ceef798d918ac9ee443126246ecf8ba75d19ebdff6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
5401cadf82be22c626e61aa701ca48be

SHA1
9af955866ac6004a82ba77a8f4783178d4d16b80

SHA256
312877254f6d366bfa375260e369d55024d1244be7d77ac21d77a0cedc68a77b

SHA512
87a38878226bedf785884fecf74d6107a577b15357f8b360b2f2dd69a89f9d700ce47a283f24dcbb7fe6710cee6054575b31f7924c6b24a001bf2ca88765f3ff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d9a7ab6cda0a88517901d740fa71e0af

SHA1
cb608821bcff862ce888664be243275e3a4e897d

SHA256
fd1050d00d485fd7174f1f72a567fe378d6d2acc6c1c950564b14242f8591fb9

SHA512
2c68ed6c2b5fa1b3157ff509f551f18b6251cdc4c0f9d63ec498df635e145700e317dcef0a32570d96574dbcdf6920500503cd50c2b745b835c8adb433ce4eb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
677e348676de83298eb9a68d75137ceb

SHA1
99798db1b8d7b2a7cdb3d8fb3c0382952b31a5cf

SHA256
21c4cb6ec4f0833f76cabce2ec6c9494a46993ba18a81943de4232ea84226876

SHA512
138b1a7ff3d298d7b18a90894b702c89dbfe8d701eef79759522c7d05fce0119b66f783cb75a1456623e1c8d357c5485b68403dda6fba0b5a7cc24b3c1face6c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
292b36df34c69226c075b7d22c8b5755

SHA1
ea9519acf544364c03891104d4c95d0ee3721d3e

SHA256
4628331fbc72f3a8345bfc7dec1b4e5fe1d89e55144efafcb68ea558cdc0fe2e

SHA512
0c28e092a26f685476945b1c8178bd23459fef25d70b731d0059387761b26231a87ea44b543f400c319b179defb63516f417438aecde49c66277c0fa7e69177b

Download Submit