a6313663801b913d1153ff382035f5a8b1d5a34c3c52306f51b2d2b841e47d3f

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
27/09/2024, 03:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
f9967ad0ae4d9743c5c0459521a3c0ca_JaffaCakes118.html
Size 92KB
Sample240927-dhvsqsvdkc
SHA256 a6313663801b913d1153ff382035f5a8b1d5a34c3c52306f51b2d2b841e47d3f
MD5 f9967ad0ae4d9743c5c0459521a3c0ca
SHA1 7561d00707989575d87599de881764ad2bbd37f0
SHA512 0e4e7d50912ffbb111e570531455a1cd58be076a156b80746e2cd10bc799a5e0c9712fddbfdcb4d5cd439ce7610dca824abc475b6db0f17c3f28162a5110841d
SSDEEP 1536:ikcl9Gi404ouEJSuEmmufXoKvN8R+/AGmzUMoWF6ymRhmeizn4KqeYejwvaoDgzp:ikclGsPSu1szn4Kqpej1oDgzynCPAtun
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 11 IoCs

pid	Process
3488	msedge.exe
3488	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
4828	identity_helper.exe
4828	identity_helper.exe
592	msedge.exe
592	msedge.exe
592	msedge.exe
592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe
2968	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2968 wrote to memory of 3892	2968	msedge.exe	82
PID 2968 wrote to memory of 3892	2968	msedge.exe	82
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 2224	2968	msedge.exe	83
PID 2968 wrote to memory of 3488	2968	msedge.exe	84
PID 2968 wrote to memory of 3488	2968	msedge.exe	84
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85
PID 2968 wrote to memory of 4808	2968	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\f9967ad0ae4d9743c5c0459521a3c0ca_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8b7ca46f8,0x7ff8b7ca4708,0x7ff8b7ca4718
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:2224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2660 /prefetch:8
  2⤵
  PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:3816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:2484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5308 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:3728
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6268 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6220 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6204 /prefetch:1
  2⤵
  PID:468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:3960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,13732225865770388530,13516652898199870375,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5752 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:592

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2696

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3256

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687
MD5 ecf7ca53c80b5245e35839009d12f866
SHA1 a7af77cf31d410708ebd35a232a80bddfb0615bb
SHA512 706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d
MD5 4dd2754d1bea40445984d65abee82b21
SHA1 4b6a5658bae9a784a370a115fbb4a12e92bd3390
SHA512 92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 4d94597f8d469b7319b71edf9209f87b88c4cbe46e49f5c274ebdaafbcdac681
MD5 ed3bf80acb1880cfb9040fff950b61b8
SHA1 a16e4ec1996996df4493f1e02047c987fc3a33f6
SHA512 9882b905017eb5a8a847f5ff38e9937eaea3f7995dd95bd765cdfad10725919de2f63f0a6e862955e549bd829f08ad0855600cd7ff388c025a993d22feebf7e3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 c14983526f5568d0fc908780d8ff3197ef46cccc2cab7eeb4fdd9dfcea45808c
MD5 79c7eded3e062353333749ae03d5aaf0
SHA1 999346caa188852f3f36e2469ce9fc6499eb2252
SHA512 301137e471e820260b51c843eab34b76170eace906b7a7363919603b224c2a294f069045ebe7e00a13732d7b04fdd55c6b24217259477d5bca14c98e24d3fc75
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 4af54b9aeed518f6c323640d49dde592432ad420a2bbb7186277c20b4c91ad63
MD5 26a48efd60960376fd27dd1fb02be2f6
SHA1 b2cac7414e22fd7423fc78d204e7db978e029f7a
SHA512 f91d474ecef0fc6da3c86d04833aeab9dd11e077b03ec26edf17f1ef0f5988e56ce64a9172c5b46ab1d8c7436b96d8e616e80a93ee835bcf3ad10be6605b6b4e
SSDEEP 96:nIkz2Bp71JLDTNwpvWMoiVmdeH44YAKUWQyV+VDCziEwb:nIkz+1LLlGWMX4Lro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0591f7c3fa0df0ba04531db59d0b57de9a3515fe54a227548c4cf91320cfe0b9
MD5 3f74f9379878a06ab5a92ddafd88fc93
SHA1 eca8a374c44dc8017eeadaa8a993404addca38ff
SHA512 c42823ce3989464790746e8ec7f9f6ef4cb80325f3f4bd660855b518a90048917913620bbc4240f972f0138da41f35aae90e16d74c26ab7a13a94e4093c96703
SSDEEP 96:nIkzDBp71JL5TNwpvWMoiVmdeEfUYQW9i6nEYq244YdKUWQyV+VD7AiEwb:nIkzV1LLDGWM0frQW9i6nEYq240rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 b08b1e094e9701e5d547621947ceb974eb20554ac087fd508e9d4e8657ed1dc7
MD5 9980dcea9436d5cf4bb88878e562d50c
SHA1 f3e4428bea3ec8150e2b0bd0da39fafaa541a555
SHA512 cd2c2640d76204c7b92775778b6b9dbb828a7df5e6791d12bebe56f560afef289f8f1c0fdc370b0c7f01724a58718abf0a1f5bb6379cd2f59d708b3dc859c500
SSDEEP 96:nIkzoBp71JL5TNwpvWMoiVmdeEfUYQW9i6nEYq244YAKUWQyV+VDCAiEwb:nIkzo1LLDGWM0frQW9i6nEYq24LrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 6d8baa395061d7ed5785ac32df44fa7e25b067611df3a6a7d7a3a8cfbaad1eba
MD5 7ee1e8bea9a64b83d74587b8c3c31fbb
SHA1 7ed6db0ba0a10dddefae3412b82656dbdf75fa8c
SHA512 2c81e1b99d0bd575d27a6a94e36252ceb08c996ef003cdfd5ab6a6aa209b03ee60748401ae4432eeb606d3a034ecaa8c6b04ed35484fb7cd2eb1e7a0e882057e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup+e2RU+hOk2IcM/bo5ZxK:A9iIxuERzA83h09RZxYgdl/qZxK
MD5 SHA1 SHA512 SSDEEP

Submit Download