6b85d179e1fbe4c9248f371782bfa8b06827da134523e0dd6b1ceb5a5bf9a99b

Analysis

max time kernel
145s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07/09/2024, 10:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d1bcf5da406f138376e1f779278adf3b_JaffaCakes118.html
Size 74KB
Sample240907-mphw7azemg
SHA256 6b85d179e1fbe4c9248f371782bfa8b06827da134523e0dd6b1ceb5a5bf9a99b
MD5 d1bcf5da406f138376e1f779278adf3b
SHA1 a43d1ef69e4f287d24e5aaf6a98b1adc22f5c03f
SHA512 3cc4daa069987ebf18743b72b7d4d2b4a85550b72f9932c1b7028a597d0dab866a20b7d6c87fcabe8829622c92ad8c216273656f9604bc06ee93c0849d27d730
SSDEEP 1536:Iwgr8VkeO3xpgBEyeyG6L/odVhuzaS6cgRrzttbV/H:oeO3xpgBEyn7odVhu6VttbdH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2472	msedge.exe
2472	msedge.exe
2992	msedge.exe
2992	msedge.exe
2476	identity_helper.exe
2476	identity_helper.exe
1356	msedge.exe
1356	msedge.exe
1356	msedge.exe
1356	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe
2992	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2992 wrote to memory of 3904	2992	msedge.exe	83
PID 2992 wrote to memory of 3904	2992	msedge.exe	83
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 948	2992	msedge.exe	85
PID 2992 wrote to memory of 2472	2992	msedge.exe	86
PID 2992 wrote to memory of 2472	2992	msedge.exe	86
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87
PID 2992 wrote to memory of 628	2992	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d1bcf5da406f138376e1f779278adf3b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ebfd46f8,0x7ff8ebfd4708,0x7ff8ebfd4718
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2100 /prefetch:2
  2⤵
  PID:948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2408 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2888 /prefetch:8
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6020 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6024 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5180 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5336 /prefetch:1
  2⤵
  PID:2764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:2496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2024,8933979902755047227,5129746793729382254,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3384 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1356

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3780

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1960

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
MD5 9b008261dda31857d68792b46af6dd6d
SHA1 e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA512 78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
MD5 0446fcdd21b016db1f468971fb82a488
SHA1 726b91562bb75f80981f381e3c69d7d832c87c9d
SHA512 1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
Size 71KB
SHA256 726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b
MD5 da52e38c98b0f2047abeb07609608ab5
SHA1 da1210caff36df73e49a0c271ff7d573c2d20d02
SHA512 35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b
SSDEEP 1536:ntQRw6S6yzj9mN0hBcdYzdFONVzN7pPMJhJLY3T+2z9ANKokoV:ntQRw9BX9i0hBqSFuFp05LY3K25ANKo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 61KB
SHA256 ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6
MD5 468446a7240461af44b59ebb2047c231
SHA1 47b7c525dc91bece99df0c414960b9490b986ba8
SHA512 ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8
SSDEEP 1536:8b3HAMT093crXTgJRNAZYBmuhSeIUQUYaoxMaagTEwL:G+WXTy8u0eiaoWJggwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 25KB
SHA256 b6f7724bfdd2f9fcc3c308961e2cc71708da2e755079461a9d7e063ff319899c
MD5 6572e3dbf705aa4d07f63d39198368ef
SHA1 9aa7ef62dd08a92bd72d3f2ea6fc0fdd69331d62
SHA512 65079c4ac4afb134f976a43a6158df44ae23af7d487bb7c95148e74147f1669cce846e079a9ecf4605dffb564d4a7f9ab59dc112a130e502a782c4d95c129129
SSDEEP 384:1g6qKfD7FkMPYoyOCe1XqlsieZwZ7jnVcBLapVsCPp88ACs4oioTIULGQZG2GY56:1xL7bQze1alsi6waypE1IUA2GdLrnj
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 63KB
SHA256 2bfc140ce2a366043686b5f2868857eaaa948eeed833805a688b1ebb5847f6c8
MD5 2bb21f715ba6ac364ef70ed04e9ef1bd
SHA1 6bea9df4f3f306d07bd71f673f2993f0620b04fd
SHA512 fb36c578d3522f0cc0442015417632d3782ececb467e2c0c237e4a7b8d9c90d935438318322f165861f3c4b5000d29eb46c0654339e69813d6d9fb2900f0e7e7
SSDEEP 1536:jsHWe4CRkn4i3M5J2A0r9nCo55I7k0onrEGW:j+W4kkEAWWPorC
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 67KB
SHA256 ddd69a02a62be3ad9ced02743189f383314108425c88957f6470202be2bb514f
MD5 9ab9e35f4169a222366b53f2e42e3e8d
SHA1 6fdfebb4e45f1337e2309f96b72de662c6e0cf1c
SHA512 0da76bfdaae5f29869d97c4ab9aef8f05d2768a574cc7cd3a43a1b1656df067e5b26c47d8b81c5d9d14eb9aa770060cd35f8cf9a943c66b80cca9d130d5f73d3
SSDEEP 768:D653ToodPIwWPp+BxK0Gh+nnnRf+MvGIUwObUIQkPKB+cXXDoD5R3Z3lbn6o6Ffx:D2dwLB+nKdOfkTcHDobXbngFfdMex5
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 24KB
SHA256 782a5cfa7944a6f749715301ab4d4618ec8927e11f31b42de567496364ce4944
MD5 c92dacb30aaaf46bea9327c5e5aa3392
SHA1 ccdcdc5114e5d805717ceeff67863faeebd24697
SHA512 56febbc865b329d58673032f79bf7079d8441d1b8e9405f2e750cbbff26df82e485d5f3eb61337cb33379bdbbf4e3a8d6a7213f070bc2f19bb09e2800c4bb97e
SSDEEP 384:jgXN1lqxfPOZwfhw6i5zucrWZgC+11Ya+3LsuWxvcQDX6dj1aGKvym:0XN3U3crWG511g31WVcQDqUx
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 ecbbcb94c98226aa2359b4b7e06120e6dbdd9ceabf6f0d486c80e146e5c75cb0
MD5 4b144dfcc2fc062369ce18da78cb1791
SHA1 c5be3572d0892e990a0db52155b0508b2dfd8f52
SHA512 758410d37146683cae7c5c877fb7552f80c642fb9940043b72e1b743200c0cf40e04e10a2d2c7707d6b639fea76e236afa0922bae81072dce2bba9746cf6c904
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 29ba14d6f5231e6c1d4ee03f9555107ee85e5c2d9d6d311da5e06f36056d1beb
MD5 11e5a86f3e3934b79b13e96fa90d74fc
SHA1 edf6fab289d1270b02df3f9ee4daa1b84cab7b63
SHA512 5cabb6dfa099eb30ae32704e25cb6480574dfd597e0952e88b017c1c600c787f53e515b2fd06bceeec5ce25ee0879e684c470ab3df7925579975fde65298c92c
SSDEEP 96:njkRPP1oIdwpvWMoiVmdeXd9/duP1UWQyV+VD7AiEwb:njkR3GOGWMHd916rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d612db426b89e022da530dbcf0d0ef972b588a80ec5fe430044416645435abcd
MD5 c1df5bcbc0fe236a03324c80328ac9ba
SHA1 b1915cb022da7a87710dca0da6975fd19ed6b6fa
SHA512 f8959e1a7d192969ea9cc5d0388623bb9c45be37f1313d3f4df6b6cc6e3923c878608cbbb08320297aa0ee884b8ebd77b36898f5681b9904ea712f5fe3ab99af
SSDEEP 96:njkRfP1opdwpvWMoiVmdeXd9/duP1UWQyV+VD7AiEwb:njkRnGrGWMHd916rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 6686c274b81b47dc48b93b0268bf34284a7467714438bba98208ec16d635c0ac
MD5 be9fda8529b7e50b77b52ff77d1c7047
SHA1 05cbf8f0b35a5872e075cf0640efbb1bfdf48588
SHA512 cbd894678765d11919cf3b75ba1baf3abd472ffa91af5e500f586e136d0d3f4abee8e840f22553808778cdd46785bdf73ac8e306f61a19a974845cca7bf239aa
SSDEEP 96:njkRXP18gdwpvWMoiVmdeH/ddP1UWQyV+VDCziEwb:njkRf+WGWMX13ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f9185dfd61d9d426e375ca687069126f05b7da2b6f9c2540e9c966ab76bcdef1
MD5 09b0cc61c518a7dbec6476c4f38f48f9
SHA1 35c5752c9517b3606df4114be7e9c3f3fb907004
SHA512 6c7581a0ac4848eb5c833da5f5dd1ed0835b81a3102454ee8390762eab4a7f323d7219a017a3d240f35a78715a1c06a9b5bb7fdcec0a884249d2efe9049e21fb
SSDEEP 96:njkRPP18gdwpvWMoiVmdeu+2/ddP1UWQyV+VDCAiEwb:njkR3+WGWMe+213rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 0aded315136526fd20f39eb7df4332e3b8b8a5c55476dbd8e76a711887aa0511
MD5 a1918fb285d9a26fdd734ceaa11fb9c1
SHA1 d5766349e6b707340bdb9136b16ae38f398aa389
SHA512 f96ae8996dc5d3a864e5db9bb0250928e184baf59fb1e4f0e3406b73f31a7fa7cbe6a52e01556a24b2e43df8ba3d07e0daa21e02c094d8f35fe17202bb74a616
SSDEEP 96:njkRPP18IdwpvWMoiVmdeu+2/ddP1UWQyV+VD7AiEwb:njkR3+OGWMe+213rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 b9092ff78712f12856b0e9bd94abe2c399bcaf39289a94a5fe43703eb42a1173
MD5 339426cf2245654136b4bfedcc823aa6
SHA1 af3a2f2fcaee0022b14acce5614a760ce2c0a57b
SHA512 59dd3154e7c7abbf8133af31254cbf8aad4e99243b8325bbb67f4953cb957504d02a40ebaacb5697f36da09149384fe89c003a9bdefaf04685402a94b3aa37fa
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 c604b55802180f5b386145cf704884c8c7ddc127c35ecbbb0ac497f871c8ca6e
MD5 538ecd035c89604480935d466262b893
SHA1 34709ad5a6c10747458a7bc4052e21bb39c401b8
SHA512 046682cfc56b90ba3ec87585e01e46513fd355db272eec5d489fdcdda3d237e8f8da267b63f45e7dd23a79094b1998c78753754747f99c200ad4e45fd0c0d2e4
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe58d77f.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58d77f.TMP
Size 1KB
SHA256 7de475e2e0f2c95d99c79b739b1278fc53a99ce87ef2bb181f02e5b54291ad37
MD5 e2fd1d6b1dd56757fca451c9428989ee
SHA1 8a671c7db065d67d982d257aeac5bef21691c263
SHA512 e1eb6c16ea802133c785fdf35b08b16d227d7c34779588fec61239790aac3ccbd35a819f19e4cfaf8ecddb2cc013f9313dbd59f50ace1c0ecd192c50e7381ac6
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 4a3d87d797ebc10698f745c2e3fb0d823cf83339f5dee8d188bfcd003c298ca8
MD5 096d9a36ddaef14543ec7cf47fe6389f
SHA1 7a80d812bb96ecb32d49e3ba3e0bd881e85dbcbd
SHA512 6cf283d354209266af9522567a32aec2d2ee466d38ce4afe1e03000f7a6e2d424251558dd02089cacf94aaf21772b6ccddd3fe0e29b05412c933ba2cb1519465
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupc8e2RU723IeLQOl6feAOla:A9iIxuERzA83h09RZxYlJYeSp
MD5 SHA1 SHA512 SSDEEP

Submit Download