37b7394222c6fad8f8c7a2e5d69ae443b068795be50bd055d3bda0fd59b86fc2

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 22:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8fa23c281923ca081d9dcc2829e2fe89_JaffaCakes118.html
Size 175KB
Sample240602-2aa1cshb5x
SHA256 37b7394222c6fad8f8c7a2e5d69ae443b068795be50bd055d3bda0fd59b86fc2
MD5 8fa23c281923ca081d9dcc2829e2fe89
SHA1 ce49f8ab3eb10dfe04df6717b4ce286671341f1a
SHA512 9b0b73aab1ea0af07b3027bfe1d6d6775d05a4190412d28c64d000acac7b9ad9bad3ded9a5d60b83e4d904ba58c92b0a930a3e62260b6ae5b7123271bbc22d21
SSDEEP 1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3SGNkFHYfBCJiZm+aeTH+WK/Lf1/hpnVSV:S9CT3S/FWBCJiVB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3024	msedge.exe
3024	msedge.exe
1280	msedge.exe
1280	msedge.exe
400	identity_helper.exe
400	identity_helper.exe
2912	msedge.exe
2912	msedge.exe
2912	msedge.exe
2912	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe
1280	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1280 wrote to memory of 3620	1280	msedge.exe	83
PID 1280 wrote to memory of 3620	1280	msedge.exe	83
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3076	1280	msedge.exe	84
PID 1280 wrote to memory of 3024	1280	msedge.exe	85
PID 1280 wrote to memory of 3024	1280	msedge.exe	85
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86
PID 1280 wrote to memory of 4988	1280	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8fa23c281923ca081d9dcc2829e2fe89_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcab8046f8,0x7ffcab804708,0x7ffcab804718
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2224 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:4796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5264 /prefetch:1
  2⤵
  PID:892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5032 /prefetch:1
  2⤵
  PID:700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3564 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:5116
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  PID:848
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5904 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5500 /prefetch:1
  2⤵
  PID:1404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,3258368869794529776,10233466138314133178,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1772 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2912

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2568

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4744

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 fe94c02133923a1a291012376088851afe908b6cddced66cf59758796b19d7f5
MD5 a75bc8803c989a69bdb4ef34ba31efa6
SHA1 83cd9f4e3b0c22f8aa840db03f36e76f2a55cb54
SHA512 b7296c19a22882f07ac5c5c8ea881d2823867572bc63b1e3b4c5c5c8ba3855df0c36d48063f0fe694a10f716a5ae67f128a3e17862c5d36d146f3ea6e380dcfc
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 25fe5a5f5f6e820a80df396022e4f85268a2e8138bf7ec68934e8274bb6dac90
MD5 e7508f9d803515d6830d869cd7cd7382
SHA1 184449928cd4a434d4cec656e985c2b4f4330318
SHA512 9d2ba821ef7708034b6b78189fdcda6f22d7d3069138c981874a9c9596e3d32a119ac34f4d8f1f8b5c9d3c3f87d89d9c807f83accb6ff6bff64e9cc5f4224f00
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 4aac3744991c1a97322d479aca1f681b1d8bb166a6d8bb3b5776726cf93b812d
MD5 ce3906949a05c5b538173f5ac6bf0a0d
SHA1 0fc6a3b85c02323781256e8bf22b01f3fe0ca257
SHA512 9bced94eeceedeb4c7616391341034be63ac6431b2a8ea720497d8c0f6a6118545212641f2c8794bd80c1fa6bc691df428d9df1d01a62a79917bbb2bcb224fa9
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 44189452c6f852f0b6cbdd020e8690d403620a3709dce59e7ea86131fc6418c5
MD5 6a18b472278af8f532e36e54136ca462
SHA1 f4b97d6028f26813bd553f282ce4083bf81ba1d9
SHA512 b681155b0461a5423a5231cd1cc6b306bf2409808af466eefc6488fea73f6db7d2e2f27ea084eb9e963565e3cc7c16d564aa6fbb1de9dbacfcb23797a3511913
SSDEEP 96:nRkR71Av0wpvWMoiVmdeH/zLycUWQyV+VDCziEwb:nRkZa8GWMXicro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 dbb4fc854cec84646d374a2edee819c422b150bb6dba04dc3e85d796bd281f3a
MD5 9c4ced0163e90a252358f156faf37171
SHA1 3679c3ffc0d4f3089cdff768389565337feebb90
SHA512 946faea80408bdcc240783d0d3892da9680fb0eb8ec4c4338b5c3412bc8728e4386eb91fb13d0cb4333ac8d0b5faa93b1f741b2ba52377dd3aaf7ffa6ea01c60
SSDEEP 96:nRk871A+0wpvWMoiVmdewVjRKzE29qRErAEgLWiUP2/zLycUWQyV+VD7AiEwb:nRk6atGWMAlMY29qRErAEgLWi02icrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b6445079d8e91da37334ede1d0ac29b490073b8fd3761f206b7deec77930d89e
MD5 4e9b2dfb0413f63c05587666c999b9c4
SHA1 8bfdbf163ee5366e355ccf9df2ffb1407b293235
SHA512 73241ce65c3beaf52d0a52a5928bd5116f26e882536037c7fb2933a7db6bcfc34aa8c8e9f41ec5494e1b255b3df7d27ca7da23b57193a49aa21f311ecfb23cad
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupuBvUqe2RUBmy63z2OMDCRo:A9iIxuERzA83h09RZxY4vO6aOMWRHqlN
MD5 SHA1 SHA512 SSDEEP

Submit Download