23c10bfd70cbda6052317e4613dbcb42ec162d129c8a094e8e296cb092c9b58e

Analysis

max time kernel
145s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
30/05/2024, 04:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
82fec1bd666c79c3558397029485c939_JaffaCakes118.html
Size 18KB
Sample240530-es5w5afa82
SHA256 23c10bfd70cbda6052317e4613dbcb42ec162d129c8a094e8e296cb092c9b58e
MD5 82fec1bd666c79c3558397029485c939
SHA1 3a123d6319cc41a26ad3977927fcb099ee70c0d5
SHA512 7cda0e901f3c9142a265eb1c3ef388e01f8377a9622bcd2d92e7ff8ebcb7e6edb557770a24500d0de7be6805a902133d0c0d2639c889159a8a52468a17d6e02a
SSDEEP 384:sr+qKiQGRpxY3p98KcSDw93iM93Bhd93Eg7L93i37Y:q+qK0pWUKnJSOY
MD5 SHA1 SHA512 SSDEEP

Score

4^/10

phishing

Malware Config

Signatures

Detected phishing page
phishing

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2748	msedge.exe
2748	msedge.exe
2332	msedge.exe
2332	msedge.exe
3244	identity_helper.exe
3244	identity_helper.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe
1752	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 4136	2332	msedge.exe	82
PID 2332 wrote to memory of 4136	2332	msedge.exe	82
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2516	2332	msedge.exe	83
PID 2332 wrote to memory of 2748	2332	msedge.exe	84
PID 2332 wrote to memory of 2748	2332	msedge.exe	84
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85
PID 2332 wrote to memory of 2900	2332	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\82fec1bd666c79c3558397029485c939_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9a1dd46f8,0x7ff9a1dd4708,0x7ff9a1dd4718
  2⤵
  PID:4136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2052 /prefetch:2
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2884 /prefetch:8
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5476 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:4660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:2180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3580 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:4948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5844 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4964 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5752 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2004,15737709183226344733,9287553414062499929,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5108 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1752

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4620

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
Size 19KB
SHA256 331e32feb775dde4766c2f5c99015c12e9b1dc994d175f0767e83402fffcbb96
MD5 dcab45982ef7837a81dec98c295f1d95
SHA1 3ea615c797dae739fbda2aa33f547ec725eff412
SHA512 307807d41a0ae7bf9c3d6b22f903e711bdaa741c5049d74a70a8aa085ee133b3bc3a5762040c80f991bed98052a9f78b6043c33c4c62c539e7c36e736f3a1a57
SSDEEP 384:VHdfg43PbV7joWxGbnBp6RVg2J2f4wYOa/V/3WkMNkGlJpjXJB7tqoxEXnq:V9flfXGbBp8GRf4w5KBGMizJ98o4q
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 744B
SHA256 469c01db2a5776a1a612edc1577293f160aade6a8a574b196d959bab3aaf3dd8
MD5 dbe636519c9ac6edbb28444f89c8239c
SHA1 2fef4010cf179f4121b23cc2159080c4f5ab11c7
SHA512 bb4a30246caa8edee6ce0e89428c2ec7311b752f16f822d783555b09ea09ab67d4f0b4144286577162521592f6c0b5feeae6bbcbd6cfc49c71e52ef842e84a40
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 17be41705f237404e7580f620ba1a7889b4ea2f71db1f4547d6c4445b9583b1e
MD5 12189f0ee3bb70b4c87c3890f636fd74
SHA1 7430525179f169c2d328c1ab5d6af34416d2beca
SHA512 72395024da08ecc0943fad99e2b9ede0cabf48ea16dee1273dbd65cab9e2d6e63d1f59488cf12292ea5176546089cb6131c10aec5bf246f2ff01a6ade14038d2
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 6067a316e890444d69e79647c8145dbfd52500dd563f66729f62796ba0e814f0
MD5 ed5a363af1129f25e7afc88756825c80
SHA1 245e702c976b3457c5f81f90e56043f50ba4eb64
SHA512 a9a6c779bd53f6617f097bd0b1f5cdd906d4927f3a2c6442297395ec40305caa1980967b0c41c7ce8c8b63e8b5daec7d608775c26fe058335298ab3b9392a307
SSDEEP 96:nMkMl19D9wpvWMoiVmdeHpRQe05UWQyV+VDCziEwb:nMkMfD9GWMXp/05ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 029b43497c9e8c2177cd9ccfc2b4a258470ee64f128dd90f552658253f262222
MD5 3e947d3eda2683851ade3adbbc5dba31
SHA1 60a2053b27cd41bd6393281565651df54ac296aa
SHA512 6d73ec3a1275071f7c592bb1f8a21016a3a4a065f00142615ce3710a29fb6ce134fcf7340967c0fa6fcbcfaee8f801484d61b33b98c57aca693dae248a8b57d7
SSDEEP 96:nMkel19z9wpvWMoiVmdeId0yzEq4IbqEVlVK8GTdQ2pRQe05UWQyV+VD7AiEwb:nMkmfz9GWMK0yYjkqEVlVK1dQ2p/05rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 ceeb3ea88b9c2605b5b11e932a46be7571e964c8ed2ecd12076e128a342b6d81
MD5 aa6130a59187b06c6b09ae1572ef0a0d
SHA1 0b6718a5abe4eeaac7f57a7038a47ae20010a766
SHA512 7238afa858f0bce89e2b297a7df8136f37404da90d05a8c4b8c4357cbf6bdcb7c226c72b3bc8a60ee9596cc5f381cc5dc0336877de3d64f3b6b1608094cc94fc
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuplCee2RUrqTd3z2OMDCRHq3:A9iIxuERzA83h09RZxY8AvdaOMWRHqll
MD5 SHA1 SHA512 SSDEEP

Submit Download