d1dddc6636229f2ed3b22dd3c6fa13187e6b74908cb32cfd65aa3136b64b3f34

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 03:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
743c0f3b5f2a846708c1743f3c30b94b_JaffaCakes118.html
Size 57KB
Sample240526-ebecvaed98
SHA256 d1dddc6636229f2ed3b22dd3c6fa13187e6b74908cb32cfd65aa3136b64b3f34
MD5 743c0f3b5f2a846708c1743f3c30b94b
SHA1 b382cb3677c1bc556cdbff8dd50590f960264fa6
SHA512 1398ebaed576e03ea07e0c15ff063566131ac2df468d3f943d85f9188e1da41ae9a683c07701e2903d967d95118642a29ef748394b17c4e009f0d37a524b5c60
SSDEEP 1536:mH240qomOSnmgbzUiM4bKwJtK96mC8w0aPNDKgs0eYxxzBSOmPk0tIR3iVrLSQrv:mHp6SRzfbFKo8UNC0BzEP+RkLM7I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
636	msedge.exe
636	msedge.exe
3920	msedge.exe
3920	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
1608	msedge.exe
2644	identity_helper.exe
2644	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe
3920	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3920 wrote to memory of 624	3920	msedge.exe	85
PID 3920 wrote to memory of 624	3920	msedge.exe	85
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 664	3920	msedge.exe	86
PID 3920 wrote to memory of 636	3920	msedge.exe	87
PID 3920 wrote to memory of 636	3920	msedge.exe	87
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88
PID 3920 wrote to memory of 1860	3920	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\743c0f3b5f2a846708c1743f3c30b94b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcce9946f8,0x7ffcce994708,0x7ffcce994718
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2036 /prefetch:2
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2420 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2948 /prefetch:8
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2116 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5868 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:4848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5444 /prefetch:1
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2020,9740162066796953498,26552946716461900,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3048 /prefetch:1
  2⤵
  PID:2676

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4904

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:932

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

070E0202839D9D67350CD2613E78E416

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416
Size 1KB
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
MD5 SHA1 SHA512

Submit Download

070E0202839D9D67350CD2613E78E416

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Size 230B
SHA256 8dd2f65b58ba15d9219d2a1a23f29e3e9fd9d7703d2032e6d2c32070e0393ee8
MD5 f3c5aeacca878986b103f20dd5598d4d
SHA1 801c9ff9ae5133405d492b008c329bcb4f9e1ff0
SHA512 999fff483da45e3d261665b8b2f8e91536de9205d62f6ab8c8827bd7314955fbb1f77a8c5deb8a7ef6cda92b37e27cad1d5b3c87765833df97b613b36a5912ab
MD5 SHA1 SHA512

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 4bc57e90fcea790db2e9c7668c5c4b0874a1655de2f78a237e8977b06d3717cc
MD5 b8266630190d5e69e2c54d8c1788f8a6
SHA1 02dee64aece1dd5dc0253b9da4ef0b53e44261d3
SHA512 f8b0d4a042f9af63c3dbe7c0db3460dcfdf61573f707cbd2ca9fd245f95592bbf3fd348027c6ba63181d3a2ecd7ca8845e71ba94f0f45cb18dd210282c1a1959
MD5 SHA1 SHA512

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 83aae2517b8cfd1e9f8b9cd4f737347704e3008066513867bec1ae6e90ef5462
MD5 cbabf01e091ba305687fc26017ede344
SHA1 420357b0e6206b3b2dc48fd01da568101906fd92
SHA512 5c2258cd76a5a61ccd995152a38a87ece89e78de67833bd63e7daaa26a6d468cff88bd99794f4446fdc91ad60ecaefb43978b871c7a6a9b9269f07973f87677c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c
MD5 4b4f91fa1b362ba5341ecb2836438dea
SHA1 9561f5aabed742404d455da735259a2c6781fa07
SHA512 fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b
MD5 eaa3db555ab5bc0cb364826204aad3f0
SHA1 a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca
SHA512 e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 629B
SHA256 1d46480163220c36932acb2e0933dba58a667b101a9e19efad14b8c8da0ee32f
MD5 d762a27b6bb3d36463783632f9c4c00d
SHA1 be34b9c6c80688cf2f0c2747dd87d6695528f273
SHA512 1ae9653b8b08a69f6c093c4c6e0c6bc27e35814e40dd181e38516e96ce7d21241b90a5dde935010328b474c19da15c097c0e244dbbfd88570cc5b2eac283d66a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 72f7161a9dbeb30e8f0d7a376315ec68d3a8200900f1082723c4477ee4fda1ff
MD5 b470d6be9d663c9e4a5527a22e9f488f
SHA1 d4c8c9046cc4ac529cb5448009c91ca463848aaa
SHA512 65961c6695fe76c0fe4e50e38eaecafa38582bf2cd940ef64539ae842fbae14d75491d0edfe26836f69ef116c0d17144bd59b0269a19fd0fd2fea6a00a7e2cc7
SSDEEP 96:ngkkH1/MDEj0wpvWMoiVmdeHmQIXUWQyV+VDCziEwb:ngkqCEj0GWMXIro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 23dce8f560215156cfc36c15c1f835bcc4ec137724c6ed658528a7885b22c604
MD5 4c49ba22b6ec5805fa9a36a2b1eae00d
SHA1 f6e544164121a4782b72bae08f7c657d39bf4b2c
SHA512 15d5331610a7251885a0a2b34638bc7d9885b9b76e2ab55e9c97b582e58da0938472af34a7bfc02c82463e2f3ab3a74655403fc2f4b517b290afd5f41774563d
SSDEEP 96:ngkvH1/MDEj0wpvWMoiVmdePVcPBP0eAc2mQIXUWQyV+VDCAiEwb:ngkfCEj0GWM/VcPBP0eT2IrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 272d20bc50033e7fa835e03b859c80be003b3418897c59c22d80d170ac3028ce
MD5 1766b482e8ee3380dfba2b070ea9edac
SHA1 325dcceaad1a3fe47980d357eb2f4627c042c310
SHA512 eb731a10570174eb30d0ba2186349b470e38572e407d7dc02baa403d06e42a608e4ad007361cf699600a134dfe927e112ce40fcea5d1fde07bfe034d212444f6
SSDEEP 96:ngkvH1/MDcj0wpvWMoiVmdePVcPBPYw0eAc2mQCXUWQyV+VD7AiEwb:ngkfCcj0GWM/VcPBPYw0eT2irg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 461886ff2fa55ce082e0a678a531df70efdcfb3179a3fb282a5f3df8695a013e
MD5 1493dd2b8c027b2ef870dc6ae1f96615
SHA1 811d543764a4d7e63138350053310717cf5f66ca
SHA512 bf063bcd04291b01f26a938a38cf5456d17496b7c0c9d05e7992a8cf3ebf82bcf9d2c436c7f4b78ca0b4e8452f9e9e3804bdadff819ae339e59d55ef930794b1
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupsA5e2RU5IKbqfYOxhZHnq8:A9iIxuERzA83h09RZxYXtKcxTHqTMT9f
MD5 SHA1 SHA512 SSDEEP

Submit Download