2cf911b7a7f5cc7c8e5df9e9176d1eecfe1f95e1fbec34b6cdfd870cc53f4edb

Analysis

max time kernel
135s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
21/07/2024, 17:54

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

60d61e88c4062b106cc334f23f0ad808_JaffaCakes118.html
Size

149KB
MD5

60d61e88c4062b106cc334f23f0ad808
SHA1

e26316c2dc34634a0cd9b00c0d9ccb39127a0614
SHA256

2cf911b7a7f5cc7c8e5df9e9176d1eecfe1f95e1fbec34b6cdfd870cc53f4edb
SHA512

588442a6469641512ff01e8a5330353f362058d4e4cc6530cd9494fbe177ad4316040dd7c8ab73730060dec2df9dfb0045379acfa17b36d351fc39fb5298cd0e
SSDEEP

3072:5fGyDSnzYZSw5krCO0/V/8rnOL55ShutTiyybub02PcV22wOoS/0Ib+b+FmKgMxT:IyGnzy5krCO0/V/8rnOL55ShutT222wa

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4480	msedge.exe
4480	msedge.exe
4936	msedge.exe
4936	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe
4664	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe
4936	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4936 wrote to memory of 1992	4936	msedge.exe	86
PID 4936 wrote to memory of 1992	4936	msedge.exe	86
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 2988	4936	msedge.exe	87
PID 4936 wrote to memory of 4480	4936	msedge.exe	88
PID 4936 wrote to memory of 4480	4936	msedge.exe	88
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89
PID 4936 wrote to memory of 4964	4936	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\60d61e88c4062b106cc334f23f0ad808_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff820a46f8,0x7fff820a4708,0x7fff820a4718
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5176 /prefetch:1
  2⤵
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2648 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4664
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6120 /prefetch:8
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,17595014656174529680,3579179266572897980,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3080 /prefetch:1
  2⤵
  PID:2848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1768

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1f9d180c0bcf71b48e7bc8302f85c28f

SHA1
ade94a8e51c446383dc0a45edf5aad5fa20edf3c

SHA256
a17d56c41d524453a78e3f06e0d0b0081e79d090a4b75d0b693ddbc39f6f7fdc

SHA512
282863df0e51288049587886ed37ad1cf5b6bfeed86454ea3b9f2bb7f0a1c591f3540c62712ebfcd6f1095e1977446dd5b13b904bb52b6d5c910a1efc208c785

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
60ead4145eb78b972baf6c6270ae6d72

SHA1
e71f4507bea5b518d9ee9fb2d523c5a11adea842

SHA256
b9e99e7387a915275e8fe4ac0b0c0cd330b4632814d5c9c446beb2755f1309a7

SHA512
8cdbafd2783048f5f54f22e13f6ef890936d5b986b0bb3fa86d2420a5bfecf7bedc56f46e6d5f126eae79f492315843c134c441084b912296e269f384a73ccde

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
2c9ddc1ab51db984c236261baf2edcea

SHA1
2a9926fb65ad065be18a32bcd2d46972e51a8260

SHA256
384a2f3e74f67a5d46a48e203ccec3af218813f6ecda6ab39fe64fe9b2ad601f

SHA512
43bcc910cbb796c8eaa0eb647f4a2e2c958408c9b02b666e6c5449969960e0a9fba5c4f59b8883c4f83f8bfc2bc0f9e8180fa8e97b4de9775542439dca8d262b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
32624039f01e984cfe6bb9cbaf598037

SHA1
71818db80f2039a5c28e5f3ed42854931a3e7c4e

SHA256
a1a4c3e1ff8d2c158a837ff1df7b1206ad27e1b1d240b10c073ce409ab79a8a7

SHA512
394ddc40200c66e8c4844400714bd56d125eaa8bc0975ece44dd537f0d0a7ac238c55e92ab19d63ba7d29bb0900e57e4593d5ae1f45f6d3953345b84f2b078d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
641bf5ee080eca5fef35765d4871ef00

SHA1
6f5c937c1960831d999e8914ede06286701a182e

SHA256
a9b0d7484093b395209d0a40c5e331797dda53ad33a210489d3d3e67396421e8

SHA512
59eeac933718022ef117fd46d8febe1d29ee3979f85c60800068a83b9fcda8547c4b2a30e9c40c6c6072afe1bd4c689dc01d1c49f0a449ace22e6e96f63ed9d3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
07207c34683b0d10e1004650e7f16339

SHA1
447388366d39d42a6cbad99d3e0c81bd065f7347

SHA256
8b9a864e76c1a281c8885114f130c67e60345c0d4b512b6e2bb7d721c9c08771

SHA512
9d66787a2ec6f9389ec64bc60c6bfe3b30e0bf08382342c2883102ae1d63f7876b40831bbcc02b6540dc0f0db6375d1022f4fb7ba7bfcce4ae2a56774aade0d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
215caf86dcf0769315524d7a291c9644

SHA1
31bf74fe0e8a07642bec27a789a192ace053a202

SHA256
0dfd3e5908db88ddfc632dda54dcf12c31e41dfecdbc90f24481cbd6fc944db6

SHA512
101f5c07452f3bddaa9ee1e5593fb317eabaad3604ae6adb67283831e1682eb25ba077d1b69e93aaf81a40130fe775dba6e4ad7b9f7a0690af249d05d2689b7a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
321cd2ada1387ad76a8018ac11534a80

SHA1
0cf4dea531c82150ecf3ffe948baf73f365e488b

SHA256
3638cb20419a681d27a2b746f747771a2c0dd253e801682d7284ed30d2742415

SHA512
3cfd0417f698e3f75c0bd2d9f315a5638a22235ca0056e2ffac7c8c4e3a046fb6c23584106af035e5b86746a5568038b5fe624a9df9f07e13a662c2ca6abd812

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
3fc15e6abda5a42a0a6d60f807bff410

SHA1
16d9543f1c6062040ec7b6822d741c6aeea0be5a

SHA256
ec254b037dbe760e8b33008e0fa5600c884c43faee7c178e10bc6698a7405b32

SHA512
7dd541b26f6c9e90b42b19a261712243826b10ac161237b81e0da50d51e610738c015b27768c3f1e5860e25ccf23b35cdc6b232063392e5b8fdece8146ba2104

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
fab35f8271a4c7c0240c08782f9ae6cc

SHA1
a306c362eeddf89f8cec4216bb0a5d80673716ac

SHA256
a872147162c223ede7ab06651f13853e858d35e460ec17e745741f33c6f37d8e

SHA512
bc4d90dee7f6ada0163a9d2cf55ede08fd1eab8051d3e7c770918c47ddd8496050b75bb2637b8d0c5476ae743b775a47a0cb1fb573a6214e68a3791fcedbba0c

Download Submit