b1807ff9ead5160f617cbd96348961a2ef8eff761f84c2a6bf33d53ca11dbb24

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 09:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
915bb3971767b299d4a4453ac217e0cd_JaffaCakes118.html
Size 175KB
Sample240603-ly2j8aag2v
SHA256 b1807ff9ead5160f617cbd96348961a2ef8eff761f84c2a6bf33d53ca11dbb24
MD5 915bb3971767b299d4a4453ac217e0cd
SHA1 06fb26d0a939df934f83ad379102ce662a4977b3
SHA512 92570f6c54d9fcaa38d0d2ef399cf8c3e0381675ef0fa18bccd8ef3dff513d149566e4666a8b8f7014b6ca07bc4dbd003fb4920cbc8a40b9d1cdfec83361b5dc
SSDEEP 1536:Sqt58gd8Wu8pI8Cd8hd8dQgbH//WoS3MGNkFRYfBCJiZQ+aeTH+WK/Lf1/hpnVSV:SHCT3M/FkBCJi7B
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5048	msedge.exe
5048	msedge.exe
3212	msedge.exe
3212	msedge.exe
3228	identity_helper.exe
3228	identity_helper.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe
4412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe
3212	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3212 wrote to memory of 1340	3212	msedge.exe	81
PID 3212 wrote to memory of 1340	3212	msedge.exe	81
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 2064	3212	msedge.exe	82
PID 3212 wrote to memory of 5048	3212	msedge.exe	83
PID 3212 wrote to memory of 5048	3212	msedge.exe	83
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84
PID 3212 wrote to memory of 4668	3212	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\915bb3971767b299d4a4453ac217e0cd_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb9da146f8,0x7ffb9da14708,0x7ffb9da14718
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2616 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:344
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4820 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6016 /prefetch:1
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:3744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,11163870928740105883,5706450599805573573,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5148 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1216

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1660

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 d847414f099b8ed0850a3d01f902e5dbf39d9d8fdda6a796174467c2f37c1f3d
MD5 00f82bfb6a56a9b42378526856f527b6
SHA1 9c4b539149ba22b3cfb00fc97cd448b963cb4c30
SHA512 4c771d7d4087b755490285573af350177d4b5be6d818cc19a9f2216533e01cb17a933a0a316bc250e95d74a2377c099cc7501f20f2ae945d3569ee449d95394a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 b4f2e238f2583ac4021406d5049d53431fc0b6dc3b7dfe7dceeb3ac4a716204f
MD5 f3d7e25f2cc9a8468cd05bcde6aa6556
SHA1 0a7e78e609abb0d1cf8bee4c852a985185ba00ad
SHA512 4007d771099f94912a23654bc5db8fecc241a17676d27266049a220cac05eb023970260d01961a7b16823586bd15aaf7637a43d73a40f54223d2aaa6f6e78ff2
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 33964bdd327062dba5de6b651931b96ca855df4e93f02ed66c8b0339446b96f6
MD5 2e09956c4db21c8395ccfdf9b99c1a3d
SHA1 8b15ce6025d05614cb02b4243e50afe99047da0e
SHA512 0741955cb4a305cf69751fe25e0c4d06c649deeeacef315c1908cedcfd2820b8ee23db7613e0a52589c1fa1270838d446ddfe4404bb494140f01ce61ffc12396
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 9e743ce2d4d2dbacb94e7bc7797f2a9a0aca8b21c7cbde9beaa79083e68cf241
MD5 5fdb35bf60e6138a7548009f30d85c4e
SHA1 f5f0234c5d6b1e93e5f8f2e41e1bec73aa204901
SHA512 636f6767d70f01f74484a01a903e1aa0add9526135fbde15849e4cab5fb1078d2f953fded90a2b54f1e21f27e482a27065ea01955031bc0e52f5c2f805b80566
SSDEEP 96:n2kmA1x3e8wpvWMoiVmdeHpw8E74AQ+UWQyV+VDCziEwb:n2kv/3e8GWMXpwnQ+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 b1a80ede3db5ab6334064dcde93397142d33afa992fb55d66d4a89565de145f4
MD5 4eee6d72d7ceda7254b9fedb2fabb935
SHA1 a06b6f1287667e648087865eaad262b8f5ba770c
SHA512 02ffbb1ce5e7c619967c65aebc5108afea5000b0d9368f49b7e093b6d32bbd2d9b3e014936f92e7ee2bdc600118b5f9ea235c7d55eb704fb014fd43c59221fa8
SSDEEP 192:n2kK/8e8GWM2dJYJj1Er2E7u+62pwnQ+rg:n2b/dJWwAr/qnQP
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 3ab9efc41b6ab8f018e40aec377dadbb87fad10463ca6b6f1b8aeb963fca4c49
MD5 6449c53052fde6eb2bb884cfea6f4c38
SHA1 918655ac1360008914a05bdc090bd9524aa27b2c
SHA512 1cf0125141056027fdc34cfbae048fadf061862cc42f792777ce57300f86cb026e6b272328e8ce839f90bca8df4e81fd7f3ed23f1299efa863122392d940a677
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupoMfe2RU3J+kq3z2OMDCRHs:A9iIxuERzA83h09RZxYf4qaOMWRHqlW2
MD5 SHA1 SHA512 SSDEEP

Submit Download