77cb5004ad409f0e4f7c2e1c1f50e669b5e491c0ed917ff2bac707bc6a5025f3

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 11:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
24aa9f6854bf3a306855be1474706862_JaffaCakes118.html
Size 93KB
Sample240508-nprd1aad9v
SHA256 77cb5004ad409f0e4f7c2e1c1f50e669b5e491c0ed917ff2bac707bc6a5025f3
MD5 24aa9f6854bf3a306855be1474706862
SHA1 8c8c2b52216ca1731325d0dabe8a54a6375d870a
SHA512 b23e22ab82942f53c0a9c86c00cec9a0e38de41fd1897134da31b62bf2244ce4d7ba70d244039821f87f571934973ee4f1cea228321a8ccf49c643b08dca47c3
SSDEEP 1536:RRMLvMKYSJkXg6UdreYdTPBcOXwjM1ujETNE/8hwwOnE14:RmLvD6UfdTZ7XwjM1ujIwwOE14
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4860	msedge.exe
4860	msedge.exe
4140	msedge.exe
4140	msedge.exe
2824	identity_helper.exe
2824	identity_helper.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe
4612	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe
4140	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4140 wrote to memory of 828	4140	msedge.exe	84
PID 4140 wrote to memory of 828	4140	msedge.exe	84
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4428	4140	msedge.exe	85
PID 4140 wrote to memory of 4860	4140	msedge.exe	86
PID 4140 wrote to memory of 4860	4140	msedge.exe	86
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87
PID 4140 wrote to memory of 3992	4140	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\24aa9f6854bf3a306855be1474706862_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe4d6046f8,0x7ffe4d604708,0x7ffe4d604718
  2⤵
  PID:828
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2760 /prefetch:8
  2⤵
  PID:3992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2120 /prefetch:1
  2⤵
  PID:616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:2492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4192 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1904 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1904 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5596 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6192 /prefetch:1
  2⤵
  PID:1352
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5360 /prefetch:1
  2⤵
  PID:5064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:1452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,17218094818630139561,12420988010147462063,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1800 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4612

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:708

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

77EC63BDA74BD0D0E0426DC8F8008506

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506
Size 330B
SHA256 b8614a9e57c01d9b420975e101aeb5f0285f260279cb456d764e6adc2067e93c
MD5 7a85b525863602d49cd3329a45fc1e86
SHA1 abc9df87214bda52c7dce3ca4fe2bf8cec8163af
SHA512 83139e79cc17a1f7353dd724f52e520af648eb9be38cb8ab5b22b0bce9973628e0e93df6c54524fd8a89053d1a8e5f512f8c72c9f0192d054cc60a213e1bf6da
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 1826d2a57b1938c148bf212a47d947ed1bfb26cfc55868931f843ee438117f30
MD5 2daa93382bba07cbc40af372d30ec576
SHA1 c5e709dc3e2e4df2ff841fbde3e30170e7428a94
SHA512 65635cb59c81548a9ef8fdb0942331e7f3cd0c30ce1d4dba48aed72dbb27b06511a55d2aeaadfadbbb4b7cb4b2e2772bbabba9603b3f7d9c8b9e4a7fbf3d6b6b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a13d791473f836edcab0e93451ce7b7182efbbc54261b2b5644d319e047a00a7
MD5 ecdc2754d7d2ae862272153aa9b9ca6e
SHA1 c19bed1c6e1c998b9fa93298639ad7961339147d
SHA512 cd4fb81317d540f8b15f1495a381bb6f0f129b8923a7c06e4b5cf777d2625c30304aee6cc68aa20479e08d84e5030b43fbe93e479602400334dfdd7297f702f2
MD5 SHA1 SHA512

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 d34dfe1c3e5d8bc8c5550c908cfba9fc092a976eca740b40ba855a15d2a456c9
MD5 08076da64ca9471501ca924dd0b1c16b
SHA1 e57ccfafc53410bb8afa44a35e9f97f4b1d58cb8
SHA512 e9d4bb335217cadecfb97c1c1c3c42caefdf3e767bde56a36fd3fbd4d9b53fbb5fe0dc53f5a16fa538d345b28528e85b823b0dd9176b35421565b88f8c947c00
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 5a1c6384d61cd4becbe3f3dd81ed6087addaadbc8dac2e85f61049feddc72516
MD5 1f0398a9e095eb82ae6db0bb08059c51
SHA1 2ac1966d491a02a99f376935bb636e1ce36d6308
SHA512 aac92ce6e9e5f5099211f236b4a883cc988d16b8f37c89d208f0b7cb85fac365074f95006a3e112f92af2dd67af4fd1479044490d7f1da80fd3132fae0538715
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 5e2f2ef365fe5b3349e03fc1911038369e033e603133ce32f807c279f5318d1f
MD5 e8a369eb39ff2431dc5027a9798c809a
SHA1 0bf3c1a9b7917e29e7c18ebeae94e15cf6f9d6a1
SHA512 b4ea5d7e0bcf9c149fbdb58685c6bd832a574abd4cbb939776cf1a1606e8fc4df4bc418afd145ee6776ca67cb5ed9bbad0a35eeaaedb06f711b81b0c4af2ea90
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 5a7f9322084f1377635092376743b6c03f35a6cb9c3fe6c3d9714eeb72113cda
MD5 08c2f6fbffab5a74b24065c919a55429
SHA1 b9167b6481563217d495a267db2ce905b9b54268
SHA512 c48b6de282c64f4d9386d6f6551a94ef9f231ff910f46158517415c45dc26438684f8d8621afccb1ed35b08cc99be2fd1b7a42dfffa3a6ac43902b81f71bd741
SSDEEP 96:nTk+xm/eQYmqH1mv3wpvWMoiVmdeHplwt0acM4UWQyV+VDCziEwb:nTkTHAYvGWMXp9XM4ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 7e74ac3725e5f27c97d94d885a99a6e31755310b6c59fd9b5c97819e353b89df
MD5 cfb7950e92306b5388d93079898ea1bb
SHA1 07ca91bfa616d440da4e08cde206078b60244a10
SHA512 d29cb7a7677ec5219d014e3a8a201b37192e9360d8cd5fca653849f6f9d4af2c5561ac11049601d6777e6ef801338d56043c1140ba9ac4c39066e8bbba0c7bd2
SSDEEP 96:nTk+xm/enmqH1mp3wpvWMoiVmdeJ/C+u6D3BnUbXk2plwt0acM4UWQyV+VDCAiEc:nTkTZAY9GWMZ/C+u6D3BUjk2p9XM4rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 fd171fa712c10adb35bdb021bd24f9f85298230793e9f6ae188d503351333d79
MD5 58d9ad41e8993aca6d260d05deac3f2a
SHA1 21ff3f36b1d3074b1da38731222f2f651f1c4df7
SHA512 b37d1a84f40c94e2586dcc283d5eb77b0fb21baff9150db77a149083db96e8aab117c05420ae537df930d1092931da243097d7ed2aa6d6d0a7131c7b5ff484b6
SSDEEP 96:nTk+xm/enmqH1K/p3wpvWMoiVmdeJ/C+u6D3BnUbXk2plwq0acM4UWQyV+VD7Aih:nTkTZAA/9GWMZ/C+u6D3BUjk2pSXM4rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 0d9deb0a988f00670085d616e1241c757ea5c4e4f68a479d79cfe14768370c37
MD5 da755f439226cf5d4bb901940b471783
SHA1 a48fda689bca18aee42d92d5a1d63a32fbfe5a6b
SHA512 9edb79cc005cf10ce212f8b02c6af8620dc16d1440ae736e6f6d4360523ede8c297c660a05929f6535a513a0848f3239301c2a3232fea3730a2be086b93980a9
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup9Se2RU//fZY+OblfBhDaa+:A9iIxuERzA83h09RZxYyOZY/XDafEBRI
MD5 SHA1 SHA512 SSDEEP

Submit Download