3059b4a80bd4a5b8287bb3fcd97f302ff02a551efb9320da68f9b72750538afd

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08/01/2025, 22:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
JaffaCakes118_b1068dad6621cf5241a1e040b036fb0e.html
Size 66KB
Sample250108-2rsazayrgr
SHA256 3059b4a80bd4a5b8287bb3fcd97f302ff02a551efb9320da68f9b72750538afd
MD5 b1068dad6621cf5241a1e040b036fb0e
SHA1 18d42410248cddc8071651a95a660b03252d00bf
SHA512 f2d6c97894329062392ea4a4208212d20a0571f877d410958413c89417a9d4c5e91cca5dc3437e36758b4133f72d5fa5ff736ab77cf271d9c2ce64f275df9af3
SSDEEP 1536:ERwgr8VSeO3LdujzAoTlDTmaaS6cgRr9l9J2NMhbSv:meO3LdujTlTmPrcNVv
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1596	msedge.exe
1596	msedge.exe
32	msedge.exe
32	msedge.exe
2872	identity_helper.exe
2872	identity_helper.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe
4032	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe
32	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 32 wrote to memory of 4588	32	msedge.exe	83
PID 32 wrote to memory of 4588	32	msedge.exe	83
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 956	32	msedge.exe	84
PID 32 wrote to memory of 1596	32	msedge.exe	85
PID 32 wrote to memory of 1596	32	msedge.exe	85
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86
PID 32 wrote to memory of 1084	32	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\JaffaCakes118_b1068dad6621cf5241a1e040b036fb0e.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:32
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff95aa946f8,0x7ff95aa94708,0x7ff95aa94718
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2552 /prefetch:8
  2⤵
  PID:1084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3376 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:1868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4704 /prefetch:1
  2⤵
  PID:2192
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5020 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:3720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5560 /prefetch:1
  2⤵
  PID:1572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6560 /prefetch:1
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1988,1031971075962195895,2569912097071382122,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6660 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4032

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5096

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304
MD5 8749e21d9d0a17dac32d5aa2027f7a75
SHA1 a5d555f8b035c7938a4a864e89218c0402ab7cde
SHA512 c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33
MD5 34d2c4f40f47672ecdf6f66fea242f4a
SHA1 4bcad62542aeb44cae38a907d8b5a8604115ada2
SHA512 50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6
MD5 SHA1 SHA512

Submit Download

f_000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001
Size 71KB
SHA256 726a2ef49785eaecce64e98fcb3490c40db06d6a205455784f3267a5b4b7c34b
MD5 da52e38c98b0f2047abeb07609608ab5
SHA1 da1210caff36df73e49a0c271ff7d573c2d20d02
SHA512 35adf36acd8e1c65f040663d7a064f642a6db5e0b7978241db8a9b4eb52b8ae71cef4e7bb1b4a0d85e4af1f7240d6d52e5a07f512e5e90504e063e51376b5f5b
SSDEEP 1536:ntQRw6S6yzj9mN0hBcdYzdFONVzN7pPMJhJLY3T+2z9ANKokoV:ntQRw9BX9i0hBqSFuFp05LY3K25ANKo3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 61KB
SHA256 ae1a0126552472d1e1347ceb8027ed725db3b93fcbc0b39745a92412cc1641a6
MD5 468446a7240461af44b59ebb2047c231
SHA1 47b7c525dc91bece99df0c414960b9490b986ba8
SHA512 ac8cdf824112a3d25248e58f05495b458038d9388ba7e46e1ea8f6933cae23f044f4e532b74b13f52812bfaf602ca12ec152e44ce95266abe7cd6bd66b4a70b8
SSDEEP 1536:8b3HAMT093crXTgJRNAZYBmuhSeIUQUYaoxMaagTEwL:G+WXTy8u0eiaoWJggwL
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 23KB
SHA256 bcf5af55430e185909efe68a77f35249153e4379b6cb3b5a047b1cd221ae48e9
MD5 4d0a129f673aa918c6b36f0c6a1b54b3
SHA1 1b5998db0684830f7dd9ca9195ed9b67ae41ae69
SHA512 81170ee7b82a75d85ad9df8226d5d9f6f88b8ddc4ddbf4e0c732ee9ba0a49ffa687cc42a91d91b5fd4bb39cebbfe0711f84b0b790457fdef5e9e72b5a2cf04c5
SSDEEP 384:bTw074jVsSRRlDgq993cc093VH5PZCRdmZUu8MVBYe+R7cSYlpd:bU074PRl0q99RK1ZCfmZe2ZY6f
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 52KB
SHA256 f0ca592df98944df58f4c281890809d30fd2117e471b8021ff138314efef5dab
MD5 f9ad6fffe23fad04422671cf2fa4a661
SHA1 b8366163961f1689411636988a73dbc16d13ff3c
SHA512 e9d95f4f0eeed04413a1d798161d1c20d876f5ea4440c13e9fa356a562e931f98d84b3f6a907d6541cf6bbbd7e84f0e106b48fe2f5fcce77d66f70e114834aa6
SSDEEP 1536:HiEsptN3A6lrTHGnd9X8elTFB/eAMKqinsixFYof:CftCcEkQFYAYSbFp
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 23KB
SHA256 fe0c5130e81cfd078437cc38fd73d94d4207b47b6ae74d4a16e1dd8281e2a287
MD5 4bf45c37b6fccfe308533e93d46244f1
SHA1 a88ddc0ad11510ff86de30b94dbb63cbdb506d81
SHA512 9620421eebd8496cf4d8feb35d82b3ee016e1908e483e74388442aac179336a4df28806d252f26338988f301a8906db97d1ce190cabc1f6849c30e3e8ae9e6a4
SSDEEP 384:LGxrzB0svHjpSF9GUPabDgrxUlPj6Ig4W9FnXspww1jqT40:iJHVSFJTxUlPj6Ig4W9R8a0W
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 ec456270dfb1d350c045eacfc0adcb1c8bbf9532a7baa71584fd5dbba4d8e006
MD5 388fb97c6930412481769e712ee9a9b7
SHA1 6604c01e48ef42bf351f6837c78ded7d59f0ea32
SHA512 e6c39d9af6b8c79c64a9a3ad729017036c7a25ac5eac56a712bd425103c1f108b040a58778df7a87d827abeec8db7648490f3d76d63dce8ee375e6a846951116
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 0436f38f0d8a8fb65d35ed2023aa54d5a49b5cf02efaf2fe6d26ac42c5c6dc0d
MD5 d1507d2414f61cf071896dafd76b4be7
SHA1 d8eef79e2345efed5fbf396afa53b781565bc709
SHA512 e032dbccb6f4c7e2ca174362616e2069517538da8b0915766dbbe337278ba06afed76d3618cfb69a21fee98767af307911f85a3734d681a256348e0a599dcdc4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 6106f6964fc949dd180fed0fbd26149512240bd94ad5737e60347c7d63575206
MD5 16abfa39aba1eec855b47e7107d66b66
SHA1 da336469868a73f3e27160d6ad3f68f033c4b6a1
SHA512 01929522467ad50e4b3d7cd2130b9ad945172904944093d6341d2df64d862b7f4ac8679b88efcc7825f08dd442ba712bc09e0fdff39c7492f76ef92833c1fa35
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 817B
SHA256 d4486f20a51ce066e4dcb6e8f8e92f1813d99cd892895bdc17019ea3c6a53081
MD5 c26096b5f0feab37efcac35d779eb1f0
SHA1 46639e5d434c96fef81c34e3b5afeac1b7e8e685
SHA512 daff6210c6d167d7a77785a60fbc0f779d1bffcc21e1999690992e89e80e33b5e68aacf981ecc69536aa19ce009f4e7ad73fcc3168cabd855241a567651b5869
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a98da26602a9292becf15fc81ed0e3492807c38745afc3a15bca998ada7a149f
MD5 6ded5b34d73ccec7ee53e2cdf9fe1958
SHA1 0d8b5e3f6e732a87b4d4f06db3bcf19b60f5bcc7
SHA512 48988d9b931d6c19dd888505ee30408398a2145ce1a31f65508073cbdcf88cbe32f78b7b296790cb0f629ccfe6d3f2f142e39fbd86fe72ee8318a19031dc5bc3
SSDEEP 96:n6/kpKq1nQpwpvWMoiVmdeAYTQbMhOYsUWQyV+VD7AiEwb:nQkrBQpGWMwYTQbMcRrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 a4a8064d25af7a8f2fd505c3d44cde0f28ef84ab1787b1dbdf065c105eb7e8ae
MD5 368990b7f43f086505a17f47fe6bbf3d
SHA1 ffa64bd5da48579f668f6df28908e3a64ebd600c
SHA512 4972598cd106993d5a77c6d072126dd87d61cf887b3ea33754b505955d5be2fa7c818ae97bee8bfaa08f000955d573b9a382fefd70dc0e3b8160c5e90684e269
SSDEEP 96:n6/kNKq1nQSwpvWMoiVmdeA4bxoT9hOYsUWQyV+VD7AiEwb:nQkfBQSGWMw4bxoT9cRrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 311ea23ecfa252f0d2faacf6c4ca75f2a8f5fe90d6e7c676e087833f61e3eac9
MD5 e0ef71bf7e7ed097711f62c7a3bb1809
SHA1 a4cf3854ea75a766a56052237921020e2aba852c
SHA512 2f1dc7e0437bdac0da0620d94a97fbfba155fe63467732bb628ae658e4dbd0e68c311830ce1331ad165fb348bae98de8c5a54b68b476d45c677a09b537060780
SSDEEP 96:n6/kNKq1n0LwpvWMoiVmdeA/C5Ku2hOMsUWQyV+VD7AiEwb:nQkfB0LGWMw/C5Ku2cNrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 2d9752bf058519cb64b00da3194fa4697d3761ba67774eecb5d8b23bef9b640f
MD5 87394d61363e93342d8ce6dc0e547f5b
SHA1 f2b9b50f60434517ae85065c03f647282a5cee5b
SHA512 a8b349aa1504a2bc793783d1cb48e6aa722d096e458b81770bd6bf91b1cf57c0fd7de3d0e271ec19517f20b00d0ebc7e1747311a16a3a905b787f2485f70249c
SSDEEP 96:n6/kBKq1n0DwpvWMoiVmdeHhOMsUWQyV+VDCziEwb:nQkzB0DGWMXcNro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 382c3190ca2ce3c2993b409820c14354a54ddb903b7b21a0f77b203fd3bf341a
MD5 232020fcac17a5cf4ad2b5b346749c50
SHA1 a0f63449ec12a2a807cb3ad11623302b72d36896
SHA512 9c2bb3a8aa67d8ea3ee34b605e9695417af88e331161ea3afca74d1a375e620216f97da3481593f8664ba8b57fb825d5710d08a1938f7726b3eb8e38f5000b11
SSDEEP 96:n6/kZKq1n0LwpvWMoiVmdeA/C5Ku2hOMsUWQyV+VDCAiEwb:nQkbB0LGWMw/C5Ku2cNrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 ee523e69dd622a71473b949cc229a97223e693ba1591124dca94579aab9cb397
MD5 d9a6f86b49e40bc12b5e303857b419d2
SHA1 3d5d49e2c3d708247aa6648081c9858d00ca2b3b
SHA512 bb3f53611e73e04401f3aee8b7ef834612de377a4631539897ef48be93224795d05bd3e1109d503f59a57831076431706626a1a50d3be620ee59e9dbbb04fc00
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 d44f124225a54f0f9b77cc21285871281720e400acb7c9e31a88096a5ef5876e
MD5 547a6ba3dbf248da43bc430aca3f3fd7
SHA1 bcf0e222bd10bf6621e346ac6e82729a9410da2f
SHA512 d38e949e2fb590946a1bac363ba1f43cb47d5b24f3019e40a6c648750c0fb61e5e7152451090970324a041db34ec98af9e6d06ee41ae2557e3bc4e35a634b833
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe5877db.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5877db.TMP
Size 203B
SHA256 12c1fb46ce82d64f8747bb8a19410e74a4cebd1fa1975b49e083b1b3d7b7d8e0
MD5 fe65266826b38162f49e654951acfbf8
SHA1 725f5f2c57daaef96e16d44be9b7214208f32a56
SHA512 c432fa9f731cb31f8fac1354980f957da73e9c5e94ef52562c605e98322387ee7a98bd9051afe935fe887d1dda65ed0048a211dbefa98cd7c9ea8a0e1dfbf022
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 7c360ba04f8cc68913fe2ed1523947c419d1339bb72def12d7538f99f364cadd
MD5 11b502ebae1aa9434795ed9cdc1b10b1
SHA1 0e6bb70edf411810f5c4ff1467a392f3e6fe3025
SHA512 c266efb1dfd3fa522c4301c1de041f0ec96a115341225f3cc35d9930dc9438fd7fc243eaf7a89db325ec9bde701075d447740cc91fe9f4b481555579b1535e05
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupVq8/e2RUJIsTxAi8wU8epE:A9iIxuERzA83h09RZxYEIST2iPU8Gu
MD5 SHA1 SHA512 SSDEEP

Submit Download