59d3af414aea8e9ddf8a4b9c085a92f7e36c2837a4eb91f88ffad0a27c25024f

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 22:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8fa4441ace6aaf0879ba50db07fa8a74_JaffaCakes118.html
Size 84KB
Sample240602-2b5lcsac83
SHA256 59d3af414aea8e9ddf8a4b9c085a92f7e36c2837a4eb91f88ffad0a27c25024f
MD5 8fa4441ace6aaf0879ba50db07fa8a74
SHA1 368401b67ba5fafe033b80ec7724e4b0486b0933
SHA512 97b9200fb14b37a0cd33e060d8d4613b50439853a1b3cf02fb0fdb467ad87329f9bbdf4edd1460a1a2fa416bd65c806a6c661981993289c82027ce45ddb4c9c7
SSDEEP 1536:Riy5jI6SImcuUyGcZM1AqZL4wJB2GeG8gHimgrNxwO1P3QG37DOELhJVR4JS:s0oUvLhgMO1l7DZaJS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
4856	msedge.exe
4856	msedge.exe
1348	identity_helper.exe
1348	identity_helper.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe
3352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe
4856	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4856 wrote to memory of 3592	4856	msedge.exe	83
PID 4856 wrote to memory of 3592	4856	msedge.exe	83
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 2968	4856	msedge.exe	84
PID 4856 wrote to memory of 3920	4856	msedge.exe	85
PID 4856 wrote to memory of 3920	4856	msedge.exe	85
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86
PID 4856 wrote to memory of 3612	4856	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8fa4441ace6aaf0879ba50db07fa8a74_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb649446f8,0x7ffb64944708,0x7ffb64944718
  2⤵
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2284 /prefetch:2
  2⤵
  PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5004 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4048 /prefetch:1
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2220,18133209453917520547,10327774919683610319,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4880 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3780

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4932

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 819B
SHA256 08f4bf64a426fbb921fe74808a6485138fcd0be6c3d85161659b2ec1fce67ced
MD5 117e104e136da42fd483cee5e9bb8bdc
SHA1 a38ae32033ee9525f2016db5060a23afdf89af7f
SHA512 6fd7bdd993f7c59de81d7014c49c46347b4fe6c11d7a66bf3db5a34e8687af030b51dd6b74c3b0b608eba6b634ef1e28ef93f17ec46b360b94deeb6caaf15913
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 c803ffce2dc32efc9189dfa3fa1bd87055b5db1620943bd320735a0ab7417f30
MD5 5574be7b226008b7532bd149121307bc
SHA1 d9df2506d6b5d914d81da4806aca3cd65b881f7d
SHA512 a3f18fb49e97615ea1d20620a192e59123eeb932117ac812eabe7be29d46fb9fa96c07f61111e7147a9e770ec52094e3ebd624f978e50b6fb4ed6ca271cdc06c
SSDEEP 96:n2kfv1tgjuwpvWMoiVmdeHvSS9PUWQyV+VDCziEwb:n2kHPgjuGWMXDro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a0b8073960ea11578c7638a450dc6415dbeb543fbc7d9ac36e404d319ab7489e
MD5 7e3b2eaf135f1fd8e4122644b6beae8c
SHA1 87a02b9b1c5855a131970f21953605c4b9748986
SHA512 62ab7389a67d1b7de9880309bfcc20732576b9f2f87804c7760a2ac4ec937f424f55b43816d01a489033f53242b451fc54a36f83313674cd919696c53acc583d
SSDEEP 96:n2kWv1tgjuwpvWMoiVmdeHvSS9PUWQyV+VDCAiEwb:n2kEPgjuGWMXDrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1f495952bb291175a3dd7acc3ad36cc6a504d41ce6725d34b6bc15fda449d4e9
MD5 f8f413b34123cfa681fd8ac9e6036d7d
SHA1 b816370a7d711747b3b5b5a94bad6c97b995ed48
SHA512 312877c8e4307dd52737a49ea696abab388c399883f72a68797cdae1ce2cc3a3434c46049dc7580ba1ae82f9baa53f8d0f13e0f31f41ae7c8eaeae7cfa5aa43c
SSDEEP 96:n2kWv1twjuwpvWMoiVmdejGjqvSS9PUWQyV+VD7AiEwb:n2kEPwjuGWM4qDrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 379e53e3ad8648bbc2ec6d080dd801486e23b28a9f5b8689049729f15da29dc7
MD5 9eda4e662b09c4811827a884b0081fc5
SHA1 afb6888115ea828e8af0b1c67a3a25dffce3536f
SHA512 fdbeb3d8d06570a8deb9ab0abbcc17839f4cf78ac7ee5144db0467965861706e1d3094d62a7973af8d2cdd17e68e589db49ec956e631755e46ed6265125d418f
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 bb4c5e33b649037be9d3c3d6ee168fe6c64153d62a3c27d832c77c29df796491
MD5 f20ecd0632bca3b15f075863e5e0fa84
SHA1 e928be6a27618e1173a73a4cb2e9a3008ee437e9
SHA512 b4edd51d4864865909aab4c89cb95992b84511e74f7a28d4e5dd974e79b5986f4b593debdb5fd87553fbeb549e8203d0e994bbb990752b33b8169a98424c8695
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57d6e7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57d6e7.TMP
Size 872B
SHA256 79a68b5e8460e00b41a3c7f440e66c7b876bf0e3f79736c3f810075100a9baca
MD5 d535c9db4b792656de781e7e8c7e9bf4
SHA1 667786c94e2fd04a46151f294d351a0d0112a448
SHA512 519fc0b8ed0ea91f3956ccf3c8d75b8c21e0c25475c5c3523cd26641d6da26b67a741c7284be67bf519498aa0b68b6f20332770b19d889444032da3d70acc77d
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8318bd19ffdbf6c2cd2973902f9e96cee68a1195d4becb6116f80f33f83cceb1
MD5 092a281b0172f96fc77c57f0f3f495ec
SHA1 24160972503d7d5ecf8fca48b5ee3d2e0187783f
SHA512 86b73996633a6ee2b25547e02dcfe7c0cc751d12ee981c8bd904bebf8ed8908864c84b00e8527882ce0552b553ff61be71b61e8343948976fe3cd7170a1dd231
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupbELe2RUH/4uq3z2OMDCRHy:A9iIxuERzA83h09RZxYbEbKLqaOMWRHy
MD5 SHA1 SHA512 SSDEEP

Submit Download