a73e14e5723ea2dbca69ed9813bd6ec49979f1784f0ffc9075146958d426ddfb

Analysis

max time kernel
136s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
29/05/2024, 15:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
812bc9fb05f384568986e5d4df2d1ef5_JaffaCakes118.html
Size 180KB
Sample240529-sna3vaac2w
SHA256 a73e14e5723ea2dbca69ed9813bd6ec49979f1784f0ffc9075146958d426ddfb
MD5 812bc9fb05f384568986e5d4df2d1ef5
SHA1 46ed6d0af54505eb9dd286f9589659f470d934d5
SHA512 049e2004a4d778f29a136a2a0043bbccadf822551a7262ef1e17c052f8d750ded34235889939e5635ac6bebe06bfa3fa402d95f529bf5dbaa04182e6db412cda
SSDEEP 3072:1XI7U8A0R335MHI0viE4CHXLz+dfMu2lAhrBPgKMtqSg:RT5E5kQBP1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2416	msedge.exe
2416	msedge.exe
1580	msedge.exe
1580	msedge.exe
744	identity_helper.exe
744	identity_helper.exe
3148	msedge.exe
3148	msedge.exe
3148	msedge.exe
3148	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe
1580	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1580 wrote to memory of 2644	1580	msedge.exe	86
PID 1580 wrote to memory of 2644	1580	msedge.exe	86
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 3804	1580	msedge.exe	87
PID 1580 wrote to memory of 2416	1580	msedge.exe	88
PID 1580 wrote to memory of 2416	1580	msedge.exe	88
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89
PID 1580 wrote to memory of 372	1580	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\812bc9fb05f384568986e5d4df2d1ef5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8f44046f8,0x7ff8f4404708,0x7ff8f4404718
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:3828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4916 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5480 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5740 /prefetch:1
  2⤵
  PID:3116
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6548 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6272 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4532 /prefetch:1
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=180 /prefetch:1
  2⤵
  PID:3388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,14552963213277581541,1414622915593123652,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6860 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3148

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3116

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4564

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 02655c0c3b9e25fd262b2d6a1e792f26bb9243ddf68e214701a57560187e5345
MD5 7bdd50b5ad84cec044d8b851fed48092
SHA1 e40b5c97080f734446335a2598fc6cb65068f493
SHA512 79bbe2fe411a36217b1bf971fab7647d84c2a4e3212f654c294821d87da304040ed93c39de8021fec75ce10be0384b41226468ac20f848968a950984f700930b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 a362b9bc43254e0f9aa29282442bb11e4ac4f27074c4fe518c9da93a5a9c8457
MD5 463479d5d622db52b436ea155d8d8e33
SHA1 1a2926e204a203ca40a096e01ebe7a951b7561df
SHA512 0c70fe1f02e2eaed826bb2720f28ab8107b545b5450d31cb3d92c008716c5aff391e61ea508d2114e444aec81def94c00ec2b4395c68b1489b90eff95f955611
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 bac6e5ac829790d45db065a74f3e3119287945e1027a333a3382541e32ddc335
MD5 ec4f7376a489cd25986ce49ac738c393
SHA1 22c4848329cfd1170a4f51138765bb45f3bd98e9
SHA512 2d877cfb257841489e2ad253e95cd3e782ea9a7d06086bdf1a543253ac082fa43d7e260050a6b79ae931e5bebfe312111f0fdddd81947aa1c198d16a10f43cf9
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 2d7cc7b3a86d80ae4eca8a8eee73a148eedc0a9451778334450c371134f18de9
MD5 14711a962344c69a15d0e494ea2f4f12
SHA1 d768acb910a7fa821fa95957fad4686b0a3e178f
SHA512 c8ae6c4ce42a1ceeb2797747cda217a467347ecdfa03097a364a6d0d0d83fab01da415a4e95c18c90ba059132ed2df52e27eca384fdeacb42cc9730d453e0570
SSDEEP 96:nwkvK13edjBwpvWMoiVmde04ej4wS4JxqDm+T2BrzDUWQyV+VDCAiEwb:nwkyhCjBGWMlej4wLJxqDm+T2lrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 b2c14b004c92fa5abde4bdaa05eb6ee8d627684be26e5eafcd6d7988abfb8efc
MD5 8c521a2f1887e75005f126d7ce1aaef7
SHA1 c007fc5d0d827d2c19b8760da84504bf6e481ea8
SHA512 75081d6fa2873ce1d4793836e91a2fd8466f42a70408d20e2236ce101a87686ebf480b73c6dab37337c6ac3b6e867309f531f37ef528ddbdbdd8e4bea52a8873
SSDEEP 96:nwkkK13edjBwpvWMoiVmdeHBrzDUWQyV+VDCziEwb:nwkzhCjBGWMXlro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 fa0a07fc4afcd0251b8fdc784aa4e9992d55aaa8cb8fdab794de7fddb269fe9a
MD5 f1039af7629e2e0190a63405f1d1e0ca
SHA1 4dda000460c18c45b14590d5bf330bea57c634a2
SHA512 5c0cc452b5aaec1031fe764d014ac33cb11100998e7c73ef19a4b556fc2aa88ca5c3365d24c778cfe343324d89f66d351a9c1dfd25ab0cac75231198aa746f0c
SSDEEP 96:nwkvK13edjAwpvWMoiVmde04ej4wS4JxqDm+T2BrzDUWQyV+VDCAiEwb:nwkyhCjAGWMlej4wLJxqDm+T2lrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 03bcffa111dfaf9ec0af604e96c5aba96f5506dcbd79e53838a663fe3a35244b
MD5 c1f15cc27eeb513f30a3b8cfea170b67
SHA1 e88d6328af9a8b4c1bf5a75a5b83daf9ddcc02df
SHA512 da78e2a45554f5e59cdadae72c6edc86b3e8a105fb95d791130bacc34326778cf503aaaae77196493852514578dfdca598c8f0f9a6fb2d2cd72030493c0c3ee1
SSDEEP 96:nwkTK13edjAwpvWMoiVmde04ej4wS4JxqDm+T2BrxDUWQyV+VD7AiEwb:nwkGhCjAGWMlej4wLJxqDm+T2jrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 d92c8eb57ff10c529edf3037f3480a7f201279e1560303fb76fb953ebc909f97
MD5 16c043932f147384518e5c327f8b6793
SHA1 09f3e491212b887d58eb56c708994216e1fac34b
SHA512 75b738a8dd5f96ac56cfe15cdba78dae6a8283c7b5010b1e19e03475d3acd83521b052cdeb013f6ccd965afb214422ab2e942afd4b3c7b5f00dd37057cee6a75
SSDEEP 96:nwkTK13ed/AwpvWMoiVmde04ej4wS4JxqDm+T2BrxDUWQyV+VD7AiEwb:nwkGhC/AGWMlej4wLJxqDm+T2jrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a681b0e83e09246745008fd4862367b332b708a2bc6d649f8ad1e8b281ccd3da
MD5 af423afa0ad8c287113c377fcfa41aff
SHA1 e89a1d38f8d08a3a144f631e89b28ceaa14924f7
SHA512 8103457875f5c7735c8ba50db12ac002efca36699f643ed9118d55b7470f2e127e80da42e0d6f0b89c060735f06dc782eb5330cf00b9908061581131eb140ed9
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupRH+ze2RUPMC2T3z2OMDCRu:A9iIxuERzA83h09RZxYRH+j1dTaOMWRu
MD5 SHA1 SHA512 SSDEEP

Submit Download