c033fef2e648873d73932ea398ef38b342c03e932502a31056ec2be40eadc505

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 15:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
924a6437a1bff7649ace0f56f8e2ad56_JaffaCakes118.html
Size 54KB
Sample240603-s1224aba6v
SHA256 c033fef2e648873d73932ea398ef38b342c03e932502a31056ec2be40eadc505
MD5 924a6437a1bff7649ace0f56f8e2ad56
SHA1 ae73dbe1ebf5a2d7e72ac0a7b334a5ace45a5065
SHA512 c18a97bcb0de4b761a386536f1afe50f6060bfef542a8b5564b9513d01bf6682c26a6d9535ad650233ba50f9abf1213dd54ec8a3b2a79471e109b62661cc41c9
SSDEEP 1536:vOREe0xWE+a5FwkRQaxIIlubkG3ZuPx3klVHln28u84hPG2d+gg:vcGWEBlRQaxIJQP0H9b6cq+gg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
624	msedge.exe
624	msedge.exe
2868	msedge.exe
2868	msedge.exe
2784	identity_helper.exe
2784	identity_helper.exe
3400	msedge.exe
3400	msedge.exe
3400	msedge.exe
3400	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe
2868	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2868 wrote to memory of 964	2868	msedge.exe	82
PID 2868 wrote to memory of 964	2868	msedge.exe	82
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 3308	2868	msedge.exe	83
PID 2868 wrote to memory of 624	2868	msedge.exe	84
PID 2868 wrote to memory of 624	2868	msedge.exe	84
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85
PID 2868 wrote to memory of 696	2868	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\924a6437a1bff7649ace0f56f8e2ad56_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe8a2246f8,0x7ffe8a224708,0x7ffe8a224718
  2⤵
  PID:964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:4716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5168 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5204 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5092 /prefetch:1
  2⤵
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:4924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6640 /prefetch:1
  2⤵
  PID:4700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,2381519150957020632,17622788154195124406,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4992 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3400

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3388

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 f0c97d69af538ca3b607ef23746b5ba94a40c62d9b64d918bea9de8ef33e35df
MD5 c942237d985c4e249536c3d9232a3ba1
SHA1 267a3d4025fd1cd151656813a2a31d9c41c14967
SHA512 a37709ae2110cfb0fb1b49342162bac62112ca7d4fdbfe0f0cf7a55bc1940266400d84fac46f125dfbafe6f67e400e7a7487e74e4125ba662b2b6ebffd2e8ffa
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 aeee25869c803447ac58068e1ff187d7086969ef845222d1f8ce5a9231044d84
MD5 f852cb3b8c96303c405e42ac55763e4c
SHA1 efb7bdbb6f501e0f170283616b2bb9b65cb47c94
SHA512 2285ab30ee73185f334ba3ffca879d4b33d4abab5cb05dca48c7886af46ed37f1cae7bfda90b3a3b1f7723d43a34acdf153bd822a8335aeac3c65fe31affd4e3
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 fbdab6e4200c6aa0df08d4ca8f1ef6f86a4664cf6cdabb3a1c43c9b3d8e17336
MD5 0ffc32ba5cb064129860c9412dea5942
SHA1 9b6d949bf3b7f25220dbde795c6154b310fd665a
SHA512 c72ebd4b513694be9155693f8a92fb5c4331ffcf6090659ee7aa1f2dd92518c42acb0d3adceec0586b2fd52f8a2ae8f24f6de2b80536789dfd77b410c536d940
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 dfc297c4d6b4d177a3b3e53e0a0965384afeefeb13fbbd73e6eb46a44347d20f
MD5 f98789cce1967b902e712e4653c55df1
SHA1 3838865a0a4e259035df4ae53022a5d7a30f4c70
SHA512 ce31833227f5cf19ecc45efe0d91f219c21221790d8606607b117dddf3bb1b8b832896a19f4c7b4a5324dc0418e8a007d5068286512a80ac12547e3ae7a78800
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 12a4fdb7b2d16fb954d80a94dcef0a5168c65975edc8847a56ce427a3aefcd4a
MD5 48a3aa22a40a929919842e0def260fca
SHA1 9a16a9f6fc98e390579061b8dc3948320aad80ff
SHA512 25f829d69426ea48c08f04ca6871f67968628fc22be65690b392c2197fcb8edb3ee1dd2e83161420f5ca21d9b6e8fb72b9b8bf986a62d2a16b24f170520c8653
SSDEEP 96:n6k3X1LKb/e8wpvWMoiVmdegVr42zEhoIbTDcAVjf2pw8jgA2UWQyV+VD7AiEwb:n6knc/e8GWMwF42YhokToAVjf2pwG2rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 5cd7aaefc3295fae7d8ab92f25e3ab217c87c2c29dc76a335196648777aa20f0
MD5 759a9ec9115542e7c992e7636dc8a027
SHA1 e5b579ab4c8746ee9424ca20f4a67f8bcec96a04
SHA512 497755d85957a5648974bd37aa3ed56fb2c85535b7cedfdbd1d2e246d56e144c9f8c51b3c96eb00fa9a30d9cb376b8980fd52f23706aa00b9ef16cc7c22300eb
SSDEEP 96:n6kMX1LK3Pe8wpvWMoiVmdeHpw8EgA2UWQyV+VDCziEwb:n6kS4Pe8GWMXpwr2ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 7a95c65e9c9f17d2e36ba18c2f795f46cc53ce79b771585469ebbb8f476b7d0d
MD5 5ed394cbe6ee35907555a649281886e6
SHA1 413cfc105913fac3f0c757d419726c50876da80a
SHA512 3d00505da9aabe4a8ce081ba58c3c3447483e9455e880cc00781f4edf6a41f58d820e5750d0e3b1b972847b7c6af7bd493d9abae44534d1938c8163292c25616
SSDEEP 96:n6k3X1LK3/e8wpvWMoiVmdegVr42zEhoIbTDcA2pw8EgA2UWQyV+VDCAiEwb:n6kn4/e8GWMwF42YhokToA2pwr2rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 df9ec3db1d2062e6aa160faf97551bc09c0fc2c944d890a4a6237ac2fdd1fcf4
MD5 c99825e800b40e79328c2a945fda84e5
SHA1 8994b01ef2372cafe8868662536fa1b82151945e
SHA512 2ab7533cee201b4b618b2a715c3017e254b53d110249a5857df3c9da75a34c6c66d8a4fdb2b73878eec2d5444730e82307c1972ed32ba7157dc92793e2d2c4a8
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuplMze2RULJ+km3z2OMDCRH7:A9iIxuERzA83h09RZxYgcmaOMWRHqlWZ
MD5 SHA1 SHA512 SSDEEP

Submit Download