498c5d4cc3a39ede5e2f4fbd724cdbaf8e875f19b170ae375ab0ece73fd0f2bf

Analysis

max time kernel
148s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 12:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d4629f4edf921f15ea97bd91a41cf855_JaffaCakes118.html
Size 77KB
Sample240908-pxgp7swglp
SHA256 498c5d4cc3a39ede5e2f4fbd724cdbaf8e875f19b170ae375ab0ece73fd0f2bf
MD5 d4629f4edf921f15ea97bd91a41cf855
SHA1 ef7eb4dd16fbb6b156e3973b676dab2211a667b1
SHA512 df1a7e0ab1958e84572025a6522f7ec233a48b18d729c2386e8baf8650877ca701ae5c7aa69a653e5677512a21c2745b46332cb2095a19d51b50b1b52ab9a9d3
SSDEEP 1536:UXCy7NHvYoDFDP8yMfBRCKqdhqxUvC93IxgFR6TJGv8zt8sQe51wIFsIPoGj9:UXCy7NHAkFT8xfBR9qdhqxUvC93IxgFw
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1264	msedge.exe
1264	msedge.exe
400	msedge.exe
400	msedge.exe
4976	identity_helper.exe
4976	identity_helper.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe
3804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe
400	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 400 wrote to memory of 4928	400	msedge.exe	85
PID 400 wrote to memory of 4928	400	msedge.exe	85
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1156	400	msedge.exe	86
PID 400 wrote to memory of 1264	400	msedge.exe	87
PID 400 wrote to memory of 1264	400	msedge.exe	87
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88
PID 400 wrote to memory of 4356	400	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d4629f4edf921f15ea97bd91a41cf855_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaa06a46f8,0x7ffaa06a4708,0x7ffaa06a4718
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2544 /prefetch:8
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3148 /prefetch:1
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:1980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4648 /prefetch:1
  2⤵
  PID:1220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4108 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4600 /prefetch:1
  2⤵
  PID:4868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:664
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5588 /prefetch:1
  2⤵
  PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2252,9418395359567939347,12279165731208226179,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1716 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2008

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1832

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff
MD5 ab8ce148cb7d44f709fb1c460d03e1b0
SHA1 44d15744015155f3e74580c93317e12d2cc0f859
SHA512 f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b
MD5 38f59a47b777f2fc52088e96ffb2baaf
SHA1 267224482588b41a96d813f6d9e9d924867062db
SHA512 4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b
MD5 SHA1 SHA512

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 23KB
SHA256 1156bb50a264543f6a9dc8922dd2c65d444c8bb11b3b18be95d5adff840b33b4
MD5 33a83c16527e4531fbfca2631f653674
SHA1 87a63514c262ba4bffc52d2ceebb3ca14353507a
SHA512 f1dba28d0f81aa0894436ae7b4ba76a2e635f002f666d17d31b8b21500dc2321d7862ca8dcfd22e44aab4d1f33112c076dc95191c889546a40f9c6197cccbda3
SSDEEP 384:fmkqzlgw4CtpJByzHvyMPn0cdWgrlF1xUQNaASTJJlqC3Ix7RQLSKYfkXZzauNEp:ftqirs1yZP0yVn1+QNliJJlqnx7epD2
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 2a14b95e3e32ff05b3485ad3cc1ca4067fae023e6d065e1223159939fda53932
MD5 739353aaaef7e2760e75569d17adccf9
SHA1 164eddacabc42a4a1286ce8987426f4a54f231e5
SHA512 405474eb114178975fc120198be3b2c4a5f6c3d11c9dcacb15571348b5f4865b81ebd16f187b19c119eb67aa49b930741eb1f2ae0df332c8d000ba4633b42abd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 603667dff00ad7b84906319855db5b0983e31625c1a70a3d80de443368b0ada9
MD5 7b1743ed59f5d61aa967d6a1c7d4d701
SHA1 4b17654c561fa447d76a3ca0b377a20252da1f44
SHA512 91f7e53f0dffd97360c553899b082711e55bf709a0a8433f6eb1da76cce8ebe2368031f665beca046fe51822c825c1634c81a93e370f4bb8c1c4d0dbe6d5c864
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 4eac3fe2ea992d6b0abc47729398c1c1499c4ba606c45a8c3d331d18216f3595
MD5 8e04be40c63a9e7297ecd032aeeb1a26
SHA1 9b5c3075a1e83dcfeaa6ac6513f5cbebc20fd501
SHA512 e4fcb908c610fd352e02b26448e6110aeb86e2a6c0e6527f7bf2aef8d3b9fb71531e664b218adfe771ae942f3f18fd910f5f783cce333eed2193e0612c5dc1d0
SSDEEP 96:nr2kzbx1+GMwpvWMoiVmdeN4mSqPvq02m9IUWQyV+VD7AiEwb:nCkzFFMGWMd4mSqPvq02rrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 f491b0816f37bd1975b7685e47bcf2b9510a53bae7e5bc983f52f7e453b89095
MD5 b53f1eb07b80470310024121b1ac5fe4
SHA1 2538518e097328bcaebb4700e5f3a4800b26ba61
SHA512 5cdc5ea187ddf00833ac345622bb98467c745db72e6d0091b67f42868b7763f7daa6fae5e907ee928d7270c38fa0841f2b84ec9634204f42f6cdcbde6e8a2918
SSDEEP 96:nr2kzXx1+GRwpvWMoiVmdeHm9IUWQyV+VDCziEwb:nCkzhFRGWMXrro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 08d2525fdbd5c21c24bf0fe46155244e99271f0ad9c612f30a15db2ca14295de
MD5 582f4ec251d29d050c40396dd0db4a65
SHA1 6b8561663539926348aab39dcd2d5fd5f1fa008b
SHA512 a8e8eac78a17860577ebbd1ea74e2090e9d7cc550b4a0333f667e6d7b99aef64045cec6a29053a34e4094da7ef3fa7f327bbffb144037f98a95d1248c12e55aa
SSDEEP 96:nr2kzPx1+GMwpvWMoiVmdeN4mSqPvq02m9IUWQyV+VDCAiEwb:nCkzpFMGWMd4mSqPvq02rrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 de66d4efa05722457bec7ef32d7d08b75155b508979fb1dbe93b9819a835483e
MD5 dfce957b75a94b741900470918749f22
SHA1 3b80d31c6861328d332c08e8439a5d9c0483525a
SHA512 d5cb599bd5db915aa10193615e431125a9e3cd90e7397575ab09480986b997ffbdd66dfb9b92b7cd826f2f31e6c49736d0db3c519d24c56662cf9f62ae7fa1dc
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup79e2RUSlYOhLQOl6feAOo:A9iIxuERzA83h09RZxYtZhSF
MD5 SHA1 SHA512 SSDEEP

Submit Download