7fc78735cabc7a50a50f4ac64442de707b7a552c6311b5569a780580dad94a85

Analysis

max time kernel
144s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8d3007d7d5e0c42375e3d80377c62b98_JaffaCakes118.html
Size 127KB
Sample240602-hdrbzadh7v
SHA256 7fc78735cabc7a50a50f4ac64442de707b7a552c6311b5569a780580dad94a85
MD5 8d3007d7d5e0c42375e3d80377c62b98
SHA1 902043edfdffd13897302de1b23c2c1871a04147
SHA512 e4666a5083bbf30f79d3b6fa4e7914ff4710ecbf03d6a27ba20c0158528853f26080326330eb034b5611fc9b880a50d9bddf281a3a92cc4ec77eb142eb228782
SSDEEP 1536:WkclD0sAdkcwSPGtLbJk8ytLgwp8B1c6cVGY:WkclAsAdkTSPobJZyr8Dc6cVGY
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4828	msedge.exe
4828	msedge.exe
2152	msedge.exe
2152	msedge.exe
5796	msedge.exe
5796	msedge.exe
5796	msedge.exe
5796	msedge.exe
5964	identity_helper.exe
5964	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe
2152	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2152 wrote to memory of 2344	2152	msedge.exe	83
PID 2152 wrote to memory of 2344	2152	msedge.exe	83
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 1332	2152	msedge.exe	84
PID 2152 wrote to memory of 4828	2152	msedge.exe	85
PID 2152 wrote to memory of 4828	2152	msedge.exe	85
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86
PID 2152 wrote to memory of 4432	2152	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8d3007d7d5e0c42375e3d80377c62b98_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe6b4b46f8,0x7ffe6b4b4708,0x7ffe6b4b4718
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2744 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:1764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4904 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5796
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1264 /prefetch:8
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:2780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:2972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,12708007352299654812,454699592661542220,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:1940

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 576B
SHA256 2e4763eaabeb3626aa16b7c685b6108272a24ee5c53a4478a04ee124decce4ba
MD5 4848572825f9ae9046436bc7ae7f1ea4
SHA1 fc650da7e8b6ad9f2c65515790c2d4ea9513bd58
SHA512 8315efbf3741db1aced5cac9e860cdd1691d3941410941e86c6ad8043e577627a46d8100e336002bc4340f9e600884ec825ddab09384c7a622fa08bfd9cd79c4
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 94e969127d3aa94cb4750ca96a18ded73cea1ce9b831b47328051e7426f312f4
MD5 d244984740daacb93b466bd18d9478a3
SHA1 753469b838b94a0560b2c379103b2ee9d58ec3e9
SHA512 5b7d9e86ed06fe3341212a94c1c022a8bf8a97ddbdfe8e1c23bd684052ae4ce030b2a1b6f1bc97c9448f84c44db688db24ac725563dd58a3568467034befce02
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 56d4967387eb7bac1f9ef1222d8ce26553a6675c4d2622cbb28763852c15901e
MD5 6178c6a2a92ae824b2ce00bcb7211f31
SHA1 16de4ec2cb7716f0cb9354041dede84215fddc12
SHA512 9b7165aae8147b0a4543d342e20b0cee7faaf5df3fdb1acc2caa96a00d38f6cd4d85d7d86f5833c71eb13bc80ac7d5a97eaa574d557d90236cb7b82ebb2eba1d
SSDEEP 96:nUkRL1R8juwpvWMoiVmdeHvSS4+UWQyV+VDCziEwb:nUkd/8juGWMXu+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 63e1324ac29c832a553c4fafe06ae7a659b8b8a2edb7a925e548818537b10a06
MD5 ad0a6873f26dc0ac453140d3ee679a2e
SHA1 cadb5c43d5b7deaddf11bbece77f9595d43861e3
SHA512 ba153bc49a3a0691b9c21fb81b42a9c8760af7721e96bf7ce0df6ab4038874c14e39044cb8e6096f5ca9a80f106caf796be0d49a041f9ec045ed5be95b7c8069
SSDEEP 96:nUk0L1RSojuwpvWMoiVmde+PjOzm8GYKG2vSel4+UWQyV+VD7AiEwb:nUky/SojuGWMuPjOzm6KG2w+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

e0c2139c-aca4-4032-8383-b1b493b1b378.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\e0c2139c-aca4-4032-8383-b1b493b1b378.tmp
Size 7KB
SHA256 3e5a39bc149508561e340b5bfaa1feee0d0f1265572678bcf1ba64063e565aa1
MD5 f3dd7bc5aea8afd704aa905320586285
SHA1 275e54d7e41f11277f7026a13cbf49ef6818ec4b
SHA512 56492028a1823d9fa18a7f4f2b916875fcb1fb3c60480483929d3da543b7cefe78235d7b1939098e29d35e2dd787e9ea7d21dc6f1e548871923ab98393527c1e
SSDEEP 96:nUk8L1RSojuwpvWMoiVmde+PjOzm8GYKG2vSS4+UWQyV+VDCAiEwb:nUkK/SojuGWMuPjOzm6KG2u+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 e817c9d00b66b652db55bc31d01b33758fc34ec1de7b762edb2b237331176890
MD5 92911905aa27c605b33c2aca811d443d
SHA1 7dcd300dc72c8ea40d523147e45f1dbc298dc023
SHA512 5169c1e467a78f81b4bf563d6059cbd4826c6e9f30c5bf13c28eae47336e5182005260abec517307ec235e2bdd7f030bf71e13eaaab1d6c549b862772515f835
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupVke2RUGORun3z2OMDCRHqr:A9iIxuERzA83h09RZxYVKnZnaOMWRHqr
MD5 SHA1 SHA512 SSDEEP

Submit Download