94c864ce2a3ee530ac47240400bb01ca10f5c6398cba83b2553886fec74c2ee7

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/09/2024, 03:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f508b5eb8be21585b71022b029934ded_JaffaCakes118.html
Size 156KB
Sample240925-dlfg8avbjb
SHA256 94c864ce2a3ee530ac47240400bb01ca10f5c6398cba83b2553886fec74c2ee7
MD5 f508b5eb8be21585b71022b029934ded
SHA1 876fe3260685897f7a3d6db92c24021bf9b897ce
SHA512 1843942f0f15c9b0dece9054d4c26c78557e77a61b7a6f2fd9ca1dbdfe3684bc87811ea669f9466d9be4ac7b4cd58914af1bc40f405ac7318568d179725ab103
SSDEEP 3072:sZZYuUjSbeMbYg7iQkrZfIPUm+S94QAnWhYHTAMOHZ4:sZZYuPYg7iOUx
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4396	msedge.exe
4396	msedge.exe
3676	msedge.exe
3676	msedge.exe
3800	msedge.exe
3800	msedge.exe
3800	msedge.exe
3800	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe
3676	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3676 wrote to memory of 3368	3676	msedge.exe	82
PID 3676 wrote to memory of 3368	3676	msedge.exe	82
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 1212	3676	msedge.exe	83
PID 3676 wrote to memory of 4396	3676	msedge.exe	84
PID 3676 wrote to memory of 4396	3676	msedge.exe	84
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85
PID 3676 wrote to memory of 1828	3676	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f508b5eb8be21585b71022b029934ded_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbf51a46f8,0x7ffbf51a4708,0x7ffbf51a4718
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2200 /prefetch:2
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2364 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5972 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6004 /prefetch:1
  2⤵
  PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,16702175314080596727,14345419855742095708,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1436 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1900

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e
MD5 d7114a6cd851f9bf56cf771c37d664a2
SHA1 769c5d04fd83e583f15ab1ef659de8f883ecab8a
SHA512 33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808
MD5 719923124ee00fb57378e0ebcbe894f7
SHA1 cc356a7d27b8b27dc33f21bd4990f286ee13a9f9
SHA512 a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc
MD5 SHA1 SHA512

Submit Download

181640d9-5932-4876-864e-33267d72a0ee.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\181640d9-5932-4876-864e-33267d72a0ee.tmp
Size 9KB
SHA256 35a101bc9fc2d9a878f5df6aa8ed608dcc77d8e8ce64fdd1ee97588e01596c84
MD5 848090444b874994fa31a50d107fcadf
SHA1 26ce33794bd84abe51c47cc19fe164018a490625
SHA512 8294691735b57423902b118b11570b483cc786f1cf2afc56169e3139bd06572f133e11aec7e52d5906a20cc32729f54be81a71eefd5f501433e1a9f218784ad8
SSDEEP 192:nqAkz7MhFhPGWMSCDXpg33I28/pUjYJOog5REr+0O8zrp2UrV:nqA2MXhOWS5rh
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 20KB
SHA256 ff6b44413cd4aaf91f7cd49976e0fe8b468047b35a0bdf0b0ff7bbd9837c5029
MD5 2db93ab019f51386ddad790bb7cc3aa3
SHA1 e238d718d1aa5dd1dc7c090f64ec9cf35a5f01fc
SHA512 e6aea0f6ac99027a238b922f7df06b652ddc3cd7df91c7c04857a9b31b910adaaa6078bfdfd189122d804e42ec996e3757c33e6a1caeddd5f043467dce46f110
SSDEEP 384:8N22vLz6biUlQ/VNc8cWPKKwIUrNrKcFHac4/x9xMHLl0B:8YRb+3cb9KwIUrNrKcFaJ9m50
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Size 41KB
SHA256 a4e5e895af7992f5f111a2af5e150460cd482eb777a9181d0995a43bb4913621
MD5 76e960b684eb71c2a06f96b3ae5b2d0b
SHA1 685a884d4ce4ef89a5a80bc2dbe234ef5844de95
SHA512 ee3749f05fc78f7ef19438499e9a603300708092af026a71ad7989d72f51ba8f63889d23cde421d1e0baf482966288b714e342885248c98ce52c795cfd271cdd
SSDEEP 768:aOX/jdsn7ZRu0lXLWWpFfQVG/Lqyr07Qq4SVTFEJCqs7Rw4Jy:9X/q7uQFcGmyIASVTFEJCqWw4g
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 85bf66043c6ff9928278e2a481432c7a0e2e501880b98d0e5acf88620243428b
MD5 5e167adbf2101f013746c171bc9862cb
SHA1 84c983b88229d17be9bd313c0474bfbb65f392c7
SHA512 619394ffa9a8317e435980fe09560bb4a0df110e8b09a45645ade08b6977e56f857a8d1d903987cb167ffbc27bce6f3de2f4fd12012cdfbf18c4a84ca2f8622c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 5KB
SHA256 e5893b555c280a36e3506d8ccf45790b648da6a1e55558ef4d8e6a1049f0733c
MD5 4ddc37689415e7485cf232537248c94e
SHA1 db851f8c33ed82a58024749385893aac70a2df37
SHA512 fd8c4e09399fd8f346a32f61d4db178b0192046ab0a7a50f02206878603c26566833243990673c3cf186beff7794f635d989cfe92a3b17db4a36674fcc8fc29a
SSDEEP 96:v9Bzyaz7+Xp6rFLWqx08UqTGXGaGetGeBGiGHEopG/hGHKG8GCG3mGhGp6GpRf:v9xy+7+Z6rFLWqxFUqTa5VtVBRJopehD
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 5KB
SHA256 850f9dc8e1c0d7387248f1722046fe1447a6d7add2969d3052010aa40540b712
MD5 d644481899eaefa4747cdea322d734c0
SHA1 9246bb6ad91fc5e58028de564a3b285ad7cf13d8
SHA512 1145c1573c7c1525fc5bbd77555588ef0719f502dce5ac62deeb9055d04d7a6fdefdc9f687c0592c7e52c9d77be0bbfe725d113b979b66ce70437563e8e4a314
SSDEEP 96:v9Bzyaz7+Xp6rFLWqx08UqTGXGaGetGe6G/hGHKG8GCG3mGhGp6GpRGnGFaGHE+f:v9xy+7+Z6rFLWqxFUqTa5VtV6eh55j/Z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 654119184509cfa65d3f6c427ee804e625b3eccbc85993c8726cce1f06fe4c98
MD5 c7dbd4290a99815d914f74cb6d850cff
SHA1 8a71546d49ecd680ace538d9bebe593aab375200
SHA512 2eb5e9d6ec99a1326ec9497c15c0d68c734627a4ea354f611f6066e20b00a0743a9a8b9c1698efa73825733ef95c0b7e6371b089f1a0aee71e8d42a7250cce9d
SSDEEP 96:nqAkzht12QLSFhPwpvWMoiVmdeH/bAjUWQyV+VDCziEwb:nqAkzzMRFhPGWMXUro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 818f731999c00d7ddd092b9828b7e3f7347dcd7005f4d674d71f79f3878a41f9
MD5 465d94d207fb0561e4ad5d6ea4819408
SHA1 4cd6531068a892af5927365a240421247709440f
SHA512 c9b839dc14f3ec8c4affc538e0778b4890bd49dddd97ea54d060e4c7ed4491ed5597e734b82fe2b04f1a09dc25537449dfb61435007eef9d5c5d5f20ae82e96a
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupDle2RUtxNvIcM/bo5ZxR:A9iIxuERzA83h09RZxYDBswqZxR
MD5 SHA1 SHA512 SSDEEP

Submit Download