2791e8881974cd8753d9585d4faea3ad59b87be3bef5c72db20c2e0836d7a238

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 01:26

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
82a55ea85499556acd3f4f561c4fa428_JaffaCakes118.html
Size 175KB
Sample240530-bt2djsad83
SHA256 2791e8881974cd8753d9585d4faea3ad59b87be3bef5c72db20c2e0836d7a238
MD5 82a55ea85499556acd3f4f561c4fa428
SHA1 6dcfd771c639cdd89140541ff4ceb5e1335b337c
SHA512 15a519a89601af4f25dd4d32e4b536aa875e5fd42dc380d20f5a0c98252d40ba43d8952fa3e0836e8d40e659c49598ba5367147cbf14035c08e98cee886f2741
SSDEEP 1536:Sqtz8hd8Wu8pI8Cd8hd8dQg0H//3oS32GNkFHYfBCJish+aeTH+WK/Lf1/hmnVSV:SOoT32/FWBCJiFm
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4188	msedge.exe
4188	msedge.exe
2124	msedge.exe
2124	msedge.exe
3224	identity_helper.exe
3224	identity_helper.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe
1072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe
2124	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2124 wrote to memory of 1436	2124	msedge.exe	85
PID 2124 wrote to memory of 1436	2124	msedge.exe	85
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 3808	2124	msedge.exe	86
PID 2124 wrote to memory of 4188	2124	msedge.exe	87
PID 2124 wrote to memory of 4188	2124	msedge.exe	87
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88
PID 2124 wrote to memory of 836	2124	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\82a55ea85499556acd3f4f561c4fa428_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd6b7d46f8,0x7ffd6b7d4708,0x7ffd6b7d4718
  2⤵
  PID:1436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3096 /prefetch:1
  2⤵
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:2632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:1768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5200 /prefetch:1
  2⤵
  PID:1820
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4656 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,11298673438580481137,15688490623335260222,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4652 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2172

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1688

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455
MD5 56641592f6e69f5f5fb06f2319384490
SHA1 6a86be42e2c6d26b7830ad9f4e2627995fd91069
SHA512 c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a
MD5 612a6c4247ef652299b376221c984213
SHA1 d306f3b16bde39708aa862aee372345feb559750
SHA512 34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 1f206b44dcae6c1f51f60de3e03b530b01ac28c11647a6abf8667e93c356fa3f
MD5 ef269febf6971349f37eebbe4ae6ed1f
SHA1 ede4c4c2779880519afed88d23f11712ff72da0e
SHA512 7fa8fcb49843a8e467c18c97dec4c536f4f0a08a6a3470a35877e1354cc24e0bffeaf1c0db04efe2b106ef4cd85c1ab9a1a3bc54919fe54b555c12f1feb44059
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 caf9e10ce81ce0e3aa46d5042cd4b6a06864a4b60eed08971c5a3ea1ad20f72a
MD5 c0ab532c7c88d4af58731ac5c91d23e6
SHA1 15dbe260d08940a911cfb539ab2d829049672a48
SHA512 2aebc3cf54202ec901157ba89c8f97e2f0e9ca57312b05d03ea82e1d28757780ac58719eb71701ce1c3b593686246a199d90465bdd7bf6dda726cf6db2feb47c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 9783f2db445b3e5cc2068e345a42a03cf4e200138fe9142f2da38003669a5c9b
MD5 0409246a5fccbb9eff404ffe6e393ebb
SHA1 2453335c701fd67937906643e9f86b0327aa89b4
SHA512 a25d36db553952c97c9f2cdd9077a657c139b9c636ca25fd2d4b8255f83f99686a1194129bda1b5c8f576bc93c8cf9a476cf68a97ca4b2fc214d83a478df038d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 b0e1243a41981e8291ae1a7f71e6ca7a6cb14444cf86f67e7422084d7e458be6
MD5 1ca2778b2d72399ac25e547a3b9f2dcc
SHA1 6945e6a7244bfecc6f1328d32e0ecec9033d17c5
SHA512 08d15080efe33ad1b642fb2b52c1ec543f88065c4e8c4210322e7e070e598a7345abbc13481bbe0f826acd0b3e84fd8d552af3725827b739625c0c2dfa6eaa81
SSDEEP 96:nehkfu61Yn2wpvWMoiVmdeHk4T86UWQyV+VDCziEwb:n2kp6n2GWMX3ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 b8892d5d7b01e70f05d2309db4a0e89da6ad667eead11281db920e7a162f4910
MD5 88fbd9c56ae1a00ccb8099b1b52573c8
SHA1 90d4f6e45ab62c58367b2b2487dc297de61b6a29
SHA512 c696ff88add31112793accb805f23299b484929524d2eab0ea80add370707b3a3e993cd51b9273efe667e6f0e54e3e0f36190ecb348b376038fea4fb7c7813b0
SSDEEP 96:nehkWu61Yu2wpvWMoiVmdeccVrKReBzEE8b3ErEnECqEMQ6Yt2k4T86UWQyV+VDp:n2kG6u2GWMdcEYpDErCEFpXk23rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 1c1b27fb7b2c28e6aef264fb997ce0e11cf6838e3a2741b3ea0aa44b242c83c9
MD5 790985e42fe5c5e09b9bc2656250a276
SHA1 52ad1a51642edc9a8299a0675fc199ff06c6bb3f
SHA512 dbe779987009cccbe3b2c2d2068aaaa30d4eacf5354c7fadb4ce9acb6a7764f66cb3d7c6c1c85d658b8e2156b1e236e1f9075b8af334a8b95ba984c31ef9904c
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupkle2RUR0y4VOe3z2OMDCRl:A9iIxuERzA83h09RZxY41OeaOMWRHql4
MD5 SHA1 SHA512 SSDEEP

Submit Download