fca0469b0a06b5c479ea0b6326949165da848e1f2c185f44677238c3bec5efcd

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 08:07

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
910f4d9b64782ca27198c9ac5cc944ee_JaffaCakes118.html
Size 90KB
Sample240603-j1cb1agg31
SHA256 fca0469b0a06b5c479ea0b6326949165da848e1f2c185f44677238c3bec5efcd
MD5 910f4d9b64782ca27198c9ac5cc944ee
SHA1 841711cfc73ad32da8b774795b228406f4454956
SHA512 b96d25b110aed9493f27c661601581ef56c61e83698d4a95abd395689473b77fb583ea27583adc0de3f6408391b76ce585766df90963381cd5b3dd9dfa1c8aa7
SSDEEP 768:olkDgOriWNcaSoBgG0kTL/A1Ofzt/aj9cVy1YC4esuBiPYCBpGmbuUCXKG7H4h/6:gaCkTcOfZ/jCKgmkMh/VntM/1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3092	msedge.exe
3092	msedge.exe
1908	msedge.exe
1908	msedge.exe
2576	identity_helper.exe
2576	identity_helper.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe
1696	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe
1908	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1908 wrote to memory of 3224	1908	msedge.exe	82
PID 1908 wrote to memory of 3224	1908	msedge.exe	82
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3684	1908	msedge.exe	83
PID 1908 wrote to memory of 3092	1908	msedge.exe	84
PID 1908 wrote to memory of 3092	1908	msedge.exe	84
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85
PID 1908 wrote to memory of 1300	1908	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\910f4d9b64782ca27198c9ac5cc944ee_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffef94246f8,0x7ffef9424708,0x7ffef9424718
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2044 /prefetch:2
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:1300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4760 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4480 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,14898808639045545099,8117834303197358241,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5856 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2864

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:848

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

61bda420-b900-46dd-835c-9d6bd58d5aa4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\61bda420-b900-46dd-835c-9d6bd58d5aa4.tmp
Size 11KB
SHA256 47430cb16b23232321269578bea6e53137ce59a7782c2ffc7fd463e321d7a733
MD5 bbad3c6f42559aa8f6caf1b69d6dbbb3
SHA1 b1aea03d8da6e2f3da124277795c21053729fc97
SHA512 301fa50a502db2c7683fb4fd9d1d2216b3f6d46d13db568755faef137d54274931f9ebeefbab5f1092bfc7932e5c8aed2067acbaa8e3effe2dfda2fe65710415
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup2vxe2RU1myg3z2OMDCRHqv:A9iIxuERzA83h09RZxYYlCgaOMWRHqlh
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618
MD5 SHA1 SHA512

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 0c6d8482285374e7627f330048b6076bd6026ad6c1c2cbf283e0b113ba92a26e
MD5 758ed77d48af7036a39ec2b71dd74e76
SHA1 1d6495ba645ff4064a907c77df846885c22b9964
SHA512 56aa16277bc0a7c923929c17deba89ef6ef3a174e2f285187683554b4f085e262670b2ba9d10421ee016957b0af5374baae516640472139105ecca45167c94e7
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 a2d35c3c5c5da7920418060967c4effe6720465f3170664202db94d978cb479a
MD5 a7dfc8bd712623ab49513dd92f13b1e2
SHA1 08bad362f363106b82e4c7655deccb549ffef714
SHA512 f7469d23be885dacf967aebf55e25bfc26af9cd965fa9a8a60923556424bbeb6084bd9b262d8a29de98b3582b695dd7297408c563bb7bd0b96a981384020073d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5964c858cc689c775a13a677ec10e5e0b6cd1a4439ff196b83271c1bead54f9e
MD5 dc39f80c63b6e1f8b7afc070c6563085
SHA1 31e463c7665bcf205c9a30c218be6cabe4c40889
SHA512 d3f2f655303bd96dce1ad5c7b6db6478c01c1829c248fcadc8978e6423529899c25ce76291a9a4f161e81250a97f4230cb41ef960034e913ded8d6568820b96e
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 a492da5c542b3f383d371eff444802bacea1aaa805d564334f8507115dc1ae54
MD5 70797295fdd71be8399b06fcad358c53
SHA1 b0aa50e73cda7e96eafc7162410401eb883709bd
SHA512 bd9fa35087f2ce1067e7442030dca941c65a4904dc34854b38f439fb70147ef97f41e9918a332150180106105e76b0356d723e484fae4f705577e3e908aaeb78
SSDEEP 96:nSHkFiZ1Ej0wpvWMoiVmdeH/zb/+UWQyV+VDCziEwb:n2keKQGWMXn+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d8431892fff298c4358f63ea5a63859929f3ff1c7477277edf57de6d7b7fd7a4
MD5 0441029f8520325718e4ddf2681940d9
SHA1 1acc9dc61bc7c59c2e4c052bd9599b79aa44df3b
SHA512 6d0ccd2248997de7688c1caf5c7aae9062fbc75b63942c839802cb6d11ae19b6ee48ed74dfb51050805726b1baeca279f3996246911052c2c1514cdacf4f8bb9
SSDEEP 96:nSHkgiZ1Ez0wpvWMoiVmdej8g6c8RqB2/zb/+UWQyV+VDCAiEwb:n2kVKAGWMz8g6c8RqB2n+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0f98bb0c2ef8b0c9828694986c4756a7413035326f2c3cbd017538e8516c1d02
MD5 50702e297d90b2b832ac3503aeda74e2
SHA1 de4624013df9b2d8eaa666ff47b7b7265bbe7c7a
SHA512 f56f7be12da35e0eddd71811116ee7f2e58f769b58a376d1d9e4acf39c9a9c347acd769834390a39fd71f3804498d34476f6c9cf8841eeb09dfeef46f19862f3
SSDEEP 96:nSHkgiZ1Ez0wpvWMoiVmdej8g6c8RqB2/ub/+UWQyV+VD7AiEwb:n2kVKAGWMz8g6c8RqB2c+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ed811f0f0106bb227f9837a2ef4275d311d1064c072f25a0eaf31254501d5342
MD5 b38a3e901f8612bee4cd1e31572ce9a2
SHA1 49288944dd4bafd47a02247cc7396949677455aa
SHA512 34de081585df1379c8f88ce86c6f36983ba5a356fec3fcc0b84871c72796319f68ef72a29339f0ef677df4bec08237217014300ce793a8053c7ca1c411547f52
SSDEEP 96:nSHkgiZ1Az0wpvWMoiVmdej8g6c8RqB2/ub/+UWQyV+VD7AiEwb:n2kVaAGWMz8g6c8RqB2c+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download