58423c9c60f6c8eeebf4bffc01ab131bd42f906974e3701a80a8431413e4d2e8

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 04:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a3d83b1da8eec26f0f7272c70f9ee39b_JaffaCakes118.html
Size 253KB
Sample240613-e9nn6svarg
SHA256 58423c9c60f6c8eeebf4bffc01ab131bd42f906974e3701a80a8431413e4d2e8
MD5 a3d83b1da8eec26f0f7272c70f9ee39b
SHA1 38c59f25d9d80805cda1fc875af97b7a145feb03
SHA512 db34402e64a633858b75baaffdd8bdd6b000459580f4c4bb06346be3def9e9f05173590d99320e5c7afbe32cfe466ea15dda2fba5fd3e3d5b3c4501a694854e7
SSDEEP 6144:ZoP0xwmRk8h720cRywgntc0siUEQpqX9u4P6odzZNTrdLFVK31ZnQS8vBROvE+r9:+l0wgntc0cDq2
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4912	msedge.exe
4912	msedge.exe
2128	msedge.exe
2128	msedge.exe
3672	identity_helper.exe
3672	identity_helper.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe
4700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe
2128	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2128 wrote to memory of 3936	2128	msedge.exe	81
PID 2128 wrote to memory of 3936	2128	msedge.exe	81
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 2852	2128	msedge.exe	82
PID 2128 wrote to memory of 4912	2128	msedge.exe	83
PID 2128 wrote to memory of 4912	2128	msedge.exe	83
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84
PID 2128 wrote to memory of 1432	2128	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a3d83b1da8eec26f0f7272c70f9ee39b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd510a46f8,0x7ffd510a4708,0x7ffd510a4718
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2608 /prefetch:8
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:1920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:2256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5704 /prefetch:1
  2⤵
  PID:1564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2984 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5696 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5380 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:1704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2080,10848183361103479818,8400982175711187257,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4900 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e
MD5 db9081c34e133c32d02f593df88f047a
SHA1 a0da007c14fd0591091924edc44bee90456700c6
SHA512 12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016
MD5 SHA1 SHA512

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 480B
SHA256 84e6c4f36823b7331d4d3cd31ceaee1aeec0dabb913190b3a3a7a1ab023b2612
MD5 e74af8efb583750e445898a0e4fd25ae
SHA1 90cff5f0cd5e8dc367468ab82aec211b6d5ab7bd
SHA512 e08a34450ebd0a6796544e3d97526f643559d6381d6d034cfb889f1c60f5055003ee8a57d7c4f3d6ea370caabe3fb85b8eba11efc6c16594ab3a6f5015d9c7e0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 25de225ff6769db66793148f6356e6e6ad7dc1994f3fedcb4f0c0b686d5a99b5
MD5 0a0c16a9bb93a96bee808bcccae0445e
SHA1 563c0ae5b7a94929010891347ad1de85744c5dea
SHA512 4978a9863b027b94cdc3f81709009f743ee1f8d293ea6d464ef3c54048d04970947829c6f48c69d84e0e126789f3cf23b3e87d687c49ba64c1a03a7d60e455ad
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 aa9cc9806f4184594c934e3a1373f40a4d0bed1975f9388e4205ff734bd79f89
MD5 357c6f061af5fe1f5dd8711e70c8fbf3
SHA1 4b416435b583d0cc06f237adce8550722b2b2c7d
SHA512 0973b31eaf26f2d52ce2edf4acfafa241639d8f9b2b560b3806559647cc7ef7034a0b2d40aa034a2be565dbd84987385e01a62d71f58e587261c53d798eea5b6
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 bea32a54599b42c12d2082960f7df8e6c49547294d227b74258616546dfc660e
MD5 a3f14cc0c94830fc1d907e7916b13cb1
SHA1 59d7054b523cee52ee872bee18110a26e405b2fc
SHA512 b4c1138ba5d4026d4d588505e4d36e355133e819bda77810183fdbf06c443b83a50e2b3890281b7378fa7d877ab1ea6b4faf68ffe42e487b73b70ba572751d11
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6c9df0e882817b849f175b7616ba03ce3dc245b0b27605d57358d5d3dd5057bb
MD5 d09f0f6bba6f1a04770d07d95fe70b3e
SHA1 8e7b116c28adcc0be38e4bd7bfe07b4216d1ae0f
SHA512 ef688226a6d3aa8a29eb04b23e708f013e9fcff4866f677b7323f48dec02b240faf6e10fadd74bddff6918fe2794e7e113fcc4de987a54323d1763f82a1c94b9
SSDEEP 96:nV/kfoxm/DQYmqN1Oy/wpvWMoiVmdeHgiefUWQyV+VDCziEwb:nV/khIa88GWMXefro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6970ad1d0f4b0611ab4ac213785fb9b324400e976d5aec26932c0a81b551c1bc
MD5 b2f0db23f034058bf9ee957131120c5f
SHA1 eb1e6017653486569bfcd7ce59c02b54c4787d79
SHA512 ec736adaac3e6e957bae5e9c86b7f4235e6c73392555be4640d98c0d315c2497c49c9f8a25f61cc1aab846658e0f1c9b6f2fb6a3e0477b0657ed04fb2083c2ae
SSDEEP 96:nV/kfoxm/DnmqN1Oy/wpvWMoiVmdeETCmv2giefUWQyV+VDCAiEwb:nV/kh6a88GWMECmv2efrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 c3f1e5f37b7c21daa58403e35e1a1a606f5f067c2001e90801f825a19f44fe94
MD5 3296137d62f823a6132b2a641221e5b7
SHA1 19ee81bdf0e77cc554b876985f8b563b9b366b78
SHA512 efad7508b35da84d3f6b569add4eea1f87ed5757b4f0883f094ad3242e5f7322cc1c11aecc7c88a1ba89c6879a7cc5fecbfeb8f5cad7706a444da9275d8ad37d
SSDEEP 96:nV/kfoxm/DnmqN1Oy/wpvWMoiVmdeETCgmPHKWJ7Kv8GgqgiefUWQyV+VD7AiEwb:nV/khCa88GWMECgmvKOOvyqefrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 706B
SHA256 7a92a93299d069f446e12b399f8e3300e7728c7ba9cc0ef4b77fc8fb92b5f2c0
MD5 f330ff18ed8b3d00f20e7fdf5b4a0951
SHA1 db7d24d66437c338ab936770b502a5795f569b18
SHA512 7a8adacd87467483c49884643e2d133e81796f86cda01fd5e7c6bb1b6571a5a10862cd589ab1482c0ea498a66e2a1cf1ffee0a9382455f34a52ac0783f3af4cf
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe580e53.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580e53.TMP
Size 539B
SHA256 887bac786c01d7a6de73e075d3036d95430ae7ff220798a34027d9a13cbf0efd
MD5 700a600881ab82f349d02a7c8a2846c2
SHA1 336685ced522934ae9efce423357a8b0bc204eda
SHA512 ef4a6b7a5950b87e9e957d753b67202c90fcda352070ed0db86a5f5d1e8f7c457e6bdfbb7dcb7c2a29b47ea6273b52c95c50a2aff290ef0b8bd9e34669db4e9a
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3e11024d0d21300bccc9e1f651d2d4d5d169b15e925f20501eaf167c877d2468
MD5 595a24b6a09ba3e4ebebd62007854aba
SHA1 e02c7e3214a37c6ec291059f09cea008b6f048a6
SHA512 c458b35563e7dc19d0d0fd2a3908ff3167f6ed81ee360a1612f4e584518e0f53f2403b709db427ec09c90e2b591a0a5250cfeb37065ab5b8c89c626931b71660
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupl0e2RUEH2kDM3z2OMDCRHU:A9iIxuERzA83h09RZxYl6ZDMaOMWRHqv
MD5 SHA1 SHA512 SSDEEP

Submit Download