13e92dfa66c34be730dc314191e39d4c321e884f7e89d39b974481c191567d7b

Analysis

max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
23/07/2024, 14:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

67dd9fef7cca7c836adb3dae3a9cb7d1_JaffaCakes118.html
Size

18KB
MD5

67dd9fef7cca7c836adb3dae3a9cb7d1
SHA1

6ec5eaabd79e9697c86487924523f4574c110471
SHA256

13e92dfa66c34be730dc314191e39d4c321e884f7e89d39b974481c191567d7b
SHA512

407ece9462fa34c69b4c458fdcb1a61133b8d17d7e459a17532123790787085e80b424c06777a36877c95eb4cefefa8c5156faeae0c7717a425e18132f97feee
SSDEEP

384:r/w5ctS5OOmSLuE9oCDxwQ+xbCkmP2uMKrbX/WP2V:jictIO49WPSXX

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3724	msedge.exe
3724	msedge.exe
3464	msedge.exe
3464	msedge.exe
5000	identity_helper.exe
5000	identity_helper.exe
5360	msedge.exe
5360	msedge.exe
5360	msedge.exe
5360	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe
3464	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3464 wrote to memory of 4488	3464	msedge.exe	84
PID 3464 wrote to memory of 4488	3464	msedge.exe	84
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 2968	3464	msedge.exe	85
PID 3464 wrote to memory of 3724	3464	msedge.exe	86
PID 3464 wrote to memory of 3724	3464	msedge.exe	86
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87
PID 3464 wrote to memory of 1784	3464	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\67dd9fef7cca7c836adb3dae3a9cb7d1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce23046f8,0x7ffce2304708,0x7ffce2304718
  2⤵
  PID:4488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:1784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:5016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2980 /prefetch:1
  2⤵
  PID:5028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5664 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:2456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,18141074853645770331,18430711426780178493,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3152 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5360

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
04b60a51907d399f3685e03094b603cb

SHA1
228d18888782f4e66ca207c1a073560e0a4cc6e7

SHA256
87a9d9f1bd99313295b2ce703580b9d37c3a68b9b33026fdda4c2530f562e6a3

SHA512
2a8e3da94eaf0a6c4a2f29da6fec2796ba6a13cad6425bb650349a60eb3204643fc2fd1ab425f0251610cb9cce65e7dba459388b4e00c12ba3434a1798855c91

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9622e603d436ca747f3a4407a6ca952e

SHA1
297d9aed5337a8a7290ea436b61458c372b1d497

SHA256
ace0e47e358fba0831b508cd23949a503ae0e6a5c857859e720d1b6479ff2261

SHA512
f774c5c44f0fcdfb45847626f6808076dccabfbcb8a37d00329ec792e2901dc59636ef15c95d84d0080272571542d43b473ce11c2209ac251bee13bd611b200a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
211KB

MD5
151fb811968eaf8efb840908b89dc9d4

SHA1
7ec811009fd9b0e6d92d12d78b002275f2f1bee1

SHA256
043fd8558e4a5a60aaccd2f0377f77a544e3e375242e9d7200dc6e51f94103ed

SHA512
83aface0ab01da52fd077f747c9d5916e3c06b0ea5c551d7d316707ec3e8f3f986ce1c82e6f2136e48c6511a83cb0ac67ff6dc8f0e440ac72fc6854086a87674

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
0eeb1e9f2672323b8046f75a7bb5ebae

SHA1
34dc96dd2c6061bc326f56117f31bfad71da260b

SHA256
a3e02e2e8ec377d46f5e44f5463471c3b4382f72a77593db143c4c8a2666cfcb

SHA512
ee65a31824df6d644e35e8bc9e7c68e177f1afcdf57f61a2ec73357d6405580ebfeed0d73fe8934e7717e7d39bdbdb6755389b15bd3bd5ce42138f8f5c18a2cf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
1c63c1b210caf6c509d635130120fb47

SHA1
5c6688b9eafdd18ab9c40485ca58dd8971cff152

SHA256
4ab8d70afc2644c69022d361cbe7ae818866b64a7ad92ec3b4ec76fc0c497701

SHA512
4a5f14992db0665b7dfe25f559186119e5066cf7c6691f85f9286cef3c79ed4cce298d79586b9f98719ec75681af26dbc133708efa80c9c8c46da5453b5fb9dd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
669bfaa4172362463696cadd7e809033

SHA1
0e17a298e0dff3ac185d776d1a8300a36757fb7b

SHA256
41507df78f4a7e5e962151370ef08aaf0a866c8ae50d7aa067672f4353199a33

SHA512
e7427ff1b400a439e026cf178704bec1ba1b9ffee406d143ec486f3df4911a511eb87c305b152eed4dd96a4431762056bb5ef1507a862c2dfbb60d1fbe725622

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8df228cc3e6d8772ebd06b5f9e936ea3

SHA1
2107f4781b818b9202772e0fad1a2be18e93f1db

SHA256
40edd7119e7949d996335f2036f5e292cedf67434599457ac90b08ebdf143d72

SHA512
eff3fdbfcca752333a65ac39caebd0368f47f0d434099ac4c7eb7095d7568d3d9838d08562d067b29685a5b0d477e98f458f2ff0b8a9be94cdc6a3e33904120a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
0b2ecb676ea05d2f7f1a51a9f88fb55a

SHA1
42a13b320a5e54b696c83ca51d8756a91e3cf02c

SHA256
c151d1c8a0ecdb7af38fb9291a247d2e64a27b5be3680eee90cc28bddde8b837

SHA512
a73446ae6c755d84e327efdc7d5a7436d8a196b83436ce015c1c17cc2fe143352c7e025756a55eb6d046ff1b8ab398dff92e429106a310eb47fda0efe11ef457

Download Submit