17c70348f4ead38fc2128127ff1633284c680a590b2cabb90c39a2b3b65f053b

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 04:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a3dafa13fd8ac9909ed7148e1ca300b4_JaffaCakes118.html
Size 176KB
Sample240613-fbxd4avbqa
SHA256 17c70348f4ead38fc2128127ff1633284c680a590b2cabb90c39a2b3b65f053b
MD5 a3dafa13fd8ac9909ed7148e1ca300b4
SHA1 b6bda19b29db33e903eef827e5406f168a7450b5
SHA512 76610f84f4c65063b8a48bd18b3b744321f9b373ea7ba1aa5d0f15f223464d7041f6d5df8b19ea16f243bcdb79e22428bb3d8a66e80ef94cc4cf024bbe84a559
SSDEEP 3072:/1MN0zN5Ckalwv52MQS+y5oYl4PKDINzA:eNqe6vf
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
3848	msedge.exe
3848	msedge.exe
872	msedge.exe
872	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe
4748	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe
872	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 872 wrote to memory of 2080	872	msedge.exe	82
PID 872 wrote to memory of 2080	872	msedge.exe	82
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3400	872	msedge.exe	84
PID 872 wrote to memory of 3848	872	msedge.exe	85
PID 872 wrote to memory of 3848	872	msedge.exe	85
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86
PID 872 wrote to memory of 3620	872	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a3dafa13fd8ac9909ed7148e1ca300b4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xd8,0x10c,0x7ff9e77d46f8,0x7ff9e77d4708,0x7ff9e77d4718
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:3400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:1204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4708 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,18222609355972316272,5275927578830187999,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:4588

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2668

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1712

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17
MD5 81e892ca5c5683efdf9135fe0f2adb15
SHA1 39159b30226d98a465ece1da28dc87088b20ecad
SHA512 c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4
MD5 56067634f68231081c4bd5bdbfcc202f
SHA1 5582776da6ffc75bb0973840fc3d15598bc09eb1
SHA512 c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784
MD5 SHA1 SHA512

Submit Download

f_00002f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002f
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000031

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000031
Size 20KB
SHA256 28a27c07cccf1a8e37658352320891fc286dd15482331d2012cdf5422b5dcd82
MD5 9a8e538524054f86eb73eeb00e31424a
SHA1 35ab0fff51a81aec3f1c1ca6406dd521c09893f7
SHA512 d8bc2dec1323bf759fc4c3e2a77b64b56d3d80676aa38c7386ffc650a762ebe1633d5a802c5d71c9b485348415ae6c22951b3a5e141a2f203f7faed1620d4136
SSDEEP 384:yKvAZx6Ov7m6IqL8CYo2d20hOjnL+HSrK55EqBXrEVPG/Oa:vvAZxF7m6HTgdLh2ayrQcVPG/Oa
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 5d169211e6505c8482b0b6e9715cadb966d3076e94353ed66b469d75c4ab4e3d
MD5 346ecb4a00623f6edb5b6b0ad791aa51
SHA1 a251221b156ecc1eb937c17d442a4fea86430320
SHA512 0ba1be4f3899405b6b42d127307f7c964d52ffdeebff894c8e7db9b8053a2de70fcc356009c3550a15774ffe39f2dfde3437438ef10537d6e1553f3d6e567fab
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 3033250ad98ea559436d8b2ecf97c48bdd7adf3df92a4637838f2ab543aa19f6
MD5 d92aa1e392edfe5df48a1cefcdab6b41
SHA1 2959c1f0d4dbdaa970784e661bb83dd6b45d3edd
SHA512 73d1b91418f7bc2b1325c32d6e57c783c93b61704d1eac51488a0fab000c5d45430b96bf1a6e45516a63a8a543616fc021ea9ca297f128615ff00053bcf889fd
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 1dfda42fdbf2f8db77cb93598572bac41e0958dcd19051c263898db222495dd3
MD5 d4e9f732ee6dff14fcc143cf2fe8e103
SHA1 7aa1902c1ad8ecc87214a1c63a2e8205d75c77f0
SHA512 3821312e991c0b5d0fe9c2c6ea4976f932e7be0fc1c34a1f7d2b3937963285d041f436b137455e43bbdd9793d336cd2929f4a856222d496aca74f8fbb4e6ce9d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 5KB
SHA256 ba74c7f825cea5a4bd2ea87f95df4409369552509857232d83a7983d43f8fb10
MD5 c21949de6677944c31863eca5004c76b
SHA1 541393525200b11b9fa1a9c7af382b52cfd5a866
SHA512 86a7ea646599c9061eb98439339c28ca4df85fd58f77cb31da11fe4492a99bbcdbc9aa409a03f70f8dde9889e6d67e195e58a9af028ce35fc21ca0edba03769c
SSDEEP 96:76NZK42K/sIZ6ra7VUGaGRGgGzGUgGpQbrGpGQE6pGGaG2zGK6GSE:76NZK42qsi6ra7VUBuVyxgYcrocM+7zH
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 5KB
SHA256 0ba2bc9d9fc9108dcd29c54f0f33a873791ac87f3b52d56cf668ae7e391a445f
MD5 6c0b8a2c9be727dcc1aafcbee9e45b95
SHA1 cce90787723613945568c970b9644f69d360cb43
SHA512 eb6edff5d7d8da7ccb334cde029eac9da91f5250fc89474ae725bf7ffe9e2d2f024f5df37b2d6e17f912575cd69bc88a209cbe291b1066fda64f370cc5c705b8
SSDEEP 96:76NZK42K/MZ6ra7VUGaGRGgG6gGpQbrGpGQE6pGGaGyGKlGDsGDGnE:76NZK42qe6ra7VUBuV7gYcrocM+rBusi
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1749891851f8672010c3c38ab51ba8ace463a7f1659ac3673cec7cd8f3a1d43b
MD5 37ca4f59b7dc49e96b127f7663cda638
SHA1 fc4f34d3e595f175a3038912665bcbe92458e638
SHA512 98087c0fb1a81a4db85d7496eec0e142b07ce7333e56f9059b81342382ea50a3b82ae45f47999c55c2a8b173f3362a160e3202e740bc2490595583a9a86c9013
SSDEEP 96:nfkVoxm/DQYmqh1JYwpvWMoiVmdeHIqQp2rUWQyV+VDCziEwb:nfkfIi/YGWMXdc2rro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 bb283270767ba4eff94d013f38c79cbc90806b3ef28b92f66603c683aa0c53f1
MD5 6f87408b0977fc7e957efee4ad1b6f22
SHA1 8b8d3b105915e915debfecdc099951724ab4fb90
SHA512 6f44a66b9e0c59f19ce6cc67c1514e558f0549b6a75c57fa7f77fcca39f9df1edc7f70790541e114dceabc58ff4317ecf6f18e160c54d981e3ed72917822aa8e
SSDEEP 192:nfkf6i/FGWMW4PYnpkxF+XEr3fABfBD2dy2rrV:nfI/YW5YLray
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 10c09004b69ccf01b46493e860b678f31b2409d19c381269af1a6ba9974b0e02
MD5 8bee7d492162535a6bc6bceb5b503186
SHA1 73e2a615291b8a6a15f3373211142f62a25cdc6f
SHA512 d4986a95502733fe5d9e32600e52e47bea69d7fbde869dc11017281ac983e530b2c27600e583312df889d21a4860cdf25cf22961d7a6385d606358edb28addd3
SSDEEP 192:nfkf6i/YGWMW4PYnpkxFXEr3fABfBD2dc2rrV:nfI/VW5Yar0y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 8fec4140dd9f3eab8365618b9a06e2fce558cbaab24a379aab68d17257eefbc2
MD5 64f3ef6bd0e44771e439aef0380ee2b8
SHA1 b05c539c542b5b03057f69b8302abb8f08e5bbe6
SHA512 76fef29faba0b1c5888c9d9984aece70887b3e7281317ce0dd1936bd478a13cad57257aadf38d9fb23305acf83f35632990c242d89eefbfcfa53d46759e580ba
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupxp08e2RU9dvF3z2OMDCRH7:A9iIxuERzA83h09RZxYEicFaOMWRHql+
MD5 SHA1 SHA512 SSDEEP

Submit Download