fe117aa1de2bde22d5bdbda27a6e8033ad10aa536c041db896c1937fd80fb5d8

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
04/06/2024, 04:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
939bd6f315fd8acd7a8c0621a20a6763_JaffaCakes118.html
Size 104KB
Sample240604-ezf7cach5t
SHA256 fe117aa1de2bde22d5bdbda27a6e8033ad10aa536c041db896c1937fd80fb5d8
MD5 939bd6f315fd8acd7a8c0621a20a6763
SHA1 1ba1f18e34ecf2ecd2a325152a4b584baf5973e0
SHA512 013ce6c3201cf634058d8cff37fc8518ca640717d4f862537195463e40fc0a241d64d20938200cb5019f8bf35476d79d770813e8168dcae67f1159d7fb65e68f
SSDEEP 1536:uDzUxT/Hpt6JXlW6547U6UAmfwgMEGQyhWjAmMwJSbpiF2x7tZLw:u+teW6547U6UAmfwJhWUmMeaiF2x7Pw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2104	msedge.exe
2104	msedge.exe
1148	msedge.exe
1148	msedge.exe
404	identity_helper.exe
404	identity_helper.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe
4568	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe
1148	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1148 wrote to memory of 3948	1148	msedge.exe	82
PID 1148 wrote to memory of 3948	1148	msedge.exe	82
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 1848	1148	msedge.exe	83
PID 1148 wrote to memory of 2104	1148	msedge.exe	84
PID 1148 wrote to memory of 2104	1148	msedge.exe	84
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85
PID 1148 wrote to memory of 3720	1148	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\939bd6f315fd8acd7a8c0621a20a6763_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb260146f8,0x7ffb26014708,0x7ffb26014718
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:1848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3012 /prefetch:1
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:1536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5676 /prefetch:1
  2⤵
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:2980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7128 /prefetch:1
  2⤵
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6432 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:1680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:2276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:4036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,3213409084696449045,10954064526742702823,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2172 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4568

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4996

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 284a24b5b40860240db00ef3ae6a33c9fa8349ab5490a634e27b2c6e9a191c64
MD5 f61fa5143fe872d1d8f1e9f8dc6544f9
SHA1 df44bab94d7388fb38c63085ec4db80cfc5eb009
SHA512 971000784a6518bb39c5cf043292c7ab659162275470f5f6b632ea91a6bcae83bc80517ceb983dd5abfe8fb4e157344cb65c27e609a879eec00b33c5fad563a6
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b35d6906050d90a81d23646f86c20a8f5d42f058ffc6436fb0a2b8bd71ee1262
MD5 87f7abeb82600e1e640b843ad50fe0a1
SHA1 045bbada3f23fc59941bf7d0210fb160cb78ae87
SHA512 ea8e7f24ab823ad710ce079c86c40aa957353a00d2775732c23e31be88a10d212e974c4691279aa86016c4660f5795febf739a15207833df6ed964a9ed99d618
MD5 SHA1 SHA512

Submit Download

1416fd14-5589-4e79-9a5e-b5d427366540.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\1416fd14-5589-4e79-9a5e-b5d427366540.tmp
Size 6KB
SHA256 7c1057c110c39cc6f57f165b3a52a0406b8d127242d9a91477551722e14d3bee
MD5 13c2f1354bd4b4b0fe2348740745d83c
SHA1 02815094f4d7e06fb154e10df3715519339ff6eb
SHA512 2d6b7895228de1ef892b680e5b54d8dee70ffcced20b1d93c5f3fffccbae33237f378da5be69fc3a36b20ae50bb273434f8373a9ebaccb49aab50872fc1d66c8
SSDEEP 96:nbAk8U1Tv0wpvWMoiVmdeT3NFzE+ck2/z5YUWQyV+VDCAiEwb:nbAkBp8GWMj3NFY+ck22rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 b79c354c97f94a5c55fa9c193a742680d0a2c24e8ae3746dc241596fe119ca6f
MD5 bf6d838d9ee6965e6c089a8780c762e9
SHA1 5c9be5061d7c805b9d50904126dc3d1aeddd6b73
SHA512 4ca75db4c19b8de27630523b960cd4ebf7dd7d34387957004541d670ccd517490b8cdd0910a3e6c92e9f41a62f454b68002689519265be49e605cf9623678cd8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 8e3de544dd80e4b9178176d28a665d19ee5c37abcda886a4138a4dae03b6ca65
MD5 26b98524e8f5ff39d8d29b8cfeb9ea14
SHA1 6d6dd36587f6cdd43b23b5cbed3c8d9414bec05f
SHA512 801c8a1684b05379710a94b65ea4770c6289cdc80886e77b71d763228d59845df178f2c234401821a122bf3a0e345f0f4814a77d951b4dbb1dcd79888d7cc765
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 e159f2eb83c85961051f89bcd357e16644251dbea27abeef111e375e6b9a3186
MD5 8805fa65fe96747b16794d6d8500b9b9
SHA1 5378c171d3c24d46d0db08e1a3dafc038f9910b8
SHA512 3a35102c4efefa3f5b4d179f20b7a87c067a0a2e1536c0e86d90c4745c17d9a68faa9857eddff4498a6c5f4eaf6af804acede13c285b756960b98f5ad297a7f0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 78fc77b3bf2e95a0bfc0ee3c7d332b549092e4d2a0f8a78dbc85ac43ecabce55
MD5 2c51368a944ecfccf351a3e901531233
SHA1 fbbb2190d950434733b88a1731b7e1655628965e
SHA512 7a58f61bd49cd7f38ba8830f6cef23af561305514c822b3ff944ca6690731765b4d8c5f045a6fad169d1858e9096d289e21392e3bdaa7cac6248b64faeda0ac0
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 3f115aa8bfda8e415c5a1d2e76fc0cf6649c2d6639b2f65f664aba1373a8213d
MD5 ace428ec7d550cee558f95fc980a5043
SHA1 9f3d72dfabec21333048f5eea508f812d3238d19
SHA512 9dc0272392e6948a3513c987ff548f67994c36dccc7c1b50e877965b39823fb69be1a6c209f23e59325931e682437f84186283cb2a00272d64a6fc94681ce496
SSDEEP 96:nbAkRU1Tv0wpvWMoiVmdeH/z5YUWQyV+VDCziEwb:nbAkap8GWMX2ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ca655f52953829b1ff82466d4ce93b34dfdb947fc99dddd5983c70b871681b3d
MD5 c997ab6c1e450e3be3497f0745600445
SHA1 95e103c562171b9dcd2e0098a6f57416358ee4f9
SHA512 f4126f587d09be5acfc48d6457990a0ecd3f719ee955b978b1c1d029f4382e555cc2202610da1c33006feffd93d0f51373f5d96d25bcf32bec0196efcb60a52a
SSDEEP 192:nbAkupj4GWMj3NF5M+csERVPk/LqQ2prg:nbALpxWNlE
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 88563beb5bfe69f3b951a275f12b6a57c669918ecd9b90fa5ee5ffa476cab0e9
MD5 45a748539f1d9c41204bed6dc7b2c4e8
SHA1 bf9b779959060ce9924140c9b654c0f4532f83d8
SHA512 5590e5ff95bbdcc35d865c1ae8bd84d5dbdf354fa967ebb77e239bde9ce1407a8ef8e20236f55c8fa17fea45b20a0fcbb9b171fd46436cc10b76f0e79e260d80
SSDEEP 96:nbAk8U1TjL0wpvWMoiVmdeT3NF5vE+csERk/8GdTjwU2/z5YUWQyV+VDCAiEwb:nbAkBpj4GWMj3NF5M+csERk/LwU22rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 857B
SHA256 e2eae30b696345017e70c1a690146406e6681543c58ab214bdd696e2c2651f3d
MD5 a3fcdc6c0526b581c2b1cb807421f7c1
SHA1 634929a67747a7d52c624f4a53f60d5c891229d4
SHA512 116f1d9bb30100e484855345267059630c835e4b3053ec7eb8a12ff2fae423bee21c592b4cb11e6a741aa00cbe5fcffc4961d7f45cc9de16870e54b9f56172b7
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57df92.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57df92.TMP
Size 203B
SHA256 f5eab8e2253b3326c501cbd3859ba8f2b64c4fbe7f30c7c9fda174b524c522ea
MD5 2c89d4a3ef6cd53a5a12596ef9575c04
SHA1 21494f378564e83ffc0daadce982bd4490b6f110
SHA512 7f626ee374917b4e3b4bedf2dc4263855dc12eef9639bd1ae80e9b9525b1b6f0376fe2ab1e104ae092e7b0f470dc52403998a43d6833296c7942b4ffd50e8ddc
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 050377703fa9d203818cf71186654da5f3c5a673af902fbc9139c89366ca9c40
MD5 79f5b29fc12ea6f330ceab2ccc19bd5e
SHA1 15c1ef60db4cee53bc95092097bd96b9cf0bf659
SHA512 2a43e321c373f22b0916813ad6180df250bb81acca2083bf8cc882cae03acc62129841f7815423f48f11c1cbbb5af9436e4c899bab373d5c926b41b25e649fa5
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup+vje2RU/imy33z2OMDCRHd:A9iIxuERzA83h09RZxYwzR3aOMWRHqlI
MD5 SHA1 SHA512 SSDEEP

Submit Download