83bcde5095734454bcbd9e58f1a5fe82a0994afae8ca352845eaa601847ec082

Analysis

max time kernel
147s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 13:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
91e1697ef7c24f8e8ca2ba16f59aaeff_JaffaCakes118.html
Size 54KB
Sample240603-p9wpwsfc6s
SHA256 83bcde5095734454bcbd9e58f1a5fe82a0994afae8ca352845eaa601847ec082
MD5 91e1697ef7c24f8e8ca2ba16f59aaeff
SHA1 cdc62dfc6ddbfaab7546d80dde428f593e955171
SHA512 83a28fd274f42f9f325dcaec9a2726b88cb07aa29fba4c6a4abe76553e3232a1d9e06472a67ba748a0e5b1b9845566a1caf313b39861ad74a80a22a8cf1584f1
SSDEEP 1536:fBsZE3FFZkv63uiEV0gJ2mHyhZK/vq/e4uymWoHcEVoImRKK5fNd5:5sZE37GRAmHyne4uymWoHcEVoImRKK5p
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
2136	msedge.exe
2136	msedge.exe
2652	identity_helper.exe
2652	identity_helper.exe
860	msedge.exe
860	msedge.exe
860	msedge.exe
860	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe
2136	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2136 wrote to memory of 3104	2136	msedge.exe	82
PID 2136 wrote to memory of 3104	2136	msedge.exe	82
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4468	2136	msedge.exe	83
PID 2136 wrote to memory of 4720	2136	msedge.exe	84
PID 2136 wrote to memory of 4720	2136	msedge.exe	84
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85
PID 2136 wrote to memory of 4532	2136	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\91e1697ef7c24f8e8ca2ba16f59aaeff_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa088046f8,0x7ffa08804708,0x7ffa08804718
  2⤵
  PID:3104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2804 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:1792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5516 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:3284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:1844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2028,11158508236375600264,12708818234980952004,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4988 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1204

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2868

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 02d4984e590e947265474d592e64edde840fdca7eb881eebde3e220a1d883455
MD5 56641592f6e69f5f5fb06f2319384490
SHA1 6a86be42e2c6d26b7830ad9f4e2627995fd91069
SHA512 c75e689b2bbbe07ebf72baf75c56f19c39f45d5593cf47535eb722f95002b3ee418027047c0ee8d63800f499038db5e2c24aff9705d830c7b6eaa290d9adc868
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9d8e24c91cff338e56b518a533cb2e49a2803356bbf6e04892fb168a7ce2844a
MD5 612a6c4247ef652299b376221c984213
SHA1 d306f3b16bde39708aa862aee372345feb559750
SHA512 34a14d63abb1e3fe0f9927a94393043d458fe0624843e108d290266f554018e6379cba924cb5388735abdd6c5f1e2e318478a673f3f9b762815a758866d10973
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 a88f294254ccba859491098c0158444d95e0dbb9d1b664c3e59f76ec5c3d855d
MD5 c5b0fa228a066b7c11babcbfa4d5b227
SHA1 a3037b751682b62daf53274b091f8b29bcf64991
SHA512 9a11e70e2726d51bfb63a436fd3c403ee32b5b38f8b337ea2b3b3f1fd620a0a751f94fd8c85ec8ff6d6ca4dedb47f257b539c345f8d4d3a115ac334bafbd815a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 6f78458160bdd54d4c11ece1117d11ff7b7cdf73b4e1897c73a3380c68c6aeb2
MD5 471e7b6ebd71e461e959e4684843e84b
SHA1 ad2d9fe3b82126d06bb0c13e8ffdfd169e54f752
SHA512 8f4eccf1594941079bac3daa9afe36467b98730ff8805b86944c0b9faca3fbea4da80d25b4c373483e91be8e0be05c17703e2fdac67b462da6bb3e4b9705f693
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 9e43411ecb5246efb3076792bfbfb1d02b17c6d1d7a5587186c3af4d94221a28
MD5 229d68cc63dcba07be17ba3cb0e22944
SHA1 2bb55d5a910cba6d144eb52b4d3689ae6927af9c
SHA512 4cd7f8c14d2e640b4f3947504ed2149333b5dda85d2dfcec9a727ff9b40ac95d4b3918f54c1332cc2654638fba209e0b2a98af409bab3b40f9d874c3b543d40d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 ef85d59e35ac6de475f9af290ff1e04bbdf3be12d7f09bcdac02ed696a47f184
MD5 b258c0c4d4d86bb2c5fd7962e63327c7
SHA1 d8674bc6ed1d6568b72f380a7d3c30de054bf707
SHA512 913335e03663f99b7109e4147e8aba8d5f53075b68a45dcad932802bd411c1d29d8f5095c3eb32ca88491618dcbc6ee46d2da35ff802f92b8bab33b6e02d455b
SSDEEP 96:ngkv11ptv2wpvWMoiVmdeHk4LAp+UWQyV+VDCziEwb:ngk9xv2GWMX9Ap+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a78f3f7d6672732b408cdcdd0706483aad6c102b1654d017aea018d53446ead8
MD5 7a754aa117386afddac8d6ce489328e0
SHA1 ca66ae145b3104a2be82ff232b56f546cbac7da9
SHA512 ae7770bcbe9c88910a03a54652d579ed4e1cbee13bf28a9dffb8decf025b26b21361114d9df028ee43495e6dc98762ba4eb00bea944ca54cb9a0315a160fa3ed
SSDEEP 96:ngkG11ptv2wpvWMoiVmdeauzEUErqdCM2k4LAp+UWQyV+VDCAiEwb:ngk2xv2GWMbYUErqdCM29Ap+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d767fe01eada0fa9e549ed73d029df9978afd32876585464e9b8475557e3549d
MD5 3a9ba50d01a06e61524ec938ff11426a
SHA1 9411977af4edec41050b00b98f8265a017f89c59
SHA512 8081ff50ec461ae7732d82949c90b2851602f4da0b4f134f933812eb386f73ca612bde64f335b5a5b1c184eefde65c1f99e2ddf68de15fcd6c18d8c5ce15748c
SSDEEP 96:ngkG11pt/2wpvWMoiVmdeauzEUErqdCM2k4LAp+UWQyV+VDCAiEwb:ngk2x/2GWMbYUErqdCM29Ap+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0071e7a89c5abeacc0fef269a81017cbdb8b10224b7c756832635b37ce683b8f
MD5 157bd398414ffbe9fa99093b2a983a6c
SHA1 e8dfd24617a88c6a887390887a4da4148fe84897
SHA512 5fb44a5a67b3e440a6f3c8c1b51b39b305821c42bc18731139342042d45b48e69b1cdad9873490ef8383a3e7da096cab3997553d42b09106285ec6b30cbeaaa1
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupC3e2RUfWq/y4VB3z2OMDCi:A9iIxuERzA83h09RZxYMm5BaOMWRHqlh
MD5 SHA1 SHA512 SSDEEP

Submit Download