0c07b6bcde6d8cd78def6d4db4434719c1640b23675846d9e014804b23dcd305

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
27/05/2024, 18:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7a2bbeb6c40dfdddad35090704a4c2a6_JaffaCakes118.html
Size 141KB
Sample240527-xms99afd39
SHA256 0c07b6bcde6d8cd78def6d4db4434719c1640b23675846d9e014804b23dcd305
MD5 7a2bbeb6c40dfdddad35090704a4c2a6
SHA1 319520fe3f1d14e21b70115445997a6fb82f19ab
SHA512 e7229f1782885781c4492a844674e8a4d7d57865b09c87502ec5007cb7af7db308e1b58b1dc7011b7ba2b7b56088d4c41d3e63a72610a3d141695ed4e0c6a05e
SSDEEP 3072:n+phqlwlQD6eC/+xu0RxUcjvY8rMUkejVktsJjAs+6N7:n+phqlwlQD6eC/+xu0RbjN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5116	msedge.exe
5116	msedge.exe
320	msedge.exe
320	msedge.exe
2892	identity_helper.exe
2892	identity_helper.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe
3796	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe
320	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 320 wrote to memory of 2236	320	msedge.exe	83
PID 320 wrote to memory of 2236	320	msedge.exe	83
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 4860	320	msedge.exe	84
PID 320 wrote to memory of 5116	320	msedge.exe	85
PID 320 wrote to memory of 5116	320	msedge.exe	85
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86
PID 320 wrote to memory of 3784	320	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7a2bbeb6c40dfdddad35090704a4c2a6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffed41746f8,0x7ffed4174708,0x7ffed4174718
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2028 /prefetch:2
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2800 /prefetch:8
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4144 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2008,3390535896142730184,12646470122202921387,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4580

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 20KB
SHA256 9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e
MD5 b6c8122025aff891940d1d5e1ab95fce
SHA1 a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4
SHA512 e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoOxEuF:kBF+i/PvVIOSVi8vSmzXjXY
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 64cb1d00b606ddfaa613525f840d8dc6fb39e3814ef95dc0912bbe4039630232
MD5 62553ae1497c82527ded0d8aebc7d161
SHA1 0ed3e28b869dc32dc905bfcaaa551af43bbc6c22
SHA512 d282d0aaaf26da2e7bfdef29da5c487304d87ee0f9a7418ed722f784c42434cdedfa08f677fe6cbeb962e0617035e47bb4271bcd2ba32657703f182066db708b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 2be15d5293e45b23a81c45bc198461c53a2afb7dd1e59e56eb9bc0cb61c2bab2
MD5 0d13eb42e38554c678a1dd7f54e4b3f9
SHA1 47528b5ae066d28f8ce1cc763a9aaf8ab001e5cd
SHA512 e6ee9c7744a5e56647601942fee1ba804bab9bc018bb0f114c918e11831d5d561cbe716c338a16ef44daa0409bece682bf61cbcbafc1781adb05fe05bb904956
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 271a1e99e8527187713472a01d90f90866b64246830f793bdbefb7cdd1af4bcc
MD5 9340edc4a88a6e2d5febecd550fed2ac
SHA1 4040f2dd52fe06b1b50b573bfd2d77866009bbd4
SHA512 dde4a3f2e14b61eac348e0adc171109c8b8eb4b1d725d8cf49b26536ee759be7479499fac9388327ac5d7057b8c5e6d2d9652b04b01b60663a327838e0aa31b5
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 5585eede59d2c8379b2543c6357360cf7b097c24d5236e889e8a832bac0d7558
MD5 b8e33bb43b10e4ae28a6edebeb5db364
SHA1 294d8e5449b1e97ba20a400b8ac61fb0ee9b4891
SHA512 c8784ea69b0924dd344b9519bb686d66cd4c48997e1f647a3d7bcdac13f2415df63cba69b660a156faebcc8725b563eec49711d44aedaeedd8c4c1ba5cae1b55
SSDEEP 96:nvkid1Dh1wpvWMoiVmdeHBrz2+UWQyV+VDCziEwb:nvkSn1GWMXI+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 7caa20d02eeabb4bf95874d822e05221fabfa808bc727fc66656756d143bad88
MD5 791a0b6a47c3965a678adddb960531e8
SHA1 33f558bc722cf51fd3275b1e513e04697b2d8636
SHA512 9133d0fd5a1699d7f829c17ffc27874616a557da283b1910f137dc8914cb13b051425195d81567d12fbe48a13c10c138a807d3ec658cc4ee620d4061290821a2
SSDEEP 96:nvkZd1Dh4wpvWMoiVmdeqj5YG+M/c2Brz2+UWQyV+VDCAiEwb:nvkrn4GWM6j5YG+M/c2I+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 018acf3c14d173789e05adf0dbf96ee9b9ae624d58065940481b695b5ea20ce4
MD5 38227f9c862dbba0cc1f901e4df12312
SHA1 481da28d2fa20adda4bc15d0153e33347eec8483
SHA512 ec0ee1f2152d105fe9dd12dda41c581776060343638d0921609d7569463c639972907174ed2900a8a01e0d91fe02ee30f9630b9fe67e82bcd93c50fe8d1db9e6
SSDEEP 96:nvk5d1Dh4wpvWMoiVmdeqj5YG+M/c2Brz2+UWQyV+VD7AiEwb:nvkLn4GWM6j5YG+M/c2I+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 860b733f7f785d8ca6377a66475ec3f9b2de9d51f4c495aec6feb5b4219cf902
MD5 c6779d61edc59da0db897fda8e03a48c
SHA1 d1317fa1b2e15be6c8ae4f519aae01a19ca2cc41
SHA512 b1bf7ff3c31ff7c9f31848e28fbc0e245a9b9bc5da9fd1703edc2559a12067680b85295bc54605db5ac99c81922bedcc25bd2c49430fab4067550e62518b339a
SSDEEP 96:nvk5d1DB4wpvWMoiVmdeqj5YG+M/c2BrM2+UWQyV+VD7AiEwb:nvkLr4GWM6j5YG+M/c2l+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 d6294e84a3d170404d9b3ca6a76585215cddd7e7e2e498f721241ee9ac008dce
MD5 078c4af247d1f375ebe072d9622782d9
SHA1 fd5bd380d46f69a3ed1eb0690f37ccf5dcb4843a
SHA512 f8ddc88fdfeefdc7a8e3e5749a917ebd6167fca54dd65aa9a2bf47ed988f5c25ff3b158054f70cbb782ebe9fc4c63b5302e5fa8fdd625c13807fc3a69411cbf7
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupKHHe2RUtMj2H3z2OMDCRHg:A9iIxuERzA83h09RZxYKHvvyHaOMWRHg
MD5 SHA1 SHA512 SSDEEP

Submit Download