ba03ecba2f81e95eb12c5ea1fabe762af06076428eb5f997901972a870726db6

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
31/08/2024, 03:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
cc2fc5f8432a397e6f410a8802aac9f5_JaffaCakes118.html
Size 245KB
Sample240831-eh2fysvbkd
SHA256 ba03ecba2f81e95eb12c5ea1fabe762af06076428eb5f997901972a870726db6
MD5 cc2fc5f8432a397e6f410a8802aac9f5
SHA1 c001089798af43121fae53ba9901ce401417e3fc
SHA512 0e4a6e6f2be248a0d9ea14f8c3d2459fe38993ee2f72f82bfe07ea31c79bfeb6f8770d6fb5ac0333cecc968927536a9fdeeff1a0f6dbee6ccba6d08b0cab10cb
SSDEEP 3072:p3gHWosYPE3RIgfhpDpplIWY7RkTPSHSeT6dY:CHWznkN
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3220	msedge.exe
3220	msedge.exe
336	msedge.exe
336	msedge.exe
4876	identity_helper.exe
4876	identity_helper.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe
1128	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe
336	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 336 wrote to memory of 656	336	msedge.exe	84
PID 336 wrote to memory of 656	336	msedge.exe	84
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 2348	336	msedge.exe	85
PID 336 wrote to memory of 3220	336	msedge.exe	86
PID 336 wrote to memory of 3220	336	msedge.exe	86
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87
PID 336 wrote to memory of 3500	336	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\cc2fc5f8432a397e6f410a8802aac9f5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa2e9046f8,0x7ffa2e904708,0x7ffa2e904718
  2⤵
  PID:656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:2348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2836 /prefetch:8
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3332 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6956 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5884 /prefetch:1
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,14123005136353950680,946309751564190292,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5708 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1128

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:540

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
MD5 f9664c896e19205022c094d725f820b6
SHA1 f8f1baf648df755ba64b412d512446baf88c0184
SHA512 3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
MD5 847d47008dbea51cb1732d54861ba9c9
SHA1 f2099242027dccb88d6f05760b57f7c89d926c0d
SHA512 bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f
MD5 SHA1 SHA512

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 23KB
SHA256 6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8
MD5 a0423f1305547bb6b8f5a4fb1a9fc2d8
SHA1 092dcf1fe57e6bb53821eb754e04188ee70602d5
SHA512 b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3
SSDEEP 384:aAW2VTWfhCNc+bzBo3WuAi3FwN/f25rCT2LduMZ6wHWPbcb1xDtun1GrR1+4JdNE:aAW22hCNc8zQk/uhLdue52E1xG1QCkPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 23KB
SHA256 1156bb50a264543f6a9dc8922dd2c65d444c8bb11b3b18be95d5adff840b33b4
MD5 33a83c16527e4531fbfca2631f653674
SHA1 87a63514c262ba4bffc52d2ceebb3ca14353507a
SHA512 f1dba28d0f81aa0894436ae7b4ba76a2e635f002f666d17d31b8b21500dc2321d7862ca8dcfd22e44aab4d1f33112c076dc95191c889546a40f9c6197cccbda3
SSDEEP 384:fmkqzlgw4CtpJByzHvyMPn0cdWgrlF1xUQNaASTJJlqC3Ix7RQLSKYfkXZzauNEp:ftqirs1yZP0yVn1+QNliJJlqnx7epD2
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 4721a500d5bed1db24263554e1d8520eceaa5067553ece2bc3ec7c1d0c7ba09b
MD5 eca250130fe96fbcfb73a0b7d765f644
SHA1 7a0a3e97f2966309731c66e89edb41aee4f5c343
SHA512 e631dc7b8a477e4ecdd387d985dc4630f5d5129a91c5bd37f1558c9e260628a058b618a96fefb074e1b7fdb07c9d22b219fbd9a6b2c3520e9837abdb2e2827d4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 9f957e662286ddb763fbb342deb2934d7ba8d1368d56337eaa9d0b00395b61b5
MD5 712b5432c31e7e97494dec226a8816ae
SHA1 648baddc3f4eaf156432157b4199b01f7ce49b5e
SHA512 f83849faef2e5af9c05dbef78afbb27d5c1c4342aa13963563b8198b4e422dcb9821d7f0204fa2ebbf60c3cf36f0ba34855c3f8fdf4b56cac6c034fd29876446
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 2c52174b6625865d65fec4e2e23dbf98045edb3cd14bbc81b58961b84f635033
MD5 8eb3a0c26c6ed8836999169236e2a5b6
SHA1 59c59d16250b702da7db2b36c2a1489a2df8663f
SHA512 5f5f6e13d99b74e57cafbc4a3a4d2a0f6dff4b1e1a7e04f0788b7ca0fa3c94f9c3df56ddfdf51d97c0b30c902df719dbc8c37e4d459b570ed7628ef345cf4298
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 ce9ad0fe222f29a13e2edf213cb6515258e2369f54e7224a2bb5ca3b5808a018
MD5 627b9d8f8fa245fd943e9841645d716e
SHA1 5d22e75a1a8009e570dd67bd9cf1ee3df06403dc
SHA512 c7d270981f7f21994fa036eab55ce0e8003942a36cf98b998bb868b24c79ad60c02cb84cbb5d06ee880b0211307e0b01b03b1561e07b0eecf392172280628001
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 7c150bf8ad85b15312e4f696378ab7251f900961f3c513cc67ee6937e744549f
MD5 76f2470556a10bd0b1ec0cff27c24a86
SHA1 a25daf2337a0323ef4c118a56742b56e9a0a1be4
SHA512 72a77220d3cd3fa6657fb753f6368ad3dbe24a1c82f72d7a385f86bb315ad15d90409e76b76e69233e4c9543a11a47a715a122b46f06e97852cabf133b4a62c1
SSDEEP 96:nHkRa0QZs1fYC/OrwpvWMoiVmdeH4s5DaUWQyV+VDCziEwb:nHkRuZsaCqGWMXero
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 1ca98608e2e98f1f57cec4ab125326137be5bd0930691e8fca3f544999edfb01
MD5 a265eecd596f757036eb768ff2ad00b4
SHA1 17bb6def6e96e3abad48d9e444ea473d1bd0b2df
SHA512 d95b5e4810e31089790bddd9b510c935c18134b3561bea8d6efc8d6cba1521e303d923e88580b36b8143d294b312a81767abddd3d149a99f765e086bd8483f4d
SSDEEP 96:nHkRE0QZs1fYCWOrwpvWMoiVmdeJjBmU477xOWTGKSl24s5DaUWQyV+VDCAiEwb:nHkRYZsaCHGWMZVmU477xOWTGKSl2erV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 9e48dab43500d7fadf36759dbfe1f78e85b16ae1e8f9a2ab9fac3a55557bb6fb
MD5 a4923a3ce2533404b9bc7451d265f138
SHA1 bd6ed14dbf3fc7a59d08d5d93e93fa5f9f020586
SHA512 43b18f9e4d3629c244982fb016feb9ccb755548f43bc862be7e5505ff008cafb19ebd0c2a1dd85bb811601de21632aa6f8e9080b31c7916b6089200eb6d3af79
SSDEEP 96:nHkRk0QZs1fYCWOrwpvWMoiVmdeJjBmU477xOWTGKSl24sPDaUWQyV+VD7AiEwb:nHkR4ZsaCHGWMZVmU477xOWTGKSl24rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 8945fbddbb75b1af91cd150ce52d273ea08265a2258bdbdccd76223ee2d548e6
MD5 b7a812af6c6af61e5eb284382d685235
SHA1 6dd0d4791743268a11dc8100c65fbe64de72c664
SHA512 75a54a46cfa498624815f6ac5d9120544e18e44e19c8bedad961722a028e696c9fe551fbdec5d78f9a8a444db317c859a7e06587d23daaf263cbdde2ac187890
SSDEEP 96:nHkRE0QZs1fYC/OrwpvWMoiVmdeyBmU477xOWTGSl24s5DaUWQyV+VDCAiEwb:nHkRYZsaCqGWMsmU477xOWTGSl2erV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 370B
SHA256 a6e86231f432cab8de55ff296c93f5373ff7c118154e947c789d81e6f8831511
MD5 2ad7d6f3eb7832e99fade3ff57addae4
SHA1 1f09d56b4a628b3909e8a02dbf7a51eadb975473
SHA512 22211290903505a1f990f42ca87d91b959e988e1c9c45869699899693bc559e111cecb2ac6c2c5ca9d5bfdb54d0230e7d9891121d1bb1c5afcadf672287ce28d
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe580a7b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580a7b.TMP
Size 203B
SHA256 7d04eb2354be6fb37fb2a1c4ce9a03957af3a52b3221f5a951ae010bdbc46a69
MD5 31a6ab75bb001ca8c841b7f5aca2b75b
SHA1 5c07ffd0272bc3b332d370c4f80d6fb71dfdfd23
SHA512 c847957a3acc04809a0f31379e68c520b5ba0400d53bbf0d7919067a292a3e3ab6e91bbf3a8e86e6f02a366aa391c5324911b4e9b7424f6d112e6a084b18a797
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e017b1b1ae448ffbb1d244e3480c3f7b00c597d50cab4cd7a25ec44e0a5c4c92
MD5 e59fa1a4bc3d9aea29d0ce218e5524fd
SHA1 ec1594f20477b4d8f16f32ee46bc04f068c9325b
SHA512 d73b92b857a47ec2050ac040921e7816ab784f0e74a77ebc81acf6e9088e35c25fc72977e3aec2f5451b8c4b6d65d25856398354d49f965b86a736d9c6733de0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup4Tzie2RUAi63Rw5Ytj9Zkm:A9iIxuERzA83h09RZxYAc3QkLsX+1
MD5 SHA1 SHA512 SSDEEP

Submit Download