50c7179b9a6368b84868b6f519634d734c05b1504db011cc670dd254f8ca75a3

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a5ede0a6ad38ee548bee908e79545531_JaffaCakes118.html
Size 175KB
Sample240613-rdccgssamc
SHA256 50c7179b9a6368b84868b6f519634d734c05b1504db011cc670dd254f8ca75a3
MD5 a5ede0a6ad38ee548bee908e79545531
SHA1 1172af04b118e7df5df4fff877203a5ccef137a4
SHA512 c0436a52841aa205b917f62d77a3817c538d8800e7e6c679af4f8d8ccf3de120ba1c3e5583dc624101d1b02905891dc4bb2d48e0f025e3871e59a11faa8dba9c
SSDEEP 1536:Sqtd8hd8Wu8pI8Cd8hd8dQg0H//3oS36GNkFOYfBCJis5+aeTH+WK/Lf1/hmnVSV:S4oT36/FnBCJi5m
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3484	msedge.exe
3484	msedge.exe
2276	msedge.exe
2276	msedge.exe
4380	identity_helper.exe
4380	identity_helper.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe
3332	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 4576	2276	msedge.exe	81
PID 2276 wrote to memory of 4576	2276	msedge.exe	81
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 1252	2276	msedge.exe	82
PID 2276 wrote to memory of 3484	2276	msedge.exe	83
PID 2276 wrote to memory of 3484	2276	msedge.exe	83
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84
PID 2276 wrote to memory of 736	2276	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a5ede0a6ad38ee548bee908e79545531_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa603246f8,0x7ffa60324708,0x7ffa60324718
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:1252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4836 /prefetch:1
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5352 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:1216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:1616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,12472447791932926977,12556865114680980001,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5572 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3332

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:400

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1192

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4040

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e
MD5 db9081c34e133c32d02f593df88f047a
SHA1 a0da007c14fd0591091924edc44bee90456700c6
SHA512 12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 b6141043f962e086e66d9a002153893741c072c8df1690a804321eba6f7a6c7b
MD5 6c5790132d5a92a1d7a431f4a8f9fa24
SHA1 541e13c7a7fdd2f362baf2187e9d47d7951c5659
SHA512 7ba9711f60abe91d6bc26f68dad80fd73b636a097ddb28564ef2b65ac56a1b4d262c7a830ab45a819a0292ed6d1561c54fcdfd20c5877b2755c018d0c8cc409b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 371ad07db8e96932eaf8d3435f31da29b8fccdb827e0ed8d503844ad2c456629
MD5 086dad785646905f90b65f3050b90693
SHA1 6b851deacadcd0b32b08654ed6f51dbb2fc96904
SHA512 9c90d0ed2d1dc2ae8c6f940ba3c06b41ecfdb88e0dc5c561e543950326614357def4a752b88995a4e9e385003060329cc5ed56b95d56ea8e63edadbda59a8f3a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 521d363913dbcef9aece8262d2b9865599928f0e582206401fd86392870b2eb4
MD5 0346c792e146e240a2344c928ef6c082
SHA1 f7ea42d2981b317c8878ef3183ac4afc8a5b202b
SHA512 cbed4cbcdfc208fddc560193a9650d458990da70d2727d105c57ea514ad092abb8d739bf8f016b18c022de995844d03c0443a40f2a8e8eb943f354748b416028
SSDEEP 96:n9hlkjoxm/DQYmqNhD1pW/wpvWMoiVmdeHgiusZWGUWQyV+VDCziEwb:n9XkFIqp7YGWMXuuWGro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 13d4e61b0426c1c9324d9a04d397aaa6fa567752518794071d9687d74ff54560
MD5 a6a91915748f5117cbfb5ec5a7e6c006
SHA1 3423ab3d8e33a13d9ef4e4aeb112f42f32fa6847
SHA512 4b9eb27575300fb70a0fa581d8e953c33fae46d49d6ac947b13cf05ffbcec7ea9a3f9407fedb718e45e789e8c4163543ae7872d7c16bb9cb34098bbdfc3a2843
SSDEEP 192:n9Xkf6qp7RGWMniMv/PYPLjm9ErPaEx+Py7mTv2uuWGrg:nVC70WhBrT2
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a655039f5e358405de2460055a35e62de07a95e3964ce3cf4d9c735cba97a552
MD5 f1319f28d37737ceec39547c5545cee4
SHA1 e7f583c4e333ca3143aedeab217af6e5b8a379b1
SHA512 85265cc6367c69e1674d80dc3692e4759dda2643b5c3dd344cf9a835def01c167524ad94e018e6a01f32214ad5496543fc022581c34c64567ccf3c91b3e47d9e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuphbPe2RU7Ib2k6p3z2OMDCX:A9iIxuERzA83h09RZxYhL7kaOMWRHqlE
MD5 SHA1 SHA512 SSDEEP

Submit Download