b5bc05a9ba5a06680314cdf1af14827b938c09f82505ae8179756f8db643dd47

Analysis

max time kernel
147s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/04/2024, 05:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
84829dc549f8705cdd4498da590b6f21_JaffaCakes118.html
Size 28KB
Sample240402-ft4acshd4z
SHA256 b5bc05a9ba5a06680314cdf1af14827b938c09f82505ae8179756f8db643dd47
MD5 84829dc549f8705cdd4498da590b6f21
SHA1 d6113395a721e1c7017075c483d28e42fe1b604b
SHA512 d2354cc9b31ea6bcfa2b49e2cea1e9ac4a4e27c6de943f8b7cbe4d0211ae7861d3e8a5f0bbca95340bb71d2f43590cbbf36c50af50d71a4f6afe6756a9e52ca6
SSDEEP 768:PtZRsV2+63kPENbeJZYDN4n+Gy1JlwswWuR:1ZRsV2+63k8FeJyN4nB
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

paypal phishing

Malware Config

Signatures

Detected potential entity reuse from brand paypal.
phishing paypal

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4516	msedge.exe
4516	msedge.exe
2724	msedge.exe
2724	msedge.exe
4576	identity_helper.exe
4576	identity_helper.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe
3740	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe
2724	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2724 wrote to memory of 4864	2724	msedge.exe	86
PID 2724 wrote to memory of 4864	2724	msedge.exe	86
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 3644	2724	msedge.exe	87
PID 2724 wrote to memory of 4516	2724	msedge.exe	88
PID 2724 wrote to memory of 4516	2724	msedge.exe	88
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89
PID 2724 wrote to memory of 3640	2724	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\84829dc549f8705cdd4498da590b6f21_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9523b46f8,0x7ff9523b4708,0x7ff9523b4718
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:3640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3172
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5944 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:3740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3328 /prefetch:1
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,14791101005483067987,15074702987303270047,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4820 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3740

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2284

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4188

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b54b41e7ce5600bc653aa7c88abb666976872b2d5e2d657bfc1147a0b49e9d74
MD5 fd7944a4ff1be37517983ffaf5700b11
SHA1 c4287796d78e00969af85b7e16a2d04230961240
SHA512 28c58a2ccf39963a8d9f67ea5b93dbccf70b0109b2c8a396a58389cdec9db1205523a95730485bcbc9d533867cbf0e7167ad370fd45740e23656d01d96ee543b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 01946a2d65e59b66ebc256470ff4861f32edee90a44e31bf67529add95cafef4
MD5 a774512b00820b61a51258335097b2c9
SHA1 38c28d1ea3907a1af6c0443255ab610dd9285095
SHA512 ce109be65060a5e7a872707c6c2ccce3aacd577e59c59d6e23e78d03e3d502f2707713fda40a546ed332e41a56ef90297af99590a5ab02f686a58bcbf3a82da1
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 897B
SHA256 bef83f5cfde6755caeb7b1b5a5ebe9515022d446e44f295691e2f727ff3d43f2
MD5 37d7182b39d89058e5ec2ecf92f88980
SHA1 db2b1215ab9f18d55dc3a2e65b278dc2bf8a7069
SHA512 b71a90d9aa2be2f4ec1065a520af4ef35b082961b5e019dc2e48037c25f53c30bc2b61fda50606ad43543aedf7591bacf96c8ef63361449da2576955100a0093
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 866B
SHA256 94b8da70c8bfa64b1f93f3e9ab5529b0068d0db5198c8c4b18e4e54ba3cb2f59
MD5 b1983305a7af5ed70d71f8e5598ba61f
SHA1 8763dfae5741bdba30a86c820a0288739f01c1d1
SHA512 40f7d7a0d71a3ca5900615c22abb4e86fc88ec16a02062904b1a647cc70d9ab0de16007add102abb66157aaf747128bfa493d54f9ad40b4fe4d2ca575b66fa06
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 13971c3b8010bc0fd996b66c862cb1d329229fb618b9613a3095c08f14410317
MD5 119a95a9c53a3baf0cbf4ae19d780ed5
SHA1 f73eadfa6303bb2a7aa73c2da465b67f38b8263c
SHA512 06886418260bbe86f952f5584af56bb70e6c1f1527a88bde4a5f52a2a91503e9b21ac6d35af5302ada62da6648cadb7e199fa52d9d95333bb2ff377628acc0bd
SSDEEP 96:nbkFJ61IUp0wpvWMoiVmdeHI/xltUWQyV+VD7ziEwb:nbkWKUp0GWMXYHrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 72b802ed3f900e715f9aad76b3bdef53f5c7a0dda1b3234577bb51585aefd307
MD5 002e3f614c694caaa4bf454674242952
SHA1 3da9e1686bd97100fe9a7b53b8a4a5978c387835
SHA512 aeed14c46747c8cd275d022f81ff55b77cf2d2ba61089507d7ed874ddc0f0bbcd3996165f7a014f85d552e39948a5fff7508058bb68bb0ed2cc888f30865fdb0
SSDEEP 96:nbk/J61IU50wpvWMoiVmdeEVsIB+AxY2I/xltUWQyV+VD7AiEwb:nbkEKU50GWM+sZAxY2YHrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4f355e87a97cb3b557074a781c25db45e7329bc44516d23f2e1e968abedeaa1e
MD5 ff61fd4d22ebf2418517111ead15efed
SHA1 d56206835e65a8ccce6bc5c98c1344cb1722afce
SHA512 9a20ca8ef9b82543aff86fe823cfdae5189968d74c7a8c3fb984d0c8c2421eb955512f212bd7eb9234784b679d6d308af10840d2f8593f5e980ea0daee8a8942
SSDEEP 96:nbkgJ61IUp0wpvWMoiVmdeEVsxY2I/xltUWQyV+VD7AiEwb:nbk1KUp0GWM+sxY2YHrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 914d75a6f24a381b10e1ecca480d8ad4dffa3f0047b23c94eb0faf012735cc4b
MD5 008ae2d8bfc0c26925c4d38f69083119
SHA1 bac811406d5775603bcf8cfe7b2838b57825bbd6
SHA512 83a9f7c8455e3f4be6b154ec362ce708910fdd153f7ad21d0d3a9b2594875d19ee74a98ee33c77d1b1c852005a5a36ea2189e4965628487a0f91fd013ebbc271
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe582b70.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582b70.TMP
Size 203B
SHA256 6720a64fdaf7438c0ee66b477e7ffada08cca75af1760df67387ae083be8157b
MD5 2dccec36e37415612dc17b65d1c02129
SHA1 4b61cd1427109bd81d7a9f8c2cb1e71ea0187d9f
SHA512 a21e6be163fbfea6d6bb8c3c78c3f4bb0026e16ca29e9ba493c245fdc202d3fb51fbdad38f8ca80107475c01f2dd794313fc75a107eaf98b7429521e6e1551bf
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 174e9a8ad1780dc69f0ac0cba9a904f5138963419a98ce32859bd6b5b08d0b7f
MD5 bcb722b7764716212242aa0a23593de8
SHA1 333eac0a133cb9040f3ad8e86f1e84a5c81939d0
SHA512 817acdbc0caec2ad4f95a3552fc3ea3dd07cd72d46a122ae80208f3e1775d712ac588af2a1e845089c724c68620c4ff296d8a76cd85e2448b8fb8b0a76c6351d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupxpe2RUkbblyznIYWLSDgSm:A9iIxuERzA83h09RZxY/ryzIDG8x
MD5 SHA1 SHA512 SSDEEP

Submit Download