4302e8ca0819d3441a4b1cb8c486caab7db8f3bcf7f29819e90169b0299548bb

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 10:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
80796afccf2e93d6e50d6b1ac57bdf14_JaffaCakes118.html
Size 48KB
Sample240529-ms5kcscf63
SHA256 4302e8ca0819d3441a4b1cb8c486caab7db8f3bcf7f29819e90169b0299548bb
MD5 80796afccf2e93d6e50d6b1ac57bdf14
SHA1 cc0d1843b3150610d7c8e5eaaf2db6044013c800
SHA512 19aeeca42672384678e42d4d98adf4d566a2445f107cfc954d177cc286e18804e0cd4cace38579eac7191ad5f3a448a51747f6a815159d57ed69dc1e02c0591a
SSDEEP 1536:SdYpaYT//GsnzNm9F18HRBYQsnzNm9F18HVAvvUnrOSplf+chpPXml5U/0icV7D8:SdYpaYT//Gsn4cBYQsn4NSplf+chpP2C
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3900	msedge.exe
3900	msedge.exe
2828	msedge.exe
2828	msedge.exe
2592	identity_helper.exe
2592	identity_helper.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe
8	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe
2828	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2828 wrote to memory of 3788	2828	msedge.exe	84
PID 2828 wrote to memory of 3788	2828	msedge.exe	84
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3964	2828	msedge.exe	85
PID 2828 wrote to memory of 3900	2828	msedge.exe	86
PID 2828 wrote to memory of 3900	2828	msedge.exe	86
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87
PID 2828 wrote to memory of 1820	2828	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\80796afccf2e93d6e50d6b1ac57bdf14_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c04046f8,0x7ff8c0404708,0x7ff8c0404718
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2704 /prefetch:8
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:1620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:2912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:2936
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:8
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:4608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,15359574575161081613,11858243236060898528,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:1072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3204

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 f0058cac7cce7eeed610e6db933e73b0c66f76470325b78474b2d5b53ec94d02
MD5 1a5693a2206aa5b5c4070d0af69eefeb
SHA1 1b7256f6de4c1131df19ec941ad343040f780e92
SHA512 830f478a9e4905bb3e7ad6ed89eb8e0793ae6fa82ec73dda38e00e6c2fa5582b1e259f27fd0a2a73b6c71b181577cbf0f97524ac0c6c892976abdadc8ab9ba3e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 543B
SHA256 f93021ae7f1072450f8852683c464b4ca1718aa93f8a39070318838beffdbf1c
MD5 e7f38f60dd6a72a9e522c4593eb6ec3f
SHA1 793ac4aa2aea2579429aa7a42935aaacf031cb7a
SHA512 fa07c58008a7fd8503b1efa3d3feda473b408b0f815e7b20d6da1678b57b26591409cdf0f2abd8f21d6ecaab038f5f3cbeb9a7b8d69b54354e63ce0f7a210a7a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 da6c35c4d436117ef09de5c931849d4ff7af8b6fd1135b95bb4018a61b075661
MD5 cca2d1d73c1308547711a8e644a5a9c1
SHA1 f25dce8c53ff7b7aa766e1b5c6b4c32fb2197781
SHA512 81554c74da12fd3d50d6f0ff77163df6cf681f40674e2cde97b1fbe59aefecff7885fec2b5e2180673fc43a82b0d8ecd87c9cb3654395471e40f8208edb2f6cc
SSDEEP 96:nKkuA1IJwpvWMoiVmdeHBrzH0UWQyV+VDCziEwb:nKkzuJGWMXR0ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 2a162c61a87b308b42a18f79264ced4a62ec7aefbf4efc82c506107f2cdc822f
MD5 df0e8bc5b4a5e0697f8b63a3f8580fdd
SHA1 19147d194fb571a01c629ee5060ad6b66edd9b70
SHA512 affde32de4fb19665aa9d906f202fc58e55b5deaf5f13e567424ec9c1fce0c0ca82a2c7212cfe62d3325d85e2137fd488693ae653c0a0461f223a6a9110494d3
SSDEEP 96:nKklA1IJwpvWMoiVmdeEM3D2BrzH0UWQyV+VDCAiEwb:nKkeuJGWMz3D2R0rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8d2acbb3d8261433b7fd3094134c81d530fc978824c97bd22ae22a41e83c00c7
MD5 6603c28613e889a9c4ec25e6d4f6a8ba
SHA1 baddf72a7e18a0a27a003172260620f7a9b4537d
SHA512 5aa23f93013a91aa93a9c3618f37f04db8797ca37d84ef3c615a20dbd6a9b94e596afdc5150063fd7338b7fca2770a761a630f053b0f528ce5491ba504a488fd
SSDEEP 96:nKklA1IUwpvWMoiVmdeVKVM373g2BrQH0UWQyV+VD7AiEwb:nKkeuUGWMEG373g220rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 7234b12d8a043c4e0df8fbaa479dc689d5dc1999abd4c69d89a97b059abe9750
MD5 aaa9bb341807967e0792933c9ae89d27
SHA1 49c0a5ad19c332d70b9b01b135b0ca9415abee82
SHA512 5c7f3d5a47d0e8c4c02424c5416eab4775424f6e70259a44a64cfec569c79b746b52c5fac601904bb05e2876c916a7df4afc95cb64416e686c72acced709e89d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupsHBe2RUhMj2J3z2OMDCRHb:A9iIxuERzA83h09RZxYsHVnyJaOMWRHb
MD5 SHA1 SHA512 SSDEEP

Submit Download