a219ca72366dc7c86d6fcc0a47017a245539efa4db5a4b82e026dd3773337d83

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 14:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8abda58f75e84ba9c4b8dcfc945e6091_JaffaCakes118.html
Size

67KB
MD5

8abda58f75e84ba9c4b8dcfc945e6091
SHA1

156e599780368740c790089f3a6b025cab6684d3
SHA256

a219ca72366dc7c86d6fcc0a47017a245539efa4db5a4b82e026dd3773337d83
SHA512

e0024619d642509470a8b13ea41164b7452e3170f3fcb7b9ac3dfc0e8b46fe6c219079cf5c667b8df3b285052806c1e245146a0694c30f89131e611d92ee1a68
SSDEEP

1536:U82WCSW6yYzVwZC8NFw33qwehVoK+t9sy:bE676I8NFwHlejoK+t9sy

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4036	msedge.exe
4036	msedge.exe
2472	msedge.exe
2472	msedge.exe
5072	identity_helper.exe
5072	identity_helper.exe
264	msedge.exe
264	msedge.exe
264	msedge.exe
264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe
2472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2472 wrote to memory of 2756	2472	msedge.exe	83
PID 2472 wrote to memory of 2756	2472	msedge.exe	83
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 2456	2472	msedge.exe	84
PID 2472 wrote to memory of 4036	2472	msedge.exe	85
PID 2472 wrote to memory of 4036	2472	msedge.exe	85
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86
PID 2472 wrote to memory of 5044	2472	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8abda58f75e84ba9c4b8dcfc945e6091_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff871a346f8,0x7ff871a34708,0x7ff871a34718
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:1728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4196 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6232 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:2600
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,9369615172408638338,14282395435359078112,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4816 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:264

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
537815e7cc5c694912ac0308147852e4

SHA1
2ccdd9d9dc637db5462fe8119c0df261146c363c

SHA256
b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f

SHA512
63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b167567021ccb1a9fdf073fa9112ef0

SHA1
3baf293fbfaa7c1e7cdacb5f2975737f4ef69898

SHA256
26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513

SHA512
726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
44KB

MD5
23536ccfe05b737ae639fe63ee4cc435

SHA1
6d2e9822835dc3e6117a4d2addfc8f241fbdbc82

SHA256
6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce

SHA512
f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
4e7ca5bbfc23440a1d7b1fdbbc13b49d

SHA1
fb42206193aaea8ba9bbe9117ab72f13bf78ae49

SHA256
2475f94d44335befd0d5414fbe4c99dcdaf6adccac6a74d664131e8cf749f509

SHA512
3c5cbe3d5b81cd79dfa30aff3ad38a36c650462deb87a3fba6a768272afb07c7b9f8d1f3547763ca61c68fb71099ba4241dde0e7e9269ecb69d42c4b379b8a0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
f3c5643fe96d1d62fcf069da8e6ce0a5

SHA1
6e135b69c9ec3ed0413ee40eb74bccbe4f29ba2a

SHA256
16cb93914bd77c15bb865465bf7d336f280b26cbdf8229d026e08ac0e32a0227

SHA512
47a6186c8e8877826d97a258ded4ccd3899c45d54e8ec008f968dc8a39ed46ba9b0e6123b17a68b00a68fa981a894e24b79d0d9b290ff39637ffef0f5f481e57

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
14ea7d1819321809f84df72885898070

SHA1
7001557de4112b12596b62efd2b6f31aa623cb25

SHA256
9d56b3894e3c8db173a4f032630f0edf64b4c17fe202b2be9d6921c323ba1078

SHA512
f08c9c4cb202b9b3a9ba8942f99f9506a1a731c9f023e78381ee03624b85ce5418c3edabeca0670f551c2f464484549d3d7d5c99eb54c8dd306a6ce4716df613

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c58cbabd617db5065011df89cbc89195

SHA1
2b538e7b9776858e77f21ddd899061efb070ee9c

SHA256
f29f370aa50dfffad75cdb7b8090550e979a2a4abfdf0a0d9001a19ae41bb879

SHA512
002ff645bbb46ed06c44d5aeaf5c34ada841bed241dbb814e8a9454b6327153c8454597ee247bec4386ef61073540164e4cf2252a68f7d6cb6078a4c98fe5335

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
389769c1e605c5b05975b0db4a2ca216

SHA1
3ebc1030240513c258a5912f1b52bb9cc0b7267e

SHA256
bd010d79483f92f6aef00091bac6d8db833a8084cc966c8e03272008eab181c9

SHA512
830f78675ff24a747f1427a9f0c956b273f2cbf86639cf2cb954313ca4ebe016b4cbcc8bc5ad9b7af8c30432cfbc6088c4eb36659b96afaf8acaf39d99d60233

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
10f125d15f5ebd969d8f52a4cfccfc4c

SHA1
c46745e0349d332233dd06a2c65c649d851a72f0

SHA256
0358d7448c666acdd4df9c561e880e8e513f2410334200ff45b9cdc10179ab3a

SHA512
d80f30b297154f781c74337e3217d81250d91dba707953526c9e2909e21e436979d0e6f362ac66ffcb9b0adb59aeb3711e90367f3d718cf23767823e7689d94f

Download Submit