a0c0a67b156787f090bfa775e7fe02974983a8108e55f1665bc5771dc12fe629

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 16:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a6972554e0ed7a6824d0f37b8b3c2033_JaffaCakes118.html
Size 282KB
Sample240613-vcs6dsxapc
SHA256 a0c0a67b156787f090bfa775e7fe02974983a8108e55f1665bc5771dc12fe629
MD5 a6972554e0ed7a6824d0f37b8b3c2033
SHA1 b655c4b26126afd03074b925ffcb427539d3e519
SHA512 387be3b9588ac023aef9dc827e2922e4b2ffd2168e7cbe9b581e13810d9cbd1e12e60a7c0145194424129027b806d57e4ce5b79ff7846435a62a6febb356afc9
SSDEEP 3072:rQ02t20opw/pJpdPTr4IwHdD0bUwHmE4U+Otab:rQ720prQb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4936	msedge.exe
4936	msedge.exe
2388	msedge.exe
2388	msedge.exe
5008	identity_helper.exe
5008	identity_helper.exe
1532	msedge.exe
1532	msedge.exe
1532	msedge.exe
1532	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe
2388	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2388 wrote to memory of 3100	2388	msedge.exe	82
PID 2388 wrote to memory of 3100	2388	msedge.exe	82
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4656	2388	msedge.exe	83
PID 2388 wrote to memory of 4936	2388	msedge.exe	84
PID 2388 wrote to memory of 4936	2388	msedge.exe	84
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85
PID 2388 wrote to memory of 1528	2388	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a6972554e0ed7a6824d0f37b8b3c2033_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffabdd646f8,0x7ffabdd64708,0x7ffabdd64718
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2876 /prefetch:8
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3176 /prefetch:1
  2⤵
  PID:3760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:4188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6048 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5868 /prefetch:1
  2⤵
  PID:3276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4088 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4164 /prefetch:1
  2⤵
  PID:1772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,8978319587386932162,9758319205286230978,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5360 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1532

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:932

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5060

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 5476117a0271d36cc096ed275886d935bc9cd1f223a35874d947397f7a2bd473
MD5 d0518830699ebf436f3f119205c72b67
SHA1 35ec8942021420aada82cbf2bbfeca58f264ccff
SHA512 5a2ad444904abed1b7c7718de6e72489e124be4adcf2712aa7e67a2d413149f7b0a53ecd12461bfb77611aba956ee44639a2b71bde8fc5d22e039c727b305bca
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 8ba7f9f7350ac6c6446e635996050dd83e199bb23ec14f788e86e4bb200b7900
MD5 c191e2b576fb43e2a0e2c9d4b4b1cf9c
SHA1 1647d5e96a9d9c52b6aa0b16e31f990532dd2f2b
SHA512 fd122ee80be6bf832300411b8a48a4e6312756031183ed16ae151fe524125a2c0457b9f8d28fc0259d6db597441da179796156c43617e05c5234c295ca171a80
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 26d7621fa9615b30237e8611c4360aa3ff1b1167670deaf6193bab52577f92b6
MD5 a84582e7b36d7ab2df24b0f4a8ce093f
SHA1 7a397e5814de2a1a502a39ee9402cdb81910cfba
SHA512 d6d429c030c7a461b6a7a2ed76963f50f7fcfe875c2b43f644e4ff69a5d6a015bb41a95e1c9c94ba1903d9a7bbb69c56e702e6418a888c4600d40ba0774a679d
SSDEEP 96:nXk/oxm/DQYmqw1wzotCmwpvWMoiVmdeH1DDUWQyV+VDCziEwb:nXkBIfWkCmGWMXFro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 1db50baaeb8d021c5033c26127acd567412b6d5c036ff5abfc9570a904f8c2e8
MD5 76aea2590b7373a8c25c91adc72034b5
SHA1 4397c8a3ccfcc5832d1496753ac1fa41d7f8c5c1
SHA512 749661601589d2a990108b726b079ae3637c617ccc4ad47514ea3c15a9f6706c5b2394119170c089d11459a14ddd26c5a1c3b5f558a1dfda97fb04fc3dcc51a6
SSDEEP 96:nXk/oxm/Dnmqw1wzotdmwpvWMoiVmdeQe1RbeY3V8HmhDwb21DDUWQyV+VDCAiEc:nXkB6fWkdmGWMAe1RbeY3KHmhDwb2FrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 b586233af56ee4af8c8e3640d1e94f7fe19ac85e4143f578143b94f082dc43b7
MD5 8bdad05f0ea898492e25cffaec119434
SHA1 f1ac806fefddf25d0d9617ddc2ba44ee0535bacd
SHA512 97b3ac516e588bdc7641b9449c478983f16b3369312305e2259c5226c4a914e2d64366175bf58875f1f07adaa584a6a6b5ddb68f607596d8cc4831c0742d104e
SSDEEP 96:nXk/oxm/Dnmqw1wzotdmwpvWMoiVmdeQe1RbeY3V8HmhDwb21dDUWQyV+VD7AiEc:nXkBCfWkdmGWMAe1RbeY3KHmhDwb2Xrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3ea70ce9e4265ac67a2831df062d3ae02e35e26d327afdea9f7b0310736be728
MD5 e2ea5f2b04113414a75d4203a7bd26a4
SHA1 ccc76410a4bfb805dd6aa5dd073595b812b0f8c8
SHA512 131f32f85039d6d80da314d2906445d124ab2f1d378264d68a61c6e0d74c462c98c43613ea0a29fa1c77da3b43e6254eb5e5648e9cfc71b1ef899d818bb2adfb
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupDAe2RULSRsM3z2OMDCRHqZ:A9iIxuERzA83h09RZxYqpGMaOMWRHqlb
MD5 SHA1 SHA512 SSDEEP

Submit Download