719d56b826c206bcea734ae7b9c09420d878de1797566cacb0e60a6cbc8bc50c

Analysis

max time kernel
145s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
01/11/2024, 17:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
848a0b9f9e08f5d0306f49ec74a239e3_JaffaCakes118.html
Size 78KB
Sample241101-vsgsas1pft
SHA256 719d56b826c206bcea734ae7b9c09420d878de1797566cacb0e60a6cbc8bc50c
MD5 848a0b9f9e08f5d0306f49ec74a239e3
SHA1 3cfc17e3102386acfb9684de414b114742e90b86
SHA512 03f7973b33255ca542540710dee776e41f915146ab8b3fe1c6617ea91ee6cbf3e5a7d0fef8302a3c6f125e36a8ef05e6d217968b2bf052570fc647b603f1d0e5
SSDEEP 1536:WAWQtbhMJ6zm2WUVu0RpVrnkX+K+UY8/t6WQQrY/fILBKaGyeEgYuHUYVyPIsqGA:DFjq25u0h6+K+w/t6WfrYnILBKqeBPHX
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1460	msedge.exe
1460	msedge.exe
2788	msedge.exe
2788	msedge.exe
5100	identity_helper.exe
5100	identity_helper.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe
4760	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe
2788	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2788 wrote to memory of 2880	2788	msedge.exe	84
PID 2788 wrote to memory of 2880	2788	msedge.exe	84
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 2008	2788	msedge.exe	85
PID 2788 wrote to memory of 1460	2788	msedge.exe	86
PID 2788 wrote to memory of 1460	2788	msedge.exe	86
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87
PID 2788 wrote to memory of 3216	2788	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\848a0b9f9e08f5d0306f49ec74a239e3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9ef4b46f8,0x7ff9ef4b4708,0x7ff9ef4b4718
  2⤵
  PID:2880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2228 /prefetch:2
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2548 /prefetch:8
  2⤵
  PID:3216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5504 /prefetch:1
  2⤵
  PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:4768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2152 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:3836
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3980 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3980 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5220 /prefetch:1
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4108 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2212,15174012366958235432,13255688030920600872,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4912 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4760

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5048

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 08e098bb97fd91d815469cdfd5568607a3feca61f18b6b5b9c11b531fde206c8
MD5 99afa4934d1e3c56bbce114b356e8a99
SHA1 3f0e7a1a28d9d9c06b6663df5d83a65c84d52581
SHA512 76686f30ed68144cf943b80ac10b52c74eee84f197cee3c24ef7845ef44bdb5586b6e530824543deeed59417205ac0e2559808bcb46450504106ac8f4c95b9da
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1e1ad9dce141f5f17ea07c7e9c2a65e707c9943f172b9134b0daf9eef25f0dc9
MD5 443a627d539ca4eab732bad0cbe7332b
SHA1 86b18b906a1acd2a22f4b2c78ac3564c394a9569
SHA512 923b86d75a565c91250110162ce13dd3ef3f6bdde1a83f7af235ed302d4a96b8c9ed722e2152781e699dfcb26bb98afc73f5adb298f8fd673f14c9f28b5f764d
MD5 SHA1 SHA512

Submit Download

23e02c72-3a96-48a9-8661-1fc75df7b13e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\23e02c72-3a96-48a9-8661-1fc75df7b13e.tmp
Size 7KB
SHA256 b3326c651065d76088f10199f200f457d6318a44f002114364865c1a578bd3c2
MD5 e40008c5ef461f3b537d0201320e89bf
SHA1 493263cb38631f7469a16d0f05087997d93ca0d6
SHA512 cb800e27c433e371d19aa250c487fbefbe7ae3001446679be4599c0cc24134662d77e04de39f4d7088e9ddf782c7ba2556b13170083abd9636a891f093ae2d36
SSDEEP 96:nxAkrx1woxWI/wpvWMoiVmdeNgy1Y4j4+q/qXLXg612tuEQUWQyV+VDCAiEwb:nxAkltxT/GWMdgy1Y4j4+6q7Q612arV
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 42KB
SHA256 9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7
MD5 101f2295c59a6c129b95bb68093aed06
SHA1 12f5843daaf99bdb874dfebaf10660c54ede2120
SHA512 f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f
SSDEEP 768:BxjJZM9YDBsMMPqV41xckRE2jiwZSGzvxQCkmamkEsyrdiggge/TZXm7xnSAD5Uo:HcYeMk/9+bOp8ZyrdigtkZXm7xnSANUo
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 600B
SHA256 c951e635aca46e845393655ca83ed1d1bb9149e4d06bffcd014c23a6154f6b4c
MD5 add8318a999615de2e18f14d6da8dacd
SHA1 9b4f0dcbe7ca6c7ddd44152423a339bdac2073c8
SHA512 e0cf8a9f0c2646d3daefa8622e8a0a62c5b230f020ca159a5d3d1cfecc12d5e1f845012620faaed104b3e7c02a5ed353bd300d99f643598f44391b783225eefe
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 9782de6796cb128379d676d54178622331d756124e8aeca7d797f6f477ed2df1
MD5 8290a577f2b1acb26e3fd4f2e13d1ffe
SHA1 6a77efd44e0ffcccde8c0f5e05b22120635fe70f
SHA512 d2db28c3c7baab222b42bb9b8775ec134e34bc01b09959ca6be68862315447c44e8724681378e5ee36e9c72615c299fe889df74936df75dc7a12134481bbd675
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 76994a50d0184607c725ca015dccd645994772bb94021a0a50967fdc604a33f7
MD5 c01fbfa5636e4c7d4017a36cfdba5916
SHA1 1eee399158bbb409724379690d1e74d311e3a7f5
SHA512 ae881f72dc049dc553052947adb996eca31c619d92d3eab9ebfb64eedee423fd334de703977f4820726ca5c1e8ce783c72aff539580ea6aa0d92787b74c0b9cf
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 cc7deb80afe87f54ed309d28fc2ae0d1ecb05aff5bf5fd8f61b1edfd8c18c3ba
MD5 867ddcf69926af6e875f9f0b5c0a51cf
SHA1 cba39818cd30f31c5f3902a5747c7c15675571a1
SHA512 f52e3520f3241b5d4f0c879633ce3773514f263861401cf5f794570350aee8b26d2b40e891739f813f643e0365ff9f6e53b7f0eebb6edff803963de6b7519d0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 557f297a3ca68d4632e9176b9f447ea7cf82e9dc4c9fa234c20940fb2d347ef8
MD5 6f55198e355889cb4448ccf93263d078
SHA1 761ad0d0a3c1027c1cd7e475a679281223b1004a
SHA512 9d8d772713187b455b0be2fddedf12c1d438c07832698e1966506253b736c922ea50689b5e4b9f01aec6dfd12f8386735415052a95e00b2715da5eb3c790801e
SSDEEP 96:nxAkLx1woxWI/wpvWMoiVmdeHtuEQUWQyV+VDCziEwb:nxAkFtxT/GWMXaro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 8951f3fc9593813488153931cf66656b7c35ba2c708d78e998d57ea0812c2c43
MD5 8bd9bd8b23077a97e5a9851d5ca058b0
SHA1 cc406625e4462f3a4b7cfbcaeb0592e34e3b7647
SHA512 4b6979fe2fd44a267522274a7fc24b2b941cd15f4ba299a53d9b6cb8aa153121f8cd64b581ff15822cab888e7a3d89e6a79da4e53e96f25c73133b817931af5d
SSDEEP 192:nxAkUthT/GWMdgyX1Y4j4+6q7FFQ612arg:nxARtIWvR
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 872B
SHA256 a6e9db1337a52cc3741ef6842be0e553c68080bf512e16095802c5873ad62aa2
MD5 f111c0a6f086dd5ee0e90327f6e671ba
SHA1 efcb5f0ad2c513877d7f01ce9371f5401a2f89ee
SHA512 d426ed6032d25b3ef0cec7bcba038e79ecd0db68ca18831b3003990d4ccd7cefaafa25d9ac27967564c3a29f77218674f9d24c7478e2462bc3ed65164bb7314e
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 704B
SHA256 874ae682a615c6efc40522a461d09477522f411066ee337452852fa87b1c0ecc
MD5 a3d52169acec773ac1274acf29556e9c
SHA1 f5c626bfdb1478572db8dd353426d73eb352b0f6
SHA512 ad9a5cafed75e1c3e8e586974eb4945a100b4f9825356ce88faabba1427c0975694ea558832f4f4ae884c8d6ca2cb7709920d3f7d135cf2f6e5180eaf2df2cef
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57f07a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f07a.TMP
Size 704B
SHA256 b090240b871f111b3f054b1c6c93bb6142144e4f318d5d416c5034860b1ac5ae
MD5 0ff3bd6fe1e7d23305df6307180f7910
SHA1 c25b0446da12c4e8a06ced8ab7e7e1a9a329cdce
SHA512 688beefddc9695cb5eeb1be13c2578d4f612a5c5aa70379995fa4a11b8299810139f691953555b11997dbbc32bdfe53602627d5df105887b96a3649655a97727
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 6a4cc07de78842d3c6980be9a1b477146caa00f0e7f9903ef17aa1a9cdc78eb2
MD5 057cd4964d625670fde67612ca911679
SHA1 4e0e3c84143f89d124fbfed7b512751c65fcb65e
SHA512 a939fec06ca90814ea7d316281803b1549e59b7759ba81f887b954606d3877e83f7d6cef7d979cd4383dcfe82b3939569139b4d696e851eb9b15bcd1952fefa8
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupOe2RUQ/obkNHqRUx3GPOx+:A9iIxuERzA83h09RZxYQP2FSFGmx8oSL
MD5 SHA1 SHA512 SSDEEP

Submit Download