193be81f74d4ec4af76fc237fb7c2cc8e772636894e55e2371a0c1ecb7e1a8c5

Analysis

max time kernel
147s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
22/08/2024, 18:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b8c3bbf644558db5e3293318bea725b1_JaffaCakes118.html
Size 47KB
Sample240822-xnd7qaseph
SHA256 193be81f74d4ec4af76fc237fb7c2cc8e772636894e55e2371a0c1ecb7e1a8c5
MD5 b8c3bbf644558db5e3293318bea725b1
SHA1 00e98513f010d0856efca530831e1ad61b58d10a
SHA512 2a670a1f9d0a25046348b0020dafabb35e4f0daddee4125b09d25328ed98bdb6b934ab37eda95d430ddb15b5f4252626e588f50d4f6880a7967c348e4d27ed88
SSDEEP 768:pDxUtUKuIMkUn2sVwUc8oUUU0UY2BQQpTU4QkDUqQ2UrQeDUpQkUJQPQU1QAUUQ0:ptUtUKuIMkUn2WwUAUUU0UY2BPUuUuUK
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2948	msedge.exe
2948	msedge.exe
720	msedge.exe
720	msedge.exe
3404	identity_helper.exe
3404	identity_helper.exe
5224	msedge.exe
5224	msedge.exe
5224	msedge.exe
5224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe
720	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 720 wrote to memory of 2404	720	msedge.exe	84
PID 720 wrote to memory of 2404	720	msedge.exe	84
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2964	720	msedge.exe	85
PID 720 wrote to memory of 2948	720	msedge.exe	86
PID 720 wrote to memory of 2948	720	msedge.exe	86
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87
PID 720 wrote to memory of 2848	720	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b8c3bbf644558db5e3293318bea725b1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff85f8b46f8,0x7ff85f8b4708,0x7ff85f8b4718
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2644 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5296 /prefetch:1
  2⤵
  PID:4192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3316 /prefetch:1
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5632 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,11321830079309849537,1462600414867132281,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1912 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
MD5 9b008261dda31857d68792b46af6dd6d
SHA1 e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA512 78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
MD5 0446fcdd21b016db1f468971fb82a488
SHA1 726b91562bb75f80981f381e3c69d7d832c87c9d
SHA512 1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 d32e414d6b9ade724553cac9beaf4b0d287f3d4cfa289720cdbb68eb6f148d8a
MD5 9d1682173320f8c83100ce37bea4168b
SHA1 5327106e47b60940773d3888c7c6bb726eef6c69
SHA512 bb56828caa48a684ab56bf7ccd8a10defa6d3cdb6b3d0c6b87f8fa819bacd4ef8a8ec613b2cec6a8605f374937960388a37178cb3733e8f4303f61b6aa07429f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 ab811511a3276ad76a738076666fe8a0463536abb902440d598281e2d975f291
MD5 7eef3a49a1f6330a6e561753fe7b19da
SHA1 7d7b7ea6e3aa042d94af20476506a43d84666fb7
SHA512 a46c64a653480123638414111f7fa1c4e1e3a747a44a6682bd4173118ed78ab7fa48b6a7da925e18249f910b559207e2d9b665ebe236cbc3fcc3aec7f2895682
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 ad5a08ef64be55c1d8273431d45a551d07ea98fec1fa96d4cd8eab5f2a231182
MD5 2ea752b2325da9654d12a9e2d627739b
SHA1 c7b1bf2cf1fb2d0505beb7eb0b59a6f52e3daa7a
SHA512 429b7651a6732e3245b5ec804d901e3bb97af10aebbff0409510faada1d8b583bd944fcd5a5fcc0731423aa70446125780c093c4de2fee45ee14b3dc4ef1fe61
SSDEEP 96:nQkRFFv1DAdwpvWMoiVmdeH/ddQUWQyV+VDCziEwb:nQkRTvx2GWMX16ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 2ec24a694ee3a8ee363e67ebe0af778c5234119f8e591dff43a4040657d0b91a
MD5 a556232cb7540327a45929a76bf3beb5
SHA1 3dd01cb8a2481ac3b2d1efc0c919d4a057b1874f
SHA512 5281d596636e8588e0738dee8cdaedea121e47def67797e4d187afd973ea21e8b356e92dffc42eea3b1138387f84f5383ce1c1c668eb3e4d86b6b663d92ca223
SSDEEP 96:nQkRFFv1DodwpvWMoiVmdeNCN+AIVmadG/XJVoXa2/ddQUWQyV+VD7AiEwb:nQkRTvxuGWMdCN+AIMado5VoK216rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6ed996861c77f996ceb6ca3b71770c224e32b82516e1153831f996a59790c4ff
MD5 4f322e33060b83c932abbf71193c8a52
SHA1 cf9ec7a89ee62a667da0d5979b11ca7785db34cd
SHA512 62f9fda237a878cb499bb69519912f05e377e5c01edfc67125e8dba20c675b34d4bcf14dd0b74b48fc4d1b6c52601b6265f7692b105ccf3bfe3a297bab49a62b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuptNe2RUJ23IaRw5Ytj9Zklm:A9iIxuERzA83h09RZxYThYFkLsFYz
MD5 SHA1 SHA512 SSDEEP

Submit Download