68f43c392e0e8f76a99818954ddd57b5b1b197f65c359cc43cff2b1e34f2ad9c

Analysis

max time kernel
144s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
07/10/2024, 08:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1c781d0a8a2c170d478e7eff6c22f522_JaffaCakes118.html
Size 394KB
Sample241007-kdwmsszcnc
SHA256 68f43c392e0e8f76a99818954ddd57b5b1b197f65c359cc43cff2b1e34f2ad9c
MD5 1c781d0a8a2c170d478e7eff6c22f522
SHA1 f1ebc641f47317d7069254658a82fc44cf53815a
SHA512 7ca261491ab6e68b40a284f5437fdc103cccab1ebe50ceac986a153e66b4cb9271cfac20335e7654e658f7a4e446685f018b572081125dbfa3885fe44086207c
SSDEEP 3072:OsW6WCiqYxDNvG8rmgcXmNRSz7nLer71BMn3/GBmG0IhH9fpTMApz1kBVY7RJvfu:2DAXmNRUwuIhHBWAcj
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1516	msedge.exe
1516	msedge.exe
644	msedge.exe
644	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
1108	msedge.exe
3220	identity_helper.exe
3220	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe
644	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 644 wrote to memory of 1860	644	msedge.exe	82
PID 644 wrote to memory of 1860	644	msedge.exe	82
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 4272	644	msedge.exe	83
PID 644 wrote to memory of 1516	644	msedge.exe	84
PID 644 wrote to memory of 1516	644	msedge.exe	84
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85
PID 644 wrote to memory of 2472	644	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1c781d0a8a2c170d478e7eff6c22f522_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdef2a46f8,0x7ffdef2a4708,0x7ffdef2a4718
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2244 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:2472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4776 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:3432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5348 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1108
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6260 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1300 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2804 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4168 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,9810256856853286774,4173462903351913136,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5624 /prefetch:1
  2⤵
  PID:4524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4060

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7121d84202a850791c2320385eb59eda4d697310dc51b1fcd4d51264aba2434e
MD5 f9664c896e19205022c094d725f820b6
SHA1 f8f1baf648df755ba64b412d512446baf88c0184
SHA512 3fa5d2c68a9e70e4a25eaac2095171d87c741eec2624c314c6a56f4fa390d6319633bf4c48b1a4af7e9a0451f346beced9693da88cfc7bcba8dfe209cbd1b3ae
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 10292fa05d896a2952c1d602a72d761d34bc776b44d6a7df87e49b5b613a8ac1
MD5 847d47008dbea51cb1732d54861ba9c9
SHA1 f2099242027dccb88d6f05760b57f7c89d926c0d
SHA512 bd1526aa1cc1c016d95dfcc53a78b45b09dde4ce67357fc275ab835dbe1bb5b053ca386239f50cde95ad243a9c1bbb12f7505818577589beecc6084f7b94e83f
MD5 SHA1 SHA512

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 23KB
SHA256 83c4e32b4545e45bd3e673698c9c905a7f9ce02ac5c08642e5ccdf2624c7a35a
MD5 ba16446d3d17a4f4aa3c0880fc626139
SHA1 dc8508bb58c7fd75a075be5b1948f482691d25c0
SHA512 4f9025d959fe3dfb874baa5765d9b46d8b042b6772a4f79e5d56ba4226b872fbca5eeb60ab93c3c247445e879194cd787de7eeb4cef8654ba0452a8601e05711
SSDEEP 384:tU+gw6ZANCOehcIFLQp1N7sYfDUPbBGbouF/Ufk+/mc6522rk1l+vTZp4UMIomj/:tUW6qNBeaIRQjfDDbouF/Uf+c6kh1l+D
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000025

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000025
Size 23KB
SHA256 60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf
MD5 2f24e0f5d2c2997a89fb4a8d943c141f
SHA1 99515bde1a5bf72105116ac902ccf3db1dd3df29
SHA512 0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d
SSDEEP 384:VSCKOXcXVC6fizIN66yBc1Ei49Zvi2fSZ886pETkDCm510VS7X+r27Z:aOX/jd6yJiOZa2aZZNAFmS7X+rEZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 d9768ef8ed96d12e74ab17391584a9f203483d2db45cb6f644275b7f5d886e3a
MD5 b765e8cbe1f4e86838c30aa8251f553d
SHA1 74303d8c10ae1045f8a155f4fac6333134651996
SHA512 d84b88a3177a06823ff9d7b34ac4c7ed9092831ce0d8ad1b580f0f9e6f4aab35cf6c304a911e974966e4e191c2f0c24cf61fc21ab6d7b53286bccd1a71d8347b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 f4c1c09d789576fef2139cb24f262c4949d4c7266db9c08e0ecbdf0e627a0a65
MD5 ab7d5667364d8e01e8521002fd66f048
SHA1 1f6f9e76e0ee73c762cf77e0fbc4269d706258dc
SHA512 6b748d98f2e93ea59f25ed6420941f60a19872f31baca579e74ddd6edfc83e5bdf6aed215a16c2a796d048578bbda777e39c30e9c7983cfa36871e0cc1654eaf
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 e89e3feff8b85748a51e4635ec7885c8ee18a9d5797244f5304a57b6e08896cd
MD5 397b7d985e51568fb8c4c00828318f0e
SHA1 9552ef418bc8ab429f2cbe16e7a19b8f78d35c5e
SHA512 5b2916219603ad0b09952d1459e33b6e11b11bbf21f744566bc25d6074e89b52f67410a1f43a13a40e6ea9b186ba099d0b73885935bd569a0abc968dd48891e1
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 ba28408f6cad72398ffb46d995d92a1e9c5462124f0cb9435aa3b2b27f57213b
MD5 fc085c0ca0e6a6c54edda4635f271e26
SHA1 5a78fb390b7d0828f8c5fe2e2ab7f1ebce8e426a
SHA512 6bf2c610e651b1073ac39d39242fcc5be4c6af974a75c4a938b68cc8fa5f70d885f95cdbeacd70c90344edab25456bb487bc4b37ff4b5c898a91320c86ac3a3e
SSDEEP 192:nRk/AXkGWMGUe/yfFeMBTdRzYgEr0Ud42+2rV:nRJXRWuXN+rD
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 85140dcfb330bf265617fa6e254bc66caa752b9118757dfb94c7cc48a1e6df1a
MD5 e4f8060759d17de9aa78b526225545f8
SHA1 90e2597b9ea9b58f9a24352113da55b008886397
SHA512 cb17c1de6e43145dda96f879218eb256a0ebb6e0aa45a994c76ff28d4c3b5b95ca173700cff83d04005586eb76752789088123b585b8a4ba3a4d757b5e720728
SSDEEP 96:nRk/z011XOrwpvWMoiVmdeH4s5rFUWQyV+VDCziEwb:nRk/gXCGWMXhro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 34ea73969a0ecd54b6333c0bc9ef4a904e6eead3bf3543e0704a1ddb30debb6c
MD5 699e09b23e78a6f56c0e05608944b284
SHA1 96527044a37eac4069aa59d78961b587e60aef69
SHA512 7eb50bea94e6a3291298e5ded46f12d0bea3a86d78f6292009aec097299996e2a1d2ef88a58b74e6b055dacb878ec88817116b1770d395df31cc5abaa0769a6f
SSDEEP 96:nRk/T011XOrwpvWMoiVmde2e/yfFfdU8GTq4s5rFUWQyV+VDCAiEwb:nRk/AXCGWMGe/yfFfdUdqhrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 536B
SHA256 d3394bbc66e02b7d0ff8edf3b85d12d566b681bac42e222fe8ec65dc55ea3498
MD5 ef307e35388a195e7f6d5e4bcd0f3605
SHA1 254134576181dc35d66ca326dbe8aa1c8ef1f933
SHA512 eeadee117567af265eb9c22ee697206b24b3f63b07f8fd1beb2605b21e99cabb3a8f1068cea0da039804a030daa03e62b90949d385568d3dc0b3b22e46daf4ea
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 703B
SHA256 236b89b4916c53911031f468576389ddd94d635f679fceb5655c15a8cd12f04b
MD5 f4c4f825151aeaaf5b65b3d962b899e4
SHA1 6f51ef0619a361c14740dcef081e7516e4628b49
SHA512 d046492979ad49e747155d5dacec0e907f44a2860851cc8db65f6d47ab2117fb74b6526f24a96abab01857a6a7a37a1ed0d0a30ff3fd3931d0cff5da2d201408
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 368B
SHA256 9a22f3b3f6874f6a5a8c3fa2d3b23d6adcbc3653ba60688d2a5b84323aff1963
MD5 52b1585c3399e567ed2c4d1be0f9b363
SHA1 a563a890c03e3b7f8883616b8b91f4f45fe9f778
SHA512 82a09b10d85ab0cd77b437d2c6f5c27ac405848db02053701261348581b7ee8a97835208128bcf4a178f39e64f4776bf16123f709a111f2492268c7a134a6827
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57e520.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57e520.TMP
Size 201B
SHA256 381b07200801221cf50c65f9ec3454f3b3d3587ff5c296ab38ac568792ca339e
MD5 6cfb709702f52408b5941d7494c77697
SHA1 0ba6a5d8e35d0fb4e73b4f28b7d0014327e03cd0
SHA512 3e2e48e9a69e97367a573ca3f00061555134ef1946d69728e34051f0f0921c4e052450394622c6b5c8196c5fdd69c4706f829bcbfb8ea80fdba7df50c9fdf514
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 8b2439ac18a5cb3676f24ee1ac46aa357df6f9efdc848c4156488def7482fcb1
MD5 aad23cb67f9047f04649581148520996
SHA1 9e649a8329a250a2d9e5b7c9bc60dabf43db760d
SHA512 bccace58d72bd303043199ac32e6b5203115215d50acec1fa5faf7149641f6fd8d804c1cdc8977ff8ed647242fdf56dfb5b65247dd42960b685ce4436041ed90
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupCWe2RUks/i6CtIcM/bo5ZD:A9iIxuERzA83h09RZxYpw5COqZxx
MD5 SHA1 SHA512 SSDEEP

Submit Download