e22eb1778797d2520876b556a30fa731c0db071ba0de38a76b119e4ece69851c

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 22:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8fb0406e3fbe9e0a912d1d3670eded26_JaffaCakes118.html
Size 175KB
Sample240602-2mbgnaag84
SHA256 e22eb1778797d2520876b556a30fa731c0db071ba0de38a76b119e4ece69851c
MD5 8fb0406e3fbe9e0a912d1d3670eded26
SHA1 4fd8c8691af2cfec1e95354f7aaa857cfff5f40f
SHA512 24ab6a9a6d13bc6d442524c1cc178c7e5c95d459650b16a15b000a591cca31cc53cc9db01390803dd73715894433bfc2916dbc807b087bd0e140a176418b856c
SSDEEP 1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS3yGNkFKYfBCJiZw+aeTH+WK/Lf1/hpnVSV:S9CT3y/FLBCJizB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1508	msedge.exe
1508	msedge.exe
2536	msedge.exe
2536	msedge.exe
1656	identity_helper.exe
1656	identity_helper.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe
4372	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe
2536	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2536 wrote to memory of 3956	2536	msedge.exe	82
PID 2536 wrote to memory of 3956	2536	msedge.exe	82
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 4472	2536	msedge.exe	83
PID 2536 wrote to memory of 1508	2536	msedge.exe	84
PID 2536 wrote to memory of 1508	2536	msedge.exe	84
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85
PID 2536 wrote to memory of 4952	2536	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8fb0406e3fbe9e0a912d1d3670eded26_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xb4,0x108,0x7ffe7e4646f8,0x7ffe7e464708,0x7ffe7e464718
  2⤵
  PID:3956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2752 /prefetch:8
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4728 /prefetch:1
  2⤵
  PID:688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4912 /prefetch:1
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5848 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5912 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1984,9624651770022161858,15539741138377698889,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2288 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4372

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3728

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2560

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4084

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 a4322294b7ccd769e7c1b431a82139351a944081b50075828567f64a6f2c8d4f
MD5 b24893cfcf46b4f2abdcb3644f3fd8fb
SHA1 a9fedf13e2154d80c173ea3b04f465c60b2521b1
SHA512 74f8c270eab79490dd4fff20d4319eb5df53bb34d66cb730e432e73149274b2ce924e98708e9b3a00087404e0b13c44df028f5d59dd431e1bcf3b545503dbe28
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 74a71275dd59808ed79812cdadc953d21e19d62fee3e0b9fe9d53e597e07b17d
MD5 0bddc9f917f9fef63c65391d9671b533
SHA1 90e82cf1459d8b63427f48f55cef4562c3eb0009
SHA512 11a3131ddc8e4ef73a2307ecd38214cf9c5952cd61b531fec624eb19c7063e70fe09ba9959b1990031609ba8ebf3315ff004b4a1ff3a1b3a4dceef97005060a1
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 58b62168559c3ec960242f5bf651b105e230df16727839f0c89a9cd2f52ff2d1
MD5 124fd835da9894c9a15e2e2c654ee82d
SHA1 fc000441ff133ec1080f4a29e214d5190b66e1cc
SHA512 29e9d10f51b9496fd1974cbfb42852f174a7f04b7d310678657192f6b8ac368e672677ee32d5f29959daf40a06105e614f6aa3044e0108278cba9f0faff5dc48
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 1070c657f5def53e491dc8c4078319786436de831809845b586e7e64f5fb2ded
MD5 cfc29068d242e3a2e5e742c30166fd1c
SHA1 e7b1c355ec2312b5f9444b0034440a475241913b
SHA512 022bd4495569be8f962d92c25320f916aa14e0761057e10a420e51659a5106868cbbcf1a26ffb68a62f851877fa4b6ae85fe3e97e6aebfb69ff45a9d8893090b
SSDEEP 96:nJkm+1zr9wpvWMoiVmdeHpRQjosUWQyV+VDCziEwb:nJk9lr9GWMXpWosro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 1ab2f33337e8154a9caf6e07a3523ea242894e7323f3e8b59c253aa271dc0421
MD5 40e8a4d945dd9e0ba2fae15c8a07ca0c
SHA1 083a8ca82635d63221c0cc91d9e4f2eff0b1eac1
SHA512 a5e350c283212ed695480c797aab64dbc9882737bd5e10e6215ecb6b2979fef507988e724887f31686322d045b5d346c44ab897796b6e4ce9a09a1c165b29cdf
SSDEEP 192:nJkYlC9GWMfclYI5qErLEST7E52pWosrg:nJZlNWgArAO
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e3b239287f255564e1e9da8637f1d52b46ba6977e51c56a92848363c9037a1aa
MD5 672353c12c570e89a5d46975d2fdcdf8
SHA1 d1208f0db18905ee211a697c2db07b7f1182cc78
SHA512 ddadab4024732ae439053c6a33a2854294d1b660923b3b7e95a120c896c083c6dc3156a1db380942335c706f3a2568cd157aee0aa36d430a19f19ad5fb27ebee
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup9cXe2RUBqTn3z2OMDCRHqK:A9iIxuERzA83h09RZxY9cfFnaOMWRHqK
MD5 SHA1 SHA512 SSDEEP

Submit Download