136c0eb7d28ece64af3defe82da4a35590b8e8a6a7377f9b910549138e1c9621

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
27/01/2025, 15:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JaffaCakes118_40e166d8a0202ea3927b2f789e1120be.html
Size 15KB
Sample250127-sl4blsvpak
SHA256 136c0eb7d28ece64af3defe82da4a35590b8e8a6a7377f9b910549138e1c9621
MD5 40e166d8a0202ea3927b2f789e1120be
SHA1 affec846bcfc537057e38329bffd0417cabba79e
SHA512 e7122b70afdb496a64e104b4908ac4b24606f860467d9e2c7975f2b53993516280adf43ece3e63409af580d70bb26f47ec6c999f16b273b7357c2c497c0b417f
SSDEEP 384:rJUOUcEBqLoZ6BXWzmeC2OGlm6WbbxGvRcHoGNWAJ2:epc9Lo0s539S0yIZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4720	msedge.exe
4720	msedge.exe
4416	identity_helper.exe
4416	identity_helper.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe
4432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe
4720	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4720 wrote to memory of 32	4720	msedge.exe	84
PID 4720 wrote to memory of 32	4720	msedge.exe	84
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 3260	4720	msedge.exe	85
PID 4720 wrote to memory of 4872	4720	msedge.exe	86
PID 4720 wrote to memory of 4872	4720	msedge.exe	86
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87
PID 4720 wrote to memory of 2800	4720	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_40e166d8a0202ea3927b2f789e1120be.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbd4b146f8,0x7ffbd4b14708,0x7ffbd4b14718
  2⤵
  PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3128 /prefetch:1
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3152 /prefetch:1
  2⤵
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4188 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:2784
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  PID:1644
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6044 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5796 /prefetch:1
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,7214572720927854636,16470556370019449704,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5000 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4432

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1364

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4752

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32
MD5 6960857d16aadfa79d36df8ebbf0e423
SHA1 e1db43bd478274366621a8c6497e270d46c6ed4f
SHA512 6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841
MD5 f426165d1e5f7df1b7a3758c306cd4ae
SHA1 59ef728fbbb5c4197600f61daec48556fec651c1
SHA512 8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6
MD5 SHA1 SHA512

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 214KB
SHA256 3124365e9e20791892ee21f47763d3df116763da0270796ca42fd63ecc23c607
MD5 ba958dfa97ba4abe328dce19c50cd19c
SHA1 122405a9536dd824adcc446c3f0f3a971c94f1b1
SHA512 aad22e93babe3255a7e78d9a9e24c1cda167d449e5383bb740125445e7c7ddd8df53a0e53705f4262a49a307dc54ceb40c66bab61bec206fbe59918110af70bf
SSDEEP 6144:lqJr38vka4TygWBSqcl9nS++Ag4RteWtzCEXmM+:lqB38MDmcnlDhZZXa
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 9a6239845b16204a1b64621cb896510d406ab5d1749c7cad3ff446e9b3c2a8cd
MD5 eb8e937930957b2f63965acd6919cf42
SHA1 83bd41831052589f548ea90eec20f7f57fe779d1
SHA512 f46d89e374f444c4effd82015b90805581c5ed96d12a74d6bbe4cbef797355ae90dad330a377386ef845f00d18b5aa7c5564028e5c729b3c0e559b4767db691e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 cd98f41fa07a816607ab3cdb89f9d81db2c087747b717d0fdcff78615806f294
MD5 9f107fc4ae63952c049027b95a7a1f43
SHA1 83c89e5b957fa7c9d70251baacc1ca6d9e88cfca
SHA512 55cbb0607259e04936b761ea96b6f55d46030d409b5091c40f8eef4e1aeed015d292888ad9dba7903880a00b31b8381414782668ec773f32b2b7d242c241c67d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 a6270e3b7c77555bc4ed6013204511cdb2e5cc3d58502157e890b8942399f72b
MD5 0a367734dc8d992f6384057c08054dce
SHA1 50774d6c811928972d27eef24b7b79e6491441d7
SHA512 98801c3a192753f39dce53e4ae99bf33207a4da86222cd720dcf6401d6da969dc7533cd9ff882b47aa0e6c6e1f8fc20a366b385ca697eece29be12d08d7de577
SSDEEP 96:n6kib1WR1SnwpvWMoiVmdeHdwydUWQyV+VDCziEwb:n6kIUzaGWMXLdro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ac1a0addc42508bc5c006519eeab5940d95877cacced1c24defdc759b2590875
MD5 f508a61d4575db13ce0322ade437456a
SHA1 a0ffa873856850235d4ae16ef99318e803d0290a
SHA512 222cd131d2658a5c1c6955a1c1acf04a218e6076cfe08fe19e5a8678cc8d9cace68815b7a9ca86f754fa39a0dd4e12d84e0e0bfeb5b69ed04adb253f0226ad4c
SSDEEP 96:n6kZb1Wh1SnwpvWMoiVmde8JoGWf22dwydUWQyV+VD7AiEwb:n6kRUjaGWMMJwf22Ldrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 9c65b7538e82d9f0d1f8010f085ed3befa89e760b3e762462b7e7c64e5a16cfd
MD5 891ecca2ad394b6804b79c7949e54d2a
SHA1 c93c692b9c96e2787b93c6ddd7722a049e61bd91
SHA512 f9bbe76196bbe43bc5b5ef7c4045ee88b3d52c8be45fbbc33824f257749087f90d9ecb83e19e70384fd461d949e2dd37f8e4c0bced957ce2cd1fafeb64689292
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupF2ye2RUlnF/RHb+vYVk5u:A9iIxuERzA83h09RZxYLAnFNbFeu
MD5 SHA1 SHA512 SSDEEP

Submit Download