1847149852948b77c207745f4d2308523ed15f5cd46a88ed16f85deaccc0310b

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 04:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

18b75dd3444b19e4a2477bb7a98e8886_JaffaCakes118.html
Size

15KB
MD5

18b75dd3444b19e4a2477bb7a98e8886
SHA1

2c2594435c7136497b8b782e720eb7dec03b5d2f
SHA256

1847149852948b77c207745f4d2308523ed15f5cd46a88ed16f85deaccc0310b
SHA512

b5811927b4e14f0b894465c948cbaceab075aa2287f3bdf13ca977d3c3c2ccf5fe1bb793824ffd5bf538d0fb20c5a9a73b649850135265799e0094aa2faeb43b
SSDEEP

384:v3bcZk9PYUSO/foMqZIQ6Z7GyL5K19yqB9EG2V:jcZk9PmGfopZ2Nnb

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
3472	msedge.exe
3472	msedge.exe
544	identity_helper.exe
544	identity_helper.exe
5356	msedge.exe
5356	msedge.exe
5356	msedge.exe
5356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe
3472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3472 wrote to memory of 1128	3472	msedge.exe	83
PID 3472 wrote to memory of 1128	3472	msedge.exe	83
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 2036	3472	msedge.exe	84
PID 3472 wrote to memory of 4440	3472	msedge.exe	85
PID 3472 wrote to memory of 4440	3472	msedge.exe	85
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86
PID 3472 wrote to memory of 4704	3472	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\18b75dd3444b19e4a2477bb7a98e8886_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd15c846f8,0x7ffd15c84708,0x7ffd15c84718
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3440 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3468 /prefetch:1
  2⤵
  PID:1756
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  PID:3096
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4780 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6104 /prefetch:1
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,6186840822161022246,1071344034438377622,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1760 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5356

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4948

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
81e892ca5c5683efdf9135fe0f2adb15

SHA1
39159b30226d98a465ece1da28dc87088b20ecad

SHA256
830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17

SHA512
c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56067634f68231081c4bd5bdbfcc202f

SHA1
5582776da6ffc75bb0973840fc3d15598bc09eb1

SHA256
8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4

SHA512
c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
bfe2ed341280228b5e865aea8eb32d8c

SHA1
584fb377255d6e2386a26da3447bc1d0f15fa0ce

SHA256
1270e347bdd5d49c4f99e945be4ae90e26a9f3196c048e8180d298a7008b5a66

SHA512
57def6a76478fefdcde50eaf011afc574168db989afa8917665949bcac7b489d9a5319ef563ea25fed821b9c6c639ea347e61ae2b3779b5b2243c1280ab8c2a0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
19c01316059f9f99ac286f717c554ed5

SHA1
015ca63c092a6de629d0249e7ebd1f2088ce34b1

SHA256
0d5c55055a4b5818acac253ab27f827abdbb35bda1df2045568ee2f213f1677d

SHA512
8b4e4fc5db7731e2737dcbbac5ee2f68d7d9de38f4e1731edc56cf4997b014f5aa9e941742dacf92ee818634216b1fe419744cf43632072ad663612d74cb469c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
b256d040aa380f1b76df2426670e5de6

SHA1
09a93e3787a441529c12adc0e632dd0f57ca87ce

SHA256
29a6fa33b2d9adf53a50369bcfc76fe3829702e9702abfa1519e31f492f7cf9e

SHA512
65de68917ed834747ec25f9cf5fb55ce9b1e26b91b890fa48b93ecec1df445599255eb331747980aa90340c3d9819934d1fff70af7ea0bbaa332bf9b38ccd7ab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c50186314c0261cfbab2de24ee80cd7b

SHA1
90fe18e528dc62cd5ad9f1af141a0f54207d06a4

SHA256
73352f6e48b85cb1f7fe7ea0f0b9789f05003fec522e9612298d89c7a8401a3f

SHA512
e1908c744576552aee51f5d742eec7ab134f0c7505d00bc92677051bf4ce8d79a4b95757949c0f31e8d612d53a4ea3bbf7b970532f6685ca5ef972322eb8a7bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
62717cce829745c9ff5fc721cbee2934

SHA1
77449da6de376b37fbfc367a8734df136f1ffdea

SHA256
b142aac75530bfe523e06749d732e4c9bf3751da8f2592d1c06831087473bd67

SHA512
7a766cece981ffcb31d2f74b4d62640e33df4fb2c3cd69834ab326f08a22fe6db672ef7733bf3cadfd4110edfdc3f053ed1777fb6a5437dbf55b7ae87f66a53f

Download Submit