037d89c68d5e10c878251b8c7b39fe951edb17554e179da250e59eea52595105

Analysis

max time kernel
145s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 22:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
14b731e5c1f1042da63e70c93949fa6a_JaffaCakes118.html
Size 7KB
Sample240504-16ccmada3w
SHA256 037d89c68d5e10c878251b8c7b39fe951edb17554e179da250e59eea52595105
MD5 14b731e5c1f1042da63e70c93949fa6a
SHA1 16bc37a5320ba43201d2a753f1eb3bc59abc7035
SHA512 7fec6710660a95a97d0226b4d526d825f44c97b24b1383dd58559ac475fd4119ed867cb60fa3e04f19f94aef0463cb32b0316c4e2a878aeffca73926ff55733e
SSDEEP 96:iVJdTVAFGuVrktxPOR98IM6zfe6bpaX9G83TsqnqXknZ:iJdSFGmkQ8Z6zm6bpaXqyZ
MD5 SHA1 SHA512 SSDEEP

Score

5^/10

paypal phishing

Malware Config

Signatures

Detected potential entity reuse from brand paypal.
phishing paypal

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4868	msedge.exe
4868	msedge.exe
2808	msedge.exe
2808	msedge.exe
3380	identity_helper.exe
3380	identity_helper.exe
5964	msedge.exe
5964	msedge.exe
5964	msedge.exe
5964	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe
2808	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2808 wrote to memory of 116	2808	msedge.exe	84
PID 2808 wrote to memory of 116	2808	msedge.exe	84
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4732	2808	msedge.exe	86
PID 2808 wrote to memory of 4868	2808	msedge.exe	87
PID 2808 wrote to memory of 4868	2808	msedge.exe	87
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88
PID 2808 wrote to memory of 1220	2808	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\14b731e5c1f1042da63e70c93949fa6a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd919f46f8,0x7ffd919f4708,0x7ffd919f4718
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5196 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3568 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5836 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3524 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2012,16483379476862445804,11027915247694447672,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1740 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5964

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bd13ddab4dc4bbf01ed50341953c9638f6d71faf92bc79fbfe93687432c2292d
MD5 4e96ed67859d0bafd47d805a71041f49
SHA1 7806c54ae29a6c8d01dcbc78e5525ddde321b16b
SHA512 432201c3119779d91d13da55a26d4ff4ce4a9529e00b44ec1738029f92610d4e6e25c05694adf949c3e9c70fbbbbea723f63c29287906729f5e88a046a2edcb7
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 243d05d6af19bfe3e06b1f7507342ead88f9d87b84e239ad1d144e9e454b548c
MD5 1cbd0e9a14155b7f5d4f542d09a83153
SHA1 27a442a921921d69743a8e4b76ff0b66016c4b76
SHA512 17e5217d5bf67571afb0e7ef30ac21c11ea6553f89457548d96ee4461011f641a7872a37257239fa5f25702f027afb85d5bd9faf2f2f183992b8879407e56a0d
MD5 SHA1 SHA512

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 200KB
SHA256 79cbe928773386d07f0127f256f383debed5ccea5ff230465bf46ec7c87319d6
MD5 a484f2f3418f65b8214cbcd3e4a31057
SHA1 5c002c51b67db40f88b6895a5d5caa67608a65ce
SHA512 0be1bb8db08f6e6041a85cfee90cd36a5b595afbca34d52a125465454fc806b4bb7ae569eaf4c882922fb1b962b6060534e597791cd0ad23483be5981d9be85c
SSDEEP 3072:OndbSQ1wbzNL29zdEqH1cDFo2jOheobJNMa9nhwzj7B1WSwjra4oJXn7LG:sd/gNL21WqH1cDF6eobf9wzj7MzopvG
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 408B
SHA256 5b785f82fb0939bcecc0944ee38dc3695136058c4c8865cfe1d13a38c9112aca
MD5 7af4fc02b483e9f1060b9fdcb6c1b2f0
SHA1 cd29c228a978f417b44e57dbf298021c1de48184
SHA512 f275d3d29384a0fdd0da8fdaf11b35ad2d217d2fb0a20404d5eb400118caf5004beaf5b435ac7bb99056795490ee70637ba9aa220f43be286846cfc4ed69d8b9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 77aa336b9be5b04b6670574d35f61ece5a9ada59ba2ca6eab3887888679b78c6
MD5 ed3f2e6623b3a5de8d4865ab7a972294
SHA1 9274705f430a53dbecd22c5a91a0f30dcfb74665
SHA512 489ddd012f4b64ed829641646d52418fdaf162cc547252a764c4b9ca9fecff2a4809b19a023d8d9445784cdace97d8baf67423f635b86df0ae638efc23dab3f4
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 7ed2fd1bc3b3870b7e28268677893daa4348d72b90f37becb9e361ae551066d6
MD5 bba0b158e224f54cd89ae4b5d18ff760
SHA1 3b5fb1d795a4650248b53ff8f4e216bca9cf3f23
SHA512 c957fba312373c7e9d1d1c22c587c7f234a61466a781e540e4799a9581ea0a9d898d9ee793abd3d3d853185f90af4329524c246b43e9a29c17976f1049b8eb78
SSDEEP 96:nPkjzrc19bOzuawpvWMoiVmdeHhaciUWQyV+VDCziEwb:nPkQTbHaGWMXniro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6f9f4bd2eb5b2a9c1b0767e617cfe6637534c410e612530c876e0a1b7d030963
MD5 0c5bc3aef3acbf2d1c780dccf1eedf98
SHA1 bb45953a4de4eb55439316e984f3900a499965ce
SHA512 c511327dfbd9387bb954e575c9c56711a747bcac030a0a09359924addec0693526c5a4d48284de3e3c397012b49d65fdd72c235b531e7f57df3c542a300526d6
SSDEEP 96:nPkjztc19nezuawpMBWMoiVmdeQQfh2haciUWQyV+VD7AiEwb:nPkyTn3azBWMgQp2nirg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 05d8e6d09c00beba2ecf6b309af786e678e6ee01577c27c473a0b5d47f8316af
MD5 8a4c0faa6e6953af2cffd8d0f640e2f2
SHA1 7ba7ed0b26d7f70172757b35b49b3a78802e0295
SHA512 9845320888761b74757248515a1e6165accf64c264b4bd446a6b7f8c6fa55504c948e6979bc9ace57abcd8198537936aa26175ead687de1703d7df8c024811f0
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe578cee.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe578cee.TMP
Size 1KB
SHA256 90e94218f60a4b074cbd79b85466a81bb7037c6b8dce092457dfaf58e101d2c7
MD5 49db067e1b47237dfda3c74228bed234
SHA1 7a1d8fb3e79bd39ee2e712ad24531b5e3e7c2057
SHA512 6dc1c9dcbb02fc5516a0bedbae8e175ade12c087dcfdc9a8a49a494ab5b3602402ea3497b67c0e643ebada422c1d8a6533649fe67ec436a74f495ba27ec03ffb
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8a754076d07af8185a0ca5a7edfde7e2f433fbc5ad81634fff235fe6496c9e24
MD5 ba450713c6238364fbd195dcd0689ad3
SHA1 12f2ec75c892f6c7d93abed154c05af9f6a8bd1a
SHA512 030e8682a16b1fb5217a8d2e5e198d4050a56d5088d1c51b6aaf7c9d9cbc92346b075df6f16c480ce2130450db6565dfb10b271188b18964b1e4412ad8a3a25b
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupehP03e2RUj9qMCI+OblfBV:A9iIxuERzA83h09RZxYoc/uCI/XDafE7
MD5 SHA1 SHA512 SSDEEP

Submit Download