f11e004387e4ca187994abecbb40cb7d4e6a38b9840987bf58afdc6470f1a991

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
11/04/2024, 12:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ed60ed01dad999329c5fbb213b2aa06b_JaffaCakes118.html
Size 182KB
Sample240411-n7288abb46
SHA256 f11e004387e4ca187994abecbb40cb7d4e6a38b9840987bf58afdc6470f1a991
MD5 ed60ed01dad999329c5fbb213b2aa06b
SHA1 519decac6adfdb76609086983e140396184ac6e1
SHA512 dea05be3f3c020c92fdc0bbb5a2fe09998005277839df6f76a824d992d4ca0d78b9f43d22b3f4bc7329acd3d8c4c8ab799bcc16c9a34b7a6e4494e1cb1d28008
SSDEEP 3072:IqRcVhIVs2LQegU0Dzvj40MZEPjLpUxAfYxslxNcl8CLcXmNRS/HDeAmcTBVYJzF:9cjJ/jXmNRqBIb
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1640	msedge.exe
1640	msedge.exe
5628	msedge.exe
5628	msedge.exe
3792	identity_helper.exe
3792	identity_helper.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe
2412	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe
5628	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 5628 wrote to memory of 4284	5628	msedge.exe	85
PID 5628 wrote to memory of 4284	5628	msedge.exe	85
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 776	5628	msedge.exe	86
PID 5628 wrote to memory of 1640	5628	msedge.exe	87
PID 5628 wrote to memory of 1640	5628	msedge.exe	87
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88
PID 5628 wrote to memory of 2560	5628	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ed60ed01dad999329c5fbb213b2aa06b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:5628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffccda846f8,0x7ffccda84708,0x7ffccda84718
  2⤵
  PID:4284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2236 /prefetch:2
  2⤵
  PID:776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2340 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1640
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:1708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4680 /prefetch:1
  2⤵
  PID:3192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5088 /prefetch:1
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4612 /prefetch:1
  2⤵
  PID:2116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4608 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:5892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:2900
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7304 /prefetch:8
  2⤵
  PID:4644
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7304 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5632 /prefetch:1
  2⤵
  PID:1712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:1180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2140,2996308988337437837,13649971010311228768,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6300 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:6088

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3772

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4452

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 3a654b499247e59e34040f3b192a0069e8f3904e2398cbed90e86d981378e8bc
MD5 9ffb5f81e8eccd0963c46cbfea1abc20
SHA1 a02a610afd3543de215565bc488a4343bb5c1a59
SHA512 2d21e18ef3f800e6e43b8cf03639d04510433c04215923f5a96432a8aa361fdda282cd444210150d9dbf8f028825d5bc8a451fd53bd3e0c9528eeb80d6e86597
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 4c0224fb7cc26ccf74f5be586f18401db57cce935c767a446659b828a7b5ee60
MD5 e1b45169ebca0dceadb0f45697799d62
SHA1 803604277318898e6f5c6fb92270ca83b5609cd5
SHA512 357965b8d5cfaf773dbd9b371d7e308d1c86a6c428e542adbfe6bac34a7d2061d0a2f59e84e5b42768930e9b109e9e9f2a87e95cf26b3a69cbff05654ee42b4e
MD5 SHA1 SHA512

Submit Download

f_00000f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f
Size 20KB
SHA256 0096ee1715351baa2676683c5fb27016c242e866a65c3ee992e154039ded1e46
MD5 fb4ad9dd8626c3c65342e711fd7eb1db
SHA1 ed906c3ed8da0a43a4a951e4507a2f74a9ae76e7
SHA512 f6c00e846433b5a620199cd1a6b5c84a5ee2393adcbc0f23dc84a84bf8871c61027945f88fa517c0ea115a9a884a2502861c97ba52bde356ff0f906e6b2495e4
SSDEEP 384:gxCg5hvDsyjsf8D70tRerbRMjZGQgnSOpIdcPz9GtL2drgipDT4:oT4O88f0tRe/RMlteSoI6P40gipDT4
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 b9009183fcf3373485ea0b337959b4bdd81418147b6cbe51e0ae84fea50bec1d
MD5 00019ab2847c20e193daf98b06061fdf
SHA1 0832fc17951459009ec2884b51eec8201075cc82
SHA512 fb4aad8473f0aef3647a6fb15a7b4c1c78eb8bcfc1abc3c1b6631eff74f93fbb0717d6dc3b6760151ccc680a63c6158ac00191a5f27f36ec640a6e6e47137df5
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 336B
SHA256 6b58c3d2960e3fed09b3eb8e49412aaa407bb7dada20238a32e6fce74d84fbed
MD5 afef7d0f7514cab59a1eb4522962756a
SHA1 2422edfd66f5f0e8c3e7ed399024836bdab90b4f
SHA512 a398a074ad6e9aaeab26b0089afb8edbadcc0734bb0af6e48d1c96e9e278d7a24d39c292a4bee83a835b87ae42ebc3c3a4c9aad59208e72cc7ba71b433b41323
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 63bc4523bea17c449cf46bec6996923e1357b083ac8334a166e36c62a9d15f3b
MD5 2e15bc6d5416fe6eebbab4f63349e153
SHA1 869920fd9811a99430232a835dd3b2f892dca149
SHA512 e1023c2025fe362e76109f855f95ba18aef9d53b199a8e1ac8833c0d0b1509b815f3ad6d23adc3c3e1bb8d2cdb0a55bd4b107310318721d56fbf3fbe969f97cd
SSDEEP 96:lyXTkc04q6rIZGfGgGt6GMG0GMGgzGZb7GPGfE+u:lyXTkcPq6rIZqZhtFLjz27iRX
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 4711fc01af4b21838c9ecd2de6d79110b4c14c1f7430d69f023de63e87592622
MD5 70495da46b6885ccbae47c0e6a2108e7
SHA1 fae32985c601ec7b1d587ca39fbb3cb7ffc7a8a7
SHA512 06c99b15cea71c39047157a7e9a139cc140ad252217a1734459ad7286b67b798157f8912db0c6e67962a480616c9a496ff992b318851d8aaa976dea6c0b7bb9a
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 ddc2fa46ff29352fcf1220a50300b18ded58a23de1a5b6c4041f59b342a79a10
MD5 a5849c94cc9adbf5d2579768ab820a87
SHA1 ca1f72aa4141fd4df7c08aecdae6a96764d1ca7f
SHA512 0c8ce351e9f5974c444e96f7c40042343ba392e48b9be9007779c24830aba3e9a502cd5253abf09ece279daf0cb5c773d67298e747eb0977e937e65173e23b3d
SSDEEP 96:ngFkfwm1+2wpvWMoiVmdeHOHTs0miRVUWQyV+VD7ziEwb:ngFk4mE2GWMXETTmiRVrt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 6b7cf2420ae1ae877e1ffe632f69583b132c602b382cf9693cbf3de2c1e7bdb8
MD5 c48f62632c5d4de2153a5ad637582318
SHA1 8161f42294381efbeaf83cdf0b8907641ec1bb5e
SHA512 21e1e76b1b70be9e9ba2d4b2b2f69fc962a4f977cae5cc73a911160fd78ec227b67ebcd6901313f33bdd88c09796b681b3e2052b3eea790e2ed6fc8ef332a7d9
SSDEEP 192:ngFkXmEmGWMLZRbsNkogbsuxhJMyzgfEry8PLyiOP4mx2ETTmiRVrg:ngFCmE3W8P7Z3HGy0MryyuhLjzRe
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 2443e49c933516e44f21da4682f3809b375bda4baba0d4ac93e0692e37708ab7
MD5 38b167eb389e9a9dd1488e9c85931759
SHA1 682905b46cb7d4e90c2daa2da56825b9b23bd0af
SHA512 f196e39a9a486812dc30b1dfaf903db8847f3adc92df44e3e244852355c9c6c781d5a31521e69e9bf7b9c6d8c96387a7c13099fc6ad426feca66ff115667b0ee
SSDEEP 192:ngFkLmEmGWMLZRbsNkogbsuxhJMyz3mgfEry8Vv3PLyJSP4mx2ETTmiRVrg:ngFKmE3W8P7Z3HGyDxMryw/uELjzRe
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 74e20209153b9e68f403750af73451807cf57c88559321a03297533dff7a338f
MD5 44e23b76b4c285578dcee71db241dc1d
SHA1 4e8bfe390653d3e528f05478845b67a99b21fdc1
SHA512 20628a542165187c1d7925758d5999a814d1137ce6ad3e68cf560a64e796a652498e86b463f4a00bacda9bd3486aeb5338bca29f14d362a783bcea107608fad2
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupdie2RUO7dybRrqoiXs4Yw0:A9iIxuERzA83h09RZxYdcF7srqo4NYw0
MD5 SHA1 SHA512 SSDEEP

Submit Download