b4cd2eb1c4f8ee4f4e1c238cf49c777eab729724a777fe11e0ee7fed9e859355

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
25/05/2024, 01:00

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
705e67f4a38f2a9287efff901dc99202_JaffaCakes118.html
Size 129KB
Sample240525-bc6a6shb99
SHA256 b4cd2eb1c4f8ee4f4e1c238cf49c777eab729724a777fe11e0ee7fed9e859355
MD5 705e67f4a38f2a9287efff901dc99202
SHA1 d48ba1756a66b44728646fa5a158e72bea4cf4eb
SHA512 ec4261b9d7616cf08b985df271e93a527c78f29de1ab0e437ebd0e51ded6bb67bdf4d7490f43545ac4c1f8e709438dff508f35984cea30dbceeab63706579a34
SSDEEP 3072:EUjvG8rMAcXmNRSJjqhIHUq/R8kUXZAuFdak:hKXmNRzb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4872	msedge.exe
4872	msedge.exe
4116	msedge.exe
4116	msedge.exe
3592	identity_helper.exe
3592	identity_helper.exe
3264	msedge.exe
3264	msedge.exe
3264	msedge.exe
3264	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe
4116	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4116 wrote to memory of 1332	4116	msedge.exe	82
PID 4116 wrote to memory of 1332	4116	msedge.exe	82
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 3808	4116	msedge.exe	83
PID 4116 wrote to memory of 4872	4116	msedge.exe	84
PID 4116 wrote to memory of 4872	4116	msedge.exe	84
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85
PID 4116 wrote to memory of 4456	4116	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\705e67f4a38f2a9287efff901dc99202_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xe0,0x108,0x7fff0aba46f8,0x7fff0aba4708,0x7fff0aba4718
  2⤵
  PID:1332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2140 /prefetch:2
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3204 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5736 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4140 /prefetch:1
  2⤵
  PID:5060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,2268528653568453942,5371278859088830478,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5776 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3264

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 db817ac03a148beca31a4c5c8a3d17618c445488e62b9a90d94d29f69a803ab5
MD5 6ef5999f5e7dc3d41f17d862bc1bfb2d
SHA1 2b64771d05cafb63e2ce22aba25a57cc6b560a73
SHA512 836cb7f61bb3b1f5b3065a39317398390e27e631b72195f98f55ad7906706bad356803ecbd51e1f20c00fb377cc2129314ec80a39407cd16bf5cd0331c8ada9c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 46e4c4b6949d2af699b1440483b56c22f74b0d9e0d3f6c5f997edc0d4fe538d0
MD5 3a47761b3c0fd268b587f1726c6b20d6
SHA1 7b44d3fa97413841b2f18bc9e4222b0cf3be6c44
SHA512 dbb438125032da002fb675fe9227b3c5aa8a85c1b751365cee8683958cd001b0cc062fdcb6d57daf1fd432bdcc4ae52bdace93a6311d247f2186fc864a856704
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 d1e6b5f3c743181437efec6e36e55c64c49c8ca53233d41ca815dda32187db14
MD5 27596d85abe9fa83af60537a084e3e37
SHA1 70a61e3e46c75d2ba165adebff33a89f810d313b
SHA512 3ea664e07734232e120cd1b0ee8ceee6628396230f20ddea2109ae0584ba1f101a01e6d9080390688b7330dcd6214f163929587433730b0f66f40e573072c0f0
SSDEEP 96:nHkil1/1wpvWMoiVmdeHBrzZq+UWQyV+VDCziEwb:nHkiR1GWMX6+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 0fd9b04ba357bb05cfdde2e30b54c6926c1aac71f547e083624f6a173dfa0cd8
MD5 17dec9d7294194f0ea4e40e9f9195619
SHA1 00a9851d9589070866a9da3b9d9a887caf3f1d5f
SHA512 e188a33120bd3d6795d412a149113cc4cb463558e165ffe7ef18ad0141a811874d44f3f78e06852220e82185d830f83371bd7e1c22962f46917072dbba30406a
SSDEEP 96:nHk5l1/HwpvWMoiVmdeNXwyVko2BrzZq+UWQyV+VD7AiEwb:nHkLRHGWMdgyVko26+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 407e1971bd1b2c74cd8dc59cbdd8abca8aa9716598a231c653df581a34a74abc
MD5 c089f202fb99d1f40914f1c6a8502c86
SHA1 b29ff20b8cf6d2269c6532df17014d7815f2e3fa
SHA512 1f9b63b40783e7ae7f8fe9eec9a5ed330fa3aba694110d1f4ee1d6c00387efa2cdd631bd06810bf96d171a11819a1a712a8deea80f2f720316ddb8d39abe159b
SSDEEP 96:nHkZl1/HwpvWMoiVmdeNXwyVko2BrzZq+UWQyV+VDCAiEwb:nHkrRHGWMdgyVko26+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a28e8261f83bf7fbc8c31c1a4b7807b5a66e4e1a0a0be4d759f2d959ec6fcad9
MD5 696ac1fab8526c1ce0c1917c39eb34ac
SHA1 8593c8b3e031542b7486310fd337e615fb517feb
SHA512 64cee882f9523af3f41092dc9ea4ef1a894f3d56e1395fdd06cf4379df9fefba30090cd52b28f4c8235e04bcdb900abe8c432e9b8ad711c90cb768055d5e32d4
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupLHQe2RUbMj2Z3z2OMDCRH6:A9iIxuERzA83h09RZxYLHOZyZaOMWRH6
MD5 SHA1 SHA512 SSDEEP

Submit Download