08dd068317075bfe973b369e120e0d41267655d0f990887294caced25e9673ba

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/08/2024, 09:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c4bda82f753a6914814e86a85a09df4b_JaffaCakes118.html
Size 90KB
Sample240827-lld86athld
SHA256 08dd068317075bfe973b369e120e0d41267655d0f990887294caced25e9673ba
MD5 c4bda82f753a6914814e86a85a09df4b
SHA1 30f225226923287f7d69b2ab3bde6ce951c26ce6
SHA512 6e19526ea45df5081143b8dd8dab8751eb1789383f467428af90166fbf59a946eee8bb6ee053f48d55863bef848ea20996f33924abc2e7fc19c44488c2cb5e6d
SSDEEP 1536:y2OVs/biOSx4Bs/biOSx4qkg3GBkzBYjxlrDeeeceReeeeeezeeetAYEb5SpoTkG:y7oDl3GBkz2xlZM9rCX7Ceasg9c5aut4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
660	msedge.exe
660	msedge.exe
928	msedge.exe
928	msedge.exe
2616	identity_helper.exe
2616	identity_helper.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe
3592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe
928	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 928 wrote to memory of 3544	928	msedge.exe	83
PID 928 wrote to memory of 3544	928	msedge.exe	83
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 2356	928	msedge.exe	87
PID 928 wrote to memory of 660	928	msedge.exe	88
PID 928 wrote to memory of 660	928	msedge.exe	88
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89
PID 928 wrote to memory of 4356	928	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c4bda82f753a6914814e86a85a09df4b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffff7d446f8,0x7ffff7d44708,0x7ffff7d44718
  2⤵
  PID:3544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:2356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2896 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3200 /prefetch:1
  2⤵
  PID:1192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4924 /prefetch:1
  2⤵
  PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5048 /prefetch:1
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5896 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:716
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4100 /prefetch:1
  2⤵
  PID:5268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5764 /prefetch:1
  2⤵
  PID:5276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,17138266359200830744,610591478021039621,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1828 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4984

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4
MD5 9e3fc58a8fb86c93d19e1500b873ef6f
SHA1 c6aae5f4e26f5570db5e14bba8d5061867a33b56
SHA512 e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de
MD5 27304926d60324abe74d7a4b571c35ea
SHA1 78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1
SHA512 f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 432B
SHA256 efcccf36b0461ceb11223b4c14a6a311b97b5fc536232db4b22969027a2359f3
MD5 5c50f908204bf9362d1b876951453bf0
SHA1 d80de525260a5da5f2d40a525a06221ce6338348
SHA512 e822e8f0d3e1d880c6ef03356cc81ab5d238456b619c17937d59f807a28a68036c7875660d5ef2ab00773cf626acf5ed1e4903969277fa0517f31f72a19f204e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 aaceb0e945054eda7eba041c1f19ea415f88bb1b77d4eaf67d6b82f70dd31dff
MD5 7c5872d322a0dbaa6111daae18724b0d
SHA1 acfa39b96812e5d3d3ab0286f4df1acee151e01f
SHA512 9b8c82b059c2eb6c4ce0c9ec3cbc96a950ea4e86a6cdbb96117c904dccff194dd788928baaf3a640a7c0ce46e201475b21fb818b875f12daa66728a875463855
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 7815e3a479a9ec13eb919193b1e22f899d284d8896413ee782218b1456015106
MD5 929648511b9769681517ef676d0decd7
SHA1 dbb9dd5cd955538204875806c6a84a0b9c01d554
SHA512 7ba384e9a47f1e5e13ddf49bac59823380f0923bdc80f467325987c32e02e266d2a0ee5f1d52ce6082a2d6ab74bd33eb42e538a44b6b883357c99a963c8172e6
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 2d2744170721a739ce33bfcc059bdde778bc747db1a069e9906b372ef579a82b
MD5 77a0faf436e37384d967be9b410da4c0
SHA1 d38897671114ae028df39e30f3d4d812b13f238e
SHA512 2360f676e49a03b241a01eaf8d301684954b5ee971e69947da58f85df3ddedecc968d67bf8aa6f3eae9e40aa194e0dd5698240fd66cc5a7e41c31bf0bc1b319a
SSDEEP 96:n0AkRFZ1dRwpvWMoiVmdeN+pcTSFg24piNOiHUWQyV+VDCAiEwb:n0AkRD3RGWMd4cTSFg24kLHrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 45fe66557251efcdf8c9bf67902bdb510c2ca6b11dbee3a1eb503bbac3f8f6ed
MD5 c018346ef8857b777187ca7ba0690124
SHA1 134a82b4a29302a76e0eac2b4e68e3f93abdafbc
SHA512 efffac2a41946b26c89f918a16c8a18c4115c90a258d424e80d1266e1cc0c6ed1771592c6e365ae4f2d4bb2c03875ad932b62cc38adc0b712d724fd2beacdaee
SSDEEP 96:n0AkRFZ1dRwpvWMoiVmdeH4piNOiHUWQyV+VDCziEwb:n0AkRD3RGWMX4kLHro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 05ace491059f2b8b483a80fd3c7063f900df1a0a8badb2592e57ce53b99c36e2
MD5 b181c78ee20a2f1a8f240e54e145407d
SHA1 a5fb23c0dfa3316d647171305c5c09657ca15229
SHA512 8b2dd25cfa99083255253402d08c40104dae2599c6b9aa7053af76fb2c2d0b2326bd47a3b0ba6e39f07efd194c771cd8709793ca4045b96dff7fb45b1cb0bb92
SSDEEP 192:n0AkRD3RGWMd4cTM7SJpmRjEggl24kLHrg:n0Ac30WGRkL0
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 9f322d6304e8f1736eefb73d1119ff88e9fdbd3d88c5a2199c475b48be388294
MD5 4f5399b5f0cf8ae23f4dea00e38f365e
SHA1 f8b7c7fa450a1f0d2ac6590e27b632e38f36f859
SHA512 9cc7d6aa128367b45530672d718558630628acf5067e9f896a6be05999095d48676b92d56659de391bbc3c53d4e511021c08dbf259912bbff00e4c24e7d5e639
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupj3e2RUzc8mRw5Ytj9ZklqS:A9iIxuERzA83h09RZxYj/sZkLsJVF
MD5 SHA1 SHA512 SSDEEP

Submit Download