4a6b0104a2b69e1925f4b0483fcad478d507581f97201bfb23562302453ca9cf

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/05/2024, 06:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

33198d469a5f440329c1f58ec0ec2971_JaffaCakes118.html
Size

50KB
MD5

33198d469a5f440329c1f58ec0ec2971
SHA1

366e25455c59d973c9a44f9fcb8725dc11d2bb00
SHA256

4a6b0104a2b69e1925f4b0483fcad478d507581f97201bfb23562302453ca9cf
SHA512

7918e6f0bf979af3390dcaaa88b653c2afa55132d02b08d8ac4d53fa43cd1c56a6ed469226a0b0592c787ff6855dea189dad50d024b7ebf13baf3b9b3ddc7c77
SSDEEP

768:agr1p3J1OWD7hL10jwF0zsvlRqYnarRowQ9GBC8VrtfK29Epi:agd110jU0zsvlRqJmgBC8VrtfKi

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1968	msedge.exe
1968	msedge.exe
4268	msedge.exe
4268	msedge.exe
2848	identity_helper.exe
2848	identity_helper.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe
3712	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe
4268	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4268 wrote to memory of 1640	4268	msedge.exe	81
PID 4268 wrote to memory of 1640	4268	msedge.exe	81
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 992	4268	msedge.exe	82
PID 4268 wrote to memory of 1968	4268	msedge.exe	83
PID 4268 wrote to memory of 1968	4268	msedge.exe	83
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84
PID 4268 wrote to memory of 2608	4268	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\33198d469a5f440329c1f58ec0ec2971_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffc66746f8,0x7fffc6674708,0x7fffc6674718
  2⤵
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:2608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3336 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:3140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,2115731911031054828,443604796004529790,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1904 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3712

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4960

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1000

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f61fa5143fe872d1d8f1e9f8dc6544f9

SHA1
df44bab94d7388fb38c63085ec4db80cfc5eb009

SHA256
284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64

SHA512
971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
87f7abeb82600e1e640b843ad50fe0a1

SHA1
045bbada3f23fc59941bf7d0210fb160cb78ae87

SHA256
b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262

SHA512
ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
eb30adfa1bbd0c550fcb48061b30349f

SHA1
bcaa8c5e02b63e768a3d80aaa060a0abf6ddb727

SHA256
b28a6183963c654b3b516f4408284dafcd9e11d96b04dc5de39d55f2394b007a

SHA512
d27f8285f7f8282cc9ddbce5b7cc7253c0c0284e6dcf6795f441a48bb2ab90ef93e14ae10989140fa6a014db01a582db837123af2144748141602a0476d57643

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
7caf8fd7ed9da51b3378a2d0b062a299

SHA1
3185fe65f2db36a291f63655a725d1b68de8d952

SHA256
126c69506031b944a33bc829488a382a59b5b41022c3a6846001ba92e348ab5a

SHA512
818fc60c356e1e42345f62b8f3aaa766ffc6aa69fcaa77135e78bda065a164c98c7a90d3a587ab5357f26cd5e9fba5db4286249db0e549698ef3209ea3332f4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
182f7a5257465d0efb738cbb8ef9c574

SHA1
7bea223b904255f2f3cde9d590c1b5d81980657d

SHA256
e03dff5e4930d36a2b168cd0d7bf69b80b0b625e8f170eaf7a097c5ebdf55372

SHA512
6cf08045e5a348f2b2312ea92215473faba9141fbcd43564a1a5f806ce4e34c4f604c28fda99eca680bd97aaa07f617f3a4f4425d3f6993ae1547ef65e03e002

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
e49c0d18c24f1cfcdb7f7fd53d51e6c9

SHA1
ee5fb5111f134de40fec04ee63375c04a82b6eb4

SHA256
85a478c13ab297a29553ef70bc02a0da6680adfa2fadc1328ce04fb58b61a1c0

SHA512
40b758e3c06708b68a0734db0f0922335de31e73a9e51756aac1d2a4262e0ec71fc0abb792a38c349c8307763a313410e2d1903e4c64fd66a707f4ed2d6b2018

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
206b6b1a09a68465613fc39f1b5c463f

SHA1
5c1b2ce248d6b3f024dfb3cee499de327461ee53

SHA256
c760f218ab91b52cb8570d5969af4e24d1f6d5b9a38a4475419a92f2c5f8ce61

SHA512
d673cae39dae8b81715093c2853bb6b2654bd2b42b3709b03d5e682c252fc74e80180020c2856704e33779ff19544f82e2f455ebf368fffe99f04b4a24c5e54a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d888eaa5fe51c44e379b4af888acaaca

SHA1
93339e086ffbe54330612eb4e41f2c3d2f55f697

SHA256
4045eb98f4677299dfc70142dcf43f66680c18e422984e6e31cefa89dbeed747

SHA512
19b2098b13048cfdf3c4b26e3614185c6e197d8bbaf0377c974df2121f22735bb22e497ceb36bb41fa6cfeacc8b13e96ae2cab9a70372e5186610361079b132a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e54f3e628f2dd10578adce68145ba283

SHA1
8f4d05398b4b3b91e0694588f0f1bb016bc28087

SHA256
553e7fee9a91874a2454915303348944f92e819e4c35dcc502d661deba3b506e

SHA512
024f03ee42f304632032bec833df676908acd772d56f025abe01f8145d5130fa1baab92bf42915afecae9aebb375ff5d9339ee4d693d7bdabae628d128008c7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
e078ade8028c0b1f1fb7a6df57a643fe

SHA1
5dbe58126e3c7a49e9ab7eca46667a5360e043ab

SHA256
8f8c3deee77bb55eb929a3ca78846ef5cf30c8c12f109669048e879cda9eb733

SHA512
98cb1b17944deee0862ebb2201f93f6a656174739bd85826dfbcc356014bb6cee5d649ffdfb4737d71f119f8ee533132327ff1cc17a674672669de86b199293a

Download Submit