8c7c5152f4058f82221c1dd078730330487d9b00ddc0e28bdae2423d33cd6566

Analysis

max time kernel
145s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28/05/2024, 21:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
7e8a80071c4f78ce751e20b52615de03_JaffaCakes118.html
Size 134KB
Sample240528-1vdrbaea2w
SHA256 8c7c5152f4058f82221c1dd078730330487d9b00ddc0e28bdae2423d33cd6566
MD5 7e8a80071c4f78ce751e20b52615de03
SHA1 e783a677da5018e0e5888221607dd908262dda19
SHA512 fd83450e0d3226a372031f4c231194472b11b6169745f179e73d02c3d69d48faaca0af9ed57ba48d2ca3def08d1f2f486b15100cc5fbf79e4335afadc9a1268c
SSDEEP 3072:lFWGIpBttU+VEKx3sSxibNw5yQaodAhltMzNI:eGIpBHU+V8Sxibe5S
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3528	msedge.exe
3528	msedge.exe
1684	msedge.exe
1684	msedge.exe
4120	identity_helper.exe
4120	identity_helper.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe
820	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 7 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe
1684	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1684 wrote to memory of 4492	1684	msedge.exe	82
PID 1684 wrote to memory of 4492	1684	msedge.exe	82
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 2420	1684	msedge.exe	83
PID 1684 wrote to memory of 3528	1684	msedge.exe	84
PID 1684 wrote to memory of 3528	1684	msedge.exe	84
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85
PID 1684 wrote to memory of 1952	1684	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7e8a80071c4f78ce751e20b52615de03_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe8a7246f8,0x7ffe8a724708,0x7ffe8a724718
  2⤵
  PID:4492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2412 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:3312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:1540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4716 /prefetch:1
  2⤵
  PID:3904
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  PID:2516
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6088 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:5000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4948 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3976 /prefetch:1
  2⤵
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4828 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,5749947786797423175,8169561489220371757,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4136 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3128

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

15865d13-5c8d-489e-9910-f23a5a878198.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\15865d13-5c8d-489e-9910-f23a5a878198.tmp
Size 10KB
SHA256 2dbb76b012eebd369f56e00639c035bf13b203a8c4e5cd19df1b24969c52742b
MD5 58c42b9da5129043f1a92bfdc06d2166
SHA1 8251a1161fde34675f8be90c125ae478224664f3
SHA512 6b79d5e387692838ea8d5781e009d10dbc060c5624999bcd746b576216fc46bda1a3fb663820c6ac065f6c9232a493274a40786081e38fea00fa99c2306d7de3
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupdMPFe2RUuNd/J+kE3z2OMJ:A9iIxuERzA83h09RZxYUhxNdxEaOMWRc
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af
MD5 ae54e9db2e89f2c54da8cc0bfcbd26bd
SHA1 a88af6c673609ecbc51a1a60dfbc8577830d2b5d
SHA512 e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23
MD5 f53207a5ca2ef5c7e976cbb3cb26d870
SHA1 49a8cc44f53da77bb3dfb36fc7676ed54675db43
SHA512 be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 960adab1c053bc9f14f6bc45cfc758804e80a70192dde5f12abf18c0aa4f70c1
MD5 402e1e49a28c5e55c6200d9a4512c37e
SHA1 f95d41593ce7617bc343157c2b42b50c525e3743
SHA512 c1b45f0591c1a0400f95a792e7a45d335907467f77224f85eaefe124290809e4e70e5ac32ab1507b75064a0a10d3a01cc8e29f1cac913b57c39d35cc8aa7e5b1
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1006B
SHA256 03d027c8d864a8ae2df8244546ab76a7d88275d51981f280144761accc3e6d0a
MD5 7b656a2c3d9830df3b6cf28a99669074
SHA1 c419df9ea84bc5f87047b20521e323cfd4c76420
SHA512 0bcb838339666e1642132a52b963b9c16d948776e10bc252e7bb4e84fa8b50ae7c4bd0319411a1d99b83074bd8be38b8e47d58694217001a4c918069201d2b04
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1d5f41cd2dff99765e95d7acbd392fb417a7ec4f920bd46e1d09ebb691909323
MD5 b8cc0457bb55c6ecaac422611a411092
SHA1 df3eba43bee1680ddc0fbcba2c11e7fe59dc49b0
SHA512 90d3947e3f18f1895b7f197a968012c647ac465cbfbb25f99cb39dce935fe563788c7325b80ab3cd619d0d71523c8329eea2eadb161e36c7896af4379e575832
SSDEEP 96:nBkEs1y/e8wpvWMoiVmdep62pw85fHAdUWQyV+VDCAiEwb:nBkFs/e8GWM562pwoYdrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 1cfbecc23e9a1d38870da60c57153ee50a5469246e8f12d229f201045aa7894e
MD5 690b618cb74507a94d91cded35082013
SHA1 9561b9f81f7a484b4264eabe65bc76b1d9abc102
SHA512 d98a81c1867e732c09c1c032ac8539ffbc12180be4fc044e19db2edfc2ceaf939ed628b15472d1d3ed90e540dea7ac410843ff16b8a4f6862a9a8efb15290afc
SSDEEP 96:nBk5s1yPe8wpvWMoiVmdeHpw8EHAdUWQyV+VDCziEwb:nBkasPe8GWMXpwadro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 6f64eee1e3c37e8c2a793f10ffbc04b0a804c044d6aebb7e83e50fab0e619666
MD5 fc5ec7deee2a6a4808615d124679473f
SHA1 c2a6b2b2eb947770feae24b9443dddda14aabd57
SHA512 f9282c38769172e257784497dc78b1ebc1e9943cc087272636423af6bed7f0ae03432706ab0dba8560306c620042a35fb0cf1efeb2d71a07f6edb02670a7f334
SSDEEP 96:nBkEs1yPe8wpvWMoiVmdep62pw8EHAdUWQyV+VDCAiEwb:nBkFsPe8GWM562pwadrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1aaa2f8b8866e17c47471b92f5d4abab0b671b8bfb27734e330e7d2cb56d679b
MD5 d43208212da73f4dab87882f5dc8fec7
SHA1 7eed46f004b38033d21954ea452705602a112341
SHA512 4da8206fdfdfe685da125f6ffc4022850e56ffebc81093e8a598470067fff8342343130446da7d0bbb70b958d09f57dde1b978e9b962b3ffdcce1754fed285c0
SSDEEP 96:nBkcs1y/e8wpvWMoiVmdep62pw85fHAdUWQyV+VD7AiEwb:nBkNs/e8GWM562pwoYdrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download