1a30149193aeb80d527715f0f5a4b05563a4446477d1f6ec8701a8e7339eea6a

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
82f81ec953eef9d527f8134ad7217c19_JaffaCakes118.html
Size 175KB
Sample240530-ejgsyadf61
SHA256 1a30149193aeb80d527715f0f5a4b05563a4446477d1f6ec8701a8e7339eea6a
MD5 82f81ec953eef9d527f8134ad7217c19
SHA1 46e8be35de41be9fabf94fd761111557960814aa
SHA512 e9389aa400470a38a38be9fd6ff470ef71e55c07e035952062326146802c40e18aaf48295e470db2d37d6d9371c6264ba7dcf16f3c9478c9fb9570fd99f589a5
SSDEEP 1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3OGNkFJYfBCJiZOJ+aeTH+WK/Lf1/hpnV+:S9CT3O/FsBCJi5B
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
1624	msedge.exe
1624	msedge.exe
4484	identity_helper.exe
4484	identity_helper.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe
1520	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe
1624	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1624 wrote to memory of 3036	1624	msedge.exe	83
PID 1624 wrote to memory of 3036	1624	msedge.exe	83
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 3192	1624	msedge.exe	84
PID 1624 wrote to memory of 928	1624	msedge.exe	85
PID 1624 wrote to memory of 928	1624	msedge.exe	85
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86
PID 1624 wrote to memory of 4032	1624	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\82f81ec953eef9d527f8134ad7217c19_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa80746f8,0x7fffa8074708,0x7fffa8074718
  2⤵
  PID:3036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5056 /prefetch:1
  2⤵
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5012 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4712 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:5288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:5296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,2617320827633841246,16948534752196967518,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1720 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1520

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1428

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3004

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2316

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 98cb862fbc4981dddec72c3b3283f5a2e2051c71f84072fb89694479c0443bc0
MD5 45416a8e609efdac7f3e4025157b3dd4
SHA1 82706b28ba9a1af577b9eae3b6e8ad69f3f45c91
SHA512 1f819aa58f2391f86ed8ce96327ae3665f9c9a6270bb960e961ec691910c6219a2aef7af403726130f8952d4f3b9d240055ba20d119487e49809d0d08886bcae
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 7abbbeefeea54bf3518d6477358f5f1dcfbc6b7657e7ae4194a6c9c3f0a6ccac
MD5 fe532c860fdcff7933e1c901cc6831f9
SHA1 0d438fab5a64a2a7a5fef72b219338cd4f471bf9
SHA512 07b77ac3a3e20cdb76c5f6f86e649007e2fd4d7d43f3af7bdb777e32e75142e52a0ace000cc28c2ad0625c2371a9bd3750a0f7ddb3d94f0e262ccf2ba2f300d7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 525a7a148550d3a8404ab4c32c60de1339ba16bc977450b4b085f203ff34f01e
MD5 0bbb492287f5ee0613a5f2f49163e964
SHA1 6a3323d6ad7a4b2a3e50f658d604faee3363b02f
SHA512 a5a762d1721e5c2cc1eebc6495538db59d9dd1ca6f08d75ea9a8d30a0603b985b4dcfad758f01454747035ca8507dcaaa4bf5caced09974428664ace39a0ba6f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 154ebbe4b40134016ea0736c176ec0ce3a382bca0e8efea81ca968012be0cbdf
MD5 17df43f228616c3f010e3036fa643131
SHA1 940c388c90f4037c6e06cf4f3665f6a52e6a49fe
SHA512 812bbc288099b0206d5b2fc9bec4b9f22e0ef237a44f0a76b45102e88e2d68b1d78bf859c18599d009aa9d8b025c37afa1f0a77dc6f74dea7fe9390d4aa4218d
SSDEEP 96:nqkxc1oJamwpvWMoiVmdeHBrzcUWQyV+VDCziEwb:nqki2JamGWMXKro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e2e8034672102bc4f77c4fff3a0f3b73710a964eb53cebcfe8009840dbf4a1f6
MD5 9b40680ff9f60a7344722e3cc50f18d8
SHA1 9d0215ffb2feab4ed59cb138807a0289748fb62b
SHA512 9989d6121303ff3e47df52fb87e3eb8df68585b1b1bbeb30927e9fdfe90cb71c7de7635d7790d6519e6c107b2ace7eeb3228b83365d232cddaac28d0a6838276
SSDEEP 96:nqkcc1oJaVwpvWMoiVmdegVuRGzE7/7dErWEUHk6z2BrzcUWQyV+VD7AiEwb:nqkB2JaVGWMwIgY7/7dErWEUHk6z2Krg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 9842b92e8ffbbc55cac1eab83601a4727094c15527194f3c2a11d0c25038f715
MD5 a891e122502f4e307eaddda8cb1c9cde
SHA1 133cc0277f12354008cd4af5850a1615036c6f42
SHA512 1adb28289b69228a732f8e1f67abf50a3661f0eb940ef6a205b8b16aa379c70e0748e903b86071b6483586d27455a3ad18334726219564c8dc164de8a8adf264
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup0HOe2RUmMj2l3z2OMDCRHo:A9iIxuERzA83h09RZxY0HQoylaOMWRHo
MD5 SHA1 SHA512 SSDEEP

Submit Download