5af51c4c0ffe09c1cbf0d795ab5755e6a8ce637f6d6537767c741021605eb202

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 14:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
92213feeba5c442890b832da1e3c7ec6_JaffaCakes118.html
Size 20KB
Sample240603-ryfkmsba22
SHA256 5af51c4c0ffe09c1cbf0d795ab5755e6a8ce637f6d6537767c741021605eb202
MD5 92213feeba5c442890b832da1e3c7ec6
SHA1 cd91b4d28b7ebc22b1021dc041aabadbe2fe2c9c
SHA512 795689c8274775443cde5df8a9c2a434dd5e0d1f71dfd0759f8fb564ac2f738752fd1ab3213dff74ba6ee6131e024cec516278364b6fa029a5d9ee7e77c0499b
SSDEEP 384:8Rf2lWInG8ghmduQUNuv8HvjobEp1WEe/BEjZK/NnkS:8f2lBnG8weJb6WEeCjZK/NnkS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1344	msedge.exe
1344	msedge.exe
3648	msedge.exe
3648	msedge.exe
3764	identity_helper.exe
3764	identity_helper.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe
4324	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe
3648	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3648 wrote to memory of 3528	3648	msedge.exe	84
PID 3648 wrote to memory of 3528	3648	msedge.exe	84
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 3556	3648	msedge.exe	85
PID 3648 wrote to memory of 1344	3648	msedge.exe	86
PID 3648 wrote to memory of 1344	3648	msedge.exe	86
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87
PID 3648 wrote to memory of 2992	3648	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\92213feeba5c442890b832da1e3c7ec6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe5a3e46f8,0x7ffe5a3e4708,0x7ffe5a3e4718
  2⤵
  PID:3528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2268 /prefetch:2
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1312 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1840 /prefetch:1
  2⤵
  PID:4832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5432 /prefetch:1
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6028 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:3268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2256,10551150542051676712,6516973241573026422,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4828 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4324

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4708

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1a8695e3-8a11-49a8-8978-13f215c89426.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\1a8695e3-8a11-49a8-8978-13f215c89426.tmp
Size 10KB
SHA256 dcc5dbf2ed1ab023ed8d355c788f1dc1b3429c70417009b40f52b94862bd9bb8
MD5 67f1784adcef98948e23fb5957c4b53d
SHA1 63637d1a53674f44750f8ef0ec2d97b6492b3a25
SHA512 a4ae91954afc992462bb41c53dd39d5b2688b72e7388909829b046acd0ca9ba76ee293e01cb850ba95aafaae743f84cdc906482a220906149e233d8793765c3f
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupN77e2RUAo503z2OMDCRHqr:A9iIxuERzA83h09RZxYNPa0aOMWRHql1
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc
MD5 4f7152bc5a1a715ef481e37d1c791959
SHA1 c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7
SHA512 2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6
MD5 ea98e583ad99df195d29aa066204ab56
SHA1 f89398664af0179641aa0138b337097b617cb2db
SHA512 e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 11854531bda7b672e6f1309abe9ec8f17b81d797b601565d7b261ad2aea7e262
MD5 452484c6455affde31a0621cff036ee0
SHA1 91429ad445c288668e212b571e1d67f572fe49ea
SHA512 cb07291187774cc1e8a7326322a28b4f40aa9fa779cb1d56a4cf68f732edcd6b8e7067391831531da4a2c8904abaf8ae2fa4282858074b16807e06893566d25d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 c11f6e5a64bfa5a8aafdca520c78ccd6d38a9b4e48cfbe7faf60b03f881dedc4
MD5 30a9ea4ac98a03e4760683f150b2ff07
SHA1 f24368b6ab4b57e6d51f6fdee6b297586a392225
SHA512 06aa058654bf80ebd5b3c312eb1e95f37da776d4aae0136b1dd7e2deb12270c1252148cfb10a09690952b4fea8d31045373a7c42669330d4e061128e91998b99
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 353dc855e596af9f517f900facf5a172efa7206070212ab0b6dc2269f8c6fe04
MD5 40b4c57dc7aba37c5a5100c8e02e5b17
SHA1 893d2fefdb00e3079d94cb8312e4fd8c1c17c0e7
SHA512 2ab9d3fc0ce4f64aaa5df4acbdc8f08c78fdeefaad4698763081d803136b3d0ed7f6a9afaecde2dc29d31cd192a56371636e80775a164f98fb1c74e7e883ddea
SSDEEP 96:nYkMoB1433XwpvWMoiVmdeHp1kcsUWQyV+VD7ziEwb:nYktBGnXGWMXptsrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 31a9754b93cc92d9ae33d9159b541caecd9b0a060b8ac73bd1eb80d896a9e1fe
MD5 427952820e47d8b3c4c6957317a2956c
SHA1 84bc3f8407c9d693a30c9894497e9d6c661ec433
SHA512 d5114229a295b4f6c79a37c7c920ddd4f8aab3290ce2ca3ee216a6ca498c3af9c02233328cf3f44fe1deb3aa2f6f533cab608bda0446d2372656199f15143607
SSDEEP 96:nYk3oB1433XwpvWMoiVmdeHp1kcsUWQyV+VD7AiEwb:nYkYBGnXGWMXptsrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 50ebe8cc5304b16a7bf036f2bda538406bebf9f3ec1236a9c5aff1d9a9bb4310
MD5 89b5bbb006bf148c1ced824f60b7fea6
SHA1 e2c18388c58c08a9da41831aa28e2dd07350be40
SHA512 05b0fd4e08397d847a828b057c41288a374c6add9a02d940cc0a576a9ec4054276c4c5d81db2993af3a12f57ea81a8a5ad6c252e2d73e88492bf6335ea52efef
SSDEEP 96:nYk3oB14x3XwpvWMoiVmdeL1szE8ErM/2p1kcsUWQyV+VD7AiEwb:nYkYBG9XGWMbWY8ErM/2ptsrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download