8d91a2522287e76735ad46a4f8b6789235f482f929a255de6de2724a4274c803

Analysis

max time kernel
146s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 01:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
82a220250c5230f1e7a3414084fbec57_JaffaCakes118.html
Size 79KB
Sample240530-bqh3sshc6x
SHA256 8d91a2522287e76735ad46a4f8b6789235f482f929a255de6de2724a4274c803
MD5 82a220250c5230f1e7a3414084fbec57
SHA1 b2ec6bfd19ed389a296980c5bcf360cb75b6f1b0
SHA512 7ff32ff667712acd19b9af6293be4e116d429ef25f57135f4245808a160e3f20fd0c7709fb2f42c1a9ee3a820d80dcce46831ab0d0088c65fd0e05b01be5fd9e
SSDEEP 1536:8HWbaRmfPpJT9sO3uxCU4S2vB8neMPpJT9sO3uxCU4S2vB8neJpCQZ7:8HWbMopJBcAp1vMpJBcAp1vrv
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2884	msedge.exe
2884	msedge.exe
3216	identity_helper.exe
3216	identity_helper.exe
3500	msedge.exe
3500	msedge.exe
3500	msedge.exe
3500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe
2884	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2884 wrote to memory of 1100	2884	msedge.exe	82
PID 2884 wrote to memory of 1100	2884	msedge.exe	82
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 3580	2884	msedge.exe	85
PID 2884 wrote to memory of 2360	2884	msedge.exe	86
PID 2884 wrote to memory of 2360	2884	msedge.exe	86
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87
PID 2884 wrote to memory of 3220	2884	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\82a220250c5230f1e7a3414084fbec57_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcc74146f8,0x7ffcc7414708,0x7ffcc7414718
  2⤵
  PID:1100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2056 /prefetch:2
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:1248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:2896
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5040 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4932 /prefetch:1
  2⤵
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:5024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,3766746274433692118,10139941563338521213,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5280 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3500

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4128

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4812

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b
MD5 c9c4c494f8fba32d95ba2125f00586a3
SHA1 8a600205528aef7953144f1cf6f7a5115e3611de
SHA512 9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8
MD5 4dc6fc5e708279a3310fe55d9c44743d
SHA1 a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2
SHA512 5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 814e9c713a9241fd9b8a4d2f06f6ab1c825f24176f2f20b3b33f3dace51ac514
MD5 cd2139e54be3a8b2ec55bbb4129a95cf
SHA1 6aa335855fdec6b7d3b0a7c4d849300db34894b7
SHA512 35af72439ca9c9d424a458050f7e828836c2d021fea2d9b650b0fe0abfacdced326d3b8e58057d365978914d82bd3c2047bab95a1aea9ad3e4a2f4a969a3f3f3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 816B
SHA256 42b71420c990040c609e1587b796b9b55f7a958fc9f6253c5c93829fd6e2defe
MD5 01f48b7cb5e6aa598daa3931af95dd1c
SHA1 4e628d3cfa8433675789ac17b2cc22aeffd2e4a3
SHA512 4a5214c7ab78479d202fb1b4d8587bb6fe1b8d8e936b35d0f0ef3f565a24388c32c6ba2f93d1b9bf534038674fefe6cb29f1acbef7582dcf8a2469dc57f2b5ec
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4b8cbf2160dec059b28190431252157c3c1efc94a3ceecb980c552b0b809da99
MD5 00530121a6ebf40a6243422950a2e09d
SHA1 6478881d2ade8acf510ace8f1423ba61f81724d2
SHA512 e1fe43e5bad114395ba2eb95392436b85b8971b05598aea9a8482f62f3c94cff287d33ae48ea29ce321e69422dfba21314ab9e1fce9208bd794ebfd7254b785d
SSDEEP 96:n5k3U1NRwpvWMoiVmdeiI8GZqm0nCUWQyV+VDCAiEwb:n5kEvRGWMyIHq7CrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 acbdd3e24eaea47b9c49da579e6f9a6b5658b71319b95b6c49f7fcbbc151d38a
MD5 8b5e4f87ebe7a29937b8a0ac08c101bf
SHA1 fcd1b97ed8174755b5514e88d4ba6485929532da
SHA512 c80e5940847a96594d75864d0dc7c9f50c1b90eea24847489e06b63912f40bd52861649072baf944b89abcaa338aa0b8a44c1ede6f8eab575189c91ca7fa5bac
SSDEEP 96:n5kMU1NRwpvWMoiVmdeHm0nCUWQyV+VDCziEwb:n5kRvRGWMX7Cro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 2c61f247d78e887e300e878c161b46dd8678f59215691ae2ff0ddb8f0f6b9557
MD5 71f6e2e25c0adfcc57a17264a8ddf38b
SHA1 4defec75a983603b3ad85900b08ca71f608f50f2
SHA512 533ced45f1669224dae235f27d68ebccb18bf80f84c37c966c7e8d4d941a29a840dc0705c788164549a91cb3b835f6ffed48493d497dd5a64e72916c17b787d6
SSDEEP 96:n5k3U1N6wpvWMoiVmdeJdIbUxIVR8GZu2mdnCUWQyV+VD7AiEwb:n5kEv6GWMZdkUxIVRHu2GCrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 515ea8688e769582075375ae5f8c39484d3417eb2c4d6b6ef08ff8c3c8b06fdb
MD5 d5bf7945e57e4e05b7e4a0c11e360128
SHA1 c83f0af4c32d1c3562af53725965b0070db129f9
SHA512 7fa8a863cb02d53acce807f3d94b9b1646b2df51d34622cf4889bc0fbd822198a16fdab3ff0cca478e414b0b4848a02b6650516f4aafe11950c0a1e296225e59
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupYFge2RUvYXz13z2OMDCRH9:A9iIxuERzA83h09RZxY++91aOMWRHqla
MD5 SHA1 SHA512 SSDEEP

Submit Download