8cec6741e09ad05779686c485af7f1afabc6cc2866866fbec8fb144ece6d7b43

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 16:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

8eb7dff7a97710ce9296c9c19250bb41_JaffaCakes118.html
Size

68KB
MD5

8eb7dff7a97710ce9296c9c19250bb41
SHA1

bf3fcf741ee4b9e37e114c25e93eac9da5b5498b
SHA256

8cec6741e09ad05779686c485af7f1afabc6cc2866866fbec8fb144ece6d7b43
SHA512

8293cd2c18a74884c4a5deef12f9979c1d7ee220de2fe2e0e60a4d23940038172498361b54fe8a2a9c7dec72b57e98eab71cceeca295c3ebf6ef5ce7fde1acba
SSDEEP

1536:xDHhfaWb0F1Qe7p6wCbyzyM7Tg2ccPCIca2eHjh23jA6G2quidreNEi66uW5hWgk:dHhfaWYF1fp6wCpcg2ccKz/eHjo3jAuQ

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3316	msedge.exe
3316	msedge.exe
1460	msedge.exe
1460	msedge.exe
4140	identity_helper.exe
4140	identity_helper.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe
5116	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe
1460	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1460 wrote to memory of 3388	1460	msedge.exe	82
PID 1460 wrote to memory of 3388	1460	msedge.exe	82
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 2292	1460	msedge.exe	83
PID 1460 wrote to memory of 3316	1460	msedge.exe	84
PID 1460 wrote to memory of 3316	1460	msedge.exe	84
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85
PID 1460 wrote to memory of 4396	1460	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8eb7dff7a97710ce9296c9c19250bb41_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe542a46f8,0x7ffe542a4708,0x7ffe542a4718
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1892 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:4640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,2842545399198674566,11103333536756991057,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1260 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3968

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56641592f6e69f5f5fb06f2319384490

SHA1
6a86be42e2c6d26b7830ad9f4e2627995fd91069

SHA256
02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455

SHA512
c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
612a6c4247ef652299b376221c984213

SHA1
d306f3b16bde39708aa862aee372345feb559750

SHA256
9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a

SHA512
34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
dce303f08aac565f8dfbb46cbf3ac3fe

SHA1
aa191d5b0dd2d09a573a8f61a926f74cb753e175

SHA256
ce7b5231bfbb9ff84ef86f7327844afc2e087345b1278b20bca9b458475e6e5e

SHA512
517be5c7ab45be4b49c8c3fc8da961afc7978b282cb8881aa3b2f3b63410e53e98f85f2c76ba2699086cede2efc45471c323abf3866e574d12a31d99c6d5c987

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
6d76a41cac9dfbaef27cc6ee61318f23

SHA1
31ea1c54f6f0b99058dc67606638affa5ea8abb8

SHA256
8709278602ed5316ae058a67d6f4e4d6843b736bce284b21c18d1bf61bcc9597

SHA512
95ed8199b01fa8d29c1acda68ab668d36c614186678bb09b546ea3897f16a23144fabe89c9f3020a0e959cb76543e31f97b036072b42fb0bfc53291e6f6712a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
19acfc221c2e2dab7ac6f416d9e1f829

SHA1
cce582108ef502dce46a591d28fd9c3d288b6105

SHA256
e5cf28744ec9623e64e36a6ad2d013f3c41bd4904edfeafe7884ccc91813df47

SHA512
54543df5dcccc098b641cdf783eb3bb25b9f705605175a8ac3fa9e4be35fc890ccca54654277319076c5fd5ba82f5cf7913b2d6b8a0d9d9d9de9dc07bb79f5df

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3741896a560dce39f4d535213bd3c8f1

SHA1
d8d8592f53ed845cce8fd4e086127423353d42b6

SHA256
64c993df6aac9eba7a0042ead24b931bdde3ae01d764c5d126f478a5d461b8a5

SHA512
6e2d8e4810fd30fcc8caf3d90d006d6d5b9b45b3bf8fc3400195404116aa3886cc80b6daef570fd8ac70d00e6c4d6975ff78de4c7b02656a01d35e2c7acbae4b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f28403ec235237d88861d48de718cd73

SHA1
00345d82c4fdb5d8edd403b83350bfb4a688c433

SHA256
d1e417ebccee2ee7de5fadf925b41d0b476b62ae5dd706f365a389f3bf3d90dc

SHA512
269c65431a22f8ddf57beb7f77773b048686892b15271737f937fad1a55fc17fd66bcdf06ce64af61cdb3bff572def67c1d809438fc0a45b42859f085c43a83a

Download Submit