4294258466308c088f8878679d9ce976c4263aa9c1b6f8fabb11dbd011db7613

Analysis

max time kernel
135s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
04/05/2024, 10:01

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1237f3d22b4d663f17439d129f9ebe22_JaffaCakes118.html
Size 62KB
Sample240504-l2awnsdc94
SHA256 4294258466308c088f8878679d9ce976c4263aa9c1b6f8fabb11dbd011db7613
MD5 1237f3d22b4d663f17439d129f9ebe22
SHA1 59a212f221f459315f1c089bb2f2bb8bcb7a4103
SHA512 a6a24e29eb03a82fe809758cd5ab35a15393bade5616394b4c0f1ca81025a243c373fb6aa337c6b8a2265f129f6e92d62fde8f2eada0517689069fd8e6087f1d
SSDEEP 1536:H9itWguG/0Wt+huN1KabkKg779eHaDEXD4/K0H2tKnzak:H9itWy/0Wt+huN1Kuhg779eHV0H2tKd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4780	msedge.exe
4780	msedge.exe
944	msedge.exe
944	msedge.exe
6080	identity_helper.exe
6080	identity_helper.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe
944	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 944 wrote to memory of 4368	944	msedge.exe	84
PID 944 wrote to memory of 4368	944	msedge.exe	84
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 2192	944	msedge.exe	85
PID 944 wrote to memory of 4780	944	msedge.exe	86
PID 944 wrote to memory of 4780	944	msedge.exe	86
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87
PID 944 wrote to memory of 2156	944	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1237f3d22b4d663f17439d129f9ebe22_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4e9246f8,0x7ffe4e924708,0x7ffe4e924718
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2216 /prefetch:2
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2796 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:1884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5488 /prefetch:1
  2⤵
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4384 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5988 /prefetch:1
  2⤵
  PID:4196
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  PID:5888
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2928 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:6056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6712 /prefetch:1
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6464 /prefetch:1
  2⤵
  PID:1648
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,15011566849451437963,4103640101864305846,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6712 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3424

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1948

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2808

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f24ed6c5bf4b734a9af4d64e14a80a160bea569f50849f70bf7b7277c4f48562
MD5 dbac49e66219979194c79f1cf1cb3dd1
SHA1 4ef87804a04d51ae1fac358f92382548b27f62f2
SHA512 bb314d61f53cf7774f6dfb6b772c72f5daf386bc3d27d2bb7a14c65848ee86e6c48e9c5696693ded31846b69b9372a530175df48494e3d61a228e49d43401ad1
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 0f4df3120e4620555916be8e51c29be8d600d68ae5244efad6a0268aabc8c452
MD5 a9e55f5864d6e2afd2fd84e25a3bc228
SHA1 a5efcff9e3df6252c7fe8535d505235f82aab276
SHA512 12f45fa73a6de6dfe17acc8b52b60f2d79008da130730b74cc138c1dcd73ccc99487165e3c8c90dc247359fde272f1ec6b3cf2c5fcb04e5093936144d0558b75
MD5 SHA1 SHA512

Submit Download

52d3989c-ce63-446e-ba74-1cc4dbc322c5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\52d3989c-ce63-446e-ba74-1cc4dbc322c5.tmp
Size 8KB
SHA256 febe889b81beba1bb82a324c955b394ba07d73a1a2a877cd0aff59b8767be93b
MD5 bf6adc243455a3f65a72f04f7b8189e4
SHA1 4bf089a0b96aec3842e38e33bc8e3922382e9d6c
SHA512 d4ae95fa1715b4a13db7bdb5cf24f4cb5e82224df185ff7a76d012e80b76b7ee907b0be2201680bdf4bf162597b3fa46384ef3b75fb6fe060444891ee31cf9b0
SSDEEP 192:nkkCnSchXGWM8lutBFmXowKJfEEFRmlg2jrg:nkznSch2WdO
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b
Size 20KB
SHA256 9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e
MD5 b6c8122025aff891940d1d5e1ab95fce
SHA1 a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4
SHA512 e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoOxEuF:kBF+i/PvVIOSVi8vSmzXjXY
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000012
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 f2c7ecec270b66c7d20866e37106283cf2ecebaf0e4fb95e5e4eed473531cbba
MD5 45fecfe5153682d8cc7f073f96a7f641
SHA1 d72147759d0b393622eaf48a2936d5fcca69bd55
SHA512 bf1a2e691f56b9e3e2fc8e4f18fa728601aebeaaf4fe146d0097ef5e71d674342e52adede89afaf0673bbbe59d296bf74c1b3f901021be92c0819ce0a8167738
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 67003dd1097eeb6c63f07a9b3dbfd1d855e0c369a462ab3671d27fac2b01b590
MD5 280a5392b4af4161c7c7270f49941b7d
SHA1 ab85978df736b593dd2b78286ac9cc4d8425b12b
SHA512 c0980361b83272c702a8e396b968233cd02569e55c6d56aab747b43cb6acab6acd36187c10ac7091556f79482641dbd08496be93d120456be38643a539260782
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 2d1b62f02ad9a6ae23c6172092a052984ba23085d3d031066ee056f49cc7cebb
MD5 dffc28014486ad3ee7694d4071a5e34a
SHA1 32e1a13be37be1e604f718d33896de7cba00541b
SHA512 effcf0629038cfa950636d4e0e606f3a6c544a6c2701fa1a460828c6072074ef1c848dc1baced56ad15df89feb6a14426a42aaaa94c3501d91a6049e1e6ed585
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 83deb862d5358fa5d92f7c3edabc369f63f6ae2881ac14d97878db4b120dca53
MD5 4875b72d57de29cfe381a26e14fa60a8
SHA1 a29c622cda21c8129f08da4058843007f9d5abce
SHA512 9a508729f1125bf522650960f0e27800515bfa1d2badb301c90da47cf0260e775f112426636d1279740a6bab8e19e08a9488fc493e476a34ed36a0f0061ecbf2
SSDEEP 192:nkkCbSchXGWM8lutBFmXowKJfEEFRmlg2jrg:nkzbSch2WdO
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 b15b427011e00fc49ab33fc0291c2248e62e1a4d99196ac6204c43b4a5a7bd3b
MD5 af952540ed1d941931bf1858c109dda4
SHA1 fee33411dc626bce90f263a773cf45e893be2116
SHA512 e72149282449f5912b46f054a3a8ff1df2a06514e1d50439b5494f10ea9bce8eef546bd7e0424b93c8ae0b571e2f57b7476cc7e3a6e9644b3cefaf18115a351a
SSDEEP 192:nkkmbSchXGWM8lutBFmXowKJfEEFRmlg2krV:nkLbSch2WdG
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 da5304f42f8607161220427031fcd0f80375fd2df36c6ec77cadcfa5c32888d0
MD5 2418b1ff12fb4be5e18195d93bc8c3e4
SHA1 03ef46382bf951c3d53b221b09472d4be48b318c
SHA512 ed6cd1a86b174ffe4d2e0bb19ffded9f97ae40e7dbfb15157c04a093daa33734b350a4a29325a55c518bbfcfbf449f9af6827c724fc23c76cc17a9429540e1a4
SSDEEP 96:nkkbl1BK/hXwpvWMoiVmdeHZq9UWQyV+VDCziEwb:nkkpbQhXGWMXkro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 a0a42fc47ed890f26e16762d78c691e30a78b855048bf8bd66b50a4ac2ee6faa
MD5 bc4b0bdd94f39bf41accd275db4a1ae3
SHA1 7c09d73fe699fee81f7f0efc51a1f2992c69ea7d
SHA512 f6833e9a8321685ff4dde44bd76dbc87e6dfe71d6e3f26ed355330f8808357399e868524f2dc1cb27329331108eb2a954ef00fa2970754dfaef89bc0750447a8
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup/Yee2RUhwqGz+OblfBhDag:A9iIxuERzA83h09RZxY/JTz/XDafEBS+
MD5 SHA1 SHA512 SSDEEP

Submit Download