35337f1a852dde01a97a7549dde27bc03ef8b659d3a4954d0ad8dd527f48e239

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 09:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
803033ef132b65133eeee64cc3f8b88f_JaffaCakes118.html
Size 164KB
Sample240529-kyfgbaab59
SHA256 35337f1a852dde01a97a7549dde27bc03ef8b659d3a4954d0ad8dd527f48e239
MD5 803033ef132b65133eeee64cc3f8b88f
SHA1 1944fd74a5f85fc95a91bf560c60d4cc3522ee27
SHA512 a3212764f1312c1ecf9c3cace18d7855c444ea6603f860db54e69610c32b081dfa3b036fdd059ab395a04911cd03f4c44a0b3610737c7d3b128fa6eb9cf60b84
SSDEEP 3072:CHRcVhIVs2LQe2U0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRSxrfOZoOaCsW9So:6c7J/jXmNRLGRkR8i
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3428	msedge.exe
3428	msedge.exe
1488	msedge.exe
1488	msedge.exe
4776	identity_helper.exe
4776	identity_helper.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe
4048	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe
1488	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1488 wrote to memory of 1988	1488	msedge.exe	82
PID 1488 wrote to memory of 1988	1488	msedge.exe	82
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 812	1488	msedge.exe	83
PID 1488 wrote to memory of 3428	1488	msedge.exe	84
PID 1488 wrote to memory of 3428	1488	msedge.exe	84
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85
PID 1488 wrote to memory of 1228	1488	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\803033ef132b65133eeee64cc3f8b88f_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x108,0x10c,0x110,0xd8,0x114,0x7ffb533746f8,0x7ffb53374708,0x7ffb53374718
  2⤵
  PID:1988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,14559713394224781520,18434982299909254638,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5220 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:816

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618
MD5 SHA1 SHA512

Submit Download

84a8456a-52ff-4ca9-b501-0338e7796602.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\84a8456a-52ff-4ca9-b501-0338e7796602.tmp
Size 1KB
SHA256 d842f3eb4c5edda5ece4ef176bb809ebd08916604e029423894804aba4741db2
MD5 c48a85541de157e9ec55a476ce81c63c
SHA1 4341679cc4c20a4c8e5c6148682a55cad5c3488c
SHA512 76324ad91415bfa20ecbc6667e08b1de0759a8761cd0d8165bbe401580e1998e80b3743929f9f7037c95bf5c5929828ae598ce05aad9fa713f17575466cbb4ca
MD5 SHA1 SHA512

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 20KB
SHA256 9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e
MD5 b6c8122025aff891940d1d5e1ab95fce
SHA1 a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4
SHA512 e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoOxEuF:kBF+i/PvVIOSVi8vSmzXjXY
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 20a9ca5487e7902bf10f0a0d192f335d1bfd740e121d2cf5037104728c1f2b3b
MD5 40a21d0f3aa670953a17357c8664550e
SHA1 25992ac15ba544f7db8d4a2171d3777d3f51f1b2
SHA512 0e0a5b223b07bce3069cfdc54c02559360d54c1d8df099d19c7b5b76c7d1b2069c55e009edcbb5e9612a9a1da65f7d8dd55dbb8e0849c221a691721e5cad75e0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 16fc378fb84490191e8408c8a745f6d6f59bf5ff7ca11dcdc28f46b5b4e7edd5
MD5 b04e3ea3a2ed3c2e8ec0229755c7e1b3
SHA1 4f0c8e551dd29307d884529b93e77a825b8eeaaa
SHA512 8fff62d2d59d588852228a36738f06c7bb0184ac13d82b3d87a48c3cb071a3b49967e34dbe74caae54e5a0b6ae184d3c9641e9a3701e0bdd54aed742131e2f86
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 524d0e32b0e884668ecfd0eec8e7a9758f96b6a2bffeb9cbcdd251f73716b0db
MD5 c2e456cc615dc2306f09b4a1b0e218a9
SHA1 a19b3c2fa58443d83ecd09044fdffe77004a4e31
SHA512 ba7638174807db03b86d1cef8606142acfe76cb4c1670329cbe2a505b9afd9bb71f1b0c3eb5b63ae5e6360d6c8fd3d0fed0bfb5077057f64a352c006111738ad
SSDEEP 96:n5kZAY1FT0wpvWMoiVmdeze8FfWYnthjm2/zG/UWQyV+VDCAiEwb:n5kJTgGWMje8FfWYthjm2IrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 33fe031369a7eddcdb9768ac9575a18711934c9a7ca029dae495eda15a8c7ce2
MD5 70ba7f0c86b91a353e2bbd7d62c2d648
SHA1 64d47a7e68cde3a455266947e07a3b9777a30675
SHA512 a25463198c235b645db149b761f344f2a496db3611cce8e1123a122d2ee7356a49fdaf0953c4214a86ced03fac559424f8a56a78b62392fcd2950a982852a768
SSDEEP 96:n5kiAY1FT0wpvWMoiVmdeH/zG/UWQyV+VDCziEwb:n5kUTgGWMXIro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 4d9686a6de9f8014de7e652d4203f955b0fbc656ee76955ed9698be703a4a118
MD5 461e96ba9243834d471e9a67e5a74a33
SHA1 c99944636180111dc48c92c8b86b8395f02c91ea
SHA512 e709b565cb0d9b3d15c04fb71efd864e6237991cbd04766f2557c15d543f73d5c5b9fea78968b47f048026deb0ea61d1e54c6098fc4b6be21db93a7c5bb4e2ad
SSDEEP 96:n5kZAY1FD0wpvWMoiVmdeLge8FfWYnthjm2/zG/UWQyV+VDCAiEwb:n5kJTwGWM7ge8FfWYthjm2IrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 cbfbb91069ac6bfd9b1417c6ed95397210ac28b28830fb4eb9e4a123dd26e61c
MD5 e6b06e5dec7f2994ce93f2e8b79af41d
SHA1 2ea4c831baceea6778c1cd584b04d1e3bb53f11c
SHA512 e8f0a9b22c145b7b0d9bbb2ef12b942e94e1bd08ff11e4a3c6ee53db443cd01b01d36a17ee99d69a8023048b57ecb44db257ca441c6882b9a1f336cb791ff019
SSDEEP 96:n5k5AY1FD0wpvWMoiVmdeLge8FfWYnthjm2/zG/UWQyV+VD7AiEwb:n5kpTwGWM7ge8FfWYthjm2Irg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 c7655986220d362a9601146ff35a587e3785359534aef277eafd334ab5bde4d7
MD5 4101fb1bf22005cd44e5b0bc792196e7
SHA1 7c02323a058a007602f7dc3fe6867dfc2bedfc32
SHA512 8dc052019aa7e78992a492a3206fe428f88e308247140c2f566e947b5dc74157eb8b8d7d005e1a43d69b1af601a87c7d5199d8d712db47345ad9b9e1a446ac08
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup2vHe2RU1PyNT3z2OMDCRHa:A9iIxuERzA83h09RZxYYvxNTaOMWRHqd
MD5 SHA1 SHA512 SSDEEP

Submit Download