ad8f9ebdf6f5cb728a3964123bc33b9c74291b4ab5213f66c60588af35ff370e

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
05/05/2024, 04:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
15eade3f69704a17bb63f15cce95bc4d_JaffaCakes118.html
Size 67KB
Sample240505-ernlfsee5v
SHA256 ad8f9ebdf6f5cb728a3964123bc33b9c74291b4ab5213f66c60588af35ff370e
MD5 15eade3f69704a17bb63f15cce95bc4d
SHA1 d390e055076d73b06ee8d558ffbc82ac0dd03449
SHA512 79872ebf8be56d8c605fd532c1049cc52ab5cf8a0a46dbfd4e9eff003115a99cab4672e03ae4c0b790d4fa2cc5f99d5e4dad0a7142f1f58637b0901ace6ab7fa
SSDEEP 1536:OSu0URVl1lY+98pIMmaPkvy/UeFO+3Mh9dtV:OS/CVl1lY+GBrFO+3Mhz
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
4740	msedge.exe
4740	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
3680	identity_helper.exe
3680	identity_helper.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe
1132	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe
920	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 920 wrote to memory of 3984	920	msedge.exe	83
PID 920 wrote to memory of 3984	920	msedge.exe	83
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 2308	920	msedge.exe	84
PID 920 wrote to memory of 4740	920	msedge.exe	85
PID 920 wrote to memory of 4740	920	msedge.exe	85
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86
PID 920 wrote to memory of 5044	920	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\15eade3f69704a17bb63f15cce95bc4d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa28a746f8,0x7ffa28a74708,0x7ffa28a74718
  2⤵
  PID:3984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2288 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2448 /prefetch:8
  2⤵
  PID:5044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6096 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4000 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4136 /prefetch:1
  2⤵
  PID:3716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:1068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2224,7675787227926212773,12211961920791800997,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2164 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1132

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3124

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3920

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f24ed6c5bf4b734a9af4d64e14a80a160bea569f50849f70bf7b7277c4f48562
MD5 dbac49e66219979194c79f1cf1cb3dd1
SHA1 4ef87804a04d51ae1fac358f92382548b27f62f2
SHA512 bb314d61f53cf7774f6dfb6b772c72f5daf386bc3d27d2bb7a14c65848ee86e6c48e9c5696693ded31846b69b9372a530175df48494e3d61a228e49d43401ad1
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 0f4df3120e4620555916be8e51c29be8d600d68ae5244efad6a0268aabc8c452
MD5 a9e55f5864d6e2afd2fd84e25a3bc228
SHA1 a5efcff9e3df6252c7fe8535d505235f82aab276
SHA512 12f45fa73a6de6dfe17acc8b52b60f2d79008da130730b74cc138c1dcd73ccc99487165e3c8c90dc247359fde272f1ec6b3cf2c5fcb04e5093936144d0558b75
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 b744ca57da1149a70d1df5cad9f814aac335f0129550144cfaf6967891add5e1
MD5 cb955a9f75fd1b5f6311e4fb1706a03a
SHA1 9535d33faf001077e5eb540a0ba876bf191ff7d6
SHA512 fb2b8a9ca4ec0d585d35c59cc3bb2aae87be35371246c9d68ea5460edbd331beecd556f63a303946d6722a7cbdd75238c2e7ebf3b01c047a3fe9377af3e0fdd2
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5de705183e91782192807db01954bd464f1b9c3d7e5a137030f5fe387f98b559
MD5 9239630e60a118b9e8563d69fa2c2420
SHA1 b0669ef2a30170526f18f410aef54063cbeb9366
SHA512 38cc6f1119bb4ae3fb6903e556a66b9ed3698fba1603ed04d87f37fb419cc70d789db99abbe9fe0fec5e71c2ddacff28b4494fe57a3a51ee4e4891edd067d918
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 1aa598251ad1a35ba998f4e978c90c84f51043f5ecaa74fc58a5d81e6943678d
MD5 8f0ef42d096c64fdf290c550fd9cee02
SHA1 c8340366472ea7f656b94ecb4a7d26bf277b5ce9
SHA512 3f1cf0165ece62ecc653de2ebb99a84334433beb9db8bbcc5c3cffa3b57aaab74591263ec5162951313a99bf3af2516613e77b9fa7f509cfa02bd87060c1a3c3
SSDEEP 96:nXkNR1r6/hXwpvWMoiVmdeHZqeo+UWQyV+VDCziEwb:nXkLhAhXGWMXxo+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 7dd434e2e0779652c5c8dbecd892d08ffd78c05a8ce0b9e53ac0a0072acfdf36
MD5 248da76262ff7c8ed06fc906efc35638
SHA1 f644e3ed35fc6dc37cdcb8b64ae522a3004cf7bd
SHA512 1ed616d3dcf45cea99e63c9fc862f2d48450fa0e4bd2a9c0f335501abc3203d3f58491db62b847a65f20b59e74a094c8eae6c11da93d4dc36e18b859e339bd18
SSDEEP 96:nXkIR1r6/hXwpvWMoiVmdeM5aIv89E4D2ZEeo+UWQyV+VD7AiEwb:nXkohAhXGWM85aIv89E4D2jo+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 168a2cf36109ac9027da1026d19b9d44f48a09117c5cdea9044514c12291fa4d
MD5 bc20511c6378bfb53a5404e32788b19d
SHA1 954104b4c4d3ab3db5b3b5a547a6b314e826cd19
SHA512 242c88a9b3b0724f76e1acdd600685584c82d2b88ee7e85461890b368d61f96a878443b0714d4ebe7d5a91c7152b387cdf840655b1e515f8950f2af4b88d904e
SSDEEP 96:nXkIR1r6/hXwpvWMoiVmdeM5aIv89E4D2Zqeo+UWQyV+VDCAiEwb:nXkohAhXGWM85aIv89E4D2xo+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b9a36747d699dd6ede74afbd86d4b902d8b5d609e8e3937e182c367e9caaa165
MD5 124dab3c4dcc0000dccec6180634ffb0
SHA1 e8224cbb83957eb09aac182691cab4f26f487247
SHA512 67f55dab8ad3996a783681ae7d617904c54641a655e7b5987f1d65c00b3117c345297638f3bfb86f1942be95eae706095ff31d980b79a66fc8ac2ee5925ae032
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupYYSe2RUDwqGN+OblfBhDaY:A9iIxuERzA83h09RZxYYT3N/XDafEBPr
MD5 SHA1 SHA512 SSDEEP

Submit Download