60fd2dee81280f69df7e451c2d8c1285ea1a7428b43571d6282f9daf9ce5e634

Analysis

max time kernel
150s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 02:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
8c981f89969307ebe6f9581b3ef177d9_JaffaCakes118.html
Size 101KB
Sample240602-cvl6paff61
SHA256 60fd2dee81280f69df7e451c2d8c1285ea1a7428b43571d6282f9daf9ce5e634
MD5 8c981f89969307ebe6f9581b3ef177d9
SHA1 e004cbde990ee9156dfeeb8aaacfec2289d92f38
SHA512 ce1d658977dead631f238ab44f80695563391222eff242add3f0d2bfc07964e1bc62830c8bf4f507732c4b4c653fc9e7ac3e9e40cdbbca8c9f637660c9ab5f24
SSDEEP 1536:5wgr8VSeO3DdRCdpx2zJpjldUmaaS6cgRrBfNghw1:JeO3Dd023zUmPDfN11
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3536	msedge.exe
3536	msedge.exe
972	msedge.exe
972	msedge.exe
1032	identity_helper.exe
1032	identity_helper.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe
2624	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe
972	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 972 wrote to memory of 2732	972	msedge.exe	84
PID 972 wrote to memory of 2732	972	msedge.exe	84
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3248	972	msedge.exe	85
PID 972 wrote to memory of 3536	972	msedge.exe	86
PID 972 wrote to memory of 3536	972	msedge.exe	86
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87
PID 972 wrote to memory of 1608	972	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8c981f89969307ebe6f9581b3ef177d9_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe5a3e46f8,0x7ffe5a3e4708,0x7ffe5a3e4718
  2⤵
  PID:2732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1980 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2860 /prefetch:8
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6372 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6036 /prefetch:1
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4068 /prefetch:1
  2⤵
  PID:3896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5420 /prefetch:1
  2⤵
  PID:5496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4580 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3180 /prefetch:1
  2⤵
  PID:5580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5952 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5384 /prefetch:1
  2⤵
  PID:3924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,13171887898694531627,4331849157279299452,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3828 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2624

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4836

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1368

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc
MD5 4f7152bc5a1a715ef481e37d1c791959
SHA1 c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7
SHA512 2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6
MD5 ea98e583ad99df195d29aa066204ab56
SHA1 f89398664af0179641aa0138b337097b617cb2db
SHA512 e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
Size 61KB
SHA256 ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6
MD5 468446a7240461af44b59ebb2047c231
SHA1 47b7c525dc91bece99df0c414960b9490b986ba8
SHA512 ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8
SSDEEP 1536:8b3HAMT093crXTgJRNAZYBmuhSeIUQUYaoxMaagTEwL:G+WXTy8u0eiaoWJggwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 71KB
SHA256 726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b
MD5 da52e38c98b0f2047abeb07609608ab5
SHA1 da1210caff36df73e49a0c271ff7d573c2d20d02
SHA512 35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b
SSDEEP 1536:ntQRw6S6yzj9mN0hBcdYzdFONVzN7pPMJhJLY3T+2z9ANKokoV:ntQRw9BX9i0hBqSFuFp05LY3K25ANKo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 20KB
SHA256 fb5b531776f398b46eda13ed3ccddeece8fc54653f27b93fec45290a31cd840f
MD5 cdc9f19a52e87121bdff5faad76470dc
SHA1 61786f32243b3384fb8bd1f460070465d32ad556
SHA512 d80755833280d63ee7c894510ba25d1ef4ec55757798126bb0a2880b9d0f90489c0d5f5765d90673ee7d6670931be05d38c42929b938aab3d6f643e5cfa0fa3c
SSDEEP 384:yKvAZx6Ov7m6IqL8CYo2d20hOjnL+HSrK55EqBXrEVPGsl1vq:vvAZxF7m6HTgdLh2ayrQcVPGsK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 20KB
SHA256 6fbcee96ff03dda5c63564f0ffb9d19b21785809071ef8c06bc51f225daaeb6a
MD5 564be91cb7ef6cb7320d73790c21b568
SHA1 97c0c90fa1194cbbe5c17bff1dded992908df604
SHA512 fe6b743b8fbbefea37eebbfd28b8780dc02a7ef06fa41150b8ba3c74d74de615a0ea0c303f017b50af0b37470a962f7e4e7e9c84d6757fada831a2e841528483
SSDEEP 384:sJtcaLYpTfeOj8VXE1SH0kTXBKyyspDgVWLBvBbut7vpHfZqv:+i2KFjIISUMIMDgVWLB5but7vpRqv
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 23f2c7cc7f9fe83b062cf59df5034185e0c04d10ab257c0debb4623706bc842e
MD5 e4f0612e88b10efdf65e55cbed57ca01
SHA1 3398e78778d49a681a081ec8a00c15c58211867f
SHA512 69efa7c20ecd63e669885c5b706e2f8d9a01a624d6111f6b93a3db8e8d4f807c14285d28c47f566df660ae1d50c22140604d02d5c8a4d869c9180f53ea3fafce
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 040d2bcfeaf7c6cb55506b25f04994be41eeb6de06065d4b82c2ec8b3fa28a97
MD5 c995e86cd7b2fc97925083344c7605d2
SHA1 aa3c0bc510a5ad85247b26f8deb739f133f4e312
SHA512 8ddd2038fa5e4eb9bee8c8c3ec566f11fb35e370a90fb0c3383711933aea1d31a8f195474db56042ef65e1097d48cede89403a3cd18302b50974acad608f14bc
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 a202c8be0898a900540c40a728b745f453619ff56ac5f0541e76415cbc975215
MD5 34eb81a5a55daa4cc1aac13bec1973c9
SHA1 3236cc47a6de2e857312f145d81aab3ec11956cd
SHA512 8e9477d4a1f1163fffe7894a3e2c27b00675c0b5e1a5ccc445c2b65ad7f370d0df3c65606a4a25c141469235ec10cf24c8e6770f0ad169acf608a31abdbff9f6
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 e7234b7d8b6e085bf91caeb39d1f1c65c33001f6d9ef95d841c176a6b29c6344
MD5 cf4db028d501c982da5e2a138ea3f5f6
SHA1 7b675d3f95d535c0cdf786d96516ad869c56767c
SHA512 48e4b33ec2c29e985893b9b077c2799fa2e69f68a3add5c9c5994e45ac27fb2b26e2423c47112f7a46ed61b71131994063521ca8b44364b2d82ed7885a2d0942
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 aa25c2976b20b3f8a16b52e4ee136e75be827a8a1c84a54d63edb2e6a9fd5201
MD5 9ec1153f13c7c9c856f4dd5a82f6e558
SHA1 62493382c7ecd8fdde49568816a86020d998c2af
SHA512 69a9c311025bb454b9edb6f05215651e58d18382883af7d8b686dc1e05f53cad8ceefb1060c1b012a36984492146a4feade27912f8881bc75f144590c2c63a23
SSDEEP 96:nikv9B1+un3XwpvWMoiVmdeAk2QW9p19AuUWQyV+VD7AiEwb:niklB13XGWMwk2QW9p0urg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 3cd4e00cb9c2a832293e71c33817b03cf9f64e95e1b2c8841501b78250518557
MD5 a0c8ccc0b64706ab705835cf352fc18d
SHA1 5198885805d6ebab8271056945992fd37d6e6580
SHA512 79593aa38bafb4715f8dcf0beb3bf2dc55337485aa281120df8d9a3ab92adfeb0531dbfdcb05c28714ebf83715a1bebc1c70f99b81b22d7b3d97f5a3fee2290e
SSDEEP 96:nikJ9B1+uU3XwpvWMoiVmdeAk2QW9p19AuUWQyV+VD7AiEwb:nikXB1AXGWMwk2QW9p0urg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b9d6c40aebaf994925956fdad7e8d89d107559e691fb26990d3fde111642a8ab
MD5 d5ebc35129c683b7c9947c048cdb0eec
SHA1 6b5f926021a66933fd4024e5fb3fee677094910c
SHA512 b8d6a87eadf4dc4d0d3c39218e5acc91b7b7f61d355a7566d77f2d17fabd7e54b901e7969aabe8f9fa4c10c5764797accb39b34ab7ac7f8a96f1a9716572a64f
SSDEEP 96:nikA9B1+uF3XwpvWMoiVmdeAd3xNqHMp19AuUWQyV+VD7AiEwb:nikMB15XGWMw5x0HMp0urg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 87f050912c8760f3029a865a1172198575de253be6e5a8a6b1ac8c9f24f0571f
MD5 c8b0b35605f2250e3b51beb98a83f278
SHA1 0247df3b20edd5b684ab26bc0e111216f7c0bc1d
SHA512 2ba950480c11ce3f2b62f3645d077d4fbbce361b0dac59d8ba7d97aba0879c64ccceabfab28de1983804c3f654278210c0a86a866ea1e47cef24a502aa10e6cf
SSDEEP 96:nikK9B1+233XwpvWMoiVmdeHp1kAuUWQyV+VD7ziEwb:nik+BdnXGWMXppurt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 e0a23789f55d3fe532d0e480452520540e1ba842283cb8d0d3c28df8d88f2357
MD5 e3ed97942403820becaa396af1840ea7
SHA1 69c3b0a70f04f2dd51932f16c5e8a9206f50043f
SHA512 b2c18536ab138e989ce69a96cfdc6251047bdc26dfac5ccfa88b42957c6c9c333556226fc207940366912febe1ffa3f24d263e8848a5e6cc6ebe02256ff117f6
SSDEEP 96:nik39B1+233XwpvWMoiVmdeA645j2p1kAuUWQyV+VD7AiEwb:niktBdnXGWMw645j2ppurg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f1e8d8c15c49420e06894b213a352b6a1b9f090c474751061f2d2e0bed359d1d
MD5 78b6c31dfc654af06fbf25ce20d226db
SHA1 2487d637b694d82bbc052a62892bc4f421aa2672
SHA512 249327be9221ed189a0b7bcf81c056bdd5fe39165aacdd9d2132d7401fcec109f686d7e871f1a382bb51bbf205cdb8983d7fc93d189857b286cd6a0b2e456cae
SSDEEP 96:nikv9B1+2n3XwpvWMoiVmdeA645j2p1kAuUWQyV+VD7AiEwb:niklBd3XGWMw645j2ppurg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 539B
SHA256 64cbdc576055dbf0cc69aceb64d1f6f5cf4d87aec528cea9586fddb4f1e34109
MD5 bf71bf774e6bbdf64bfad47f8e091af8
SHA1 47fca90d944a92163121d8eb08332ed9af03c4b0
SHA512 c4a301d4353b1ec3842feb9a3cb6dd1d2c0636012648fa44dd3a8b004aad491bfd23c110389f7540c4cd4941a01110f2b3544aff56239c3756fb8df10be6e5ca
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 539B
SHA256 32c4fd66b5eae859c8b1bb0939625a6f48f07f37b4f8ced8b2239b19d6aa3017
MD5 822312d1972bd621f8cc3862ea020b50
SHA1 7d5c92b3468946aff8ae50122489b6fb99ea7025
SHA512 6b07f432fbcbd2a28b4476257dc188ff6a54069a2c782d6ca54916538f1485b0d36fd975023a57fb755aeb32267fc4b666dacbe4651189b61f0b8331256d1568
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe586cce.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe586cce.TMP
Size 539B
SHA256 f7cce230cc6f0b482c9306e1154db1b141df96ff01c7373fd6945aaa654bb7b8
MD5 ef6a55f3e73dbd1306da38c7c1981f9a
SHA1 04d2667b7ae2053f3fae1968e47f2256c25fbf72
SHA512 ecffdedc2573bc6e9aa85efbf5ce985d868a88e92c7a8a6608161d4d3ff5e3d700b3666579d81d268f072eb06f5e3147b1ad7bf8ca70a3155b15ae001f4720b0
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 427497d234434245e74fe970a1f5dfc7fdd1c272216fd349e9a47038ab1b3975
MD5 c62cc0b4867f5160b06b8c0502a97752
SHA1 a47f8d8f1df8f5a01c8e6185b20faca86ebfb180
SHA512 c50ca28c80b300dd86b96f35b1964be9f4f35671a500ae7825c00c165dd246465bc1f2b2bbe52cab6d56b7f9461e3537936745e2f0ed572e5bf37e3acb9e85e1
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupi7Le2RUTo5R3z2OMDCRHqs:A9iIxuERzA83h09RZxYiHpRaOMWRHqla
MD5 SHA1 SHA512 SSDEEP

Submit Download