516aa7e922f72f4c23c13f3ceb07045414effbc61e931c9fd84683114fb74c0b

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10/04/2024, 15:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
eb569e179808a5d9e4e62c841e7c7edf_JaffaCakes118.html
Size 99KB
Sample240410-sejnmacb94
SHA256 516aa7e922f72f4c23c13f3ceb07045414effbc61e931c9fd84683114fb74c0b
MD5 eb569e179808a5d9e4e62c841e7c7edf
SHA1 5ca52f38fc94c8c2b7eeb5a586363707db632bb3
SHA512 e1cfc30ce0d4e30433fa3f1f99931eda3a2ba8969180505ad21306f4c9252f9bdd80c3b341b9870fabaa4cc91d7c317ccad980a9e690ba4775b794655237fc82
SSDEEP 3072:nVZFICUMvh93/nnP1k5EDMgV4gecAydgSzE/F3JceCfPU+n+w:Jh93/y0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3424	msedge.exe
3424	msedge.exe
4412	msedge.exe
4412	msedge.exe
4496	identity_helper.exe
4496	identity_helper.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4412 wrote to memory of 3392	4412	msedge.exe	86
PID 4412 wrote to memory of 3392	4412	msedge.exe	86
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 4856	4412	msedge.exe	88
PID 4412 wrote to memory of 3424	4412	msedge.exe	89
PID 4412 wrote to memory of 3424	4412	msedge.exe	89
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90
PID 4412 wrote to memory of 3180	4412	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eb569e179808a5d9e4e62c841e7c7edf_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa06b346f8,0x7ffa06b34708,0x7ffa06b34718
  2⤵
  PID:3392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2160 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3172 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:3852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3040 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4232 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,15626971877724372464,12553193097026717789,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4976 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 47a22bea2e7d0154c59bf5d8790ec68274eb05e9fa6cf0eab0d648121f1a02ac
MD5 47b2c6613360b818825d076d14c051f7
SHA1 7df7304568313a06540f490bf3305cb89bc03e5c
SHA512 08d2366fc1ce87dbe96b9bf997e4c59c9206fcfea47c1f17b01e79aeb0580f25cac5c7349bb453a50775b2743053446653f4129f835f81f4a8547ca392557aac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c91388c87878a9e2c530c6096dbdd993b0a26fefe8ad797e0133547225032d6c
MD5 e0811105475d528ab174dfdb69f935f3
SHA1 dd9689f0f70a07b4e6fb29607e42d2d5faf1f516
SHA512 8374a721ea3ff3a1ea70d8a074e5c193dbba27ba7e301f19cea89d648b2378c376e48310c33fe81078cd40b1863daec935e8ac22e8e3878dc3a5bb529d028852
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 588B
SHA256 9772133e35d0e073e9c619ab82170a7a5e9baf09713107e0580f50eb6dc0ad6f
MD5 61a8278c9813d5e9530b7d82da0b5dc0
SHA1 15cdfe1c56449ceee7c06d6e3dd23b67f86dd1c4
SHA512 9c422440cb9d501406c2ac18d8b627e5d1ee273845e51aaea0263fb430e897d01b4918be169162be631ba81cb20d98c26ee1fcf3c744ed812c4e48149c4f6cb2
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 467cf82cf1564e5335dbf8d3f0a19ff70becb437b8ff87449328c118f39b930a
MD5 377b60dedf17316fe5947fe2b60317cf
SHA1 7061de1cd120ee90c8a0dddd963635bc02c50bfa
SHA512 721e2abff2492a03aedcb5dfc0a4fc00af5ee5f4d3b1695b5bf7056bb6f0e7e355e47caa0f37f6543632f5e3c97438357b11bea89caebeec4abae98d83eee572
SSDEEP 96:n+kSU1+AwpvWMoiVmdeH0Q90UWQyV+VD7ziEwb:n+kHoAGWMXX0rt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ad7d11792d1d6d00c6b66a4350672d6da6386784d0a996090e84daae380ff076
MD5 f67e86b702f6103b603c850c04a2a453
SHA1 0130610c3b547d62f61009956b46fcdb747d5cd6
SHA512 cf0fa888f5c1a8869f834fcc8d0b386e7deacaeec4d208f896d5da96e4c1e87a6923c204c431130bc9c331fbe0e5ff2b2302d8a577b8400642a41d10be0062f1
SSDEEP 96:n+kpU1GAwpvWMoiVmdeim/7x20Q90UWQyV+VD7AiEwb:n+k2sAGWMym/F2X0rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 15202b86a462311938a3b12518f7f4504a16584a76b024d8fbd2f90c0630b319
MD5 6203802fd19fa898c09dd2bbf5cb2faa
SHA1 921d150e242280c21f74ebb00bd2c9f70c483eb7
SHA512 4514f8617441164d66251e2fb70a841a11d32235b933b8c1f5eedc246d2949750c8210bc3872706d184755bb1c76ffac8dc7ffd1139a8ad8cb7f1351d1991772
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupWYQe2RUwxbXNoiXs4YwKsA:A9iIxuERzA83h09RZxY4zNo4NYwpgAiR
MD5 SHA1 SHA512 SSDEEP

Submit Download