0530b03c0f36e352a57dc1904f1adaff1b46c38300b6b35bfcf072154f04f76c

Analysis

max time kernel
146s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/04/2024, 07:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e978c0c497428f21da070b27e38ac975_JaffaCakes118.html
Size 288KB
Sample240409-jc2xrahf33
SHA256 0530b03c0f36e352a57dc1904f1adaff1b46c38300b6b35bfcf072154f04f76c
MD5 e978c0c497428f21da070b27e38ac975
SHA1 3cbd41fddd574d9ebe07b6f9a236fee78b894120
SHA512 ce4a2bea98630e23ee7a829d0ce3247362b8094fbfde82294d8ae00087f6537dffb6fa05b34db5c035e82764128116ec71af10a7a827088415b0f05974df8d63
SSDEEP 3072:41Ja2ZcF8znJ2yQY8/g8SrytgSWm302HlDNFK+Hz2gr1Z/NO4C7m3ytCaiAyItsB:41JaunBQY8/g8SkyttiAyIts7+agCZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1112	msedge.exe
1112	msedge.exe
1004	msedge.exe
1004	msedge.exe
3520	identity_helper.exe
3520	identity_helper.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe
768	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe
1004	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1004 wrote to memory of 4428	1004	msedge.exe	86
PID 1004 wrote to memory of 4428	1004	msedge.exe	86
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 4088	1004	msedge.exe	87
PID 1004 wrote to memory of 1112	1004	msedge.exe	88
PID 1004 wrote to memory of 1112	1004	msedge.exe	88
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90
PID 1004 wrote to memory of 1688	1004	msedge.exe	90

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e978c0c497428f21da070b27e38ac975_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff858ea46f8,0x7ff858ea4708,0x7ff858ea4718
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2248 /prefetch:2
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4872 /prefetch:1
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4064 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:4200
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  PID:3356
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6208 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5808 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4184 /prefetch:1
  2⤵
  PID:2164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2232,12379227384431352295,3208602384602964516,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5760 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:768

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2692

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 47a22bea2e7d0154c59bf5d8790ec68274eb05e9fa6cf0eab0d648121f1a02ac
MD5 47b2c6613360b818825d076d14c051f7
SHA1 7df7304568313a06540f490bf3305cb89bc03e5c
SHA512 08d2366fc1ce87dbe96b9bf997e4c59c9206fcfea47c1f17b01e79aeb0580f25cac5c7349bb453a50775b2743053446653f4129f835f81f4a8547ca392557aac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c91388c87878a9e2c530c6096dbdd993b0a26fefe8ad797e0133547225032d6c
MD5 e0811105475d528ab174dfdb69f935f3
SHA1 dd9689f0f70a07b4e6fb29607e42d2d5faf1f516
SHA512 8374a721ea3ff3a1ea70d8a074e5c193dbba27ba7e301f19cea89d648b2378c376e48310c33fe81078cd40b1863daec935e8ac22e8e3878dc3a5bb529d028852
MD5 SHA1 SHA512

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Size 20KB
SHA256 e1e55887f81363ce752f53f8c92a155fe041292b48148134018a0476cfd8f204
MD5 2241efaf8a5d6561e64fa7e97dd66e78
SHA1 7b1f677f739c119f878cf3a31e02c2af7504bb54
SHA512 78137eb3866b771554b70ce90df1354cba5990602018ca677fef64959188fb40a4c23edcb8faac9367db57d0a30cea61a52cabeec10114a1321e9488a8543178
SSDEEP 384:uCRvYuTan6ogpAEq9Z9/KglNEvPm6rvcmek7xKsyeErgFjthjDpqy73ZiloHozrW:uwYeEP9Z5KXe6r0peaeE03hjDMyVQ+om
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Size 44KB
SHA256 d374d2ac88b65c3b78fdb96d2c6398493dbee61549b39c3880a584d2bb1be825
MD5 26a55dcc6250e84042b29959f5e50334
SHA1 fc02ef852f17b4f9ff54e7c677145809cc205759
SHA512 33db6af42c615f586b412bbfbe0b92126f91c4b80f9259ef94aeea103498cb53396e28c0e9b1c10bde0802915f8c8877c596f07a5c5c61f4a90cb1df06f67c4b
SSDEEP 768:8k0wARCGVFSAxFyVzOe/EnZjLBAGNa6QVQ4GIkrGIewwVSBPNbmHUuq5XQrj:8k0j5bXk/cndVXQ/TGO9VSBPBmHJqNAj
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 752fff8b816e206afbf04e75516790a93b40a09d42ab286a97b2acccfd64228e
MD5 d136c48c652b50324295671e8303a01e
SHA1 d826b5f436f0ea515f5e3fb873b4d8b60d72f15d
SHA512 155b4ce620d4bf1bead9f64268781d6d19df8ebfe83fa38da194ea965b6c547313f1db12b86503fec5ae5312bd6a63669d170a42e121925a97dace8428dd2448
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 e43ababa6d861445dab570cb5c8a02b996ee62b105196999fce3e284d353cf97
MD5 87b9f75706fb1da5aaa1777bb830c378
SHA1 41f50917748877886f74fb2d2edc3a70c71dbd57
SHA512 ee1021446ccec0e984105538a51a289dccf5bd6167e12cced4e060890d702290739c31755f9ccc00c78358752f4d858f1a3b56b9dd2e8e70a6706dc2aa50ed0c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 6a5b7fa194c734093af54df0daa650ce36fd876685d11a0dd036d68121f740ff
MD5 afeca95b1e8bf94d5361506051623763
SHA1 d5f6ae395ce1857cdbe1978bf4df24788682d639
SHA512 d8ab2e67fc0d63d5f962238844f731727885085e3df61c1c104834bb5107097666cfe1fb17142656e34bc52950408e2d5dffdfd1bf3d285c8f8bae2e1dd2cb47
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 9e3c99d4fc389dc66d1f942403e92c9c9bac8420b25903cf058c7559ba3b6ce3
MD5 55b4aa417789709275948d077544aa2a
SHA1 e610084ab84a899ddebe49effcea7fe2985a2203
SHA512 f463da704758c57acb43fd071060190233b79b8340c85cfda26a2a36ab9c8a850551ebc82dcc7c3b2c37b57aa6d5076c84eb5577a26f7ff63a4d9f380dfbd582
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 07d9e6920e8ce139a7cf6f6243898b29d749801d2d65f606a4583c607e4e4e16
MD5 7afca90bf5fadd90680109cb4398a1a8
SHA1 66b4c6a127cc975812c7882994abea2ff24d147b
SHA512 5e6e3c5e6961c6d67156f80480275c2a8a9701b62ea1068702e370d4a7979b70f35f42172e1065cab7d96be4d3c8b80c6b79127c5e9544a19b3d14d9d56f5652
SSDEEP 96:n8k1L1gqwpvWMoiVmde7CCYymKn8Gjb6020pAsUWQyV+VD7AiEwb:n8kdCqGWMrCCYyXnF602rsrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0cf83889971775fd566525c8315cfd926d4b4fb5d5c036e412364a10f1fc8090
MD5 353cb7f5bcf6fb2925c8669b7d7eb9f2
SHA1 3f436d03d0d0480fdd0387aa7c89cb10450150f5
SHA512 36ed2827ebd9a4b18c4598b216db21cf6cc3261278351a7c22d1e8a09790d6a85ba7c3a6738e63236d5b510d18a8f7e89968519af3d04086af401ea52a2931b9
SSDEEP 96:n8ktL1gqwpvWMoiVmde7CCYymKn8Gjb6020pAsUWQyV+VD7AiEwb:n8k1CqGWMrCCYyXnF602rsrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0fc8d14274127ed92e8cb739f2df3087e6dff7226394877b82537d2ee286f6c8
MD5 e2b30a695611853fbc7d3b6f381654b4
SHA1 a21684e3d3610738b1a7d94d82fbb9f62110fc0b
SHA512 ff1fe3a55c53389fda0071e822ef024ea589aca5405a86f9f9411c2c02d960ea929b039d3c96dfc6bfd583ddfacff02dcb26eb546a3cdc8c825b9d628b635409
SSDEEP 96:n8k1L1gMwpvWMoiVmde7CCYymKnY20QAsUWQyV+VD7AiEwb:n8kdCMGWMrCCYyXnY2esrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 370B
SHA256 167b91def6dcb04b2c1cab9a52fc402c8c6681346bff56c60e32cc3a69ad4e97
MD5 c5ed6c82748be3b68966adedae0eca56
SHA1 15bf453e6a0a15a50eeb27b75802d88bd2ad8896
SHA512 0c550c8f5bdaea741a0019d2523b854d05b89c00972cc88cf620e0b67d0b2c697706b088592585493feccd1e47024d1611a79b58319fd64b35b50c0be15dbe9e
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe58684a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58684a.TMP
Size 203B
SHA256 6479aa2a0b0548073da778d20d12a4e503115dfccde8f352c5e6c65197b5b5bb
MD5 861f81fa7a41aac5d1a2c077b1ea83ce
SHA1 8058741e0b860f76cdaff51fee23c108521479f8
SHA512 434e9e727270a50b7486769df76f4c82d2c366d6346e2f4eda46252fa725b84daeadf79b88b80e9200e46abcfb1636ffcd3d621a2ebbac12b593b86ea18d4655
MD5 SHA1 SHA512

Submit Download

d0d457bb-57d2-40c3-a807-cd0b3ce7f0aa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\d0d457bb-57d2-40c3-a807-cd0b3ce7f0aa.tmp
Size 6KB
SHA256 b71f4957175fa427b0ce889d9eff66b9584bb3148affd96c50cbf27289a83db2
MD5 edda687a5f44824c75060b6c539c67e8
SHA1 8ca73e5d50f7f596e1fe8b3967e72d7371d156b3
SHA512 0306b45db9d0cca6488b1334e76cdf96c8502539094704de3a96c7bbf2f2b18ebee1d625f4478dd93ba3bc7cec616d174d7da155e5d2c6c1b140f0db6b4a7623
SSDEEP 96:n8keL1gMwpvWMoiVmdeH0QAsUWQyV+VD7ziEwb:n8kYCMGWMXesrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9d7282a1558210cca5fa7431db84e112f09bc199d84f297183d66f7e50f9e9c1
MD5 72bc648810063ba229b5616d7ca625df
SHA1 4babfa2ba49d952f556d67d744f8f1bf1c6da8db
SHA512 17518c82af8641872cb014409d5e1e5c69ea2322a1ef4f9b5f62acd025d33e268e52b119c4e023fb06d1acb7cc30bbe3c0819a9f0629f07e61f1d3f2c8ff3638
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupbNYAe2RULT/xbXKxvFt2pF:A9iIxuERzA83h09RZxYF6xKTt2h3Co9
MD5 SHA1 SHA512 SSDEEP

Submit Download