eda61f00a71f85654bdd88480ee03096245d77938f3318a1b960fb339dca2188

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 10:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
916f137210446bc137cd78dff82b753b_JaffaCakes118.html
Size 411KB
Sample240603-melkbscd69
SHA256 eda61f00a71f85654bdd88480ee03096245d77938f3318a1b960fb339dca2188
MD5 916f137210446bc137cd78dff82b753b
SHA1 f1bdec78fc959a4aeadcc1cdc3ca764614a9c723
SHA512 c650c6b695349d19f59df195fd5eda54fc5f24cde6633e532ef6d344185e461540d3b9ceb9b4c23d7d975deb8747f8557ff4616d9fa3ff472590b4989d6ead72
SSDEEP 1536:oRL3HH2lNDEb/ACeZRh+eyeULsLsyRPGsM+xcZKEAksQ4iYV45p3LN997oBnHgjz:yHWn4UzEeK3b97oBnHgjd1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1244	msedge.exe
1244	msedge.exe
2208	msedge.exe
2208	msedge.exe
2692	identity_helper.exe
2692	identity_helper.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe
2252	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe
2208	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2208 wrote to memory of 3452	2208	msedge.exe	84
PID 2208 wrote to memory of 3452	2208	msedge.exe	84
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 2276	2208	msedge.exe	85
PID 2208 wrote to memory of 1244	2208	msedge.exe	86
PID 2208 wrote to memory of 1244	2208	msedge.exe	86
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87
PID 2208 wrote to memory of 2680	2208	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\916f137210446bc137cd78dff82b753b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff089646f8,0x7fff08964708,0x7fff08964718
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2912 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:1812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3952 /prefetch:1
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5136 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6412 /prefetch:1
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:2036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,15058517806997811605,863069758780120486,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1264 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2252

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3308

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

4583d371-7c1e-4101-abe2-da973aecdf32.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\4583d371-7c1e-4101-abe2-da973aecdf32.tmp
Size 6KB
SHA256 853e186a1ae56e2f367404cbeea06f0f94ee9e73d1c4bdd66890af9717523beb
MD5 fe74adee3c84777b32b605dbde2ab950
SHA1 450206225040ac2187a31ab56e3cf4849cb8694d
SHA512 a771dd8810c76bf62c75516f2cb8da5934c572f5727f8185f178d07e34f833c1ffb35f35588dc66fee9ad227026d3a1752ef8e1a56226869f874fe4e72fd813f
SSDEEP 96:n0k8q19SojuwpvWMoiVmdeWSGXkF2vSS4UWQyV+VDCAiEwb:n0kDrSojuGWMGSGXkF2KrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 7efbbccf535f9d1171d061e5bf5a4233d731c649975f59705b503a28550bcd70
MD5 5f57c9b3ea4e32ee47afdac90906ae52
SHA1 ae24884a3013b1be0936e9e265659a83261a5a36
SHA512 72b0d8818848c6ca8f46d9ef21ba6d736cd4759dc673da18a1616158357e520f313d1829493260cf909f12b8140b36ad10e025550575878fe20b1a3134fee64d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 8a5d48223e04e4e9853776919120f2ddc1303c044e71b95a27f0bef4f115cde6
MD5 abe53dd63e5733462d1017a7d6b2b350
SHA1 34b5ba6405a6b244ec0d716ad84e390ddd1b9a3c
SHA512 7bbbc503761dba8ca79d8348b41c3167d59406680a808ceeb4f6d43780b13296562f052d79ad9abe4d95f2b44af45f706122c0d2de21cfff3c314553e8aa4d4e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 2b8bb3119d1f9ff3b70137326ce07afb3fad4650af79ca9ec4a91fb6cd529547
MD5 ab35c1d1d96ff610687ede378b849a40
SHA1 99bda6afb049c95a74d2b3bfb0a56c2f8b23a107
SHA512 17f09d187093c2ee047c191ac0ab16890a607e1b5b3550fd1045799823bdd66c04262185e1928c3823edca40ede2559b2e9242f469c0e9f3d076fbbb52a3124c
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 67e6478ed0231f79b7d1aa17a89b6545acd0710a2cb8301e0f7dd769d4a2b2b3
MD5 d522faeb71d100a07506f40929180b93
SHA1 ab9416e7dd55ed30ebeb531356c580911570e2dc
SHA512 a103162c39da76d75b242afb5341ba644b114868c89e269ec14f8b5270d77d7582dd78c9f7b9516342ffde13003066c447c9230373efb70ec76f4cd59724a5ce
SSDEEP 96:n0kRq198juwpvWMoiVmdeHvSS4UWQyV+VDCziEwb:n0kQr8juGWMXKro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 45f00d8fb72ae09a1b582398993208316399d7b612e02080399b546bfe195c2b
MD5 37002ccfb28ed376a113f0e5e2e3fa46
SHA1 0dd36f38de38121a3c2701f8f3bb66636f1bc83c
SHA512 e60f6c3e0142122b9aaee6a363ebe88c1ffa50f9d786d404797fa792f4c5080ba786632f26f9f7025b0246387d638a8a475604c13b8cddb0184b85bc29fb6b73
SSDEEP 96:n0k0q19SojuwpvWMoiVmdeWSGXkmO4F2vSS4UWQyV+VD7AiEwb:n0k7rSojuGWMGSGXkmHF2Krg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 acb1817ee54938dfe670299179ff2e4f0cadd96f50ff524233e2966ac3502de4
MD5 2d990183e0f2588e7b979624b817014c
SHA1 8915188427a99b388aced4d29dac1dffde6e5a1c
SHA512 e922e2eb439dac6aeb773af3e9f3db2e1f29ba421e0d6c084f115345ef0a4c171d0f946e2af07f6e4118dd53270fa8e640e08f51818da7c8c40ca0dbc88b95a0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuppFe2RUYRul3z2OMDCRHqls:A9iIxuERzA83h09RZxYphGlaOMWRHqls
MD5 SHA1 SHA512 SSDEEP

Submit Download