26b374f90fda6e00fd2d353da9040a9a992561c1f6b04a6c99c5608a9289ae82

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
28-05-2024 19:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7e1527a0993003fb8442d7797d88bb1e_JaffaCakes118.html
Size

160KB
MD5

7e1527a0993003fb8442d7797d88bb1e
SHA1

d3ef9406ad40f653cd1cb46ecf7dc4b8878b3e2d
SHA256

26b374f90fda6e00fd2d353da9040a9a992561c1f6b04a6c99c5608a9289ae82
SHA512

d77e7d9902ff111f415c13f7d22f748d52e33c48bfc840011b6ce8f5a633232dd8e0026fe1f939a0b722a6f31f8194f7fc63b1e86dd1e8eaf0aa077bac8991e4
SSDEEP

1536:S9s+A2cOEXVpkX+OldBxnlauMiipdNhJP/jGSYncWdpAyxIVXCwzKpI4KHD2kT2e:SlabWnEF

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
436	msedge.exe
436	msedge.exe
2960	msedge.exe
2960	msedge.exe
3300	identity_helper.exe
3300	identity_helper.exe
1232	msedge.exe
1232	msedge.exe
1232	msedge.exe
1232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe
2960	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2960 wrote to memory of 4352	2960	msedge.exe	83
PID 2960 wrote to memory of 4352	2960	msedge.exe	83
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 2448	2960	msedge.exe	84
PID 2960 wrote to memory of 436	2960	msedge.exe	85
PID 2960 wrote to memory of 436	2960	msedge.exe	85
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86
PID 2960 wrote to memory of 4288	2960	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7e1527a0993003fb8442d7797d88bb1e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8030d46f8,0x7ff8030d4708,0x7ff8030d4718
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4972 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6656 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,12186115047117461420,1088469088481423008,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1768 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1232

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4940

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4508

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
ee82f845bdb112ae7eb92022e7aa7ad4

SHA1
bf1fe4911eb1adad9b8a75e3934c200fd1cc7ed4

SHA256
69cbdce96df27322ba4e562e8879f304c259d36a365f79e1af102e7eaab0c7fb

SHA512
47756f4e04c81a9cd99663445f5658d002435ee62b41616cc43e7b47be67ab8c0fe132606776c25448601119f57f66fd0954d33c3a57d19fdb6480b1aefc781d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
07de9af161b72ca6d793315e329ada30

SHA1
22b003697c5aebd7307408c9989deab2ebc08236

SHA256
30c66205d77cbb116582df2e445ee97b7162daddb27c725bf9cfead4e1c268ef

SHA512
b049bfeeeb8a7b195f534013177c670079b7f80885054c4fbe9ed0303bc8a119cc49c3e9462b4dd4eb550c2dded4285ba33494d8c0782ea6ee13263d5afe5b95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
08dfd5c1c0bb0f0238614135cf42f700

SHA1
c7bcfdbf9c9d5ca4304cceee542b9523798ec6ea

SHA256
a76205b816c20c51ebcecfe886efbd4e1102bbd7171ff3f9898565db57865a9f

SHA512
0788532221bef0078ef569dee40aef13057fd9ee4480da4e474743df911e7a208e51e3b8d6530acdd10b68ce21962fdabe9cffe3de9054a0030aaedb92eb670b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
76ee06948c4576b3b293a331d90dcf24

SHA1
2bd27f94e49f2204f439ea4d34656188308fb3e0

SHA256
6c284829cb487fa416e16576950ea3385f407e176a05946ae32cebfb4cdc3d44

SHA512
db190453cab34b5843038e228aa647a220847da772a0da653ea9f3de4a52d4e387d5ae478a8593d294115c9e6a960d95965b12881c0468490ab77682c228fa59

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
77e981198c4aafb806e387a34d3113fe

SHA1
1d9dba630425bd3ab12d573cbbee0dcbcbdc9d82

SHA256
4bf929e47d51c3b87dfcef225e082a9cb45a447e770a2c6ac8c428c9ff0aaa32

SHA512
575324331f2413f8af69e80b9b9750d6ff1a372ac258217aa61f16eb2537ac70e74a763160adb22892a6e0a04bf0adc65ba76d0b392eff0dd32232ca0072a179

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
461f99a1ce75c0d3882d9af4136c6cc1

SHA1
f98df9a1daef3aeb8cd8b27af53b75d34c1130e2

SHA256
95b63dee52d5373bc5abb9d97c7dc8306574a11f0b77b0ac6a9752a3dda533a8

SHA512
e43d94266773a21531d6e5b50a7e364a30c54a28244e380b3ab91e388007fc39f99263e06ea3d1529e74e2fc480f0374e7d49f24298f03fd8cc162866ab85395

Download Submit