4c8b5a7ec92aceb7dddf212f9c4a9713b3616e687c1f35a1b5584def9da37b43

Analysis

max time kernel
137s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
01/01/2025, 22:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JaffaCakes118_60ff99bd8b85aab357a905ad506b01a0.html
Size 236KB
Sample250101-2bed6sxpex
SHA256 4c8b5a7ec92aceb7dddf212f9c4a9713b3616e687c1f35a1b5584def9da37b43
MD5 60ff99bd8b85aab357a905ad506b01a0
SHA1 c447635c6f294601853f76c32ad96a16be19143a
SHA512 1b4817010f709fd3b9d6f81e4d1edb49f7171f05076c17a6b365e421c468d99bf87303979a1104a80de3a51e013b103c259ff55fd6eb9d03df27136781b90578
SSDEEP 3072:5MG8fvPSXGp17Y/ZwHNyI5Qiwvvb62K2zhoZZx3cXmNRS9BmpsU0gD1ZYE8oy+dh:KfvP6Gp17WI5XwvGh8oZ7MXmNRAeOoMw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
424	msedge.exe
424	msedge.exe
2316	msedge.exe
2316	msedge.exe
1420	identity_helper.exe
1420	identity_helper.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe
2836	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe
2316	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2316 wrote to memory of 1512	2316	msedge.exe	83
PID 2316 wrote to memory of 1512	2316	msedge.exe	83
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 584	2316	msedge.exe	84
PID 2316 wrote to memory of 424	2316	msedge.exe	85
PID 2316 wrote to memory of 424	2316	msedge.exe	85
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86
PID 2316 wrote to memory of 4452	2316	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_60ff99bd8b85aab357a905ad506b01a0.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa0e1046f8,0x7ffa0e104708,0x7ffa0e104718
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2648 /prefetch:8
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4200 /prefetch:1
  2⤵
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6264 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:4656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5068 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2108,1982135528935716074,5206720632621881732,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6440 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:548

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a4d7777b980ec53de3a70aca8fb25b77e9b53187e7d2f0fa1a729ee9a35da574
MD5 e55832d7cd7e868a2c087c4c73678018
SHA1 ed7a2f6d6437e907218ffba9128802eaf414a0eb
SHA512 897fdebf1a9269a1bf1e3a791f6ee9ab7c24c9d75eeff65ac9599764e1c8585784e1837ba5321d90af0b004af121b2206081a6fb1b1ad571a0051ee33d3f5c5f
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1e5efb5f1d78a4cc269cb116307e9d767fc5ad8a18e6cf95c81c61d7b1da5c66
MD5 c2d9eeb3fdd75834f0ac3f9767de8d6f
SHA1 4d16a7e82190f8490a00008bd53d85fb92e379b0
SHA512 d92f995f9e096ecc0a7b8b4aca336aeef0e7b919fe7fe008169f0b87da84d018971ba5728141557d42a0fc562a25191bd85e0d7354c401b09e8b62cdc44b6dcd
MD5 SHA1 SHA512

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 20KB
SHA256 54ae97d445b166859fe3ba6241b97abbac0aa0d158c72352b774d60ba3e81797
MD5 2ebfdbd309ee762211b4a2ac39708c4d
SHA1 b002922c672dbe1dd4caa02af24d0b1e7da616af
SHA512 d1687b7a6da07a72963c96a1e85661046d3d3c96f88445302afa09721fbe211a5fb8881ff14b346b0ebe8a20f5ced21979e9f58e256427e57b85d565bef17720
SSDEEP 384:97u/EQXDn6XacXul/B9tg9RDz3S6z1n6aSGxYfFrB7Z2G97T1Rpf/hUKB:9BiDsS/Dtg9RDbSCNaGGfL7f9VRpfJU+
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 6fbeb25cc02a71d79477ece4e484e6a990e2c4c1d823fb873a30562b719be464
MD5 24aafe567b13dc48ebc29f4366bbc152
SHA1 5eef85cca2b09289fb1dc09de1adeafd001b1270
SHA512 097a910da1ad898b8083f7c3088d0c7d4fad27616b93630df341589f4c55111ed0e152449271ee7101862c6caafa87c2b6f77e31202641954d24c9e6fb10ccc9
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 55dbf580a741bd29bd1280fd0fe945272635e230fdd97445cf3b16f75f31b073
MD5 ecd80b31765511750607c8d4c651f3f2
SHA1 0f6a3d5825a9176b2d0fd147fd5d4569fcba326b
SHA512 f7502357403cd3dad16ff93e37242f1b9229f6ae69b5c25cf02f4751b10eb9f8811444d6aacde82e7440a607bdc0ff140d18e047faeb0f425c65f6807089f48a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 292578042275fe8711fb7c02c1e1dd3d8763347f5e8ee01046485650daf71153
MD5 9cc0d32168cf6a22c17ba214478c3ab0
SHA1 946e5cf81d0c5af48ba246b30e3d17f515bef890
SHA512 efb432c4eb68236dcb21d174f94b0ee7dd1f4f53891512e766275ca64a1c81e5645b61240433243aafa3fd5c64644e1b4394fe9152b5b26acea7b7fbc4faffe8
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 cbd351906ea33bd13a6d9409937f25d0a57ef2018fa77040181b080900522ea0
MD5 87c60ae52b8c7843668ce1754d86ac1e
SHA1 f50d91976a2a17cae1b7c4a3699e10514c447184
SHA512 4e689f6657bffc6e01f071c8177b3bb313c1f43b90ee85828393df9ed7c0efb13eaa60dd2fe18e87084696fa844e2126ed000fb8b86c41f4904ae9b5029385da
SSDEEP 96:nzkLO1b/bPfkwpvWMoiVmdepIsbZQ6Iiq2nXIPK2yHIkUWQyV+VD7AiEwb:nzk6dbUGWM5IsbZQ6IiJXIy2fkrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 6e9eed4837df3daddafe76b525d36c9ecdeb608eb4ad60e32e014ccdc2322b2b
MD5 46fa1e8542abcc7978ce1fc8f8842702
SHA1 54c7ac8610ba4ccd5dd699ffb5134e3ddce63d17
SHA512 c24af0e87efc2db0f1b7207ddbbd89e0f15f4c7f8e0d06b831c79c9364aaea3a6c89fef24ec705790909252c9f3b2e7a3109450f15910d5726d41c3520e5104e
SSDEEP 96:nzkHO1HEPfkwpvWMoiVmdeHycIkUWQyV+VDCziEwb:nzku1EUGWMXQkro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 7c5e6fabceeabf025af722d7cedb0966150a1bf119c0775b1bd54f39f52e20cc
MD5 618b6ebc6d3e091395d333a9127d0b9e
SHA1 777339a884746d19df7e960fa544cc0860c4376f
SHA512 6df2a190754c4a407d2a9b22e414b4b73efba7461c8c59601eac6812cffeb1e6e413a7b63486c7eced43749ed3ace72ce223f8136d47151bf592931fe2de1a99
SSDEEP 96:nzkLO1HbPfkwpvWMoiVmdepIsbZQ6Iiq2nXIPK2yHIkUWQyV+VD7AiEwb:nzk61bUGWM5IsbZQ6IiJXIy2fkrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 61badc9d0f37374cd3a634d3eb67734b60bcd2d6b913c83935734dc76a9ff48f
MD5 f3070ca384dbae9d34af25ebf5193bea
SHA1 4f43f56ded3c47044d7feda0be7e60bb54c7860e
SHA512 06dd58b8ab9e48688ecace1b4c493c91c81825c72bf9cc891f9e0035e6ef97d1a6098de75de5bf6b8ff1edd73ab03e145f7cd580a1f93fbc57f466fc594a779b
SSDEEP 96:nzkfO1HbPfkwpvWMoiVmdepIsbZQ6Iiq2nXIPK2ycIkUWQyV+VDCAiEwb:nzk21bUGWM5IsbZQ6IiJXIy2QkrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

cd8877f2-9246-4433-a8d6-4a6c9c2811e0.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cd8877f2-9246-4433-a8d6-4a6c9c2811e0.tmp
Size 10KB
SHA256 5f18b4055f3833e49c88e0aa1d464a8d07cfc5498f9d651bc71231d9df8bb17b
MD5 ba04e780ea442c762bfa817ea28549f2
SHA1 8c58692ca4745cf6b4039384db2d4d3fba070eb3
SHA512 1475b2badf60489f711e272e2c726572926aae080fb78cde7c50f11dad467168e7c0f7071d0f10b23b5b0bebc91d828d11cd15e6d23b8fcb887906fd77b50471
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupQe2RUAp4z7sAi8wU8epGu:A9iIxuERzA83h09RZxYOS7liPU8du
MD5 SHA1 SHA512 SSDEEP

Submit Download