93b882e1c9308322ef4823c93c1970b4cdb129768d833b211d775f3497be136e

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
24-05-2024 19:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6fa0268a2c34c14f425aa6e2f3d90c9d_JaffaCakes118.html
Size

116KB
MD5

6fa0268a2c34c14f425aa6e2f3d90c9d
SHA1

9a3809846f15333fe70b07c7991092fce65210ac
SHA256

93b882e1c9308322ef4823c93c1970b4cdb129768d833b211d775f3497be136e
SHA512

6e428e9aa2ac32209062277877fa9194400650a75c621e507372feae541d88500e41387ef57b0e475d273168a514de4c7759a4f52dfeaacd08baff16f18990f5
SSDEEP

1536:L3LHH2t0IPwSCB8bYCj/hf2tZQBHTw9OYcyQ1+qTkkLg5shxli:fHWGYb/hf2tZkTYOYJqTw5shxli

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1976	msedge.exe
1976	msedge.exe
3568	msedge.exe
3568	msedge.exe
1608	identity_helper.exe
1608	identity_helper.exe
1084	msedge.exe
1084	msedge.exe
1084	msedge.exe
1084	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe
3568	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3568 wrote to memory of 2952	3568	msedge.exe	83
PID 3568 wrote to memory of 2952	3568	msedge.exe	83
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 4244	3568	msedge.exe	84
PID 3568 wrote to memory of 1976	3568	msedge.exe	85
PID 3568 wrote to memory of 1976	3568	msedge.exe	85
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86
PID 3568 wrote to memory of 1204	3568	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\6fa0268a2c34c14f425aa6e2f3d90c9d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffad02946f8,0x7ffad0294708,0x7ffad0294718
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1880 /prefetch:2
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4688 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2040,16199573787647308937,14833897171858405709,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2968 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
564e8ead63007b22f3478eb29c0c255e

SHA1
c8247594d6c208a069bfd0adc215d37ed81e52d9

SHA256
3420eb4e1960c68c7cec70c2c2393a7a94503c70bd6851624bd8c97226049d4e

SHA512
07d18af077f6626c89acd9e26ef1a6a6e974ce7ea366e5cff0a913617f05f7d8d5e3ff3013dffe9aa23a248190c1e664a79c3b8a3a1848df79ad348e0bd73332

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
4d7b73283335ad3ecc5ac88585e97347

SHA1
006eb3ff2f0cf1868fa54ae4e3a54d3f7f0ce6ac

SHA256
d851778c46db6e59e91130874d2b0a9b1b490448b19c81f8b1231d95b18d4c65

SHA512
8213f6d4e769833cbfb5ff6e1d0bbe8de2ca0a816394094b4cfae8d68c96620e757256343b0a65d7cf445c913951f47f2991c0b6cc98a425f5ad6d47ed2908dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8da520d1f729c00350e7477b53d2089a

SHA1
f404a0c292786ee3a1b7eb0e5b3c6b4e22245b7c

SHA256
dac5f20b54a2bc0263286d64a16741f5471b889a2fc508b8651221fe7988b610

SHA512
ceb76b7860f2f4e332ebe9a457e7c599d39a13865d1a6b500747de27526eb22ffd7ff2b2af8a14e8464e1e8aa16a6280fb04e63cfa32c8a0a1dc1d82d425d057

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
a1072ce72e877a87d3483f36fdbbea71

SHA1
7558e31f0b5900199d8a551990d8a16d87786c1a

SHA256
a49e77c691075a1db837addff905cf5f3ca6400d57019afdd73696580a621f2d

SHA512
9b9eca08f8a7698c5515621d14e52429dba9506c8474018a4be9f5b810ef86a77917f8d356e57e8c838882fa7289ffb632baaf333655b70ca0356d93a7c51652

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2fac3dd7e857e63db235a65b248ac27f

SHA1
6a6e5394ef187093a97752fbca0e6ca75eee8fde

SHA256
6f807b8f0ea122349831892fd09f1f5d286d9a2612fc66b28edef35712e6423c

SHA512
6af33f7f7f4961403b1fb765390479762a3c0fec590f544dca2eac02f3a4418180570d5241fb6795680e943f2986ed7d96b712658dd20e7133cee5b0d1a22289

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c038a2bb-55ae-4a69-9376-dcc012b18752.tmp

Filesize
11KB

MD5
6f8a26616eb4816a4e68d9e3fdff6256

SHA1
d9c0164dda3713b072ab9bd962e304552bb3737e

SHA256
702341a1cedd5d786730873ec522ebfb8f3c2ebd26f71776b67c2c38ce696dc6

SHA512
4e12ad44ab12807363ab6d854d0ba5b3a1c4823bfd6a3898bb285ef85776d7dbf3e19aac90a2f152ca1732eed1115bae81987c4efc24bc43975c2069d6c0d5ef

Download Submit