2198730be923e673271b879f5d136cdd038553b66d3a148c6aee2de93fc1825a

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 03:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7427de813ed23d67ef688a04ba5c2e06_JaffaCakes118.html
Size 39KB
Sample240526-dpv23sde48
SHA256 2198730be923e673271b879f5d136cdd038553b66d3a148c6aee2de93fc1825a
MD5 7427de813ed23d67ef688a04ba5c2e06
SHA1 6a353056ae44584c1b59564419250c033c750277
SHA512 4a7cf20f56a9f4f25692c6e48551002b12c6a86139bd2f3f5f169a7e8e00ad2e4c007284651803103eb74ac4a749f049d11f97e9544c54d3ef5eea7299a23d91
SSDEEP 768:S8ePuvqCHCQPCSC0CtCDeb32YCnbbGKTw:S8ouvq+Hl9g0nGJ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3916	msedge.exe
3916	msedge.exe
4988	msedge.exe
4988	msedge.exe
3832	identity_helper.exe
3832	identity_helper.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe
5516	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe
4988	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4988 wrote to memory of 4644	4988	msedge.exe	83
PID 4988 wrote to memory of 4644	4988	msedge.exe	83
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 1624	4988	msedge.exe	84
PID 4988 wrote to memory of 3916	4988	msedge.exe	85
PID 4988 wrote to memory of 3916	4988	msedge.exe	85
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86
PID 4988 wrote to memory of 3816	4988	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7427de813ed23d67ef688a04ba5c2e06_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9272c46f8,0x7ff9272c4708,0x7ff9272c4718
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4576 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:2856
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6028 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6044 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:5196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5584 /prefetch:1
  2⤵
  PID:5204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2132,688374802128013524,12693129247530599678,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4964 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5516

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 5d833fbb81fd8758386c9f5ef64009960867a46e6bc989db0b545b1dc0584742
MD5 100f3dbb2170dbc74707dabd83da22af
SHA1 f07e08701e0e39d75973c185efe7d7f7fe00b728
SHA512 5c7c5aba42ba41c54feddb5a76886010caa27ef49be8a1ad2ffc888d43cd295ded89bf64c26bb3bf22d7943f4357845b7b396076640ee3763b9f2febef95379d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 53440bfc76bb625046284420bd350581129aa208ea803e4b60fa46687182efee
MD5 f5ec0c2fcacd2a25df5d97847842ca7e
SHA1 035697536541e24945ccf3f5e597621ad0245685
SHA512 9545a4cb1211f947390a56e24de32413cddb7ce7f0b1a215629d76fb95e3447353d4f4fcb33f7056d52f392a7d6798ffdf8d397c345337d1fab7d4e409a835c0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 7a869ff4e49cf8d088c71afbb999afb6303ab16b1542c38b2eb3e77f749f49e6
MD5 55a2ad8ee4bc68455acd0ec40423f240
SHA1 ba11b76217b404997ab2dc2255ca5edec79e14b7
SHA512 e97833ca29bbc4b4a3750bd8400ad0b771408fa513ea959bddc086784813ba2458739e16a1fdb2909690e2a06892be5ba18a361b18438c2ac5f2d3abae0d3833
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 92323a17e6653de915c7a19d96b2c0d0e388b64c2b4f6425bd8800a9622e94ff
MD5 597577c192498846dda0ae5b178519b3
SHA1 26973f0b95c48e387eb0b2baba2334d1fcb5feb1
SHA512 76270eb4bc42c0b1cd129848c5ff07e53b056dab5a03cc879727a32beba35be0c92c1469c7afd8abf246a1468e690b8820899d6f0442145107d6acfec9d4a2fe
SSDEEP 96:nRkWI1+hwpvWMoiVmdeHBrzfhUWQyV+VDCziEwb:nRkXshGWMXZhro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ea716a6bbfb03d7bcf38528d88a8a112c99e97b303af81a0a8cb3b4588978a3e
MD5 f4774f4842f897d43eaa2d84d955e865
SHA1 64cdf2c7fd1e417f80112e322894727cf26d8ea8
SHA512 2a811d9ede52a7d2d78b0df79cd72b7c671701820a5ba702ca47ca62d4256a6fa31d63cd8bbb42e5ecc572103c7371533a106c6869939cd4b26526ed0615f863
SSDEEP 96:nRkFI1GDwpvWMoiVmde1c9NJV2VKhzEwEGVry2BrSfhUWQyV+VD7AiEwb:nRkG4DGWMFc9NJIVKhYwEGVry2chrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 4bf629e77ab5ad45c94beae9242567a39bff2899e8fab5ed4d1d4822dd72dd4b
MD5 bf18c70c79a35eecf25fab5dd7995476
SHA1 7fca12a2f8cbd274f952972d1d6ac9d538b5a697
SHA512 0a2accedee950c70905414bce04a31922e94903d2ad4f0ba911cca7e01acdf5f718460ea4ea4b55ba61a0ebd25c0769ca970907a879e0dbf066f37030136ec66
SSDEEP 96:nRkFI1+DwpvWMoiVmde1c9NJV2VKhzEwEGVry2BrzfhUWQyV+VD7AiEwb:nRkGsDGWMFc9NJIVKhYwEGVry2Zhrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 4ffdb815e7d256e3dcb9712b99746dd319c377d031cb29e2c49509edfa1d0c8a
MD5 e57d02fd439ea0a3ff7af5171825eb36
SHA1 962bdd073ce9c79dd7c79ad485c7dcb28cabc478
SHA512 a4764519842875ede911fbd97766655561f69344d692192bd5fcc8514c529bf96da1696c013377ccd17779c6ca69b17869ee8a6d3578a3352b77816ec91326fd
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuprHle2RUe/Mj2s3z2OMDCRN:A9iIxuERzA83h09RZxYrHBjEysaOMWRN
MD5 SHA1 SHA512 SSDEEP

Submit Download