5ff3f101181e2335d2e1170e397902b42541cf2ec02542f90892293dee648295

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
25/08/2024, 07:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c03fa7423a07af4992a86392873b5cdc_JaffaCakes118.html
Size 32KB
Sample240825-jdfe5ssfnd
SHA256 5ff3f101181e2335d2e1170e397902b42541cf2ec02542f90892293dee648295
MD5 c03fa7423a07af4992a86392873b5cdc
SHA1 b5d025ba5f7e61a0c1f86aacdbb3f8d207d5e78c
SHA512 484129fd3347cf11724f99567600aea841ce9a8a2c82b02638262b26a3a16df240fc562ac50b1d1909e0315894846c05f0ee94df50309af9b1fe4a3ecce80f0e
SSDEEP 768:gC5ka3103FeC3A7wOx3LJMlgvO2XOVzJGnm1U:gC5ka3103EC3jo3aoOV1U
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2292	msedge.exe
2292	msedge.exe
4472	msedge.exe
4472	msedge.exe
724	identity_helper.exe
724	identity_helper.exe
5160	msedge.exe
5160	msedge.exe
5160	msedge.exe
5160	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4472 wrote to memory of 424	4472	msedge.exe	86
PID 4472 wrote to memory of 424	4472	msedge.exe	86
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 4148	4472	msedge.exe	87
PID 4472 wrote to memory of 2292	4472	msedge.exe	88
PID 4472 wrote to memory of 2292	4472	msedge.exe	88
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89
PID 4472 wrote to memory of 2948	4472	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c03fa7423a07af4992a86392873b5cdc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff7d1746f8,0x7fff7d174708,0x7fff7d174718
  2⤵
  PID:424
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:2948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5356 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5848 /prefetch:1
  2⤵
  PID:3580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:64
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6084 /prefetch:1
  2⤵
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5600 /prefetch:1
  2⤵
  PID:3068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2260 /prefetch:1
  2⤵
  PID:508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2028 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7304 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6488 /prefetch:1
  2⤵
  PID:508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7012 /prefetch:1
  2⤵
  PID:4032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7024 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4732 /prefetch:1
  2⤵
  PID:4048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2052,9655757990019385292,10981722471824757666,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5980 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5160

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2740

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3112

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 328B
SHA256 bd76ecefa7007597cca8ad2d319b4ac23c9e0ab50b0eb5d9aecfb45ae54308d2
MD5 04fdd0b891ff93573c2799b18a13d47d
SHA1 eb689b4598a04b10de55d9eb8657daa23bbd89c9
SHA512 d5217b04f1ddbe6f239d4e1b8d290ecc59a44795e10d74540a6d93fbe428ee24f87e43d5f143c6a93ea4100d28792dcd6cfc285bd356d4e8a910f39d794d2255
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 50fe80c9435f601c30517d10f6a8a0ca6ff8ca2add7584df377371b5a5dbe2d9
MD5 eeaa8087eba2f63f31e599f6a7b46ef4
SHA1 f639519deee0766a39cfe258d2ac48e3a9d5ac03
SHA512 eaabfad92c84f422267615c55a863af12823c5e791bdcb30cabe17f72025e07df7383cf6cf0f08e28aa18a31c2aac5985cf5281a403e22fbcc1fb5e61c49fc3c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 20ab88e23fb88186b82047cd0d6dc3cfa23422e4fd2b8f3c8437546a2a842c2b
MD5 b9569e123772ae290f9bac07e0d31748
SHA1 5806ed9b301d4178a959b26d7b7ccf2c0abc6741
SHA512 cfad8ce716ac815b37e8cc0e30141bfb3ca7f0d4ef101289bddcf6ed3c579bc34d369f2ec2f2dab98707843015633988eb97f1e911728031dd897750b8587795
MD5 SHA1 SHA512

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 23KB
SHA256 6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8
MD5 a0423f1305547bb6b8f5a4fb1a9fc2d8
SHA1 092dcf1fe57e6bb53821eb754e04188ee70602d5
SHA512 b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3
SSDEEP 384:aAW2VTWfhCNc+bzBo3WuAi3FwN/f25rCT2LduMZ6wHWPbcb1xDtun1GrR1+4JdNE:aAW22hCNc8zQk/uhLdue52E1xG1QCkPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 10cf15a7c680aa280327cd3b02eefb1a01fb9e6e664afc2149915f9431852dcd
MD5 c3e5622ee219116cb9376aac1b687c43
SHA1 1419223627b48236d4c83fe621909de69f4baae0
SHA512 75463198bfe3ac0ce868110a8af046b43b0138fcd546f179e70b1e0e53893ea18a3d8abb736fcceed9a7a4bb6f965b99e3a03256f04e158d34fc5d2c3dea8f84
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 8f0ab86cc873b5e36f4c17b1b76159779a01874d9153bebcb939e93853f252d7
MD5 51cf800fb17b3b54914e6ed666eede78
SHA1 876c0b17688e481dd980b2f091318f69873220a4
SHA512 ae99be12e33b18bffd20e0227510669b4580844ffe69f9dab71bbf5dfb0c847adcc961794b80538ed996ff6b9b69fe714149f835d2ee80af8e3a3338cf734c3a
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 2063c6765805cfb0dec4f691c783d67c273f437730f9d5e5dcc0ae0160759477
MD5 8e278ce92d900b74386e981ad4277f2e
SHA1 af32c9d339fcc76a2f7d5ba89088a8c02fea09d2
SHA512 5f137da6dfcaed690b31d69361e5a7aaeed3dd6680541c603423ceba97f3b4517ef7bf1ad8d8161f6dc22b2843813c7c9b28c709233b8763390b46df2647b156
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 810ed1058a03545d8595779c06047ce144d298a2eb5e6849fce541052598a9f3
MD5 c430f0b968e25052153b38f7e8d3f9d9
SHA1 40f942b3dd854ef2f97fbe7be13ae8521b0ca83c
SHA512 a4af21572fc62e4cde4953ba8c7efc6f407ceb54faa213153e70ee9f23bb7957183234cc817609e1d1a8c21b8aa12576a27d481f116c867b9a82cae4b470c479
SSDEEP 96:JhVn9X26u65aZJcq6K08m0HqVOr6f8UONmF2F47P9mkP9hGLMGGJGyFgGddbFDGC:JhVn9m6u65avcq6KFm0HqVOr6f8UONmd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 aae2846ac8deb136f8faec3dd2e87c5cf86f4fc6b16784fd8891dfa79c7ad320
MD5 1960ba4da9f841be211dfb384f9dca8e
SHA1 61af24b774e74fa93827ae1c376f60ff0c2e53f8
SHA512 9893bbbe36a8f0bff33de2d0cbf67dced9badfa77e0942da630264c51bd136565b044fc9fac011fc51aa43f1abcebbba62e4a24a72f9268d0913d7fd1a1db0b6
SSDEEP 96:nRkzFB1t6wpvWMoiVmdeHk8YkUWQyV+VDCziEwb:nRkzzf6GWMXikro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a29f6701aea4a862a7c5262449ceb2cd10c84a30d595d3a008b731400883963d
MD5 456fd2359b2b553db6c836c2c9c86091
SHA1 e58fec48b93afa1f288869b879621c635e235890
SHA512 e9517741eed7570d13b8693958db72008eb59752169ad2bf41037e65ae9909696d0bf165d2ead117aa951097c24cd5b5a8aac24be8b173980528a822391f1531
SSDEEP 192:nRkzzfqGWMTVfJTqNsbY1XVidUVSpkgMvzKCkuxhWEvKsT2ikrV:nR6frWKtt1oUSBLU
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 1777c4184833592149394db91e890c5b5dfd763724d0b7d66ebf1d9009ec5ed4
MD5 2cd18a156f6b233c4df41fd7f5a4b980
SHA1 8f4759b2202fc37a358a8495856c74b01987c3bc
SHA512 6c573957dea6b37223d100621c6cff2d0163fdf4fa90ba7f67f41a5bee25991eb76340f607897e31f40163ca660b33dc90d1fa32f925e5f84db1f4a10fbb6885
SSDEEP 192:nRkzzTqGWMTVfJTqNsbY1XVidUVSpkgMvzKCkuxhWEvKsVOT24krg:nR6TrWKtt1oUSBOR
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 defb7f6ddb2ac51009820b6a7b28d4d2432f65feee81dc3f0f5701ac00a5f4e7
MD5 0da97de6208aec15bb288efa8fbdc334
SHA1 531a79bb37b7213f59d8891b6204e62f92d3f4b5
SHA512 4318fb72b0093a5d85b5f0ec5fc02aff060dc1248d8432b4b1dc29d9e373ac5ffdb9784f3e9354803979fffb15b609c60c438f2c622e000728a4547e16795858
SSDEEP 96:nRkzFB1t6wpvWMoiVmdeuJd1q2k8YkUWQyV+VDCAiEwb:nRkzzf6GWMeJdM2ikrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 2ac1cd80e045105c9e0319111d94f34205e8da2f548fcb80a5c0c2d0eaace106
MD5 8035b93d9ed074d9f5eb89393f74d21d
SHA1 955a4bb5d1489de996d06e7153870583893f1602
SHA512 683811c3b3c76cde101904e045e0c3d8eb831c567dd8d76fd0fc6fb4a8e9029579d3827f872b2ed014d576f46b7806debb71dfb76f3c43d77591629be1019644
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupre2RUVYxnORw5Ytj9Zklq2:A9iIxuERzA83h09RZxY7ZhkLsAFk
MD5 SHA1 SHA512 SSDEEP

Submit Download