0e95d243e0c14f43ce0b168fda0fea2facbac9d4efbc4c35d6a26d2c1edf7605

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 17:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a16fc37205c5c78372730bea7379e598_JaffaCakes118.html
Size 34KB
Sample240612-vmfcaawern
SHA256 0e95d243e0c14f43ce0b168fda0fea2facbac9d4efbc4c35d6a26d2c1edf7605
MD5 a16fc37205c5c78372730bea7379e598
SHA1 71c29f423f229912cb9010a056f96322d3e4f36a
SHA512 b4c43c586e5cc5f6c728b2694958aea7d8be66c2d285bea2cdfb46eab1e730c9a2a5f231c36705787b8999688f50148f02c21cf2cfc4eb2af86412dcb40788c3
SSDEEP 768:hhppSSNzE0ueVPioioZj3GZdXGCPP5CgCl2tuU6wXb5QxUv55x+Ywc8zreGk7AsK:hhppSuz1PioioZj3GZdXGCn5nCl2tulV
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1568	msedge.exe
1568	msedge.exe
3684	msedge.exe
3684	msedge.exe
1548	identity_helper.exe
1548	identity_helper.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe
3808	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe
3684	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3684 wrote to memory of 1528	3684	msedge.exe	83
PID 3684 wrote to memory of 1528	3684	msedge.exe	83
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 2088	3684	msedge.exe	84
PID 3684 wrote to memory of 1568	3684	msedge.exe	85
PID 3684 wrote to memory of 1568	3684	msedge.exe	85
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86
PID 3684 wrote to memory of 2724	3684	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a16fc37205c5c78372730bea7379e598_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffed0ef46f8,0x7ffed0ef4708,0x7ffed0ef4718
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2092 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:2724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2128 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5704 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5992 /prefetch:1
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:4320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,7003260342880292993,11969124599595701923,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4812 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3808

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:612

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e
MD5 db9081c34e133c32d02f593df88f047a
SHA1 a0da007c14fd0591091924edc44bee90456700c6
SHA512 12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 c6d2fd71f8d5463090eaab115b0c86c48ecd1562bba9c49f0e163beb9b938f29
MD5 ab82a738db76a240e2262f3da1579447
SHA1 5698942b9a8aac577e21d5696b73ce3ccdf47d7b
SHA512 4f23e4e32317cf995ed43e736a66f9894b4d2b71cd88d9a98a1aa5c336f2cfc890c8c5cc05c62cf7a2544e4652ae57de49485a084d21b3702b00988d140bb1af
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 787B
SHA256 01a79bebf7908a6193332e67fbcb5689c69ad0153f4cb97d762df8141791f65d
MD5 39b70d919cf161d6912354f430c5e2a3
SHA1 0f90a05e8b82f3a33a049872a0f4ddae992a10da
SHA512 74977d26f53bd87b695977ff9ee59c049bc7cfd5ea8f74a2774e897903fe597d5713b9bc185ef4870781f066d66e5b625fcb4661a2d73d9f72326d5111bcfec9
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b2dc9fd2c9092b08af18e95dd20927254acec410055e3de08d1d592542d4c252
MD5 d5a95aa6fdf31b5cc428d08d7dd64200
SHA1 9d1d83d607cc3fbe4c3dc4b9738edda31461e93f
SHA512 803726bed4baccf258c64b043eac3bbaf76fea80c455767a6a48260b4c6756cce52eb48e8c3491ac862140216e7155274490b4b9120d3dd696d77758413b6008
SSDEEP 96:ngk/RF1/SK/wpvWMoiVmdeHginQUWQyV+VDCziEwb:ngknVSEGWMXnQro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ebcfd39c83f673c82dd9bae98a19ff936fa136769d7a69e5cba14daf5aad4584
MD5 0dee4a1e44e0cef70052d39629ded285
SHA1 4babe35a8ff637cb62d8fbe43e4c0e8047d92a15
SHA512 d5a6b2844855796eb4c0181d1bce6e12f2f5d69c546982d73478562ec6465d3ec330ae2cf1238002f80dff2c5e9791b35c23221ebb2dc32cd98517a0dc29ef70
SSDEEP 96:ngk/tF1/SK/wpvWMoiVmdeEOqginQUWQyV+VDCAiEwb:ngkDVSEGWMlqnQrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4e889a3279e8f8369992eeae81b64af7694743ca3bab03e7d404a9d6bf5958b9
MD5 1d961404b65a940aacd52e5bbeb83f46
SHA1 5e902627dbd270abe6514216357b24521b48a770
SHA512 9977a4118165ad597ac0d8fe7b013897c1f0cb9b220a7e0f0f297e9e9f3ca63a4291d97a5dc1b24c9d1fd4b63f550d0c223f1b7506ffe3409fa01ef7cc3d2c2e
SSDEEP 96:ngk/xF1/S9/wpvWMoiVmdeEObv2ginQUWQyV+VD7AiEwb:ngknVS5GWMlbv2nQrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 819fe3f48233cfbbd0018ae4c3f74460ebaee011222180c757d5ee43eebf1693
MD5 f2740ea0fe0bedde2a72d9e30f4c0fda
SHA1 9b7466af13eedb188c5cdfd29f2c23cd217bf214
SHA512 9a26dcca7d5e98317c12ac7c0285e1d904a112e630bbd5a83e711209481896e2bd3e1e86744527dc7ba6e9e6ed14ba94dc64f54a5fbc0e447047c2379b5b2c91
SSDEEP 96:ngk/tF1/S9/wpvWMoiVmdeEObv2ginQUWQyV+VDCAiEwb:ngkDVS5GWMlbv2nQrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f3d3acf6924a36fba0ca4e3ddb2dc416d81d9c5b4ecd19e8fabebe4c77e74c4c
MD5 6c4d9100df4a1c0a7dadc0e281c0baa5
SHA1 374afaa919f18a9c04ecd556b53b46fa07c7d27b
SHA512 1d824f781c0b17e9b3fbc016a1fd17e6a2562badbc7b8df5efa1265754b71a075617a2ec038bf7c81f7c0612e341ac5bbb1423a5868621f2826984afa474f76a
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupgo7+e2RUq2kS3z2OMDCRHh:A9iIxuERzA83h09RZxY17gjSaOMWRHqa
MD5 SHA1 SHA512 SSDEEP

Submit Download