c90720c78d6082aed7920645a2d900ce1e741b4e60845260c02e6528f72d1ed7

Analysis

max time kernel
141s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 08:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9122474b8ba370772328bb8383727dc2_JaffaCakes118.html
Size 63KB
Sample240603-kfahcaad94
SHA256 c90720c78d6082aed7920645a2d900ce1e741b4e60845260c02e6528f72d1ed7
MD5 9122474b8ba370772328bb8383727dc2
SHA1 f31e9a743dbd64ff2b1f12f8d0620ea0c0e39293
SHA512 6de2e3ff6e5d440159ca035c92664009c5db190cf74f2cbdc5595b7763372c746307d9b162039045cff58feca7fabb58503bc050c90d3278f6f51ec96b63c35f
SSDEEP 1536:CwSjQR/I/hmZ3cowmxGXPdbqBTNYfo6cid3KSTZD6nxu:S/hmZ3cowmOF6aZ3KSTZD6nxu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4032	msedge.exe
4032	msedge.exe
1328	msedge.exe
1328	msedge.exe
1488	identity_helper.exe
1488	identity_helper.exe
5636	msedge.exe
5636	msedge.exe
5636	msedge.exe
5636	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe
1328	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1328 wrote to memory of 2788	1328	msedge.exe	83
PID 1328 wrote to memory of 2788	1328	msedge.exe	83
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 1848	1328	msedge.exe	84
PID 1328 wrote to memory of 4032	1328	msedge.exe	85
PID 1328 wrote to memory of 4032	1328	msedge.exe	85
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86
PID 1328 wrote to memory of 4568	1328	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9122474b8ba370772328bb8383727dc2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffa75c46f8,0x7fffa75c4708,0x7fffa75c4718
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2948 /prefetch:8
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5936 /prefetch:1
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:3560
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6396 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6304 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,10829897470541576698,39919237123511416,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6328 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4080

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 4864131b90a196895ab48bf0fcfb92d7decb8cde0242c5cc702f65b7f60dddae
MD5 ce1d7eb486babc8a6faeb41304f1f97d
SHA1 d205ce72c6748ca104fa2801e6925c4e8168362e
SHA512 434068a21690a5d190c34dc0ed5f0cb0b1c17a6c2127353a265d82bc23f33e6ee6fe79244e4324112ff4965286cd02e008d8642f684dd412003dfc15755cb540
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 cba03f5d5b2477236f2426b49495ecbfe01d3f8f75a0f36560822a0ddba6b8dc
MD5 8a8fd8d8f4b6fefd3fcaf5a4b9c59ae5
SHA1 abb0b6d03e86476c4ea9f3abe31c195921d976bf
SHA512 bf3d1d9185b95f19cc243c7bbcdbc838d3d48c0477318cb7ad710662ffc8af505c47e62a21c17bb4d12063bd791a9bfc70c0226af907177519ccd564e3b8cfef
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 9d6ed9de6db7f11690704f32a0d300eff6e7fd5c4e4adf2f783c6c5350fc7b84
MD5 82d610c09c7a20e2eeca47427dd940a4
SHA1 5bfce7ac0aed6096fc6afc0f1a9a1ca161ae6e24
SHA512 a92a586cd69e1cf27de606d65f1e9510ec42d330735d474f7adec7d7c3878fe826895928dc110ed79d94528bc372831a054205900b6a93eacc972ea76a3ae884
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 076442d91fe414bcc2c5861cd84922de947a97960ad8e82a6eece68659dab2a4
MD5 7e4fd3681500b2a22d21627fa4a58e2f
SHA1 30d5bf4010641beada39c4d5481a6625cca7f6fe
SHA512 3600bda4aafe449a357bc050a52bff15562bb6444fe34e65e49757299f6286d5ce4ce0a0597488814d209396b412d166cbb05b65d8fd472e0aaf4ab4ff9f0fde
SSDEEP 96:nskfL1ugjuwpvWMoiVmdeHvSSthPUWQyV+VDCziEwb:nskT4gjuGWMXjhPro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ea991b9f7d7340d0b07f7682539ec9f81c96905d0991e65dd8ba40658bacc745
MD5 1aa34b2bb878f11b5ed15afca502db11
SHA1 b3c7bd987e533f9e5e00f720fe7de01756275119
SHA512 fc3703f4254d1e1841d9a518d12460ff4d233ecdb4c5d36a33f13d79da525d606325078980ffa8b6c1067f263d1d392dd873977f5cf16614ea9a15b9837b1be0
SSDEEP 96:nskWL1ugjuwpvWMoiVmdeVJhVe9iiXfEQXh2vSSthPUWQyV+VDCAiEwb:nskM4gjuGWMlJhQ9FPEQR2jhPrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0eb47cc396441a073896cdc8b9cc8be3db5afd46e5eb847e14a831272e977dcc
MD5 e1de965e7f71ab741635ca4971984b60
SHA1 26ee455ae52d141f708d602c592fe91ffd03cf76
SHA512 52fc1b798053f42a6990ef09bfa45a8f1af47e94c2925e46eff368695d3a7fb0941d27c155ef27691ec3a52264aa06b4f8fb791fa188b67e608e1a826f0d954f
SSDEEP 96:nskWL1u/IjuwpvWMoiVmdeVJhVet9iiXfYLEQXh2vSSthPUWQyV+VDCAiEwb:nskM4/IjuGWMlJhQt9FPYLEQR2jhPrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 c62af30c2ea06c3b2d13650df03627775320f0d9c2b407c2731b7d6222110c8b
MD5 ed71be422edb819d3fd00ba4b4d48004
SHA1 cefa98490a8081c3f4b0372dd5f168f52d299884
SHA512 69e3cedf8742311cad1b4d9b64d144242cb2e5bbfec0e5744f9737b81471f8b3029d4c033c11780c2bcd7fb8035cd3228459ffd11eae01d53a7ae8964b31b91b
SSDEEP 96:nskWL1W/IjuwpvWMoiVmdeVJhVet9iiXfYLEQXh2vSGthPUWQyV+VD7AiEwb:nskMc/IjuGWMlJhQt9FPYLEQR2XhPrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 839865efd5f72dc87da2e287844eb0492b1d674160f1fff785c12cfb53ce2ae1
MD5 9a23d842bf4b234844057399052690ab
SHA1 ed6c908a66930b0e3a249eccab350ec8ab152a69
SHA512 97f94843cb9a64467b7006431eb598cecec4162147df174a8e8294c78450d2e33e919a1f2a37fcffe2f67724108fea936c08910f9272eaf386e24843016fe1bd
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57ca93.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57ca93.TMP
Size 1KB
SHA256 d638ade454bad5ffdb470a2da22c5a7d068485f07add757c4d7a4871045224f4
MD5 e44103c2666e15eb7381b51633e9d6bc
SHA1 2f6e05af0b1fee10ed100ff45f3c45f79e2e3367
SHA512 387215cdf540d428bdc1f9b395c442b5e3a5c3b5a5f6f4b676cd56591791676eb1d77ecb09638686c68af147963d91a2bb3e699d95a79e6097af028727ea8466
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f449ea43c8f41a369ad9890667d2722c8be077a35e40385b312abf7571d427fa
MD5 0c6b182a6270554bfe1661bd83439273
SHA1 0eafd46a59a76a7723405453b0925d46e0da8b63
SHA512 cbce4edfbc39e1295452b94b3bbea9dc3696d4ae9934d0106277b94160a94ddfdb9531362b9d7d9975501b48c19c64d55cc40e5f0cc761491e7887f0a0b636e6
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupDGJe2RUc4uN3z2OMDCRHq1:A9iIxuERzA83h09RZxYydZNaOMWRHqln
MD5 SHA1 SHA512 SSDEEP

Submit Download