1e3d166018d9058012c8f8ac8f1f574539be8aa3b749fd376770087a60b8546a

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
10/06/2024, 17:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9b74ac7c05a04d8739e32df1de4fc913_JaffaCakes118.html
Size 67KB
Sample240610-v1pg4svbpm
SHA256 1e3d166018d9058012c8f8ac8f1f574539be8aa3b749fd376770087a60b8546a
MD5 9b74ac7c05a04d8739e32df1de4fc913
SHA1 567c69f75830efee8940d8af511540dc538aeec9
SHA512 2441310d9dc57a4dde828b0b767093bb653fa692042887f2ae355503ad55864eeb6d10c0330709c2eb1736743e54cf7bf86df295d2588af3622b2cdf89249e6c
SSDEEP 1536:Zwgr8VkeO3m+we6Ny0CatIF9+4eaS6cgRrmaxz1:FeO3m+wnNy0Bs9+4LMaxz1
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2428	msedge.exe
2428	msedge.exe
2452	msedge.exe
2452	msedge.exe
1260	identity_helper.exe
1260	identity_helper.exe
1000	msedge.exe
1000	msedge.exe
1000	msedge.exe
1000	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe
2452	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2452 wrote to memory of 4328	2452	msedge.exe	81
PID 2452 wrote to memory of 4328	2452	msedge.exe	81
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 4576	2452	msedge.exe	82
PID 2452 wrote to memory of 2428	2452	msedge.exe	83
PID 2452 wrote to memory of 2428	2452	msedge.exe	83
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84
PID 2452 wrote to memory of 464	2452	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9b74ac7c05a04d8739e32df1de4fc913_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe1ce946f8,0x7ffe1ce94708,0x7ffe1ce94718
  2⤵
  PID:4328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2788 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:2956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5216 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5532 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5112 /prefetch:1
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3412 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5388 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1960 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1464 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2220 /prefetch:1
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1996,4011100960066058358,14517840415904700638,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4020 /prefetch:1
  2⤵
  PID:4120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4952

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5080

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b
MD5 c9c4c494f8fba32d95ba2125f00586a3
SHA1 8a600205528aef7953144f1cf6f7a5115e3611de
SHA512 9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8
MD5 4dc6fc5e708279a3310fe55d9c44743d
SHA1 a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2
SHA512 5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
Size 71KB
SHA256 726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b
MD5 da52e38c98b0f2047abeb07609608ab5
SHA1 da1210caff36df73e49a0c271ff7d573c2d20d02
SHA512 35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b
SSDEEP 1536:ntQRw6S6yzj9mN0hBcdYzdFONVzN7pPMJhJLY3T+2z9ANKokoV:ntQRw9BX9i0hBqSFuFp05LY3K25ANKo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 61KB
SHA256 ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6
MD5 468446a7240461af44b59ebb2047c231
SHA1 47b7c525dc91bece99df0c414960b9490b986ba8
SHA512 ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8
SSDEEP 1536:8b3HAMT093crXTgJRNAZYBmuhSeIUQUYaoxMaagTEwL:G+WXTy8u0eiaoWJggwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 27KB
SHA256 42bbe45a7e2d1b3c7ea6b07a681e9c08980bc0e18a465192e437e3e876d803d0
MD5 97da121d21944ffa68e4b863f2a29c2e
SHA1 e520e9f09e13bf407592724b84f693bec1af81cd
SHA512 0ca34b7f0f65fd64c1631be7980c55ffc21e24b6be68ea37a111dce9827536cbf9d867c744abc6a77ae48b82b49fbbe0f76a11d0af2a14e9b937549c127d7ae5
SSDEEP 384:gVI7yz2VqAoRIODUqH8lIJZgmnSUgkteKbW6ZgfJ7ii2C3uJkjSDhjRLw0q/W0zB:gVLGDWJcGZglfiZgflii2C+SChjRLqVF
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 20KB
SHA256 fb5b531776f398b46eda13ed3ccddeece8fc54653f27b93fec45290a31cd840f
MD5 cdc9f19a52e87121bdff5faad76470dc
SHA1 61786f32243b3384fb8bd1f460070465d32ad556
SHA512 d80755833280d63ee7c894510ba25d1ef4ec55757798126bb0a2880b9d0f90489c0d5f5765d90673ee7d6670931be05d38c42929b938aab3d6f643e5cfa0fa3c
SSDEEP 384:yKvAZx6Ov7m6IqL8CYo2d20hOjnL+HSrK55EqBXrEVPGsl1vq:vvAZxF7m6HTgdLh2ayrQcVPGsK
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 43KB
SHA256 7c4a326198d82c3b3d7d093d7945257486ce8e4002fd4305c22ed039f6186149
MD5 b963764e1be66a0969060f30ba2612c1
SHA1 3e57e585a11ef58da2dfed4c2702bde66606c437
SHA512 8573fc596ac9a22f499d9cbf091f7339e8b35b27a7aa727b6b50c4206228c2158ee5c3e7350a9255c6f2a478b5fc0bac47f3ee22c3af1624993d88e896cbe140
SSDEEP 768:XRvoa4YG8c3KYDgfXWV2bx0Mw3Id6DPQ3mBaJB2xJ+Cd9e9usySNn7pp:VlG8eKYSgyx8YwPQ2BaJB2xMCd9iXyS1
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000006
Size 61KB
SHA256 ce6349ea2397daffef3393dfab32fe69ed04408c5c6a22c15d45a4b6e8798452
MD5 ff70db2d3bebf493c15353dca328893b
SHA1 ebf71387f649d4e45e5a92036e96bd82bfaa2065
SHA512 7124032a03b3460837f9be967631bb47145602e9da2d2e31edef4c748616363980fb111c556156bd6607a53cc07bdcce9cbda428def11bbf142547549923395c
SSDEEP 1536:mTevMtN/wVvC6L/91Fv/42w95XqxJ2I4tHkVC0F:M9Ap1L/PFv/4FvXqx9MkVC0F
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 41KB
SHA256 a59f4e12af0275507ac0753ae06251cdff6b0899f046ca01d5a4d19020d4e601
MD5 9f994bcdc737b32e1fdd74631b9be65e
SHA1 f9f98d797df7b1d5a0776b8e88647a58e2f01e73
SHA512 208c638d085116cddb5524faa10ad3be2a77e1903a93598dad921f5466e74548abd80c506eb7194dc91a34edea4ac019ae962536988c934d6ab2b1aee518d024
SSDEEP 768:3iAZLhDOhDB7y1+diYwrh0uEccyB56AWL5N21V0NtWcRT3IqK/u1El:SAZch41+dil0urcyB5652K5RNkl
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 55KB
SHA256 cf65670b49826403201f36e9c825fbf4b175e8d502ee83c12c73089969efed5b
MD5 3edd3ec77c16893c538deadaeca7c5f4
SHA1 3e9f1e516f0041d71b36fc3b23b310f4e92bf703
SHA512 8ecd954563db0811087417312b1771681a4fed5f3efa600eb6d78bd793fec798c8b927c690359e696993cba0da0edbbadf568f30442e1986defef686be4f7b2f
SSDEEP 1536:feIhPfkg632mWSeMs27ZejvIUh5scgOJStdNXNC3Vp:WMPMz2QDs/0S5EfVXwlp
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 605KB
SHA256 49316cd713364b4bb1c11a050844e817fda5e947f6f9033b9480056b7eb6a9ec
MD5 e6acd32d20e5045bd6ca97039f49f427
SHA1 47fe1233e2070e5705c0196f747b0ef3d31f665e
SHA512 fb0ba7ce802029019d9272c2bbc9f50179bab47416bfadcc11bd5f4bfd82a8e6b86894ff66efd7464c1146d08c7957808bb2d2f8aedb94f6530df746ebffdf1d
SSDEEP 12288:7jP5h0vLg/w1Zl22nu0PgnxZn7HXVGAlo/cM9BR1P86eBNlC+i:7jPkL+w1pnRSnNlCDRxRmNlCn
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 509825503c6e7016ba3a71299629e45c18b5b5a0a5879f6b7a85399e33af587d
MD5 81831e13247446763794571ec1b63397
SHA1 568e097ced1ce4a6892b05e2f96924a589f8c772
SHA512 86d10009119be3c87015eb0c3376953483b583d92ba75bcfeb611bab8f1cf724bcad938fbc4ea9c9cfc9009de4b228e7c5c5ca6758db804efb1f572649a7a5f6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 9dd72802df4d828f0ac54c654a41c3d6ca51e32a9e73e585eb1f37687208f10b
MD5 219f3fa556dbae98ebcb4b6db44f19c0
SHA1 44ab920b5a8306fa023c6805efb69f26dab5b595
SHA512 dd908b8b0823ba9f598289c6cd3e2518f8eab458e8c80059b8f5c4778dd17660380cba6c86f01c27e8abb624816ef93847151d0ea27e1f46483608e692f83542
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 aa610cab08482662fab60f8173a5f6a8a9e9ac2f01ca695733cf937899fb5938
MD5 6789178a106c6b0fcaef59aa149d70ae
SHA1 2e6d148df4c17e0f5b8f0f03d2558cd21b94301f
SHA512 b48896b5ba53f204d6163d0688b7a5addcc446b2447d41fc4d2e8106731fb5c553932c80b27250a5fffdb6d1387e1e58cc8c4e89099a69c3a0bef8f196b74c5b
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 40a34abf235c3e29d32d534934b4e26ef03252dca1e30de59e854ff7f8dbca40
MD5 91518ac1b785d0ae388bdb868d50c590
SHA1 62cac747fb7506c1694135b6fe42e456cb7a30ad
SHA512 06d2ba8fb6c7b39269ab270d52c399bc1d331ddc41d162e18e358aff10f6d0b2ffaa5888214ca250ec446ad21e49db1e509053facfa2c8b65b00001062627b4d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 b25decb2aa55e13163c07a5ec55f7d29b3f19dffe9fd81377a9d24e552c75c7c
MD5 6eba3fe81956a46900b1c166705e7c53
SHA1 f3d2fc20f17d5ed385ad385e9469da00358f6e85
SHA512 7a55a6bf0f807ac766d7149151e6140828c3bf05bc1ca1f98b5681e48b1910b8144e7194fe4e8f0b589a51fffbb95507c4b030eb8d1f953e07b227eb9f15bc92
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 8b103da66eb8507db8a11dea9b27a2084125d2a68b3aa21b396059a8a1f6f37a
MD5 f4cc204d3dae5dddd418dbe076f1db52
SHA1 eae669b2c5fb94a8e9ee8fa7843b76f277f1acd4
SHA512 d4bf4d9f98116b07f2366db6fd9cea640391b67b6860505cef9ecd100c05a1f96798bc181e8366ef24884f5b9204953366f20ac63494c2e0902c1632959f5dc0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 e917c7c99c025c864d47c4bf5b2cbe3108a39223651e68f9c3322bd2d9bbac72
MD5 e91c46b30266cc7f8c2342137eb06f62
SHA1 7f17de552952929e13bf87c269fc5bfe182f0084
SHA512 6c1acf5059b1cf99eed5607a729a8e3e46b3b30878ecd320b994db4ee0a24af32483aa70857be13734dcafab82b9a7b39d19efaf8ff6917ee8ff52382e29ead3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 dbcc6812c3593bff65464abb6d7a7632e9b416797e6d4e14f85fed8ce8158cca
MD5 012fd62f3ebda1846cc92adcbcd83cbf
SHA1 b0afa0463e0b9542d0a5e241433896821ae0baa5
SHA512 3bdd4b7fa677dd58c788506c28a21c749b5ceb5841de81bd71f12d7e91b162154be33a7d058265a94b7bbcc026c190fd8f87c5b6788cc18c57837bc1c24ce9d0
SSDEEP 96:njkaU1SrwpvWMoiVmdekoH0O32MmVhUWQyV+VD7AiEwb:njkrMrGWMUoH0O32M+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d27062496479d3e6cdb4f6a2f0dcff882690bd689edb91327b010e5e164fd9ce
MD5 cdcec32098b28f9578cd833a583b66b4
SHA1 a504e2dd433136c9fdbe957073f4fd2f755806f9
SHA512 ec9f2a561d4d99183f2610d7487da09c57b092d40ebafd0867eb8bd134c173245ad54ef09bc18440012469b629ea19cbe758eb207727f0dbdc240efd5022bb9a
SSDEEP 96:njk7U1SVwpvWMoiVmdeKqi9lsqmVhUWQyV+VD7AiEwb:njkQMVGWM6qi9lsq+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f0d64b8dbb339823a2467415e8b36d81bf4227177683b5758d003b84e22b62a1
MD5 ce650c79838ef12f2c79cbd8177df69a
SHA1 9dd35140d6f79d554d6bb4fa7f60940eed3e17dd
SHA512 fef7f1a3aabb4e094fee4e57e1f71dcf4258bb63d62f57508fcfbfe5b8e8f41086f5a60c579584197e1fa27d3815f97000715e3719db5f7564ba3cd9d18017a4
SSDEEP 96:njkNU1yZwpvWMoiVmdeWuCvK12m0hUWQyV+VD7AiEwb:njkuIZGWMGuCvK12trg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 93196068058164568736c07eba0b5c2642930f0eb8c331e6e120acd911aef685
MD5 df097997c1e6bc3f7a2e29509a9efc97
SHA1 9cf6fb9e815d57123ed6c78dba403927ce2b20a1
SHA512 363d3aebd8270da6bf08ef19142e9f2b65318cc4aacf4c28933284ffc62daadc4c2ddd89f40212414fb23c016fc7ad658dbb08baa0e02a79f05a90e1de47a9db
SSDEEP 96:njkiU1S2wpvWMoiVmde0dodFpjdcdGbmVhUWQyV+VD7AiEwb:njkzM2GWMkdodFpjdcdGb+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 add57cc2c05786b3d679da747693c6c261ff477dc735c353752fc74a7e2feb22
MD5 a0a262f3f2893dc16c3e334bdac8cf9d
SHA1 4d249bd1cd25ebc748f2e5787777cad667a5444d
SHA512 a4dc20127975d661887b9f4ffd35ea2731c23d74b82b790e54167e9c8623bc4bac7e549e76a2bbee3ccd63a3a780bfc6631c496c014ff44fd5b8f0da64c067da
SSDEEP 96:njkCU1ypwpvWMoiVmdeHm0hUWQyV+VDCziEwb:njkTIpGWMXtro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 dbbebfc010391ee3458d1c361800755e2e18bc5443db96d357ae268f8ab64128
MD5 f4eace09aeb944ac26dba4c8291378ea
SHA1 d1d6da96bf6d481adcfe548c6b9701850793ff67
SHA512 a0dabdc6283febfe4f7b969efd8d9d80693d54f1ce259a5eb57e40fb7d2203eaf6e4a3d4636f56f0bf546bc5dbd002202dad7bfdbc5fcf1a8abe19d9fca05622
SSDEEP 96:njkzU1S0wpvWMoiVmdewF9klxA9m0hUWQyV+VD7AiEwb:njkIM0GWMgF9klxA9trg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 875B
SHA256 5a51f9372bcdc99cfc4fdce996e2b68310ef094903d458ab6dcb3828d202e894
MD5 0d18f2ec6415ee34298c8b6db1302c14
SHA1 d1129157e12e93a2af2a57a3215d27abd10e2507
SHA512 8e54f15b377d9be136873f2b64aab93b221f37d898c8ad2774bf8669119b45c0880047923c678aff16016f7d902c0c19308c7c69b787e0b854973d4ce33e1a04
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 875B
SHA256 f041409ce8560f1b52900989091f55fa866ccde53a1598e985f689a2a233519a
MD5 a45102b3a6fabbc95053acea58057a4b
SHA1 9103ffa7824eaf27cc37de644d3603177907cd4e
SHA512 3fb414f4504a8a5bc71f63521a0f723d35e7c8dbc76f98c6347f0469b7802c7a8e134c9096eeac0d22141a7682537ee469bb599c041c086b1db915bb9fa509f0
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 875B
SHA256 b52f8457092e8ace78d5738ada4583d3bb0f6ef10d19fcacb7a4ded0de7dda5a
MD5 ac4135c6a745c5000e0aabed20dfd98b
SHA1 da40e47d31239463af45e333e132960350cb22bb
SHA512 2060519537fa077f77d849ad72fe78912155ceb7a72aad6c19012ac5c538f467520a36a9748a9c239695e95a9bd9eb834a307fb8be01a1fc34c4c8c0c7652296
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 875B
SHA256 ea118f1642306c351920ed7c31b1ce1a11302ee6622f59e9e031f9d3cb7b8f8c
MD5 fe2e0b35d92bafe121e912a4e667f91a
SHA1 f02c7e097308df56a4d0231ae34416c427cc553c
SHA512 4cfc9b411b24eeec6c605293fce9cb169d60be6c72a5164fd219116141ca55f2936a38d482a1b6dd19c8d79ac5ded761878d40d4346f8c64d14f3d770824b972
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57fd5b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fd5b.TMP
Size 875B
SHA256 6416de9b830c5f5c3c790b223f07c40b5fbab4cf240dfd3c6dfa086464141d11
MD5 cf507176d78ec592f5aec186f27cc578
SHA1 ce4b690e1236590f8ab29d97dc035bd2ee5ac7df
SHA512 df70fe6d355f65b6f9c8fab3a11819636d2f59405d1a7a9c1d0fa97b78247808d6e7633c7bd7da809febfd792588138b14c3f2eae7d8a041e86aa63833ce34a1
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e98b44042f0e4715424287ab2489a180d9b67377052a6e0c9b6362d3a3048154
MD5 323d76a3a46f708b4be2d274e7d0ce9c
SHA1 b8106456cae558d5b540dbd31840abcb03c51553
SHA512 674684cb73920a5476de9621b516ec527162645f8628dee5f6d6f6e62e5387f25bfa4a0870541553dbdd3d3debf826edd63b03fb5a458ab401ccfa73890f841e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupG4e2RUfezP3z2OMDCRHqlX:A9iIxuERzA83h09RZxYLBPaOMWRHqlWm
MD5 SHA1 SHA512 SSDEEP

Submit Download