b7023d0d70182a96fba4d81abfbac7f5b03cb0741e7b711e67a07e7479af51bd

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 01:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8c72d7fe3ae78b5defc2cb43f98621d6_JaffaCakes118.html
Size

9KB
MD5

8c72d7fe3ae78b5defc2cb43f98621d6
SHA1

4abfa2361c3b85593f579b1944e67d4001d7fc01
SHA256

b7023d0d70182a96fba4d81abfbac7f5b03cb0741e7b711e67a07e7479af51bd
SHA512

7570d2a22680b656ad4839814713679175ace0085ef5978915c12db864b429c40e67e370c9097737a85902ace2062e7d1b4c279f0d327e75e5ff5326f5ddccb3
SSDEEP

192:xrpnkUsWP0C0pHAkgrihiDTB654Hz0+EoaCZ3u7vZ/BEes0c1D:7srnHiih+Ba4Hz0+Haiuzprst

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
3208	msedge.exe
3208	msedge.exe
1384	identity_helper.exe
1384	identity_helper.exe
5288	msedge.exe
5288	msedge.exe
5288	msedge.exe
5288	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe
3208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3208 wrote to memory of 2660	3208	msedge.exe	82
PID 3208 wrote to memory of 2660	3208	msedge.exe	82
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 2200	3208	msedge.exe	83
PID 3208 wrote to memory of 1800	3208	msedge.exe	84
PID 3208 wrote to memory of 1800	3208	msedge.exe	84
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85
PID 3208 wrote to memory of 4276	3208	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8c72d7fe3ae78b5defc2cb43f98621d6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbaa6046f8,0x7ffbaa604708,0x7ffbaa604718
  2⤵
  PID:2660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:2200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2840 /prefetch:1
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5232 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4736 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6228 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11388420942451051641,6400356788294595183,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2156 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2164

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3968

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
f5cddc43b934206bf81e99549022db4f

SHA1
22550ed728c2c8cb69bb7c7bee06c41a422c9997

SHA256
6976f582ff51e07bfb84208af48474e4a52d2fa10121ca481092c6f8a49ec603

SHA512
b793fc1ab6d29b71e69f881bf00aa257a872fdaa06f405d17bf0ac9f7a1e920ab67a25fd601429491981b6063f759431f431daf122909a60faeabc6412752d44

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
5589f2c117e107ef11f347e89e76c669

SHA1
351e2df2bcdb895f5bcefcf3c356883761f7d022

SHA256
a513c5a1d4ecf585d6064299dfc369349c7b09f5653386551f73c018ab9a73f4

SHA512
25c57eac94c6bd5dc26c5ef4a8265ec1cdd1a21decbeb2dd61d60faf6c6b81e411e4bbf8fb147646f7c7d5ff3fe115eaae7df97322aabca2edcddceed405c652

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
341c7f4168c2b1971a40826f81e253da

SHA1
2cddc4ccdbc0133dd30d25b49d4b3f6318253790

SHA256
5babfecf8c9ee4b308ca809196a665b08c967bddeb2f6155433c11b32c3fe94a

SHA512
b9170a8c1b0ee34272349a1fc44418e5214bbf303aef09e166d15108f776ebae70d3bea2b9576bc5dbcc481a29335500822051271472f7e6cde80a0e2eb4a3dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
03f344f26d4adcdad7e6125400e4c25e

SHA1
6d23b15ec9b074b58cdc216f90876de3543fb973

SHA256
d84353b34a603bdc32e0471812e7939bf3e4777df04ede7203f2485631d49c0d

SHA512
eb1947b777c645a9f293a62001a2d709d548b3efd2991bd3cb82cce34e1ec8da646b4049fe6f2b0d7d46fbcd5c6b131e8dc41cb658c08eccd637d4be30301024

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
0681cd5befb31f9dbc860bb57786bc0c

SHA1
fbe5e8fb161c7af52cb0f83eab73f31439126dce

SHA256
feb0ee643101041df62294d7accca892bebf59f7006a6aff7befb83cd17cf131

SHA512
c2c714e3fa4ab491a028a3517bc63af6f8440d2da9ae3bbd488c159f6928e3656aff9c1361c8827697eeecce77278d8c1e8f176be834651bd9649e36dcec9904

Download Submit