60a6ee539801bd01ed7ac07cc83ecee0d2b12cfc0edfa611c615afe5ca3012ad

Analysis

max time kernel
142s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/08/2024, 04:45

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bff9e48e54ad75ccb05d684f0c233ded_JaffaCakes118.html
Size 267KB
Sample240825-fdvy2sxalm
SHA256 60a6ee539801bd01ed7ac07cc83ecee0d2b12cfc0edfa611c615afe5ca3012ad
MD5 bff9e48e54ad75ccb05d684f0c233ded
SHA1 b7ea709e850972bd3ea11879bafee26f401d1cd9
SHA512 1c4a910704ef9b6499042d2c243e643a33111fe88fae79b0657cd53bb0e839989e7ab91e5c19225f43d3d384a3fd19ce08b78a315a3cf2233ab18684561df03e
SSDEEP 6144:lfvP6Gp17WI5XwvGh8oZ7MXmNRch6JW6u2ok:lfvP6GphWGhWXmNehUW6Zok
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4272	msedge.exe
4272	msedge.exe
944	msedge.exe
944	msedge.exe
2336	identity_helper.exe
2336	identity_helper.exe
4200	msedge.exe
4200	msedge.exe
4200	msedge.exe
4200	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 864	944	msedge.exe	84
PID 944 wrote to memory of 864	944	msedge.exe	84
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 1124	944	msedge.exe	85
PID 944 wrote to memory of 4272	944	msedge.exe	86
PID 944 wrote to memory of 4272	944	msedge.exe	86
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87
PID 944 wrote to memory of 2620	944	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\bff9e48e54ad75ccb05d684f0c233ded_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff877946f8,0x7fff87794708,0x7fff87794718
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:1124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2820 /prefetch:8
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3140 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:3708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4884 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:1720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6288 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3972 /prefetch:1
  2⤵
  PID:3024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5920 /prefetch:1
  2⤵
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,8466885210707820407,10466736632919383652,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4140 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4084

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4052

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9
MD5 eeaa8087eba2f63f31e599f6a7b46ef4
SHA1 f639519deee0766a39cfe258d2ac48e3a9d5ac03
SHA512 eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b
MD5 b9569e123772ae290f9bac07e0d31748
SHA1 5806ed9b301d4178a959b26d7b7ccf2c0abc6741
SHA512 cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795
MD5 SHA1 SHA512

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 23KB
SHA256 6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8
MD5 a0423f1305547bb6b8f5a4fb1a9fc2d8
SHA1 092dcf1fe57e6bb53821eb754e04188ee70602d5
SHA512 b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3
SSDEEP 384:aAW2VTWfhCNc+bzBo3WuAi3FwN/f25rCT2LduMZ6wHWPbcb1xDtun1GrR1+4JdNE:aAW22hCNc8zQk/uhLdue52E1xG1QCkPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 77564a729770c3948d9b018632802e0c955e4160d58920d0cbd19baa8572231e
MD5 fba8345743d056ac2c071b3ea35a5fc9
SHA1 2b7927fdd634aa4eb56db6c02566e8728fd55612
SHA512 04166a6f1ba3384c5769669f1b35eb48fb9738bf514ba0cfaac76e4faf400a9e19e17ae51edaf9b0d6e7903a49aa1b33549a33357f5c1d0f081d33491f5786be
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 63e644de67091128f7a5d02f65e3231c82078e0642f7d6304fe7ba4dcdf99e71
MD5 2a515d930d92047b985c5de8f3dc27ce
SHA1 658871f400fca4012e71bc8c92a002540a8e5fe3
SHA512 d6a219e87dcb03db72e647631b6599fe8818c240f2e7ff6d15ebd703b47dd474657e85ab125501b98d64f7b8ba1ae95460843fa22d810322b4a353e0ba0d25fc
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 237eb30c41bd2fe7dd4cd07f807916f99a42426d8c27bfbe2c09633ee13597b1
MD5 6e2fe351d715fdd7b4095a126dd8466a
SHA1 a2b301e35cadcdc70e43c67ef9edfecdd40df164
SHA512 6e25bc714c80331547e1a1ccdd69fe50ce2599ac32b6aa196ac715dddef2c7766f943c2d8f272b44705511cd5f892a18fd70b7d29babfbcd3111bfc54622fc58
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 10cb001db880bb5cddb4598fa9afd6e6bcf5c0402968880c2d0abbb1586efc9a
MD5 a7f44f3b47f4e2d1b3348246f1468d87
SHA1 f5b5f4611b23d0e64fa560552f03fcfb8710d0a9
SHA512 19e299d00f7aca56693a786cbf8f1320c2993fa3af5777d9c880bf53f82f60a2fdca176d8ddf64368ea404686e22eb3c9793deb46292164a125bbb6cfa525a96
SSDEEP 96:n4kzFJg1AbwpvWMoiVmdedLWbRhdRYqNncQ7Ep/2k8nFUWQyV+VDCAiEwb:n4kzUmbGWMtLWbRhdRYKcQ7Ep/2JFrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 86a34da33ad1c8cc9ec9295c590dd4a3e2da1ae8f687055547cc95f78999469b
MD5 fe45cb52b1a357bd1d93cdd0765690f2
SHA1 af3ee0c48fb71c20106ad1be61ab4ffba3e73385
SHA512 680687094c6a88631e019709d926f2c7ed718cae686b436c2bcaeaca3c6906661871e27135c6c4082388eb83fe436171bda5cc295a9b0872a6384fa16aa62be1
SSDEEP 96:n4kzFJg1AbwpvWMoiVmdedLWbRhdRYqNncQ7Ep/2kgnFUWQyV+VD7AiEwb:n4kzUmbGWMtLWbRhdRYKcQ7Ep/2NFrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

a04b1490-2dee-4830-a232-bcff3587ca56.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a04b1490-2dee-4830-a232-bcff3587ca56.tmp
Size 5KB
SHA256 b21dd7c7641f369fed7a38010e0b52805879411e0c1d49d9d14e2285ba68f808
MD5 35b6b2ffd14f520438c2c4e5dd9d4c9e
SHA1 1f6bc80d530cf108a2eac02ebe22237d97bdff11
SHA512 bc5263c59fef9acd0b2b114843e661a3ef3519bb6105d2c69819c76ed132f1ec8983775815b437e5690c481e16813d35013536d9c545a311fa8a2bd33d53eebc
SSDEEP 96:n4kzFJg1A6wpvWMoiVmdeHk8nFUWQyV+VDCziEwb:n4kzUm6GWMXJFro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

fb9b4590-8db4-46d6-876b-d9903d72ecf6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fb9b4590-8db4-46d6-876b-d9903d72ecf6.tmp
Size 7KB
SHA256 284afde5b467d8eb12eb997e52ba28426849fff542ce3f2014b7a82a95120be4
MD5 0c0df7aeb329583cbdadc1bbbb947824
SHA1 bb3fae48a836fe36dfa86865465e87ce47812168
SHA512 bb9143e4de7d7a16323cbdb8bbecfaf929b5bfe78c381e3b1d515a32fcb0d88a960eb61d81b5f040691be486efec65f6fe02d41a58924a640f9560a3e75f23fc
SSDEEP 96:n4kzFJg10bwpvWMoiVmdedLWbRhdRYqNncQ7Ep/2kgnFUWQyV+VD7AiEwb:n4kzU+bGWMtLWbRhdRYKcQ7Ep/2NFrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 2c4be0fffb27191af46ded500dd8a6475c37e04601c9434b54dad38e77179bb0
MD5 d3f31699c60829e54d2040ca96e1d5cc
SHA1 ce4c374d990870856db07a91a933e66a8514eabe
SHA512 3a8c238d9dbe97fb7e850a7ae6cb81d28729f4c743ae4b8e684a250be7a8f038aac152c8d19fac47bf67c74b44ff88e8211b56eee2afc7df41477dc1a729ecaf
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuptLe2RUsCNn2URw5Ytj9ZkG:A9iIxuERzA83h09RZxY98t2PkLs9dk
MD5 SHA1 SHA512 SSDEEP

Submit Download