6db07f8d2429dabb54e143fe8bccd9b27d9864e28daaeb80c2f035dc0edc0baa

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
16/06/2024, 12:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b399096f17f63689f0e0ad32b15e7855_JaffaCakes118.html
Size 84KB
Sample240616-p3febsxgrl
SHA256 6db07f8d2429dabb54e143fe8bccd9b27d9864e28daaeb80c2f035dc0edc0baa
MD5 b399096f17f63689f0e0ad32b15e7855
SHA1 7a29a202050b91111211739125c24336acdb782c
SHA512 414f707755680a740939b659e9f784068304cd6d1a0e0616c35de2b72625aea22dba60a482bf73b5e298b16e956b6160b495522ffc3958a0d7627638f2a9da8e
SSDEEP 1536:rkcl9Gi404o1EJSut4zn40Jlyxt3ZVCPMPlqmtu5bxw:rkclGsoSuyzn40JMxt3nCPAtu5bxw
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
2084	msedge.exe
2084	msedge.exe
372	identity_helper.exe
372	identity_helper.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe
832	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe
2084	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2084 wrote to memory of 4532	2084	msedge.exe	81
PID 2084 wrote to memory of 4532	2084	msedge.exe	81
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 1156	2084	msedge.exe	82
PID 2084 wrote to memory of 5004	2084	msedge.exe	83
PID 2084 wrote to memory of 5004	2084	msedge.exe	83
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84
PID 2084 wrote to memory of 2012	2084	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b399096f17f63689f0e0ad32b15e7855_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe197b46f8,0x7ffe197b4708,0x7ffe197b4718
  2⤵
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2176 /prefetch:2
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2240 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2688 /prefetch:8
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:2100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4208 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1792 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1980 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6668 /prefetch:8
  2⤵
  PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6080 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2172,17603564720671099925,15283101664353822,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:832

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1824

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2872

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d
MD5 477462b6ad8eaaf8d38f5e3a4daf17b0
SHA1 86174e670c44767c08a39cc2a53c09c318326201
SHA512 a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 624B
SHA256 30b78031fbdaab66614afd2dacbd349dd25ba4344dcb5554641407a0c7189836
MD5 99b227178298f5ce466939e92d4684a6
SHA1 f3b3f55056ece46fa6e2328c2c3268330b3a6c3c
SHA512 78f06c407fdf4991fc5c58033e310a67b835c3925a5de39ad36b48873a2c5d1aff9e2465e85da07e6b8d3aa59182364a0a49edac5dee6a733d00abef0b545053
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 7e084d994cb02563f2b44f372b0434d0ed49ac5f1cd5ade3db5a2b1977a66ae0
MD5 0037c6443f004be6842b3216d0cd3f34
SHA1 8d02e3c6321a7c843c960e8f775a701352c14040
SHA512 fd6b3809ab52538b0a1256e9ac2f27a31518ef84838d729cb3518d29a3aeaf1e797979796986716fb4259e8feda1cb1d9807b64f27e947d687bf5c7eb52cfdac
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 c2a53c29d7eb7699e7bc0933005181bfcbb1b0cd5262e591792b7a052efa7b99
MD5 2142f877924cede24412aa9e81e4b49f
SHA1 384b563e7422919728aa7be9ba57ebf1a60b1f99
SHA512 30491a9bb4fd91f2f1fb7fdcf8bf33146d20ce973e359faa79e511d10d8810b136e6fbea1dadad7d396733431f326103c74a6191951d05e90ed137ba43584423
SSDEEP 96:nzk/oxm/DnmqaU171wpvWMoiVmdeqfpz4FPzYF+E7vp22WfpEUWQyV+VDCAiEwb:nzkB6ix1GWMafpkFPzYF+Ejp25ErV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 c213217b3256f1285306b9db6c9db1eecb8f4d87e4c94fca0f644a4478403845
MD5 43fa9f41ca1c932bc119f69553e161ee
SHA1 107f00b92597f6ce7dded748454e1854c2b0265f
SHA512 a3b6f6065d88184078903053cd48127f8093f62adbdfdc93236765162d657900b6a3a771798480b7c61accbc9ce7146516358bddfb9e5cf3d636c0dd97e6c05f
SSDEEP 96:nzk/oxm/DQYmqaU17vwpvWMoiVmdeH2WfpEUWQyV+VDCziEwb:nzkBIixvGWMX5Ero
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 c03faf444431462cfab01c8cc1a2add8fcd26dd937083c20dbbca5a5a5df566f
MD5 016bb448ee6dd70ed53ae3b1dc0d4b24
SHA1 f67b6e483da6a359ee24e5249595228f452c0c88
SHA512 4807d4d0f1c1d0bed782ff5200cf5e1bb97d37d208b7b56cb9eb9a8b7bd15db6b2984e243ca867ccab51a2c70105dd7913429e34f551cc283fdc2856213af77c
SSDEEP 96:nzk/oxm/DsmqaU171wpvWMoiVmdeqfpz4FPzYF+E7vp22W3pEUWQyV+VD7AiEwb:nzkB7ix1GWMafpkFPzYF+Ejp2hErg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 548b9c1c481d0fcabad7ad09ef467e112f7702f6479a168d7ca337b57b99d8fd
MD5 cd7e5dcd06e81040f704022fceee8224
SHA1 b5f03ce0601a706e6eb61a71218958df2cad28e9
SHA512 b1c75c9ce3603cec73684712de16c664df29dd66d2be1f2224316a9bcd73efa18a1e06902929775425281ac0ac24fd6e7f8fdc906092be31ae09b236079a535e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup75HfEe2RUsh/r3z2OMDCRu:A9iIxuERzA83h09RZxYJCvraOMWRHqln
MD5 SHA1 SHA512 SSDEEP

Submit Download