8524774f540d452e1b0401730d0f4f15df36a25b72688974826498a67b095c3e

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91ac01a959faa1867de2dc26bef60c82_JaffaCakes118.html
Size 19KB
Sample240603-nytkqadd6t
SHA256 8524774f540d452e1b0401730d0f4f15df36a25b72688974826498a67b095c3e
MD5 91ac01a959faa1867de2dc26bef60c82
SHA1 27f09e69c938007d326071c7426b9358d208e26e
SHA512 3edd3563a0bc17595c6b170506f80d62f7d99a199a964a318c9e0193715e1e6b9f4cd374ca24ccc46ea5e950e7f4a1896e86c90cb73b6136a728338018dee339
SSDEEP 384:lqtXuVqs/bMR3LbqsFF+a5krjhhgfDuTII3RP1nnbXcVk7y/oTaZNDktGyiQue7G:40Us/bMR3LOsFI3gLIII3RP1bXcVkW/1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4356	msedge.exe
4356	msedge.exe
2284	msedge.exe
2284	msedge.exe
4592	identity_helper.exe
4592	identity_helper.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe
3456	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe
2284	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2284 wrote to memory of 5092	2284	msedge.exe	83
PID 2284 wrote to memory of 5092	2284	msedge.exe	83
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 3552	2284	msedge.exe	84
PID 2284 wrote to memory of 4356	2284	msedge.exe	85
PID 2284 wrote to memory of 4356	2284	msedge.exe	85
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86
PID 2284 wrote to memory of 4704	2284	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91ac01a959faa1867de2dc26bef60c82_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff1fe446f8,0x7fff1fe44708,0x7fff1fe44718
  2⤵
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1980 /prefetch:2
  2⤵
  PID:3552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2460 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4852 /prefetch:1
  2⤵
  PID:648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:4092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2112 /prefetch:1
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1960,8244514178122250598,7472932825371600360,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3456

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1624

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506
Size 70KB
SHA256 b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
MD5 49aebf8cbd62d92ac215b2923fb1b9f5
SHA1 1723be06719828dda65ad804298d0431f6aff976
SHA512 bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
SSDEEP 1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d824b742eace197ddc8b6ed5d918f390fde4b0fbf0e371b8e1f2ed40a3b6455c
MD5 4b4f91fa1b362ba5341ecb2836438dea
SHA1 9561f5aabed742404d455da735259a2c6781fa07
SHA512 fef22217dcdd8000bc193e25129699d4b8f7a103ca4fe1613baf73ccf67090d9fbae27eb93e4bb8747455853a0a4326f2d0c38df41c8d42351cdcd4132418dac
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 ef7baeb1b2ab05ff3c5fbb76c2759db49294654548706c7c8e87f0cde855b86b
MD5 eaa3db555ab5bc0cb364826204aad3f0
SHA1 a4cdfaac8de49e6e6e88b335cfeaa7c9e3c563ca
SHA512 e13981da51b52c15261ecabb98af32f9b920651b46b10ce0cc823c5878b22eb1420258c80deef204070d1e0bdd3a64d875ac2522e3713a3cf11657aa55aeccd4
MD5 SHA1 SHA512

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 8d9e5a9e4415e8d9c67f8d574b08cf8421a43c0f9c82438724e319765b605b71
MD5 027be066f728748b988f740620913992
SHA1 3989046c769b901b8b54ad16165a6a0a17c1b9da
SHA512 cd2d461f6a89e56d01bfee1e19b845e8a4781f4232f5c73643ba6b61d1a5c9bad660b54f89b7804c9c2fd6b6959bba33f7bd38ebd0f3180866f146cd4ed4b60b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 8ccfd496613412a62d684521d241eefbdbab1a4851b9e46512911736aec7f74d
MD5 454c2f440bb98075a9994ff69bf002eb
SHA1 54399dca08422dcbcc70f75832bf916bfbc28ec0
SHA512 2b29351ad4e3679655a96f4993a13aedd00b4d029dde567c057b1da5d938ab9abe44a12ae5b73bccf32f1906761493d6a3be864d4a4ddd2f552c2bae17f56f93
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5f20d15a0784a4e3e33bda10eed389e92a249b4fa1b0e13b5b608450c6847c00
MD5 9e68e4d6ab5e878b4e0f03de3b142231
SHA1 fe5e39c6b59729cd5cc713a9e57ad4c3f3e024c7
SHA512 df33565c0fd893b75d542ce4484150aa42df98e377dcb4e15566a1d5603a8b33f988634fb716ab32037e7a18c6ae72418a33233d55ddce86e50ca34f8832470f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 07c7918c24469dfca73537affe34f004e8f5dd1b0cd679c4c8db4df37b48575d
MD5 a0ee7d542be90b62a06953528a9330ce
SHA1 29ebfe5001e33945d15f077843ffcfdd706c1eee
SHA512 cfd6a09c3e2f92851bf11a6e8ccd15091c1b83b4414d71dbf67f149e8e5020084b53063e1b54be4fdf977a92a7720f3c0f3076a29a2da075da5300429028e69a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 627b69630d4657d9547788d9784a47092c682ec2e337b6b22acb4d45791bdc38
MD5 a32428a1208fe2daade9c396d221dc93
SHA1 07188e7619e01003fc16ab15c8b46ff68a8f289c
SHA512 1bac68a6d6f92ea95f2d95df654f93753b0c69dfcc3a928b6bba16e2e5580c3053d90df41ec6e5d60618ea181b447e76b165d9015120a41e41873aa0c823942e
SSDEEP 96:nJk8z1/lEj0wpvWMoiVmde270RF12mQIPUWQyV+VDCAiEwb:nJkGzEj0GWMG70RF12QrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bf444a3b91c41f129de37c5ec59425963815d217af4fe34c6de0692a82bbaad0
MD5 1b7e50c4d15a9df0289f3b3a3a52c1fe
SHA1 5a9f4765dd271703cbef1d9774d4e93982c56f4e
SHA512 2454bfd37e6deceed5faad419b7bea523d5e330670dd2ff908dc278b8de14e08a7fa7cc47a324644a32803794f6aa3b5c8e95ab983c086e6494d52e25511a9e1
SSDEEP 96:nJk8z1/lcj0wpvWMoiVmde270RF1V2mQIPUWQyV+VDCAiEwb:nJkGzcj0GWMG70RF1V2QrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0b008ea0e0ec857231c7ac97f56548c50c7fbf0d2e8f5f9b6fa76a5cea3b312c
MD5 de2d0d23a0776cd976825a93e80c12b3
SHA1 3cd4f3473811e1f58eb9fb5b9fce9c7cdf22283d
SHA512 9c3dede17246fa3b45c8fedc5fd057943cf281be0e091c456fd77cf723e9a56fd3854d577aa6798d89cf409d8b6b72f971b6606228694f5cc1e1d12410e01a25
SSDEEP 96:nJk8z1/tcj0wpvWMoiVmde270RF1V2mQ2PUWQyV+VD7AiEwb:nJkGvcj0GWMG70RF1V2Wrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 706B
SHA256 7ccc5dfbc5a82d0b8e2f2f310750a73fb222aa016ea6a6477ed540fd8aa1921d
MD5 f00e3927ba22d3e6a866e44c08970f5f
SHA1 963482d366ab8b65c6e06fce6a8d53cadd56302a
SHA512 bd743faed3302fc3c5fdef1c10d687485e468cffffb37b6e70966f18360bde07328ee964c8c21de07bab61264227391a6e727cccaadb3b96cb3952b55fea5d2a
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57bf39.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57bf39.TMP
Size 538B
SHA256 c81c8375e84af58a472041c6c4a92311fbdeabc913e7a47697c6903d52ea17a2
MD5 03cd5c2f7d7151f12826fe0042572cc6
SHA1 5d8809fd8903cfd5ab904fd46652a2fa233c26fa
SHA512 41bbf57c4c2963c36db7ac6200faf0690b3ea33a7212a0395289c2418e8e4c07d5e5fd6674a8f58cd2b3ea1cd6a26fb99de3fd8055446cccfee62211fe432937
MD5 SHA1 SHA512

Submit Download

bcf630e5-3054-42fe-a0c7-b88f3d5d7de4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\bcf630e5-3054-42fe-a0c7-b88f3d5d7de4.tmp
Size 5KB
SHA256 51da92f91925e5c4093bb2ffbb3f0a7905314aed4014aa066a37aa30b7bd696a
MD5 6097a3e3ab7f2ccd9109a0f2f7ebd158
SHA1 f5ffa10dd80843ef0af6b9c88950ea827ddadb37
SHA512 059999f81c9c2a5689a9fa8a643dbf8fdf7ba6cd7e039e2059d721694ce7a29bb8bfce7c58ab610018db66b08c5c759c9ba8b3976378b5ad627693e82cb37969
SSDEEP 96:nJkRz1/lEj0wpvWMoiVmdeHmQIPUWQyV+VDCziEwb:nJkRzEj0GWMXQro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 adf07af743a2961111c012c9f062cd2a4be731b0c0455d605c0bcdc7d89ceaf8
MD5 a93b8ea8c8ba5aa07c2f8e3ed7a4a1c6
SHA1 85c33a77a37a9347968d70641c61e0771df03942
SHA512 b90f6d0d8c86726dd9fc8c514d192c134b9a84e9c18a71d90105d48c4721be83eb06e78da93ac573626aae7cc7acd85eb0b86055d43d816059af834b44b7117f
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupgAGe2RUtIKbifYOxhZHnqk:A9iIxuERzA83h09RZxY/IKExTHqTMTAC
MD5 SHA1 SHA512 SSDEEP

Submit Download