1da629f3f115f7a159b5ca2e59f6d48e9a3e5d1756e9741e00343e00a8411df3

Analysis

max time kernel
145s
max time network
137s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
05/05/2024, 14:16

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1811732a1931b70d89c6b8ea9c6d9834_JaffaCakes118.html
Size 51KB
Sample240505-rlht8scd2y
SHA256 1da629f3f115f7a159b5ca2e59f6d48e9a3e5d1756e9741e00343e00a8411df3
MD5 1811732a1931b70d89c6b8ea9c6d9834
SHA1 5f4ca43e124afad3713084dd710068f40b946a15
SHA512 14eb3eaf678957b3259201c04ca2f44c3354a4e43d105a49c080e5c8d236f9c9549c2ecf26afbdba53b85bbf7b36cbf51a51d06581fbdcd8cbaff9130935a801
SSDEEP 768:c8wSMxnJVFBNvdop2IDT4BRRTuGZ7OwiZRYU6Q2uCkBZ29dd:OSMvBRZJicuPBg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
780	msedge.exe
780	msedge.exe
5332	msedge.exe
5332	msedge.exe
388	identity_helper.exe
388	identity_helper.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe
4220	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe
5332	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5332 wrote to memory of 2228	5332	msedge.exe	83
PID 5332 wrote to memory of 2228	5332	msedge.exe	83
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 1456	5332	msedge.exe	84
PID 5332 wrote to memory of 780	5332	msedge.exe	85
PID 5332 wrote to memory of 780	5332	msedge.exe	85
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86
PID 5332 wrote to memory of 5520	5332	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1811732a1931b70d89c6b8ea9c6d9834_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffb718546f8,0x7ffb71854708,0x7ffb71854718
  2⤵
  PID:2228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2300 /prefetch:2
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:1740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:3656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:2620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6324 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:3444
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6928 /prefetch:8
  2⤵
  PID:1140
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6928 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:4256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1712 /prefetch:1
  2⤵
  PID:4800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2228 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,5185637976451456477,3201336742200645668,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4952 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4220

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4296

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 cb8a0964605551ed5a0668c08ab888044bbd845c9225ffee5a28e0b847ede62b
MD5 62c02dda2bf22d702a9b3a1c547c5f6a
SHA1 8f42966df96bd2e8c1f6b31b37c9a19beb6394d6
SHA512 a7ce2c0946382188e1d8480cfb096b29bd0dcb260ccdc74167cc351160a1884d04d57a2517eb700b3eef30eaf4a01bfbf31858365b1e624d4b0960ffd0032fa9
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7db700e067222e55e323a9ffc71a92f59829e81021e2607cec0d2ec6faf602a
MD5 850f27f857369bf7fe83c613d2ec35cb
SHA1 7677a061c6fd2a030b44841bfb32da0abc1dbefb
SHA512 7b1efa002b7a1a23973bff0618fb4a82cd0c5193df55cd960c7516caa63509587fd8b36f3aea6db01ece368065865af6472365b820fadce720b64b561ab5f401
MD5 SHA1 SHA512

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 50KB
SHA256 c563d9d869a9c258dfab25962680664a2bb757d2dcbfb9960328845bddf87583
MD5 3e53e00b0232c8e80264d871bc48e037
SHA1 d2d19bef488368a328156b18bcc6537703234327
SHA512 b2b66a3265cd76f1de6483bd505fd696cf66a5ab4632f6423a5ff6c00420ce4ce7100b5d0fe11ea663cd475aa217d3bcbefb72e546383caf4ab05368ac8a2cd9
SSDEEP 1536:vDxF09CWECWw8s9CkkatXyP2k0q/ESlu97Z+Q:vD0XWw8AkCqyl98Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 70KB
SHA256 5cb91fead95664e201c127a5def8a9ce8cda7848a24fcd7c37c0e99bcc0fa4fd
MD5 8966cf2c87b07985d490eda92d78c683
SHA1 c37d29936b6824ca80e8df0e61f1fc3c08393e56
SHA512 3d0933fbba05b17d8efc25dab8348d50ca4dddecbb332fc333274e8de889b6b054e89748e3450317c99c75b01cd0acac12edee490eaa978ec5a6124dfca288f7
SSDEEP 1536:AS1/OZjLmRqf8AbEH3o8fQ6dCM/yesoy+eL9C9PxAN4V/36dkTj:ASW9Lmqf8Se3ro0CCbso5eReFVCdkn
MD5 SHA1 SHA512 SSDEEP

Submit Download

56203e7d1985292e_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\56203e7d1985292e_0
Size 385B
SHA256 9dccc1e19ffd3e24eca2bbd42790f813fa76d2f1c9a5542c90b57b1831f12192
MD5 68332ba5994db58cd6bf879bd3b58eed
SHA1 3149062333549c41eb4a6d595b732bd30d236015
SHA512 4e867c6b40b057b5ae0bdb1ae1a6d6c50b416f262a2075b6c571517bc99f3c823ee2ba074a080e6204e18fef7480105fce8e2a11026a6169bb37a86e48e5a0cf
MD5 SHA1 SHA512

Submit Download

8578d161554ddaec_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\8578d161554ddaec_0
Size 33KB
SHA256 2695be00f0810512424c9f0c013a5ce1ba791f28d9370bbd8d401a8316271139
MD5 1db1a66116c1c0e74bda8a8e47d56958
SHA1 8d39da9cdd4fc3baa9e1797f0ac9bcb9706639ee
SHA512 548902d989873648f0f9779af6b18aa84029284b8ed570ccb790b5ca87eef0a0ad7724f900646326acb3dfec68dcb99bc169c2b9d894b0a3f9a9bb60d90f8c5d
SSDEEP 768:6z7UND7305n7Ccls4D+Pm1f6QZtbuhk5r8oaqpZGbGXJY:uoNX3057Ccls4D+PCf6Qvuhor8V+5
MD5 SHA1 SHA512 SSDEEP

Submit Download

bb3d17fdc237c01f_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\bb3d17fdc237c01f_0
Size 162KB
SHA256 be84503d037e016c296deb73bcab28d8abff832126550983aab593935081c640
MD5 2a8237d8a682bd7c3a6882bf0f85eed7
SHA1 db3733d7f7547b2b3886da70b8e67e138e895413
SHA512 9e166f665407c42bc7bbfd5f5f58fe7bf51f898d04ba8536effee3f0aa21ffe0e30c09d101bbe42dbac6a7cd922f58f7beeb9c0cbe3507ab7d8cd7e1f7274f64
SSDEEP 3072:L90PXsgQzJXxxIWW6Ha8AJjZLMYJPHXLjpR/f:BQQBxxIWjHCJZJvL7
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 528B
SHA256 5056d3ef9ae2f6ebfa5eb632c567b38955332e0762222bc0bb7ce0325ca9df63
MD5 f413f0dffe342a37cfaa4471c794ceeb
SHA1 f5879968857433b1f420ca7c209d151e69a95c02
SHA512 902304ff20a3042a059429ab477686e30e1a8cb84b6ecbc141131b5864a2ed48256c50289f3cc76bcb2ea9da86d8ac9eda08d5e83e0d9d0862c3266abc80ec9d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 fa3b5f9e065863dbeea3d578d32d97561f48c2a7034016e754a0c1804aaf3636
MD5 21522ac07a9d87692f55554d999b8fd1
SHA1 5c2ec67a252e248735e456542540dae0512a5e8c
SHA512 c298dd85faec44c85130d0d8388bb6e929c2d4d2791799d583b02dfbb429f131738aa26234aa282f9d06b6e6e11c615678ed741b004019792f3070232439a2d4
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 a7877f0568419749cbfb3d53bed7e1cd7fe51ae98743c0a2662ee40bf4517132
MD5 a82cf315d333f362dca4e614b69c06d1
SHA1 987fe233919aea5677dbdfe1d2c8f3b8002b399a
SHA512 2881635abf1bfc016e296c75eef60304aa69fb3a3606ee88799ca29aa3510d85884a6c7f3766b40f4c633dd12813f05780aa418327953043c2328596cd1c9006
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 f441a7e9674d74662c62964de21de16abdd97a605e38872d3a1fc7e732280b68
MD5 16963e53dc3ad9e32121f87bb7fb899f
SHA1 2b767f9f259af6cdcbc650fcf2819963e759a2f4
SHA512 b5b0447e332d75f5bf9ec0b4c0dcc11c5abff82a54f81c9a96e47bdccdcdc41854d346156da774728ed272b9fef772431f4a58a72ce9864139b3ced4a5b893c3
SSDEEP 96:nikbX1tCE+fTwpvWMoiVmdeHqVc+RUWQyV+VDCziEwb:nikLjB+fTGWMXn+Rro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 3be0937f72bcec13e484072b3238e4d631f045e42be59ad3d6d26db539b6aad4
MD5 872d0ee2b1acd530084ec9c48aeadeeb
SHA1 ebf9c6efdff70cf1e1adddcbbe794787bd7301cc
SHA512 e4ac91cdc5f8c253971340d820efd133c316686d1f5becac871fa9b078d8a588c0081e284113924f8d52672366795d589131cd00aa0a0d6528d29cf64ab56587
SSDEEP 192:nikwjBWfTGWM8hTN+aKX4BBK9W+2n+RrV:niFNtW11+3
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b74f120384a77177e9021e486fe79e500357943aa284ab02ccfd8dcce3b34555
MD5 265b29ab7421b4e0f403e114cb878c11
SHA1 c0db9b0b2c647aa1b41257407dc30f77b07cfef0
SHA512 e03279e809684391d94bc76e29de8bbc4cad9786fff46c80379bb8755d6739f96179099dc193ed67cf50a30e5f12db022cb377411a0acc688a2e0c55f2aeee13
SSDEEP 96:nikSX1tCE+fTwpvWMoiVmdeMh+X4B52qVc+RUWQyV+VDCAiEwb:nikwjB+fTGWM8h+X4B52n+RrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 4b0e3ed0f9f9e1fb4a8aa6e6bc1e0e5ebe954cd1d25e9d3abf763b0542c09f7e
MD5 d92b3c5d3cf06d0eefbe0e91e131ce82
SHA1 f701a885b95d8bdf07f460d4373ba2bd76072321
SHA512 caaff8f8ded586f7ec3998eb29e76238a632569b264e4b7690133b70db97836eec07cdaeda2af3d15a01f06dc4d6420213ce0d995ab6b13dc1a27b4db3dca689
SSDEEP 192:nik8jBWfTGWM8hTN+aKX4BBKBt5W+2n+Rrg:niNNtW1v+S
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 623092cde9bddcfc2ee7e441e67669b59ecda6f76fa5c8abfb9e29e97f15d2f6
MD5 5fea6edac9ccc04a47d40d0c25b5d922
SHA1 a7b5d7d1796e9130cd608e95eb00ce10260e6e1e
SHA512 50121572f0b087de5a8ba4628739daf7161930f7568a57b4d813320e05b420663050e8513d9b7fc3e114aee0935285bd1cc6431031dbec483e27306923821a8d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexuphc8Le2RUykOEVC7+OblfBn:A9iIxuERzA83h09RZxY5V7/XDafEBYo
MD5 SHA1 SHA512 SSDEEP

Submit Download