dd8c2eb399400e800bb5ea25f855b55b3b1c97cbc69daaf2e7fe87f9a81d2591

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2024, 05:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
45f7de84be521e570e8ae3ae3093c519_JaffaCakes118.html
Size 32KB
Sample241015-fm2syswejb
SHA256 dd8c2eb399400e800bb5ea25f855b55b3b1c97cbc69daaf2e7fe87f9a81d2591
MD5 45f7de84be521e570e8ae3ae3093c519
SHA1 1dbfccef088b0437a033fe5cb08e8fe208586e40
SHA512 09a4d90c38237396fb9c1b50d3ce2e9273607029605013a6b99cccfa97e549ef2fd4f9dbfbcb6c0568d28d7f4ad48f068016bf6b566e69caefa6daa0b32a23a2
SSDEEP 768:PLc6tYgOb+T3+kb3LKfyBvXSigFtF1pFEE9uzp7xfFOYIpgWWfK:PfYgOb+T3+kb3LKfyBvXSiQXdEE9kp7m
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4876	msedge.exe
4876	msedge.exe
1844	msedge.exe
1844	msedge.exe
4736	identity_helper.exe
4736	identity_helper.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe
2380	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe
1844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1844 wrote to memory of 1400	1844	msedge.exe	84
PID 1844 wrote to memory of 1400	1844	msedge.exe	84
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 1012	1844	msedge.exe	85
PID 1844 wrote to memory of 4876	1844	msedge.exe	86
PID 1844 wrote to memory of 4876	1844	msedge.exe	86
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87
PID 1844 wrote to memory of 4244	1844	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\45f7de84be521e570e8ae3ae3093c519_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9105146f8,0x7ff910514708,0x7ff910514718
  2⤵
  PID:1400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2664 /prefetch:8
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4068
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:2952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,17792485154491402754,16762366763721547540,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3524 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2380

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4496

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2676

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1b034ffe38e534e2b7a21be7c1f207ff84a1d5f3893207d0b4bb1a509b4185ea
MD5 fab8d8d865e33fe195732aa7dcb91c30
SHA1 2637e832f38acc70af3e511f5eba80fbd7461f2c
SHA512 39a3d43ef7e28fea2cb247a5d09576a4904a43680db8c32139f22a03d80f6ede98708a2452f3f82232b868501340f79c0b3f810f597bcaf5267c3ccfb1704b43
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d7e96088b37cec1bde202ae8ec2d2f3c3aafc368b6ebd91b3e2985846facf2e6
MD5 36988ca14952e1848e81a959880ea217
SHA1 a0482ef725657760502c2d1a5abe0bb37aebaadb
SHA512 d04b2f5afec92eb3d9f9cdc148a3eddd1b615e0dfb270566a7969576f50881d1f8572bccb8b9fd7993724bdfe36fc7633a33381d43e0b96c4e9bbd53fc010173
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 448B
SHA256 ec7490753f5875e34bf116f3d481f5970f43cfca4a996032c5ccdca9d9a2ed67
MD5 cfab8ec639af15e19aa35a0b5c30bc6f
SHA1 2dfd23736bc91a892b3a1c0d1d8b93617bbd9133
SHA512 b0904f3bd071fb47bfc39b825b80176c0e099c6f2c69aeed72504575a72b3d5a7e21e2cd7e2f8f706124dfbf9db96484f9c4a38f9880dcd8c3038ee87330031f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a6840b0b9294420db6278a9cf16ea8fc406ffeaa2798f85aba12e1c131f07ce6
MD5 5ba3b25075e5e8a67f143525861eea21
SHA1 be6b2661f2b3f7988cb9373a197e5721ee72b379
SHA512 3fe8187023099e9ff84994ce8d4a678c5042774a6fdf151ff57e0f8e2c14fad16c6bddde845b16312583723ebe49092360fafd37a72b912a1188dbce624913ca
SSDEEP 96:nlkOxm/BQYmqX1QiSwpvWMoiVmdeHBjsXUWQyV+VDCziEwb:nlkDKMeZGWMXB+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 da9fbc2cc9758d5c9fb12064c5fd2a578742a3a359c9e527b52c4761d5b487fd
MD5 bdc92d9164665748ba23553e628d58f8
SHA1 e628d042e7b30103e739eee05f838eadde5c9378
SHA512 e00fd8bb9128f0dd0d3d01d6888d05774393be90b9d52b31a76c5a6d337f7fba524b9dc28099cfcd14512bce5d40ac046cbe35a18a7514ddad3fdf09714ae787
SSDEEP 96:nlkOxm/B6mqX1QiSwpvWMoiVmdeHBjsXUWQyV+VDCAiEwb:nlkD/MeZGWMXB+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 48f031ebd06818ada81fe1f89ae49b796766afa997b8f6bd2210d1e7f1b5dbfc
MD5 661a1abdd8b3802adba2c0c0da0fba63
SHA1 40c664ede23ef4972c60a357826777ec519ddf18
SHA512 9f914dbc922aced8a06a35f223419c5c010453c7407633569dae75a84bfaaba7694ab25fc147868e466875ce7991cab819d2a8ad1f1b342522a09922318a4083
SSDEEP 96:nlkOxm/B6mqX1QySwpvWMoiVmdeB9s2BjqXUWQyV+VDCAiEwb:nlkD/MepGWMo2B8rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 372B
SHA256 de26c7c27617552afa9574723f87c5dde91c4af739d66be06184ac958fc5d829
MD5 5c53667c5d85b3a7215f6afbc2f5a2c2
SHA1 77d3640df11aec2145d2dbd9ee726ebd6c9c21dc
SHA512 900c8605428ee206a34553980a8971295be608e774924b623cdaa00fc51dd901a41379e1b86d014dc5e702737fd98b93795d436b782e6edd361a548b1c9fe393
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 372B
SHA256 8dd3aaf88f94d685ce4cf8aefbb224db8daa57aa66635c550662c0eab734c94f
MD5 cccb96ed5d38aa89070452bef6986181
SHA1 f15a898874bc065513b43e58406dccc0c998b6fe
SHA512 350cc4b156bf601eedf5525e702677817900aabb0c44d1c536dbd886ab71addcc017fb89885f1ba277066ba2e3d8703731e62192b99a512435715d83ee08f7f6
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe581008.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581008.TMP
Size 372B
SHA256 6df359924f47db341c3bd6372eee210d889c203bcd3ad570c19d923f136d6c5f
MD5 07ec7a2418323e44e0d45ce71b68764f
SHA1 4d2406bc844fd00742b7f8c6a59dd058cce45701
SHA512 77346d35ae80141b1bc0f3f59151409eac84dbdf4470e74084cb17cfe269313cbe23ef7bb8cb7e2daa030119fe7bd0e715c1cd1b736dbafee8b45d441873a2dd
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 b55ed9fd6f1182bd9b28738da6dba78b29b9b75f5f269d96d23c07f565530cb7
MD5 c6c8a0621a77ae0756ef613b25894db3
SHA1 064117a50576fdc7eed872df65eedbdface3f058
SHA512 3f1a204194dc88b345f9a92abd86239f533c7536013c15319edc3f1a1433cd944f5c30e6847d20e9cfb61ebe46f24054c233cdf69141aeb40d0813eb4e5b69a2
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup0e2RUZhhw6+B1EzCcu:A9iIxuERzA83h09RZxY6MUbEmcu
MD5 SHA1 SHA512 SSDEEP

Submit Download