62be35da06a8b18eb207c797e89c2860064609e02ec4430fe7d3ce6d44687822

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17/08/2024, 00:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a08d1ca27d301a6decd30763bb1925d4_JaffaCakes118.html
Size 38KB
Sample240817-ayl9rawhrd
SHA256 62be35da06a8b18eb207c797e89c2860064609e02ec4430fe7d3ce6d44687822
MD5 a08d1ca27d301a6decd30763bb1925d4
SHA1 27ff9bb4158cc17351393a34dd74ee42997916df
SHA512 e5d13685a33793d86d72267c4af3a1c56cda5c21d9bfbdb27716acbd26baedc1280206d107dae8ba07a08be0418289e7154c7d6e4ba01469c11fac657d790e4e
SSDEEP 384:SSqe88R2Lavf1hfOfQDzwloabSLx88dyzxhelGHSkv9ClYLHvIdV1CfzJDlJ3WQ3:S288tFclawCgPIi6QYRi
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4956	msedge.exe
4956	msedge.exe
1552	msedge.exe
1552	msedge.exe
408	identity_helper.exe
408	identity_helper.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe
5052	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe
1552	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1552 wrote to memory of 4516	1552	msedge.exe	84
PID 1552 wrote to memory of 4516	1552	msedge.exe	84
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 3560	1552	msedge.exe	85
PID 1552 wrote to memory of 4956	1552	msedge.exe	86
PID 1552 wrote to memory of 4956	1552	msedge.exe	86
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87
PID 1552 wrote to memory of 2788	1552	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a08d1ca27d301a6decd30763bb1925d4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9a02a46f8,0x7ff9a02a4708,0x7ff9a02a4718
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2428 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2776 /prefetch:8
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6004 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5408 /prefetch:1
  2⤵
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:5224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,4057919140339699258,10442719275342916692,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4888 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5052

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e
MD5 d7114a6cd851f9bf56cf771c37d664a2
SHA1 769c5d04fd83e583f15ab1ef659de8f883ecab8a
SHA512 33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808
MD5 719923124ee00fb57378e0ebcbe894f7
SHA1 cc356a7d27b8b27dc33f21bd4990f286ee13a9f9
SHA512 a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 7cdcc74ebbec13cad52925ceee16837813e74428ac1ec74f0cf9ae99daa7694c
MD5 4a8ddca80837026a1e9b7243fd9a489b
SHA1 8f2c1eba15fa23c624e4f8b0c779fa435e75e777
SHA512 72c903c94e2433fc7890e91bfba425e60171374ca40a75d229c52084803b4f67b390fcbaa0f5e722585c0aa3e67a7b5f721bf3e36ce5d6a03dc47799a8860b3c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 4f9f0b55790f637f74409990d81af5ac860f1aa2359a975659fbd938222ab04d
MD5 96fdc66f875770d3a499c9be0eb3bc99
SHA1 bbf81e6e1f35bda891d26064190a3c1e42da21c7
SHA512 b71bc8ba48b38a221db74457b8583c3cc7aab105569dea76d1b77a1b2a6b80652c3d5afd6ce4a7654767318ba35fd8ce7106aa559e832ba93d6a4d6a66fae2f1
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 89fbf2931ee215bc3dad24e969bfecdac958ef698f2287671fa0befd73df935b
MD5 0361050e3ae6b08eaa8d8a176246375a
SHA1 78bc5df6bd509735c93718e2ee00234d9f7e7a01
SHA512 af65a543730139e30999c9235efdb6eda4157868968bc55cc70ae8e3579ce97ba42b2081f494307e6481c4f65df12276400bd18a5310083873cd03094ff8eb70
SSDEEP 96:nOkx6U1nYLSFhPwpvWMoiVmdeMBzEWV64X2/b1sUWQyV+VD7AiEwb:nOkxrt5FhPGWM8BYWVTX2Bsrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

cb94ca75-3c46-45b9-a1eb-ea0e243d3ea7.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\cb94ca75-3c46-45b9-a1eb-ea0e243d3ea7.tmp
Size 5KB
SHA256 1a6ecfad5a7c7df689dc89605fece1e9a55522c0b9e16edb0cdfa65a555d616b
MD5 7870f145c7f056e2d8fab4b15e14e70e
SHA1 df6ceefd4dfb9cdc80fdb8f4ca6efee4a02321cd
SHA512 8677a1e9f5f40084e08533748aea9b1bd4b714b334b45244189fbfbd3d583e80fac6bd2ee3935ee877da080d6d972cebd35c62b6c109e0d04e0ad4f15a34b993
SSDEEP 96:nOkxoU1nILSFhPwpvWMoiVmdeH/b1sUWQyV+VDCziEwb:nOkxhtJFhPGWMXBsro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e7b65d736af52faa597542ef33dcd20b46e30e82599abb0a5300f718fea808c5
MD5 75763b8e91b35b01c6113ab7819ac7a4
SHA1 d49c01508fb53af3e4b339bc7ba4d9a6d5f3784a
SHA512 108f4ed71a170db1655106c744c43fbcba30f144c6a556b750b1ea8b951d7b05252b2323aa2984eda66f4431b45778a7797cf3b5e3c3fd954026d815cb351a1c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup5hie2RUdxN0ru8z8ZJ57e:A9iIxuERzA83h09RZxY5hco0Pz8x7e
MD5 SHA1 SHA512 SSDEEP

Submit Download