7be8dcb9ad2f30c784aae3a635f3bc4aa2056aed19bd664804774f351ac45934

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 01:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7066125c75886777f2c9a70d7dd5af53_JaffaCakes118.html
Size 44KB
Sample240525-blm6yshf33
SHA256 7be8dcb9ad2f30c784aae3a635f3bc4aa2056aed19bd664804774f351ac45934
MD5 7066125c75886777f2c9a70d7dd5af53
SHA1 cdf782852a55d914b54c74696d8f45a2220edbdb
SHA512 29efd03a114c547751a21e33b4f1b6b66e04c3ca5ba8d739373976700fe362afb0f903a8aee71d39ca0a8544e8628edad31b3eff6b06a62533c17a6883a62b83
SSDEEP 768:AxsMjmXlITgdjKghFIqLyFCjvnnnCKmhbx3TIFndlSpEy:Ax+lITObgC7nnCKmhbxDIFnzy
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2064	msedge.exe
2064	msedge.exe
2276	msedge.exe
2276	msedge.exe
2664	identity_helper.exe
2664	identity_helper.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe
4800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe
2276	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2276 wrote to memory of 4700	2276	msedge.exe	83
PID 2276 wrote to memory of 4700	2276	msedge.exe	83
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2104	2276	msedge.exe	84
PID 2276 wrote to memory of 2064	2276	msedge.exe	85
PID 2276 wrote to memory of 2064	2276	msedge.exe	85
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86
PID 2276 wrote to memory of 2100	2276	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7066125c75886777f2c9a70d7dd5af53_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa3ad546f8,0x7ffa3ad54708,0x7ffa3ad54718
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4552 /prefetch:1
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6324 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:1944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:2760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,8383648748754450344,3452625561646914441,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1500 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4356

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

070E0202839D9D67350CD2613E78E416

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416
Size 1KB
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
MD5 SHA1 SHA512

Submit Download

070E0202839D9D67350CD2613E78E416

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Size 230B
SHA256 a8bc01c1f96570207bd6667806c36068be65498dcea24d4db547cf71b14757c5
MD5 44b803991bdbc5bb94d7f89f9df58344
SHA1 25db2853caa49cc4f4c30100f3e60994b64bcc95
SHA512 6652682ef3a9be2f9ced0d5a451e1e90134d31c8a8b4367854d493a0cf9365fadd3e56930fb24c5fb38c6251da37eebc53d7b13674e6734a996714d1cee2f49c
MD5 SHA1 SHA512

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 696f0d5b71864cc56f673b9dde30dca414d7ca7f2dad066142f02a1a4a212e31
MD5 b2a1e2c91f0bd7d2eb40520e87d044e7
SHA1 9660de3d9340e8d08e41bff6d184707100800989
SHA512 00880ea2f71a8d07c33c435c6902b247723da487583c124c1da23ec1875ce9747fa5bb180474ebb474f673fd08501c8ccbc50db2163bc809be908c894894b92b
MD5 SHA1 SHA512

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 32a4a40287ea9d96df4360b25263b6fcc7aefe61012e610ee53a717e229021b4
MD5 8e1a1cd13001c09adce047ca9c8bce68
SHA1 c8c78c639cf521e69e7c2dbc02fcd97c6da56eea
SHA512 4c6f0fe5f51ceb43e259436bff530be79406b2875ca8010c0772f5dc5be10e658ef8affe26baeb5baa1d9effd1a21e1d75595daa7a362f63b874a9ffe2ad357e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 74cd1731d86380c17aa40873a26300482d6552ac2d63e840c02ec533ddf1b5e3
MD5 6a2bad68ac6ee85110de8c4620845b4c
SHA1 83e7a0a3390b2cd268bffd49476a2eaaf7064ae6
SHA512 2cc0e4ace48012921be958454c8d02ab0935df40ae4fc2a59f8d27b60cc5f7ca398171f5f8a4ca41ef4cb22c106a59971d706fce856a0d1a7b6b6b4e1f37aaaa
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5e7f9c937f2c1c6417e3f6ee701a8f11de90ae2c6ee683ab6e9ed391ac9e4fdc
MD5 25deb16ec8ca588bff536a4e16aeeb7e
SHA1 a1d0ce0cc535ff1f4c13b42c6c6a2197513139df
SHA512 f0bae5b4365f210dacd79432e5390633797a1b0e6b9043fa038c67bd178ddc8bec934665bf5720fa20b5c013bac22a03a22c5dc0655c343ae8f1b3aa8b3fde23
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 fa499a72aea2ab8fde5d8f5b67464d6de057dbbd5f22c0730571648b5440f89d
MD5 24cb283397f44445288f95354d7278f5
SHA1 4bc264e69773d566e7d8fda97000f40e69a549aa
SHA512 98b56b97a3857bac6578fdc6589bb2eb32ce2a6135e44689d412958ca7f4338dfe4869818dcf5d111bcdbaaefd0df72d003388c3e2cbc2cab5dca4ef24c265a7
SSDEEP 96:n7fkyV1g4juwpvWMoiVmdeHvSSd+UWQyV+VDCziEwb:n7fkqq4juGWMXP+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 1fb0c7ebddcbe08c8e33c596ca96990fbe8895aa5c977b7dd39e5bacfcd66934
MD5 335b800bd4d7bf8d3c9215f3e89e9bbd
SHA1 c1f14a63f92b98036845d78efaedf808a2657254
SHA512 3700e75887b7d8d2d4e8407bf81e1b8de81ba1160b712c45971e2b0fb6f2318c577cd93383397b89322178f999b0d6cf126c28ed30818002e6370bb69207ff53
SSDEEP 192:n7fkzqKjuGWMGrYYHyXYjwammY+n2P+rg:n7fGqU/W6tXoZuP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 63932a30c0130cfdab1007d5084553c31e970abaf5a32753e299a19f304e790a
MD5 0ed53258cc3211b1efac747c145f1de0
SHA1 ffb488c18c816bed97e2c2262bb85bb710efdc8f
SHA512 713e347671313cacc18acd2b8a8d400860ce8acec79b31c97213baa574ebb9b4a4b48cc41d26a6ef011cdf11d4df67178fd9311a3a9ad6c081b1f84f09d013db
SSDEEP 192:n7fkzqKjuGWMGrYYHyXYjwammY+n2P+rV:n7faqU/W6tXoZu6
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 88be3fa103eb5b75019c1f2a857cbef3a0a1a3056a9349695b44fb752330b57c
MD5 fb7b4f54d54838d0ce2da5c48bf15b3f
SHA1 4fe00f9243a9972ce935e77f405dd6c9da592bd5
SHA512 9ed0d5e976103ffb01bb0ec10715c6c215411ea14c72aa7da86b00c3763e525b43adefeaaa9c886b6ed49a7404f75e45b7ad314765d4af87708410166811c3b0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupmOde2RUOj4um3z2OMDCRH7:A9iIxuERzA83h09RZxYmO5d3maOMWRH7
MD5 SHA1 SHA512 SSDEEP

Submit Download