f780bae91e353c3f9ca4c62830cb0bd655a444d3f8410f3f42cdb6ece6e85c7d

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 05:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a4070c1b6cb7ae97f31d268cb669226b_JaffaCakes118.html
Size 173KB
Sample240613-gcdh2swcqa
SHA256 f780bae91e353c3f9ca4c62830cb0bd655a444d3f8410f3f42cdb6ece6e85c7d
MD5 a4070c1b6cb7ae97f31d268cb669226b
SHA1 71689431fbec3b1a69cb07eaf099bc4221c9aac8
SHA512 f234956f16d0850fb4f2d32fd2ab69ab6a306bb0e80286e2d1a2ec6879b01fa7d3b39c2db1446a868d43559c5516123d9c11172c71d94c9dd392efbc023a00df
SSDEEP 3072:/7qw/MX+HYYNwrFCEyyb+HMwUhU9F40REgwX2BXjX5XrgBelobA4Xqb3Skln+:BEXUwrJygBelX4Xr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
5040	msedge.exe
5040	msedge.exe
4272	msedge.exe
4272	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe
2180	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe
4272	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4272 wrote to memory of 1520	4272	msedge.exe	82
PID 4272 wrote to memory of 1520	4272	msedge.exe	82
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 4552	4272	msedge.exe	83
PID 4272 wrote to memory of 5040	4272	msedge.exe	84
PID 4272 wrote to memory of 5040	4272	msedge.exe	84
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85
PID 4272 wrote to memory of 4512	4272	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a4070c1b6cb7ae97f31d268cb669226b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9082a46f8,0x7ff9082a4708,0x7ff9082a4718
  2⤵
  PID:1520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2292 /prefetch:2
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2352 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:4512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4960 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:4052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5448 /prefetch:1
  2⤵
  PID:548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5468 /prefetch:1
  2⤵
  PID:1176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,4642107848572714083,871869900147934825,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1736 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2180

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2484

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a055d69c6aba59e97e632d118b7960a5fdfbe35cfdfaa0de14f194fc6f874716
MD5 c5abc082d9d9307e797b7e89a2f755f4
SHA1 54c442690a8727f1d3453b6452198d3ec4ec13df
SHA512 ad765cddbf89472988de5356db5e0ee254ca3475491c6034fba1897c373702ab7cfa4bd21662ab862eebb48a757c3eb86b1f8ed58629751f71863822a59cd26c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 dfad4e020a946f85523604816a0a9781091ee4669c870db2cabab027f8b6f280
MD5 b4a74bc775caf3de7fc9cde3c30ce482
SHA1 c6ed3161390e5493f71182a6cb98d51c9063775d
SHA512 55578e254444a645f455ea38480c9e02599ebf9522c32aca50ff37aad33976db30e663d35ebe31ff0ecafb4007362261716f756b3a0d67ac3937ca62ff10e25f
MD5 SHA1 SHA512

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000014
Size 202KB
SHA256 9462da5aa6e2a762b02a24b7305bac86349e5b5ea182d36fd6a163de550cde60
MD5 6a16cbefd2e29c459297b7ccc8d366ad
SHA1 40da0213a9e5ea4cb6948f4a8e92b5e8b97e6cfe
SHA512 6a9de0231f9987554a20208a89c6c802d28c57ecb6f9e95771c94156b65c61ac1e18298ce6d3f0559d3a08052845cc2014dab335e119fde731d745e4857b7d74
SSDEEP 6144:MpsBLK1nTbtBiyzVDKt/evvpW7+wub6zB2FA:RBLunTJZzhvvprUV2S
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 456B
SHA256 019096003d45a1efc2945aed077b1823c7dce2d686870cf3279f1a6e26b91278
MD5 fea181e5ab81ed02e9b1b3feeb6eaf9e
SHA1 9a3c6113b347b2423ac0dac3eef19357a8e7780e
SHA512 16552139ee8032fe5b15e16c5df948f7fda11eef80c0ab50b9c32644d2e69bc2e468f399609a4dc870a11eba2a508edf64fcce84acc6fa832ddbbbb3b82a2630
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 504B
SHA256 f5339c59dfe81b8ec10c5a1ad097ac47e8ce5e06f4ca6609babd3f579c6ed5b2
MD5 3e0495574919097bff24ee12213d5e20
SHA1 fa5e2b49b69235138bb7b8ca220cf3748b3c7ce0
SHA512 ae194b10d1608ebd3cc70fa8f7f5403328a068832e4d28e4a852040637b2a33ac2f74c5f6430ccb102648a72e2ec2206cdef9b1d07c4dd789201e04ff9b3ee45
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 ab4695e1f785b9203f3f803bfa91811cf09b5ae69dedd7576b3c9bf22c4900d2
MD5 7ba7d8999a7ed6d75b632c7d22b7fc83
SHA1 5f6a40e1327515301a5eedbba12a7bdf0063e02b
SHA512 621c073c97db7c104382c0079bec71fd6cf7db4e948ebc73df0c856567cd12678c322e65d93c4726a2972a8657845e34e90a3b33f1e8c84e1f18d6b46fe4594b
SSDEEP 96:5IvAw6fUzT97/YN6iJSKk6M9GWGaGdzGRGuTbGdrGqGdvGdMYGGGR:5IvAw6fUzR7/a6iJSKk6M9l5IEBbmH0v
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 efd3f32c0bc7d86bf4435a27bf26fe267bdcde6ec840f745f788147e28f1e486
MD5 941506128ba952a5f2da57544c00e253
SHA1 e399033fd3830e8d9aea97f9e66615fe5eba9e52
SHA512 50a2689825d852d4f99c009ab3e625515f625a56b3aec900fd353556bdd5437889f8cc28a12be47e2c00c2225be2762b6358f467993a9faff0654f348988d515
SSDEEP 96:5IvAw6fUzT97/YN6iJSKk6M9GWGaGdzGRGu1G8UyG9GfG3Ip:5IvAw6fUzR7/a6iJSKk6M9l5IED7Uy8g
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 5e2900533efdc6b97077e49de49a9b6f74166f3e961b1e67914d49a5b82ffc9d
MD5 9592564dd1081f4373856a2a3b9d5a9c
SHA1 0d82ea74bc297b243b46cb649167051f9f9aa60e
SHA512 61ee48b9a7c8052ffd92f5214f2218ee48dd135282e0f8cc91cf182f0153c9bce20bd2ad1e1ed97d1fa9178d5e278e79225c35d9d0368a12709e2576ad57c811
SSDEEP 96:nPk/oxm/DQYmqw1yEeEcwpvWMoiVmdeHnaT1UWQyV+VDCziEwb:nPkBIXUEebGWMX41ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 1312d5607b5bb258e360b60cd78f51d3a189c43f7a6b47dfd54f9f9298de0c73
MD5 4f68b3150b54061407f41357ef4f4cac
SHA1 5e0a3b1e68f0bac20490433b03392c044dec456d
SHA512 e934c00fc6fae1bf105153cdda5c5cf04d06d913de347306bdf83ab6f11d60437b4a0676f95eee12e43b84c9cb345d5beaab3d89cc8f455e4ed8f3ca669b409d
SSDEEP 192:nPkB6XUEebGWMfQMCoo06kM4+oTY47IKBUKi241rV:nP3UeW8oz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 963dc2409d7514f13f0f3fa9c16148cc4256737fe792be2a42d291ba6b962be5
MD5 addd89afd9b871cc1feda835dca020ee
SHA1 8d56845e60cc47682638b3d10c5d0ddbd16e21c0
SHA512 8cd8750f6bbc61ef967f09a97b9c43f18664a28595d2c0f55a623339e0efcc6d0908f8e3b6f3c294d3629cbd33ec778f4c7315cc0acc862da2cf058751111101
SSDEEP 192:nPkB6XUCebGWMfQMCoo06kM4+okTY47IKBUKi241rV:nP3U8Wroz
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 86c1fa74e496e61dfb118beb118bfa58d807203cc077eb93561ab0d601547e58
MD5 83c0482e1f48d26b0438a9271fe80f34
SHA1 a09723a6792a3235bb4197f16745fe15ae3d306f
SHA512 f905b6cabd59b08613d97ca33ff817f8d2be168ffce6540dbac8b092999e3a96a315a430c8a6509cf8914ce8ec5343917e4e8ae98df978cc76247397b828ea71
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe5824e8.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5824e8.TMP
Size 1KB
SHA256 b65110942bb441c21786a6d0c68bfcfa87f2134e48803d03b24708587083dd11
MD5 3d86e8d4b199814dea0e29d616998a4f
SHA1 6d55651be7df15a58903f87e3351d19e4ca9dbd3
SHA512 1f6445073ea3a305e1a1192fc742d90f8bc0d16d67c8e7f00d63743bc5b264b12cf64f2fd9f1c06c8fdab6e5d053514ef4b7cef058a37fa941bfad8cda2c8587
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 64dcdcf17031e65dd64bbbbb0158129335337e9f6d20eb565cfd7d01a09587b4
MD5 5739cf28c559eb0ffaa1f6a0e9c1e92e
SHA1 1017759caa2cca0555d4095a5cee18fe86be6831
SHA512 58c6b1a838515d78ec40c4a8d51b2fdb83ab4c75b360c067b70f3f9e81b310e7f8654b75a310417f7cdf0b4be73541e71852b857a55cd4afaee8b72ed83d38ac
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup2SNe2RUgd/9tT3z2OMDCRm:A9iIxuERzA83h09RZxYLJHdLTaOMWRHG
MD5 SHA1 SHA512 SSDEEP

Submit Download