a3fd893b837c62741f1cbf4299e20b9dd68b3f041ecb82c790cc453f6d0a383f

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
02/05/2024, 11:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
0e525d67541c7e079ef682fb9683ee7c_JaffaCakes118.html
Size 139KB
Sample240502-m7v98shf29
SHA256 a3fd893b837c62741f1cbf4299e20b9dd68b3f041ecb82c790cc453f6d0a383f
MD5 0e525d67541c7e079ef682fb9683ee7c
SHA1 4a02afd7606a6363d4e120106f8dc9006556a489
SHA512 5e9302e2b7f231f3cc23de627899203ae98264c9fbab94fa554ca63c5885d3142016a3160dd497fb45e7ec90e54ef8ec6bd7637a1e7f00a9a1879791a4459e47
SSDEEP 3072:JnHEijZeqLbEijZeqLy7M/z1uKvRLaFPz7lprAYW/Z4uqlWgHini+Fr/H:FEijZeqLbEijZeqLyo/z1uqiPz7EL
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
684	msedge.exe
684	msedge.exe
3040	msedge.exe
3040	msedge.exe
4532	identity_helper.exe
4532	identity_helper.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe
4524	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe
3040	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3040 wrote to memory of 864	3040	msedge.exe	84
PID 3040 wrote to memory of 864	3040	msedge.exe	84
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 1700	3040	msedge.exe	85
PID 3040 wrote to memory of 684	3040	msedge.exe	86
PID 3040 wrote to memory of 684	3040	msedge.exe	86
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87
PID 3040 wrote to memory of 2196	3040	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0e525d67541c7e079ef682fb9683ee7c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ffa445a46f8,0x7ffa445a4708,0x7ffa445a4718
  2⤵
  PID:864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:1700
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2712 /prefetch:8
  2⤵
  PID:2196
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1740 /prefetch:1
  2⤵
  PID:3028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6728 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4016 /prefetch:1
  2⤵
  PID:1368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4788 /prefetch:1
  2⤵
  PID:2448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,7326518663775374592,10059636102815227756,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2992 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:468

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

f_00001a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001a
Size 20KB
SHA256 9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e
MD5 b6c8122025aff891940d1d5e1ab95fce
SHA1 a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4
SHA512 e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10
SSDEEP 384:kBod/X+YnvYU+f2y2ScAWYl/7UOSVP6/EvI9mzX42MoOxEuF:kBF+i/PvVIOSVi8vSmzXjXY
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00001b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001b
Size 44KB
SHA256 1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8
MD5 88477d32f888c2b8a3f3d98deb460b3d
SHA1 1fae9ac6c1082fc0426aebe4e683eea9b4ba898c
SHA512 e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3
SSDEEP 768:zznaC0S3xL3KmGLYSKhxDefA2ihGqfz9fNfh0QqdgDnqQpvSjCQNs9f9wAcCGI:PnajS3x3K1JKPCwhLfZdh0Qq6dQNef9x
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 b40f34de9fa27e592a4124c1f296a203d0d4be875188c840c190ddb6a7a46759
MD5 aee4b3c11c1af2ca6b73d2513ec93c2b
SHA1 54a788b408543fe5fbdd557f720ab6606f8adea0
SHA512 6f36c7e9dfdf1125c5864a324f43c23fa5315482ef205fc81ea2975874f615e1a0637bc9dc48dae30f86d62916c25f342d945096cd54ddbf0344c24fa355d5d4
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 4738b5452d3fa4a31a2017184529086090c25a25238168bd5a9eea7349ad7f2f
MD5 18a7e4d7f6fdd5502d1832b5d85caabd
SHA1 277539e9f36e5ecdd09e5535ad7ba08b8a2e2942
SHA512 4961fff93aa00b359dd5c3e80428a0e853bfe066fb91f8d2554636e45562a598e79187687a12226dbfa64d6430bd9d6da7d6ed51565a3f7e3e6286ff6617a280
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 ffa2492d0166097b19bc4f67886aacdb3b8f8805b5bed2857df07fe17a5d9ede
MD5 626842ee0ca83c93b9ac2c4699c76851
SHA1 4c1a31903280c442032e4ec0bafa1cb2b19aab1e
SHA512 83ee903ca0f5aa945e24d5c1e17c07fb65ed2ce53698b778c19b41b03ac52d1297b6ba46164dc6c9bfadc3821e895f3aa6b58592c4661702c94b1da1504cc2d3
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 31b99bb4a3434f5ccd79cf4f1ba38dc945f29913101bde8385462ff478c7d534
MD5 23aa37f68b2347af0ff1408594e471da
SHA1 2605fe79045ad4f27a31f2f080c872f14de32461
SHA512 72dce90a1376f289870057d3dc5bdcb9ca6f1581aec325a8eb872eb30ff9c7c634cbc9b26889b4c29a5e1fe3b74fe392cc06bee17bae262e27cc42f33bba2b46
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 103a0fb07cdd2eb78fb1008bf6e32b2c23da2294df6edb50dc8d87f67a827895
MD5 370ac30ab6d913b679abbb43a20ea4ec
SHA1 8494122afed66dd754e8c44ea247d1f5101b1ae9
SHA512 3beea074a35651704c3d227fd9950f07d7f56e1b4f1669cd8c4d80d6ce66ad24784b66fd0c8315f6548f5d37bef3dac371b7accf119a713f3232cfcd2f84b638
SSDEEP 96:DTlp72GNGNGerCUJ06gGPG9GVGNG1TGQkG5GAGUbf2:DTlp72gohrCUJ06gGImg07kYLr+
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 7359a3423066ac848ba1edd283c828015c575516dd652023b53fc69473832a71
MD5 a077b0114961f74cb3e93ce299f462b8
SHA1 7171a40800616fc01f66de764b18911e1b958a60
SHA512 1257a8887512041ee81948fec59238e8d10f3a9f2684e6b2adcb9cb33ce3acd9dfebffe0bfa596721fdfcd7d448cf3e68e575a9abade43ae21913dfa0ce1afef
SSDEEP 96:n7tkGxm/enmqLMI17ur9wpvWMoiVmdeKANvHpIeYvl8LJ6BdJCJ2pRQS/js+UWQi:nhkrZugr9GWMLNvm3vKNaLq2pRw+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 0a9ecfe9eca554dc0060cce9a2a5948a6e9f37db771219a84de8d38f5f3070da
MD5 30768cfcd9754003a6db22ed6f3e3083
SHA1 2f0dc6731a2154250b604a286bbe55bc47d943aa
SHA512 8dfc335c5ac1374cb1cc52a179a6563d1c4f2ff40ae036aca640de35b09c2a66ae07d0901f96647f377f4cccad66b0be3427f0db4299d6bd664bce2687c30c26
SSDEEP 96:n7tkGxm/eQYmqLMI17ur9wpvWMoiVmdeHpRQS/js+UWQyV+VDCziEwb:nhkrHugr9GWMXpRw+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 2ba09e8cc3d5a91010493a74fde0b5a8d4867c49acfc6ace3a555ea5046ec122
MD5 ce911846289216eff2fff17c4c985da1
SHA1 f63fbcce90ba8a516b3e5c20b54ab9184780c1c2
SHA512 2a3f2558af5f19bdae55b812378a77fa888b9e0dcbb9e588e87cf1f589a37b71f48d1bf09b29ff6bfc4f9c493f8001bb6bc4e3a00e99f2b6b8d5d4757b0222bb
SSDEEP 192:nhkrZugb9GWMLNvm3vKzbZaoLkxjRdEQq+2pRw+rV:nhjg0WZS26
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 881f677e6a4e6b8e32fa9624fa1dabb065ff510434ed1ac93e068519d27bc367
MD5 dfee6b1ebcd5733cd811f9f7d5afe628
SHA1 80e20a4f81db923d0cdc2c793212d040ea6ce62e
SHA512 3b1e695121deb4e77276d6b1c92e0b0f6059f79cbd16d43efe511affbfb1182752ca55a0d68cf235bc511cb34324c503486b46dc3fd83aed41704e32c8fe6758
SSDEEP 192:nhkrBugb9GWMLNvm3vKzbZaoLkxjRtQdEQVhq+2ptw+rg:nh7g0WZ3IP
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 538B
SHA256 23c13f4686b3636e0b5950568424d0212a9fe19a0795dd7547dbfcdf70604ece
MD5 4ec97104ecc6193074d176fb66a3a8b5
SHA1 1db8bd6664cc5787016caee2835dd2890a5934b6
SHA512 b6b56ed4f4a0cff1c4cb33b9087560e5f211e7332303bada4003cd396a2dfcb5c0f570f6484ec890626d16e5bbcf1be1c09e4db30d5f08b760e484b8a66c066e
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe583fd3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe583fd3.TMP
Size 203B
SHA256 d9358063f59e31948197d1372839add26e3da983ab718977e736e54c466b86eb
MD5 6acd55aadfe904256198be39ae8e746c
SHA1 527037bf9e79f67fdcde796bb6c7802f47cf4490
SHA512 a331fbbf6dbbb4018d894f266a7f89245b073018007017e3c4d886af2f89dd9fcc88dbdef6434ef4ea9b64334747f675ed3043a473906bc3d464b02369e13695
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 399e5716e0d07be386d4618045288f227c87b968eba953cc7db08c662b076db8
MD5 ac765d231f632925745189bd558c6383
SHA1 bc7b944fe5a0093b4de0cfcf9116a3205a5bb0eb
SHA512 4bba9e878cafde8f48be09bbf10cdccfe1dddf2726eff022cb6e2766f6f3c90cf814af5db0bf09533695ca309a13e25d60420fad52de209862cbfb6661a1e801
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupy8wFe2RULqTq+OblfBhDaG:A9iIxuERzA83h09RZxYRwhrq/XDafEBR
MD5 SHA1 SHA512 SSDEEP

Submit Download