394aeaa0b5a400f41456d89a71973dd627276791f5e5eb4c05f440622c8aea9f

Analysis

max time kernel
148s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
04/04/2024, 08:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b3b8d5fda9f3f1fa479c4d2d4ca55d78_JaffaCakes118.html
Size 91KB
Sample240404-kjg2laae5s
SHA256 394aeaa0b5a400f41456d89a71973dd627276791f5e5eb4c05f440622c8aea9f
MD5 b3b8d5fda9f3f1fa479c4d2d4ca55d78
SHA1 7ede3cbf90195f1d11ad193551454c74cc0be35b
SHA512 4614bd73dc3cc81bbcaffbbd076cc67395354f41bbf6581f3558f74ee27ca53243f7124ec58de615549e00f604fb9fdde66e5f4233927265633464dfc6c16b69
SSDEEP 1536:AvJXAUeAJQJ1s5qbXRLuPRHAq7wr0fchdE7DDg+e7zC7pSCkgTLxdHkyUFel9ls:+JzF5qbXtoBARrSc/UDFwC7pHkgT9dEZ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
988	msedge.exe
988	msedge.exe
752	msedge.exe
752	msedge.exe
3492	identity_helper.exe
3492	identity_helper.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe
4952	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe
752	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 752 wrote to memory of 2636	752	msedge.exe	85
PID 752 wrote to memory of 2636	752	msedge.exe	85
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 4464	752	msedge.exe	87
PID 752 wrote to memory of 988	752	msedge.exe	88
PID 752 wrote to memory of 988	752	msedge.exe	88
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89
PID 752 wrote to memory of 836	752	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b3b8d5fda9f3f1fa479c4d2d4ca55d78_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:752
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd205a46f8,0x7ffd205a4708,0x7ffd205a4718
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2344 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2916 /prefetch:8
  2⤵
  PID:836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:1340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:4088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3492 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3544 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5616 /prefetch:1
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:1580
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7036 /prefetch:8
  2⤵
  PID:4000
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7036 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6772 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4436 /prefetch:1
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:2008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2228,15718368640864411532,15597430789477850382,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4796 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4952

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4952

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:648

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 50c3bd40caf7e9a82496a710f58804aa3536b44d57e2ee5e2af028cbebc6c2f2
MD5 7c6136bc98a5aedca2ea3004e9fbe67d
SHA1 74318d997f4c9c351eef86d040bc9b085ce1ad4f
SHA512 2d2fb839321c56e4cb80562e9a1daa4baf48924d635729dc5504a26462796919906f0097dd1fc7fd053394c0eea13c25219dec54ffe6e9abb6e8cb9afa66bada
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d9068cf3d04d62a9fb1cdd4c3cf7c263920159171d1b84cb49eff7cf4ed5bc32
MD5 5c6aef82e50d05ffc0cf52a6c6d69c91
SHA1 c203efe5b45b0630fee7bd364fe7d63b769e2351
SHA512 77ad48936e8c3ee107a121e0b2d1216723407f76872e85c36413237ca1c47b8c40038b8a6349b072bbcc6a29e27ddda77cf686fa97569f4d86531e6b2ac485ed
MD5 SHA1 SHA512

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 20KB
SHA256 e1e55887f81363ce752f53f8c92a155fe041292b48148134018a0476cfd8f204
MD5 2241efaf8a5d6561e64fa7e97dd66e78
SHA1 7b1f677f739c119f878cf3a31e02c2af7504bb54
SHA512 78137eb3866b771554b70ce90df1354cba5990602018ca677fef64959188fb40a4c23edcb8faac9367db57d0a30cea61a52cabeec10114a1321e9488a8543178
SSDEEP 384:uCRvYuTan6ogpAEq9Z9/KglNEvPm6rvcmek7xKsyeErgFjthjDpqy73ZiloHozrW:uwYeEP9Z5KXe6r0peaeE03hjDMyVQ+om
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 44KB
SHA256 d374d2ac88b65c3b78fdb96d2c6398493dbee61549b39c3880a584d2bb1be825
MD5 26a55dcc6250e84042b29959f5e50334
SHA1 fc02ef852f17b4f9ff54e7c677145809cc205759
SHA512 33db6af42c615f586b412bbfbe0b92126f91c4b80f9259ef94aeea103498cb53396e28c0e9b1c10bde0802915f8c8877c596f07a5c5c61f4a90cb1df06f67c4b
SSDEEP 768:8k0wARCGVFSAxFyVzOe/EnZjLBAGNa6QVQ4GIkrGIewwVSBPNbmHUuq5XQrj:8k0j5bXk/cndVXQ/TGO9VSBPBmHJqNAj
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 6addc4df7f9faee42d85ec645e91f7530db1b559d05b426f9b26ff071196c37c
MD5 8f0395e030bdcdd2b55f2a11088f2dc2
SHA1 cef72344ddad49ca676f247238e143fa046d22d1
SHA512 499114e717d960d1a38f6713cb7709cffb9916186f4b888910759c8cbeb83faabf60d00eff8cf9e3ee5925231940fb89a814e29b675d367587f68cfa11db5fac
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 4c2d90cd499a76409eeb20fee1edbe065531199221dc0a33afbe07e389bf247d
MD5 b5849228f844509692475d4b191892d1
SHA1 c22b0dc6cee0b71a22c41d8560587331fd358b1a
SHA512 2444f2307df7ee55b2e3daff508e24b121a495a45c9b582bfdaf8a93290cf0ad55543c7badc7679abacb94fae5128d5a77a0b65c51dde10870b16b7af10370a8
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 65c41eb4c0e426f1df8f9643bb14b67da7ffd6ed953bed61dc505c356d1306c8
MD5 585db5b5148c480a4e16ad4d2e0c4851
SHA1 1f800ea24205e755150b8bf5094a8f8852811f4a
SHA512 158fc3a54f627e32230f2e23e1cc721718bdebd7f7b60e1fc0f90f546651089e1e25044d18b6f4158808c70f797644f6317329817a7452acac61223d4211903b
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 1a7ff4b0762c59bee7f1c4c1102d57b7cd724057367acb4b58d6225524b9a45c
MD5 408a5d1ffaa7922a26fc772cf62e6e9c
SHA1 c1305302fb44b56e4ccc1e8909f29a0ba0ad5731
SHA512 ebac58e3f5a94caec7df58c1e3251d747de4ea624e467b2a131818ba9d17eea03e90ade28f7127f5aef3f7c3a03484a8d8e03ab442fb1fbd21af89aa6b0493ec
SSDEEP 96:nS/ky11L4sDLJwpvWMoiVmdeHqqOUWQyV+VD7ziEwb:nS/kiGsLJGWMX0rt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 a648c79733ca267c5c323a11c33fda313f3dc8a7b18ca96baf975c479129bc28
MD5 1c766625e512c6d84987f292fe7115fc
SHA1 b7ec9e40a9f249abc6d8b1aad08a678e1e47cbfc
SHA512 5b85426f80533fff0eb6fef05bca71d83745c32d2a9d6611dbaa36a179182d08d5f0b40a6d9ee0d806e456f6fa7180a2305658819db45ee5651e1090d5e06eab
SSDEEP 192:nS/k7GWLJGWM5eCfUabBtCdTePd4qlqOYN0R20rg:n8WGysWAc
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 d3f63e6c91f48a30b220d38e9158649f043029fc89c5a9f93af29a065060439a
MD5 ac72c93e3591538adbb434130c223c4b
SHA1 9f7cd5200bf66778dd3033ed9cbcee895a5afdd5
SHA512 7b77f43be116f2adcccd4843b1d97bcb73edd0630b1e6668e520695947c090b0e37b90c62b6385123931383c47f054385959e9d1f12e35806f584f666d0caa2e
SSDEEP 192:nS/k7GWLJGWM5eCfUabBtCdTeqOYN0R20rg:n8iGysWAE
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 f35e65a9372aa46214eb360ebeea2f8b5c9d8829ca62e9953b3e1f8da219ff8e
MD5 41b4e5490ff117839370ceec41185c1e
SHA1 ebbac5342889c54d21ee363c6bad5b877a8a57f7
SHA512 caf2a170e63400f486f9f6318dd007fb86e810afcfb96367e5a7e1d65d77fcaea7137c5422d53bffba8b86ad24f3f3cd949ebf3e780ec40222c119aa3fe000b8
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupqe2RUODqbf0GjKFGOz0c+0:A9iIxuERzA83h09RZxYkg0iMJzV+0
MD5 SHA1 SHA512 SSDEEP

Submit Download