74c046b1afe57f4414f39057721e1cf86c161f8f070835c68b80bd69052c659e

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12/07/2024, 21:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3efc2ac1e18c21a474a106451f1d9099_JaffaCakes118.html
Size

168KB
MD5

3efc2ac1e18c21a474a106451f1d9099
SHA1

756bfd463b699616578f3ab32ced29b5c910a3b7
SHA256

74c046b1afe57f4414f39057721e1cf86c161f8f070835c68b80bd69052c659e
SHA512

de5439650e22fe38114e95921e998568f6c1107f9b3b979ae08530625d992b6f760f65418447b0e662a260388111afdb851667d85c6e9117493772273a13f7d0
SSDEEP

1536:Pv16FamjXODC1ODCwWxlszp3PWgogKgt+xgUe+efeeeseJOeFev3yc/eFQye8QwV:WjXF1FwWxlszpl++3zNhkvxr+0FCY

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2572	msedge.exe
2572	msedge.exe
2304	msedge.exe
2304	msedge.exe
1372	identity_helper.exe
1372	identity_helper.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe
956	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe
2304	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2304 wrote to memory of 4696	2304	msedge.exe	83
PID 2304 wrote to memory of 4696	2304	msedge.exe	83
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 3976	2304	msedge.exe	85
PID 2304 wrote to memory of 2572	2304	msedge.exe	86
PID 2304 wrote to memory of 2572	2304	msedge.exe	86
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87
PID 2304 wrote to memory of 4584	2304	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3efc2ac1e18c21a474a106451f1d9099_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdccaf46f8,0x7ffdccaf4708,0x7ffdccaf4718
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2148 /prefetch:2
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:3200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2608 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6480 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2032,7514580900537465352,15227091789881305588,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=640 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:956

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:788

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
d406f3135e11b0a0829109c1090a41dc

SHA1
810f00e803c17274f9af074fc6c47849ad6e873e

SHA256
91f57909a10174b06c862089a9c1f3b3aeafea74a70ee1942ce11bb80d9eace4

SHA512
2b9f0f94b1e8a1b62ab38af8df2add0ec9e4c6dfa94d9c84cc24fe86d2d57d4fc0d9ec8a9775cf42a859ddfd130260128185a0e2588992bca8fd4ebf5ee6d409

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
7f37f119665df6beaa925337bbff0e84

SHA1
c2601d11f8aa77e12ab3508479cbf20c27cbd865

SHA256
1073dbff3ec315ac85361c35c8ba791cc4198149b097c7b287dda1d791925027

SHA512
8e180e41dd27c51e81788564b19b8ff411028890da506fbf767d394b1e73ec53e046c8d07235b2ec7c1c593c976bbf74ed9b7d442d68b526a0a77a9b5b0ab817

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
aefd348fbd27df22eb2bd3f0d37ec9b3

SHA1
4a587330cdacc37028c1d899f615b9eb05d4ae3a

SHA256
147932e022451acd9581eb39797ba045699f72a8c6f4b46ce7b04e1406744e80

SHA512
085e746bdf0189caae6bc9cfce4932312a1b9f4a3f3a5c3d3e0b2b211336971bd3c1c6a29b966c89e245071630deaafac43c3eac3cd597163b97401ee68f9f38

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c6349b62ebb05c8b9d687b2940a8cd52

SHA1
cd2cfc7098fecb9d1889f3d28998327595431af2

SHA256
53b7d5023ad98a81177fb6411421b536a8f5ebc9e2d8d3bd75408cb8e6470e9f

SHA512
a143bb5a722a14c72f924760971852cc0d84c087d9674fd41b685dfcd89a047ac0b54a77c3b93943e688b57e539a98e2ddbe77409940d557d0581dc1a45a12e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
779e3035ed29301c106a3f3ac290c7ae

SHA1
d5dabeff30007d4bfffbfa856775a005dfd3adfe

SHA256
9a0143df780933c4e78c44dacd0089e026bdc82eb752c56e77cee538779d3fb6

SHA512
98a96b2245087bf32ca8f52bf894624abafba963ceb08be56f3ac7da30517569ff091d5a027a25b1fa509e8d111bae859ef196f06a632737fdb375e577da588b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4d64b6fbcd3b88f87eae4b93f93cae10

SHA1
39398527d1dec88b35ec9904ab89824c11fe4306

SHA256
20c0f8c896fc0bef4e1cde98951bc7fd38ca6c76f9a17b708c714d08593f2063

SHA512
c742dfbfd01e9c81f1dafed623711c696c060f3ab6978cc5f6ce5619f0dec70ac4228f9c51834a22fcf0932052c4fb76a3d6254ec95258c0aa66a290b1820668

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2e514c22d603bdc69abdafd74e8441df

SHA1
2a78a7e65386175a66ff808ec30c674f77c9cce1

SHA256
dd7fb4927dd620fc400f23e8580a3562b5f2e295ecbd405cf95afdd44fb13a86

SHA512
9b942c0185f4d07b1d839a350ff6b052496cb1a004dda7c7c552277bd576e053490504911c5bf71f86e2ae4efa840ec47220e8e66378f5bfdaca02f90f228eee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d7df15f87f09d991744d1bb43e2319bc

SHA1
98f377c7806bfdafdb85342a0b6dc4a75873ec3c

SHA256
bbe02aa6324bf19dc2140fb2cc692efd7d5d9be60b2194774713e139116c7bc3

SHA512
bf20f1e02a9c0f2f824b65a1b71639d51adb3ede3b9703c95545b815100677d3e6b6e2dd02e765d24ec3d2d61e6c8ab032071159b42ac6d42e795e9a0c5aac47

Download Submit