f3fbf51b3bfef767eb6a62f3e42ad31849d959be7f837f3abccaf3af2c90bdd7

Analysis

max time kernel
144s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 00:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1ed80be3e4caea46c9b0a6ecadd19400_JaffaCakes118.html
Size 410KB
Sample240507-avy45sdc62
SHA256 f3fbf51b3bfef767eb6a62f3e42ad31849d959be7f837f3abccaf3af2c90bdd7
MD5 1ed80be3e4caea46c9b0a6ecadd19400
SHA1 1db221056f0181565fe969fd33cee0377dfa3cb9
SHA512 382af5baf210b68de24ccd292edf6d2cf7e6a71659459ad5aee405655de30b2088e48635d1e2d6f6df2ab7ae9a67241dfe126bcfac437c1626e208d2fe76d52e
SSDEEP 3072:CW6WCiqYxDNvG8rmgcXmNRSzleLer71BMn3//pmGgalEwwt4VID3t28VhnIYXEdF:dDAXmNRb5QPa3YA8uAQ5toM
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3620	msedge.exe
3620	msedge.exe
3224	msedge.exe
3224	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
3896	identity_helper.exe
3896	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe
3224	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3224 wrote to memory of 372	3224	msedge.exe	83
PID 3224 wrote to memory of 372	3224	msedge.exe	83
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 2900	3224	msedge.exe	84
PID 3224 wrote to memory of 3620	3224	msedge.exe	85
PID 3224 wrote to memory of 3620	3224	msedge.exe	85
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86
PID 3224 wrote to memory of 2828	3224	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1ed80be3e4caea46c9b0a6ecadd19400_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe071a46f8,0x7ffe071a4708,0x7ffe071a4718
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:2112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5948 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  PID:3460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6196 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,13184936154967124269,11790661864048469080,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1316 /prefetch:1
  2⤵
  PID:4436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4812

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2184

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4760

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 cb8a0964605551ed5a0668c08ab888044bbd845c9225ffee5a28e0b847ede62b
MD5 62c02dda2bf22d702a9b3a1c547c5f6a
SHA1 8f42966df96bd2e8c1f6b31b37c9a19beb6394d6
SHA512 a7ce2c0946382188e1d8480cfb096b29bd0dcb260ccdc74167cc351160a1884d04d57a2517eb700b3eef30eaf4a01bfbf31858365b1e624d4b0960ffd0032fa9
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7db700e067222e55e323a9ffc71a92f59829e81021e2607cec0d2ec6faf602a
MD5 850f27f857369bf7fe83c613d2ec35cb
SHA1 7677a061c6fd2a030b44841bfb32da0abc1dbefb
SHA512 7b1efa002b7a1a23973bff0618fb4a82cd0c5193df55cd960c7516caa63509587fd8b36f3aea6db01ece368065865af6472365b820fadce720b64b561ab5f401
MD5 SHA1 SHA512

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 20KB
SHA256 a67db01d19e15d8fa76e5a075e336e195325d79d277a83aadb6a440acf887c47
MD5 397383c90a2d930f866f405747e27466
SHA1 7bb6b5d6cee104c877dc5c3462f61232ffe5b360
SHA512 4357eddc0581e3cd6209646540bf59756cb4035d7dba47d5cb6b0050e6c202bda65721d4e9d644f37e3cd105bc5fa240574cfa96649f01e2769b796b523e08aa
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoKQP:kBF+i/PvVIOSVi8vSmzXjoQP
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 542344dfd39496ddc745dd5b11ef9e6bfa300e2365fb3b7660b3c72a1db0d961
MD5 61b3cadcbda3b19045b1db42cf660d34
SHA1 ee752645d712a370127469382a21a871af3e7846
SHA512 daf1970abf954a62536368d63eab23f0f83541dbd30c6cb68697e897fe351c5538c37a5914cd4d1a60cc04bcfcdc2f467c5955af90111a68fef11573dbc7641c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 050b35df91fc42b6603939e2e60b8f155cd485b76061a7889212777a1f320485
MD5 90bb09591c0a291d83c79e8674945423
SHA1 d05796288a9c20edac09ebebee41d8a3db85d840
SHA512 f4e6ab18642f836c86401334f093be55595a2151e50e8cc0708dec0b5160400be601c966e4e90e71d2958cd2620f4e1a01776592b14460b9f0bbd75fc73a9c84
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 bd91701f5503110bf63da5ae0643fd9f2974fa08a108b8d1559835f7940c2f1b
MD5 3190efb808483da54bc5a765ab696315
SHA1 b5dea1eda4d9ec65793f4a6bc6f7a1addd909d83
SHA512 63e05ac27a4ee4052b8a07e55c27db01a6561a8f4b645a68c20c840e969bb917bf11bba096e94a99b58d0819d4461c733ef51aef280a5db370bb655950b6b06f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 aada8ee97f912522f783a6f0a47687a7f0e3160c7b10c3f42ee8dd7f1964b73c
MD5 5ba399999d175aa825e47dcddcdf39d1
SHA1 1415ced6f58f9b480668b404c72b18589eeae453
SHA512 61c802d3f63f3c938b0727f7f89e2d2fa84204cf4d79a277cca936cd59af6a0a70983384271341be1a8eb645e2de98a49304276b618fb987806df59c734289e7
SSDEEP 192:nCnkb2JIfTGWM5Ce3/fHoMYdSRouErG3kWxz82/rV:n4zJXW+L9wrq
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 2c06e2649d435bbd43cc018e0674e911a4d127f853148c23d3f0619ae0ab9436
MD5 18f4387301c7c33736e65e24d9ea70f0
SHA1 f94fd9c600114d094dbdeae07c8a6895d266549c
SHA512 b61f5acc17f11ff50e7ae38b9752930caf5daaaa3ff0604baf347636248f8a0a59dcc08f200a9d79fd5c2897a40f2baeb5fb72f193a05ebbce9bea5da2707ddb
SSDEEP 192:nCnk32JIfTGWM5Ce3/fHoMYYdSLRoquErG3kWxz82/rg:n4LJXW+L4/r/
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 bd014ce88327c7ca4ea7698075c7fe06d98e26192f8369e9b3de27e4e8d4f7fd
MD5 773c64dedde73abcdfda27b31c2c1004
SHA1 b4e078c07cb15d4604959cf2dde20dc8590cf7ed
SHA512 8506fdbf22b2062a222cc5b8180a8ad7031241af2d8a4b1a7e0cadaf04a3506873462d465a514d678a63c5df60e3296cda016afba26fd5c287b9796ee17019d5
SSDEEP 96:nCnkSS21r+fTwpvWMoiVmdepCe3/fHoxSRo38GiW2qVWUWQyV+VDCAiEwb:nCnkb2J+fTGWM5Ce3/fHoxSRo3kW2FrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 3310573e1c4296c1cba1918f9b7a9111b0f63450b5c5aa77f80bc9fea3236d68
MD5 6c575272526bb1f2787a9eb12b14983b
SHA1 21e4647b0a6c058ecefa238514d442b543d59e2f
SHA512 e0ea93b671a25bb1d80f35edb4e740b860b47f8f6fd27cbf4d089d8f7cdd7005b93b0eb43a20d4675c94db5960af6f2a25676105b30d430f23ff19be35cb6095
SSDEEP 96:nCnkbS21r+fTwpvWMoiVmdeHqVWUWQyV+VDCziEwb:nCnkm2J+fTGWMXFro
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 94fd7482777739a4c2c1e773ef1e98823b94c20e9d0de348a0a07054d28440d3
MD5 c224c679149b139d228b45d681f320ed
SHA1 8c968fa88d92fb963c988b99cad7c0876a96ba09
SHA512 dfb2ee940fa42b4331560fb16e11b1c4940bf51dad4ff654848f51d052faee4281752751c21fac62897a59a88ca044f7636cd3671b313ccc5c922ea1176aa45a
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 873B
SHA256 44b0a9552096784570d23e00b8cefe0cadd9f35500c09e55c6615034eb2a8174
MD5 338a02a29c93560ebddb9daee3b45534
SHA1 494e1dff5fea566a1f635a2a1166bbd1db9df205
SHA512 a12fb19083dfca38b56a1b4e8ccdbba61cdbe92ea5a849a1c1ec3859fc4b1f04719ec0ee92fc927bd22e2094bdb56a7ed309dd3b217525b8d84a90bee2809877
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe590f77.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe590f77.TMP
Size 705B
SHA256 756020484f99e3e62cb6fe68f3fa27e489f2cea88738e783d082aaff7baaf349
MD5 c0b6d697f415859d920489a41a6c46cc
SHA1 6fe8c3f0b9e2a8a86f3e1047946013e2d8978d26
SHA512 79209d279ed2cb085c3586cdcc385f42bfa9a93d074eabfeb3a611307de388d88155976235c007f2a24fd43633cfb28218a2d448a550970dbfa64c9fd01c2da6
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

aea05f61-3549-4ca1-b13d-80bd01d58dc5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\aea05f61-3549-4ca1-b13d-80bd01d58dc5.tmp
Size 11KB
SHA256 c0ca3beabaf22f485c691effbb78f12406d9ff79f196f906c6031fcdbc633ffc
MD5 e14794c471052ec1c974eb8951b5a028
SHA1 75f65b9e9e2e1008b938aebf3fa206bba3c29a0d
SHA512 c1186f414bc509fcfd46a51ab9b9361d1ad91c39826debeeff9f46be3f48834e7cd981f13cd7d8cda4bf4e7cb2db9732af4247db3e4e3efdc62c866644c4f0fc
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupO8We2RUWOEUC/+OblfBhDr:A9iIxuERzA83h09RZxYiD//XDafEBqM
MD5 SHA1 SHA512 SSDEEP

Submit Download