43e3555d17dd9f12174c14aac11372df9d6945f12c8550dff5c75bd98e2a4c39

Analysis

max time kernel
149s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 17:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
26043c84442c88596defbdbd421c2c82_JaffaCakes118.html
Size 142KB
Sample240508-wfl2xsad99
SHA256 43e3555d17dd9f12174c14aac11372df9d6945f12c8550dff5c75bd98e2a4c39
MD5 26043c84442c88596defbdbd421c2c82
SHA1 b0cea07fb02d2d277463d8d7140f888d06d4b661
SHA512 7a30c9c856f0cf4bfd3ed912dba080a496cbfbcd26f1728b87e9a5117a170d1873f0f4a393e33ee7b1a193fc4dbbd43c3d35529444449c1602104446b1b02888
SSDEEP 3072:lUAcXmNRSN1yyiUt06RWiKSsu6TOk9+ouCPt8QoHW5iDI65BIrv4LoIF7:YXmNRJh6/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2220	msedge.exe
2220	msedge.exe
844	msedge.exe
844	msedge.exe
5036	identity_helper.exe
5036	identity_helper.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe
844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 844 wrote to memory of 4032	844	msedge.exe	85
PID 844 wrote to memory of 4032	844	msedge.exe	85
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2340	844	msedge.exe	86
PID 844 wrote to memory of 2220	844	msedge.exe	87
PID 844 wrote to memory of 2220	844	msedge.exe	87
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88
PID 844 wrote to memory of 1828	844	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\26043c84442c88596defbdbd421c2c82_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffaf44a46f8,0x7ffaf44a4708,0x7ffaf44a4718
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:2340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:1828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:4748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:4080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:1492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5156 /prefetch:1
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:2420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5924 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6088 /prefetch:1
  2⤵
  PID:4264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:3296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,3068321696157579130,7901723302538708456,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6844 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4672

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

070E0202839D9D67350CD2613E78E416

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416
Size 1KB
SHA256 d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb
MD5 55540a230bdab55187a841cfe1aa1545
SHA1 363e4734f757bdeb89868efe94907774a327695e
SHA512 c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54
MD5 SHA1 SHA512

Submit Download

070E0202839D9D67350CD2613E78E416

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416
Size 230B
SHA256 75920bdfa7cbf6c2d350c4179a9e152632b7dcd7b1dac47e314c047e009403ec
MD5 f5593748326b45aa65e8ec06255aaff2
SHA1 91b69b26fb286063ffa64f5c73c093475b327d64
SHA512 70a962b1b4f60b2e173200009853e9e49418c2d3483cf7fe0e63c606a45a9c449dc2a557da904bc7c977696610e48e906001dff92df1db50b203f720fac5497b
MD5 SHA1 SHA512

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 b1de749d6319e483b7d79a9e6ade471869d0e70193c6f815e0a27885f4377c70
MD5 6bd58d1741d9fae45289483bf24b884c
SHA1 44d3f7572d77a40c1448030108fec0b1c382f4e4
SHA512 8e8c1ac678e17e01446ee29a301be85e8a4e2ac6b2c56762e000ac93b4524acf43c05f652ecb955c6e207b4ce3e7fe48b1f418dcab4750f856f54dfc31563899
MD5 SHA1 SHA512

Submit Download

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 955915528f311ffc84029df3b27e53b7e05bcc8885343fecb34ddc84fe201a41
MD5 4271b6da7236e825a8642ce51e26933b
SHA1 e1141ed9c6e1daf0d214c7de657b37f43a505544
SHA512 72a9df0cc6ccdec587fceb05c20759aee3a1ba895a75c07a8e527f23c64aa8191aa38762eebb1c15ca51e95b46183b08071f619bf557ab4dab09eb47df0cee1b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4
MD5 1ac52e2503cc26baee4322f02f5b8d9c
SHA1 38e0cee911f5f2a24888a64780ffdf6fa72207c8
SHA512 7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6
MD5 b2a1398f937474c51a48b347387ee36a
SHA1 922a8567f09e68a04233e84e5919043034635949
SHA512 4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c
MD5 SHA1 SHA512

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 20KB
SHA256 a67db01d19e15d8fa76e5a075e336e195325d79d277a83aadb6a440acf887c47
MD5 397383c90a2d930f866f405747e27466
SHA1 7bb6b5d6cee104c877dc5c3462f61232ffe5b360
SHA512 4357eddc0581e3cd6209646540bf59756cb4035d7dba47d5cb6b0050e6c202bda65721d4e9d644f37e3cd105bc5fa240574cfa96649f01e2769b796b523e08aa
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoKQP:kBF+i/PvVIOSVi8vSmzXjoQP
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 44KB
SHA256 1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8
MD5 88477d32f888c2b8a3f3d98deb460b3d
SHA1 1fae9ac6c1082fc0426aebe4e683eea9b4ba898c
SHA512 e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3
SSDEEP 768:zznaC0S3xL3KmGLYSKhxDefA2ihGqfz9fNfh0QqdgDnqQpvSjCQNs9f9wAcCGI:PnajS3x3K1JKPCwhLfZdh0Qq6dQNef9x
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 96f53da3184e54a7c8cd098b9b28a99d171f4dc4b8845d6765be63ad44a4c6b8
MD5 d27411235c177b0d79036ba087377ebb
SHA1 e204dae1602c96161f6756799e9b511928a4c1bd
SHA512 bf5231851f9bf6d4579a349e0d8c2de0f2efffafdfcde64845432549ca47ff98bbdd0a687e89a989b909208968c80a952c608ac3d15f92481691dbb2885eede3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 e5969ba45f96c07e83e2b882c9966acf53a18e4b2a6b311a441133b9d388673a
MD5 20780fb278badb91a710d206b303c934
SHA1 bf3de65de8140339f2af490e7abc2465452f4c11
SHA512 363ba96e9c69dd786387f3c9f69b2f17767c873dfd017bc7edabcb51afce6f41a038c5e41851067ae3a56c0f21b20a8d647e0b4300a32a84bb142c64689a0bcb
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a4177fa746209e27e414cd27ddc0ab760aadd31a5a537ecd372e3f94f876cb59
MD5 cd6adebe7b4f3cae0e7b7dc3db113f0c
SHA1 0d7e807652d66293ba45b21d9bcc3a6b89eb68eb
SHA512 4d0ff449b0dbf3e61a539ad10bb191bec78e2e94b0df3aba401a811c4fe3591514bb0316ea5c03b5aee62cde4aa73966f82964367807d1b63de8a3aee226097c
SSDEEP 96:nWXkYxm/eQYmqmL1md9ega9IQwpvWMoiVmdeHpCrMb24UWQyV+VD7ziEwb:nWXkZHLLsvNaCQGWMXpPbHrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 cdf97ccdf2250da5a2ebdd6fe4a4bdfeab68a521969abe15a1b66af0984b83d6
MD5 fbfd6dc2ffe2e3fce8bc31519142956a
SHA1 8811a467d032c56925e650c603a44fc9a0e595ea
SHA512 b15a59324ff019ef8ccbd34e3244427700e7e912733560f95f3e60c3ecddbb507cec9c38a18e666cea4fe886e3820b9ea17fe46c33b72516237fe7e7022f2e28
SSDEEP 192:nWXkZBLLsv3aCQGWMdpetNBIuQeti2pPbHrg:ncAsv3RWnt0
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 48fd6fbe4b96866ee43b9b3ee78681e29134078e1387df454b9e5f3f3350297d
MD5 8c152b07e010faf28a0be12f98b2f347
SHA1 90bf2ad510522bebe711159c71cc8b400903e48e
SHA512 79c810b70de7776db3f326732dbc7e0946d6d6ada276ca0319715de342fa087953924296db20a4d3728ee30eb0ef7178a24f0476f1d2f26fd44a419a6fe9413b
SSDEEP 192:nWXkZZLLsv3aCQGWMdpetNBIuQeti2pPbHrg:nccsv3RWnt0
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 3950f954a74a6309b282de2225fea3682c561141ffaa8a48d7457c864bd3a5cd
MD5 b7256c71420d66d4ff42660b32cb0604
SHA1 f049b75bdd40817493d2e2e1cd347dc6f24019f3
SHA512 0b34bc8ad462de748634b08da63f6b5ba7944cb862a42d4fe669d59554a08df28e195997a20274ec9fd87ec31744029f38f2529685748995c4718c850f8e0b5d
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupiNkg9e2RUqbjf7Zl+Oblfo:A9iIxuERzA83h09RZxYKkgZnzZl/XDal
MD5 SHA1 SHA512 SSDEEP

Submit Download