4f529faa4ab06d66c2506e5d0e316006501bf76ad7895d03d0c9ec5311a8ee93

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 11:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
630ff97c42d94725a58fb72842f21f59_JaffaCakes118.html
Size 108B
Sample240722-nnhepswekk
SHA256 4f529faa4ab06d66c2506e5d0e316006501bf76ad7895d03d0c9ec5311a8ee93
MD5 630ff97c42d94725a58fb72842f21f59
SHA1 1be140d3a2b98b216ec1a4fa8d27d7afdd7aa9bd
SHA512 77334fbb4edcf7e3f8be4e0306d1a9421a23bcc1d6e732dce6bc1c61411aee4b0eda55e8fb1a44c8738205a3454497efd2e0607454a2f3960c4589ce5efe5c1f
MD5 SHA1 SHA512

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3968	msedge.exe
3968	msedge.exe
5036	msedge.exe
5036	msedge.exe
2184	identity_helper.exe
2184	identity_helper.exe
2912	msedge.exe
2912	msedge.exe
2912	msedge.exe
2912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe
5036	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5036 wrote to memory of 3316	5036	msedge.exe	84
PID 5036 wrote to memory of 3316	5036	msedge.exe	84
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 1368	5036	msedge.exe	85
PID 5036 wrote to memory of 3968	5036	msedge.exe	86
PID 5036 wrote to memory of 3968	5036	msedge.exe	86
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87
PID 5036 wrote to memory of 4524	5036	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\630ff97c42d94725a58fb72842f21f59_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa89d446f8,0x7ffa89d44708,0x7ffa89d44718
  2⤵
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2276 /prefetch:2
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2316 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  PID:4524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:2000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3956 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3980 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1800 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,3762567793770747366,4572667024992099904,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5000 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2912

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4480

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 578481cd359c669455e24983b13723c25584f58925b47283cb580019ef3142b1
MD5 c00b0d6e0f836dfa596c6df9d3b2f8f2
SHA1 69ad27d9b4502630728f98917f67307e9dd12a30
SHA512 0e098ab5f5772fec17880e228a0dccbbaa06dc1af14e0fd827f361599c61899fe07d612a7f7b049ff6661d27fdc495566dd20fc28ceed022b87c212bf00be5da
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 43dec5d87b7ee892a3d99cb61f772ba403882ac0772423f36034e84244c1ca24
MD5 54f1b76300ce15e44e5cc1a3947f5ca9
SHA1 c978bfaa6ec6dae05464c6426eaa6cb3c3e2f3b7
SHA512 ac26e5676c675be329eb62b5d5a36a0e6014ab8a6366684b0fc2a59ae5f061f596f462b82eb4e9f135d2235a0cbd4af96680d234eecc873a8397fd81507d277a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 0079f348693bbb6f7c8f53b923f28cf7bb26a18ea056bc7d1efc6ec978ca2d30
MD5 048c877720b515766ba7a4296ea47655
SHA1 192dc89598c257070c8c36fdd82631a1ca5a570b
SHA512 ac168232f2f6daf10c3b20d6aac1abf466cbf8befc3df3ce7544bb4f58d7c4cc1faf8eb7db48afb31d64c94134d61906e0f933d9ff49b1816e2a2bcd9ad1b7b6
SSDEEP 96:nskHz1o4UwpvWMoiVmdeH7cF1eUWQyV+VDCziEwb:nskTm4UGWMXgfero
MD5 SHA1 SHA512 SSDEEP

Submit Download

c8eacc13-8496-446f-8f50-a19caea6e4cf.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c8eacc13-8496-446f-8f50-a19caea6e4cf.tmp
Size 6KB
SHA256 3ffb3886e7a1406588ea0d48ae62d12773269a04ae8fdf6a1b34f00340ad642c
MD5 06373c1398d391e86c41f7b6e9412ccc
SHA1 8cd47f91dda519bd5001819c9620c319b05ffcfc
SHA512 89ecae29bf4eab758e8c90b92c5d903192bf68ac0e6794522611ea627b03ce2dfe5bee2445f9fa76cf1e4b2db392558cac4e155cbc5fccf40235360c727bd28b
SSDEEP 96:nskez1s4UwpvWMoiVmdeH7cF1eUWQyV+VD7AiEwb:nskA+4UGWMXgferg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 69226216f5c26cb16daf5c184d4a89dc06cc2c663d3e00397d9bb0a7016af2bc
MD5 28763e8a8a3ccd9ad2d70cd9e189da71
SHA1 206d606b73ab4b3e69435805fb0e17f4113bb085
SHA512 e3420e7a76c9408f478369078a2aa8d1799932c2426b74c7427556648f6d3400d9b6f6ead03604e2b9252f3f5bf8ade368dfbab5efc088d594543c16d03b4dfe
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup9idGe2RUCdF+TKGrytYM1W:A9iIxuERzA83h09RZxY0dI3SKze+JF+f
MD5 SHA1 SHA512 SSDEEP

Submit Download