c778ed24f1ae9c0c250a847ae90aa91f207d6131ea16954d605afb28d3990a59

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
07/04/2024, 10:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e4b0f9b363f87d4d18d3e584170b5815_JaffaCakes118.html
Size 59KB
Sample240407-ma6dyaah69
SHA256 c778ed24f1ae9c0c250a847ae90aa91f207d6131ea16954d605afb28d3990a59
MD5 e4b0f9b363f87d4d18d3e584170b5815
SHA1 6cea9001b5edffa5689c768dad203cd69b041efe
SHA512 35de5165de4df1bb8224dca1f8934181179a4fb738b11cf39985f956e50fb5617359c8f18614ab30703b9a8d974fd25c89a63fe9487d04daa004b4434d4d9a4f
SSDEEP 768:xIZP+oCoRhvQHPeDm98CEjPwmdBPseKxH0FEG312SeRJdtV:xIwroRVQHPey98NbwmdPFEG3GJdtV
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1732	msedge.exe
1732	msedge.exe
652	msedge.exe
652	msedge.exe
1192	identity_helper.exe
1192	identity_helper.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe
652	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 652 wrote to memory of 1584	652	msedge.exe	86
PID 652 wrote to memory of 1584	652	msedge.exe	86
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1232	652	msedge.exe	87
PID 652 wrote to memory of 1732	652	msedge.exe	88
PID 652 wrote to memory of 1732	652	msedge.exe	88
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89
PID 652 wrote to memory of 432	652	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e4b0f9b363f87d4d18d3e584170b5815_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffce5c646f8,0x7ffce5c64708,0x7ffce5c64718
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3140 /prefetch:1
  2⤵
  PID:1092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3160 /prefetch:1
  2⤵
  PID:4628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4860 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2412 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5820 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3700 /prefetch:1
  2⤵
  PID:4176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5152 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,15654800462802342380,1418213201293547256,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1764 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 3a654b499247e59e34040f3b192a0069e8f3904e2398cbed90e86d981378e8bc
MD5 9ffb5f81e8eccd0963c46cbfea1abc20
SHA1 a02a610afd3543de215565bc488a4343bb5c1a59
SHA512 2d21e18ef3f800e6e43b8cf03639d04510433c04215923f5a96432a8aa361fdda282cd444210150d9dbf8f028825d5bc8a451fd53bd3e0c9528eeb80d6e86597
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 4c0224fb7cc26ccf74f5be586f18401db57cce935c767a446659b828a7b5ee60
MD5 e1b45169ebca0dceadb0f45697799d62
SHA1 803604277318898e6f5c6fb92270ca83b5609cd5
SHA512 357965b8d5cfaf773dbd9b371d7e308d1c86a6c428e542adbfe6bac34a7d2061d0a2f59e84e5b42768930e9b109e9e9f2a87e95cf26b3a69cbff05654ee42b4e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 7af24fa6966959b734a37d9e39519d882a06e047b91bb47874b8c62d0a99da52
MD5 ac46d6f574a44e4969f53e3417563da0
SHA1 2f7cfce53e8d0ca5392d95e516df98a8fa577b8d
SHA512 84b0e39c1e31292eb7b7a824440048e4571631f715e3dcc450606fa02b66ceb56e425763d83463356c2872d49f0a4cd6c68793e775adb8a6e9fb7f6a16fe94f9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 78685c5e22ebb34a5fc430b0c95ddad2271bcf628f6fe6788463a21a3227a803
MD5 65fe5db82331cc4c3cc9edac51b422d9
SHA1 682079cbd768ef0b96187e077e38b928363dac59
SHA512 269a3bc50e84c34bc007afa026164fdf5a9eacd84f8f027c5c2202343d254ec33a4ac3870781b0d431b7ea6dc28b3e981ec0311d01dcd2397de6e2763abd401d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 4ab3d15b9c27d8dcb426f2871d1df571b879692c85b50ede30442cdf83a7b892
MD5 ea4d1fda2f7a3be54477ff4cb274a46b
SHA1 66c5d176e5860fcbaf6de48fbec6d24057b1d2e2
SHA512 c42c37d2ef5d84298aded130203cdf0572f11c09a31b94f61d5175592363d3863eb4717c96a195fd3cb38f5a11c0f2d1b12148b3f6d26ff1e668c2a0cfcbcc63
SSDEEP 96:nAktTY1YewpvWMoiVmdeMUFy4zPyez2OHTDRUWQyV+VD7AiEwb:nAkKKeGWM8UFy4zPyez2ETNrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 7e76aa35a063050905b61f9dcad201ee8e9832e70f968dd5adc4f984fbd6ac47
MD5 3ee3ec1cde8e0ab0fe2c7a36f3feeb21
SHA1 7c028ea811d709c1649cd39913469735e714cd48
SHA512 f03060eee98ae0060198db98ddaf9c89bdacfa999fc8c822de54264ef3191386e24e46ad62f16c90960024c3205c4ee1244e4f1b5e7338012e93ce54eceab796
SSDEEP 96:nAkeTY1YewpvWMoiVmdeHOHTsRUWQyV+VD7ziEwb:nAkzKeGWMXETYrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 730a3103774f945b13df0f1e9031605036f761fc81e4b52f0ac8be2a60c283f6
MD5 63d0d56966f64947679e43abbf7b181a
SHA1 9f5bf061d1819ba7ca2fbed6246ea4b1f62cdd61
SHA512 449aa91cb08a55c23aad4f8d2039916543896a82182aa7c7c5d2138eb435d0bd2d0ed62d30de2952b39d1aa349802be0bcadf95e622b9e81f9af22ac752750a8
SSDEEP 96:nAk1TY1YewpvWMoiVmdeMUFy4zPyez2OHTsRUWQyV+VD7AiEwb:nAkSKeGWM8UFy4zPyez2ETYrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0220a5efb0079011026f78d9b8a32ae5b58d79d904bc7f745c823a09f6b746b4
MD5 540470eb93d4bf762199568eb13acbb3
SHA1 ebc1453bfbbf2c0b0fd7bae17d90bed973f6de12
SHA512 fdfbca4722718745a696353c6017c382f731480af010754155f2a63988d282609d800063ef958fd4707ad2291578308ea6c172aec726ebb242b75d7df09ff497
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupoe2RUGybRPxvFt2pTEEjxI:A9iIxuERzA83h09RZxYGuPTt2h3CoC
MD5 SHA1 SHA512 SSDEEP

Submit Download