8b22131d15c4f48564b8212a4d9d6f76c7df567ae0d5b4f26b8d3756eefce730

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
31/05/2024, 00:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

85652e6793b3bc0802810eb42bcde3a3_JaffaCakes118.html
Size

112KB
MD5

85652e6793b3bc0802810eb42bcde3a3
SHA1

4f4b80b2a7879733766632cb0ab1c7e25b026fa3
SHA256

8b22131d15c4f48564b8212a4d9d6f76c7df567ae0d5b4f26b8d3756eefce730
SHA512

b43c1d92ed249593edeab2467699d0b3e57c963a68dc6c0f845f3dd5a8b8d0a968f968ae239db65408bf190bef6c902cbbf8964745be893c9132d24972c02ea4
SSDEEP

1536:m9BAbjGYFQrWI/oqWoIliwAQ0pCRLGKpTp58mBmGT1JHEfx5:zjaWohwAQ0pC5ZVb8v81JHo5

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1236	msedge.exe
1236	msedge.exe
4220	msedge.exe
4220	msedge.exe
4212	identity_helper.exe
4212	identity_helper.exe
1272	msedge.exe
1272	msedge.exe
1272	msedge.exe
1272	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4220 wrote to memory of 1824	4220	msedge.exe	82
PID 4220 wrote to memory of 1824	4220	msedge.exe	82
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 5024	4220	msedge.exe	83
PID 4220 wrote to memory of 1236	4220	msedge.exe	84
PID 4220 wrote to memory of 1236	4220	msedge.exe	84
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85
PID 4220 wrote to memory of 3688	4220	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\85652e6793b3bc0802810eb42bcde3a3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa54ff46f8,0x7ffa54ff4708,0x7ffa54ff4718
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2640 /prefetch:8
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:3860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5760 /prefetch:1
  2⤵
  PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5744 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4112 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,1967485906347677482,12291657965158547205,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4812 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1272

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2544

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
ed052b9be8d172d1fb963013e71d88ee

SHA1
42ec71df001d038dcbb3c94a2489c56ad94c37c0

SHA256
a7295c8ebf0ab914f9ac4d015f5ac2d68196fe23a571877cff259dcf10e938d6

SHA512
e253d7d541507f3981b1cea17508be6bd727fe8c1cec0ef39e2faebe33b42042342ab059c5d1a103feb17a054676345d7936a2890c142384d962116a69b8aa27

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
29780e2f8173aa0c2926aa80a9563bf9

SHA1
17480f7ff3db922df01144dcb17bd03b60785032

SHA256
69c36f619ab44d9557c5bf1892c7eaf399508ca909836492490db4d4895c0692

SHA512
01253602223206e002e2c28bf87a0975129fb299a5c8813e9828af191e5edced6d2efc704d6743902720c76e8a33c79329525cc7c83793f647836515001d6772

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2e865f07aa6801febef681172de29e64

SHA1
8851270e28a3618007a3ac98a7c4b2a65da27506

SHA256
52136faa505ff13d7c61b3d8aa3403cc86baa1342b61db09f38dcd947100734d

SHA512
2f9e176cec39da25964e18f50edcf2e719c2b17b925d3341c642d31487548548fc459f88fa3dfad5f1a01d6c03dada32b825828fa0f4ab0618121c9f259e6aaf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3c8cdcd7c2222aa5b6963d2d6c10f796

SHA1
7925e8cb7eeba61df12b6b26cf2985a9e9d2b746

SHA256
999e7c819ff4c3b86c6eaf9456f8e5bb36bcf454913ee9fc8a0e7de8cabd0971

SHA512
f94b401ffce837880b0471c0b3825111033bbc9e8080896789e5bddf929c12e2f50815bf519983d10dd5f6515c1c6d29d79d853da8b3cc3f2b48075edaeb5184

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
db6a7e4ef1c5ccbb7035f1a2f60dc9cc

SHA1
411c6f3c76b4b7a6c557538088998db09bf22361

SHA256
cee8f0bc1b95d7698bf551323d3871954bc10f542e6aa9cb5ab6931517b6dbfc

SHA512
6d2262401e60089264b07461bc3ffc130fdb136b72eeb2eef9eed205536fbefa02d7050c686253cf4772dabd7979209ee8ea3b0ec0efe4e1c56b6dc8c56a70f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
73e78c2d3ba815c923a870df2584e862

SHA1
e608133d3d5a6c97bd1609f2b61b1a1e95702f49

SHA256
e296b87aab5deab11296cc30e5eb7eeceffa2bf206857dadb38e44f2138653cf

SHA512
76d12176866755fbc7a2d169408e7eebccd2380d78fe56add18e092b66ce35c67829ec4216f3a6547653f0f7259f2fc1bcf48d62f16dc5e2c451f740862666f7

Download Submit