216747aa1fff09708195711ac053f0b2c501c0cca3d848e5334baeda83af90f3

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
02/05/2024, 04:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0d8ca1ff84a0d0a1a576d289443542de_JaffaCakes118.html
Size 76KB
Sample240502-fgnddahc7y
SHA256 216747aa1fff09708195711ac053f0b2c501c0cca3d848e5334baeda83af90f3
MD5 0d8ca1ff84a0d0a1a576d289443542de
SHA1 b122329ea4084c4329e5c032f6e597e2eccc4cdb
SHA512 0db11ae321453c8547be46e8b5a7650610a62a86105b49239fd5049e453659bb965112b0f69879317ada588ccac68fb9181b07191dfcfe785302a82e7890b3ff
SSDEEP 1536:SZZnLK7fumyQtihT9BRuxEez7Ey5IM+3tIdfp5l4:SZZnLK7fumRWXuyez7ENJgfp5l4
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2836	msedge.exe
2836	msedge.exe
2812	msedge.exe
2812	msedge.exe
4472	identity_helper.exe
4472	identity_helper.exe
5936	msedge.exe
5936	msedge.exe
5936	msedge.exe
5936	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe
2812	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2812 wrote to memory of 3712	2812	msedge.exe	84
PID 2812 wrote to memory of 3712	2812	msedge.exe	84
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 4168	2812	msedge.exe	85
PID 2812 wrote to memory of 2836	2812	msedge.exe	86
PID 2812 wrote to memory of 2836	2812	msedge.exe	86
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87
PID 2812 wrote to memory of 2212	2812	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0d8ca1ff84a0d0a1a576d289443542de_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fffbfd346f8,0x7fffbfd34708,0x7fffbfd34718
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2668 /prefetch:8
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4596 /prefetch:1
  2⤵
  PID:2788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4848 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:4180
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:3944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6932 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6916 /prefetch:1
  2⤵
  PID:2752
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7516 /prefetch:8
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7516 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1804 /prefetch:1
  2⤵
  PID:3608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:4040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2192,8172512685392968501,10020883762784439102,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5268 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5936

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4684

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4028

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bd13ddab4dc4bbf01ed50341953c9638f6d71faf92bc79fbfe93687432c2292d
MD5 4e96ed67859d0bafd47d805a71041f49
SHA1 7806c54ae29a6c8d01dcbc78e5525ddde321b16b
SHA512 432201c3119779d91d13da55a26d4ff4ce4a9529e00b44ec1738029f92610d4e6e25c05694adf949c3e9c70fbbbbea723f63c29287906729f5e88a046a2edcb7
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 243d05d6af19bfe3e06b1f7507342ead88f9d87b84e239ad1d144e9e454b548c
MD5 1cbd0e9a14155b7f5d4f542d09a83153
SHA1 27a442a921921d69743a8e4b76ff0b66016c4b76
SHA512 17e5217d5bf67571afb0e7ef30ac21c11ea6553f89457548d96ee4461011f641a7872a37257239fa5f25702f027afb85d5bd9faf2f2f183992b8879407e56a0d
MD5 SHA1 SHA512

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 20KB
SHA256 9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e
MD5 b6c8122025aff891940d1d5e1ab95fce
SHA1 a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4
SHA512 e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoOxEuF:kBF+i/PvVIOSVi8vSmzXjXY
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 59KB
SHA256 fa2e1ab6e9ab10893f003538a857ab9e792cbbd2df9b7a3a5470001f3c9b8d06
MD5 03f7b25d3c0dd894cd9c03c410faa1ca
SHA1 1c7298d3c58109630cc03f1c1360b4b59047064e
SHA512 ae9d0236bde263c57c2b3cddbb925b3a124d410c9189aab42a152becc0b3c6f2d205e2afb027e6d5b7f8f4124e87efa53f58999f9701839888232df4c0b63a6c
SSDEEP 1536:PnajS3x3K1JKPCwhLfZdHS8/mANKVbLvovcAdza:PiOdK+PCwhDnGbLvoEAJa
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 aacd33e513bee936fcc1b0e59e988919e0243ac879e420b15aef5ca6db5ffc74
MD5 f8504721b2e36f387d7c1b661ffd93d7
SHA1 bab1ee9a678a8f38e1ee5b3028c20a1120001d8b
SHA512 061ecddba2a9ca251736abef1dc18fb58a229c70f5b0824d0be02ebc717cec6394085c3d5f238772a92471674d1e4eae039e17737230f613873a6ba08b185314
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 3f8b7e9a1d94aba9bea9ad77d8c5ff1b118bd4691496fb86191dd5a977cd98d6
MD5 dec7b071e6be6ebbce765972d3364601
SHA1 3a44e5820ec42a8177292e327e0827df8d241d5e
SHA512 f8e2cd19f4825ed282a42add22ff155aac04f807549737ea0edcb227a5078a998b201e1fe25d239f3dcfebeaae9a9e6bec147712acf79420c31bedacd7edfc36
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 5e93f6ba75388160384dfc70cdfef667184df757eca8b06ad798d47c9bb2b1a8
MD5 883fd4588126b06795a53a85e3da8ce3
SHA1 65770abb2fcb8f5a528ad14cec891e12b7143733
SHA512 dfc9a9d046e13762354b11a859f088ed69b67ed275933c09ca16e04a33ad09dcf1504f2e102f6e758575e30bb6531d6e2c6c51587867fcb2f7f716ba66a8149c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 a5de3e7bb2ed0378ef1f03ce9cd2b0f0123cb0b39580051a59e6175aaa1430f9
MD5 286eea60ffd1273ae05c166fc802ac97
SHA1 327820f29e5653a2c06fa4a2dc861a59c3d358e3
SHA512 e4959e9005ddff880a511801ee8440e6fe43d37ad3f185f8039d0450542ccf9d60bc7b2b8115d2b6c75e8e15842b2513cfdc1c393c3a5b8dd8656630ac483425
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 0c712a52fe87ad42ee5e7c50dc8addaf3c94211f811d9db22767c631353a2e6b
MD5 653342e84ddc36fe0d37acc3eb090fc1
SHA1 4134057e20871618c24c7d5914af49f5bba83cd5
SHA512 b408a2ba60ac165646be254457586eae765b526d8171ff7cab4f0c1cd1348b2366ca6fc4239034aacc7502ee6f35d2f6655d0b2904f9a5e3d94c18509a04db20
SSDEEP 96:nCku1u1taSGzuawpvWMoiVmdevNffCT1aVRTa2halUWQyV+VD7AiEwb:nCkuuGSvaGWMfNffCT1aVRTa20rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 f3dd52b82fb948f48e7d30348666dc985093a8eb669b551f01ddd9e0f4239165
MD5 bce7affe066aa03af31bdcbd04613aed
SHA1 c7ed7afb9613733412da4af65492c2264776d686
SHA512 bcbe814fce565e4687c059d6c1531c5c682d847c5fd679272951e09f4103d0c5029e1ed5ae4b3c072d2a610bca8ca21f4cdc7a850d79a41c8f75cefbae830c77
SSDEEP 96:nCkb1u1taqzuawpvWMoiVmdeHhalUWQyV+VDCziEwb:nCk5uGbaGWMX0ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 4e426a3f0cd25c1b3dad3a09def7c70a866b15d7e2359b406efba41019c7b748
MD5 e639af565cfcd430d274ea5eff6d9342
SHA1 1ac86f1fb0957c790bb1cb59672a0f2fc5b54edc
SHA512 968e71179a0c0ca16fdd65f60d88b448d98e0b8040469d134891b4809752cd73118d89f461741827ce8ccbeb908a7bd3505e118f9583e3c62f61d49303c0a1f1
SSDEEP 96:nCkS1u1taSGzuawpvWMoiVmdevNffCT1aTa2halUWQyV+VDCAiEwb:nCkyuGSvaGWMfNffCT1aTa20rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 2b8e2d6bb6c14be91466b3a59e221d6b06be734f15939db44a19e625f5eda697
MD5 0fc9e2e1580047e62ccec80feeafae2f
SHA1 3088e32b9b310076fdc5ed731b728ae1476ab12f
SHA512 96be506228f7abe8f5afd8e77adc49e41a4dcaaa477416b2ced6481897bb16ad7050afb2902e83c73fb8dcadf5ce23af3623b3196d284fc9c96e6a950476f3b6
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupKhP0De2RUy9qMo+OblfBh9:A9iIxuERzA83h09RZxYMcTno/XDafEBv
MD5 SHA1 SHA512 SSDEEP

Submit Download