391bb78a74eb56df9e7623c759a9630caea029c1fc45fa27348707c22d2de680

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10/05/2024, 16:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2ffcd63801dda60d84319b7b8ecd8c70_JaffaCakes118.html
Size 75KB
Sample240510-tthwbaee5x
SHA256 391bb78a74eb56df9e7623c759a9630caea029c1fc45fa27348707c22d2de680
MD5 2ffcd63801dda60d84319b7b8ecd8c70
SHA1 c5b003b7ac8f893319e9c966aabc96fdc32a5351
SHA512 e1cfcffe70da203e829d11683c0e6ad2221bc04a58623f5d9b3a5e6a480d4ea4d0880a790a06d8a0f1a8191050a7ddd413716fd098e8572affc4eb84b0ebd0a5
SSDEEP 1536:txQkspBhgfpzh5qEmaGtbM5Yo516sQj/oT:txQkspBh6pzh5Hm/O5Yo516sA/oT
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4656	msedge.exe
4656	msedge.exe
2340	msedge.exe
2340	msedge.exe
1364	identity_helper.exe
1364	identity_helper.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe
2340	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2340 wrote to memory of 4408	2340	msedge.exe	83
PID 2340 wrote to memory of 4408	2340	msedge.exe	83
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 408	2340	msedge.exe	84
PID 2340 wrote to memory of 4656	2340	msedge.exe	85
PID 2340 wrote to memory of 4656	2340	msedge.exe	85
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86
PID 2340 wrote to memory of 4304	2340	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2ffcd63801dda60d84319b7b8ecd8c70_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffe8ad46f8,0x7fffe8ad4708,0x7fffe8ad4718
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2452 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2924 /prefetch:8
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:2328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:3940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4992 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:1048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2264 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,15608992719379343788,15851625261212682959,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3624 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4664

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:784

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4
MD5 1ac52e2503cc26baee4322f02f5b8d9c
SHA1 38e0cee911f5f2a24888a64780ffdf6fa72207c8
SHA512 7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6
MD5 b2a1398f937474c51a48b347387ee36a
SHA1 922a8567f09e68a04233e84e5919043034635949
SHA512 4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 2c9a5b09d1945385cb91e2659bd425f3a3367a45f40279139ade458bf7ea1a88
MD5 990b3f50bb7c24fd7dd39c14fd1097e5
SHA1 19b1673800fb7abf2c4fa84849c9a963c4ed17cb
SHA512 2ad5331921f823f2a8b93ae7ca3b9fbe4eadeed15b69ca55c240e5a24937feb15306d367e8295d069c201d574d6c1bfcbe127d437b46b677d17a0c6762d00570
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 48d43bd647458109398529fd9e597d6b32eb2b9dd008f2e69fef06ab7f09ad54
MD5 e7ba3100e62e44f3186c03ac3be5fdbc
SHA1 a1076b5e6ed843bce8d4ff7f2879d2598f75fc2f
SHA512 a450e20b304256aeba681f901c3a2494790ba66feb00575663165d313395ea8563efa94cb2f73472a18008e04d3825683a1ea34a0c105c26e33ca17e414efb66
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8a4995e43ca7ce26ee9751a6b4002267e533ed1257b00cf96cedc33f68ee6bf9
MD5 f8bc160e148cfc318c44213fc20a8671
SHA1 462d856b38b496f8224120f95c1f5eb665f78600
SHA512 818edcd878dbf6e7cd231a3e4f6f836859cd1e4d291e4a22ad790d89f663aac30b11bd545281fad1614ab5f635135588681ac7b6a3db6f9ef645a609b80de8ad
SSDEEP 96:nwk4D1mDmga9IQwpvWMoiVmde52Ndw3Nm32pCrpbL+UWQyV+VD7AiEwb:nwkKa1aCQGWMp2Nd+Nm32pmbL+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 d9b73de0c6267669bf1a4dbfb6cb51f1cccbf09828e000eceb3bbeb9a096803e
MD5 e07bd069f2a6d9831d882aa804ef5d29
SHA1 4a83ee609c5daf555abbfb933a2f2e2bb77078be
SHA512 f610f4257a6098ff50e3a3d0948a597bfde16dbdf66b0ce4eeb2ce7dfdb463ca2619f0669ea2e1cc328dd598792b361feada4de6aa70eeac02d5cbe540f40c13
SSDEEP 96:nwkdD1mvmga9IQwpvWMoiVmdeHpCrpbL+UWQyV+VDCziEwb:nwkpK1aCQGWMXpmbL+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 041c12e9c69c3234b2cafb8027aed81198effdf6850296658e303d582a72a632
MD5 4f00610cb6d797d3ce6a525cd5fd0330
SHA1 11e1df833b526d99dd039829fa6dca217b8963bb
SHA512 f58fce9879ac211c0854345a6d7750bc67e2036fe61c8053ff573e2c423e7c3722502593a7543beb35d6f2234bfe1f5e2b693555129eff26d34c03a524da0072
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexups5k7ie2RUq/jf7ZF+OblfO:A9iIxuERzA83h09RZxYekQDLzZF/XDaD
MD5 SHA1 SHA512 SSDEEP

Submit Download