afcd74bd3a12c81910ee55230aaea127b912cec3d4fecf8f17d96f0f60ec39c0

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 09:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
75166220d884e1e52a84a53fc4b96c68_JaffaCakes118.html
Size 48KB
Sample240526-lt5fbaeh67
SHA256 afcd74bd3a12c81910ee55230aaea127b912cec3d4fecf8f17d96f0f60ec39c0
MD5 75166220d884e1e52a84a53fc4b96c68
SHA1 b2e9e4031ebc2c9e7f958378da0e0c2e0804e1c1
SHA512 8d7bf2c2a3898e9f2db020c1988577ac286d01277a62c71f2bdb24b00f754139dddc24bcebc35b77b7656eab132c926791178e3b218fe66b3842022d4b76c64b
SSDEEP 768:k6pu7c1YmJJ4TLF1BTTKO5/ajQlZrQd4W3YdG:k6pu7c1YmJJ4TJ1ukrQdhiG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
536	msedge.exe
536	msedge.exe
4584	msedge.exe
4584	msedge.exe
5988	identity_helper.exe
5988	identity_helper.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe
5892	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe
4584	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4584 wrote to memory of 3004	4584	msedge.exe	85
PID 4584 wrote to memory of 3004	4584	msedge.exe	85
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 4544	4584	msedge.exe	86
PID 4584 wrote to memory of 536	4584	msedge.exe	87
PID 4584 wrote to memory of 536	4584	msedge.exe	87
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88
PID 4584 wrote to memory of 4760	4584	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\75166220d884e1e52a84a53fc4b96c68_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe344246f8,0x7ffe34424708,0x7ffe34424718
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2196 /prefetch:2
  2⤵
  PID:4544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5280 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3084 /prefetch:1
  2⤵
  PID:820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6564 /prefetch:1
  2⤵
  PID:5560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6704 /prefetch:1
  2⤵
  PID:5704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7148 /prefetch:8
  2⤵
  PID:5864
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:6008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6400 /prefetch:1
  2⤵
  PID:6016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:4308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2188,8009556962582946220,12575924229674144994,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1856 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1500

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b4b69d099507d88abdeff4835e06cc6711e1c47464c963d013cef0a278e52d4f
MD5 537815e7cc5c694912ac0308147852e4
SHA1 2ccdd9d9dc637db5462fe8119c0df261146c363c
SHA512 63969a69af057235dbdecddc483ef5ce0058673179a3580c5aa12938c9501513cdb72dd703a06fa7d4fc08d074f17528283338c795334398497c771ecbd1350a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 26764cedf35f118b55f30b3a36e0693f9f38290a5b2b6b8b83a00e990ae18513
MD5 8b167567021ccb1a9fdf073fa9112ef0
SHA1 3baf293fbfaa7c1e7cdacb5f2975737f4ef69898
SHA512 726098001ef1acf1dd154a658752fa27dea32bca8fbb66395c142cb666102e71632adbad1b7e2f717071cd3e3af3867471932a71707f2ae97b989f4be468ab54
MD5 SHA1 SHA512

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 22KB
SHA256 bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105
MD5 5e74c6d871232d6fe5d88711ece1408b
SHA1 1a5d3ac31e833df4c091f14c94a2ecd1c6294875
SHA512 9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5
SSDEEP 384:z5y45znEXC0Kl3/5Lw9MeUrFLMuNrn9GVxEVSYnBvTzlmylDY99v2VQYfoorMEiJ:zznaC0S3xL3KmGLYSKTzlJY99OVQYwAK
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 ad6d324d5d74eeafed6ded8b9ae99477e8679a05f66166fae32f8f852c79ba26
MD5 e3b1cef11cf9428307da8552ef5adf2d
SHA1 ecbfdc436684d3cc40930b8dccab10512289c5fa
SHA512 224aa69ffced742ce6463d21ad592abd1376b1bb91eedc48dfec53ef07f1aec14d77c76451cee0f588b871b191d70fd40fef9145bcaf01b0038fc4f229a45660
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 49d6a138105f722f5fe38240517590214a7ff88c19a9579a963f9aa624fd69ff
MD5 85c52e9af0125bca111389bfcb1e12fe
SHA1 e66de0a4c5e34549be11c69bf282c8ffc3fe0547
SHA512 7ab3bf3acfc596bcbab964508cd49548db15f587fd90f3aaaa3146dbd348ee1abe00cf63d86a6d9f6ee1d1b42ba9fa6025a14b0fa64e7ea347ba26005c32f32d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 e31075ae701a3e1ee70edd9792e135be4daf731759aef1841b9ac6a4143e3ae1
MD5 99f74a865a23fee6dfadf66afd744902
SHA1 30b3a788244263562a643fdb88c06a324f7380f7
SHA512 458dfb787ac17a19c59df9fa3317607a5c3aead8e30d05c82841a341ca4872b6e04efc00b726f3d669dca2e766b773d3c57f6ee71421ab627f5cf2a1f2608169
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 792789d233bfeb8d264365fd782d214872e61a119635f2d463906c1d52a1cd51
MD5 ec24896fdc74a8a1214b60b6f67a211d
SHA1 960e287ab44052af5d4aef44c95b57d39e1c5152
SHA512 8e65d91b0b6310999939b61a9b9dee899a25423154118816f3d9fc0ff9bbe940299246ec6fc2fc28a4c08bbce2b13b542d2f0dbcbc7a59176a856712f8d4b53f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 a965c03121e138db3fbf267677331e8a24761b664cb648590eabc56c485f8a24
MD5 d4aecc24567c074b7c7123d6569896f1
SHA1 ac8a6388d70b350ab02b96ffa4f5d46ad989ab41
SHA512 77047f11cff382b080b3c40c70e017e050ac8c1172d7dba257e601444420e735daf9cee69ad2b7b0d94f9a28b47b0911d61ee18634d3550f77ca3f792b73d98a
SSDEEP 192:n8kQfz9GWMigElBhTkDOOov9j2VWWv3EIMYPBU2pvW0rg:n8BfsWsY7j
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 f0ade0234b7c65d35d2459dc64b83a369aadb80f788cc771cc63c0bdc4703b4d
MD5 c21689a089d286457297ff6999bd6527
SHA1 f7bc966577f46d68d0b24c0bd17ace7af201bb3b
SHA512 642a8f05416dde12147f16ab509b5379e5ab4e91d574b6c7f0087a4e51898bd3f7c7e8ff222f91ad0a86fbc0ba6e160fb0f267ccb8e5709af9b8732b22bc7a31
SSDEEP 96:n8k5yw1E8YQD9wpvWMoiVmdeHpRQMUhUWQyV+VDCziEwb:n8kjDD9GWMXp90ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 b7c21fdedb1a97404297bfa2b31865604e85e036d9a134efb7aea8924961d63d
MD5 4c20f55fa26a2e28b03d5c5739347122
SHA1 afe6c7747ee558a5f5c4a03020d682b300faceee
SHA512 e82766d73c2b0aa69425eecfd1c588d96f91ccaba4df5d2137751720e52689e715c7a9dd05c09e297b1bb695db25d1af5dc3cd3f6a8839129c4f13c6e780abe6
SSDEEP 192:n8kQDz9GWMigElBhTkDOOov9j2VWWv3EIMYPBU2p90rg:n8BDsWsY7Q
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 8a760e27b04135081854ac3327da5e77da08233253d3ff2b0521bb5d3d786786
MD5 52c2ca6589f9de61abb53c374c0afc48
SHA1 a400a5887d850146b3c9aff2cdf2ab57e3f075d6
SHA512 a91b39ae532131d2cdbeaf540c5691cafe971926a64414330ec43c64fafc84925d34ebabfd2a23f4ac21fb42f3d59873517785312a45ee5226ae74dd2b27e8ff
SSDEEP 192:n8kQDD9GWMigElBhTkDOOov9j2VWW3MYPU2p90rV:n8BDcWsYz
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 544ffc29fc139c508d0f0b61bbd1410c303b1353ece1a8a02f123003b7158f64
MD5 6b3019fb6235e2edff575551efdeabfe
SHA1 da4871386cb03f607917c4bf6ebe9dc76e334b41
SHA512 984bac780ecebf626b3f74fe8208abf2ad9cac876b30f1aa340b1d2343cd9ce3a6affac976b78e7c760ff27b98cf96b9eb14de6b9de4670cfb324101a959645e
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57b0c2.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57b0c2.TMP
Size 1KB
SHA256 503ca2afd93334f5537b5ec3d52bcee6293795f22b5c9ddfc28872fe7be72c00
MD5 218b25728118421434e3e3eaacb5fa5d
SHA1 a8e3d7fde39e8d064b5de988c3c024634563a330
SHA512 df7c594fed997d1a46ba73bb95ff8b82b1fab6f605965330da1c9019a6b6d5391436076c53614d236ccfcedd7624cf9acdb3413e6001e0fd4098f76959072d1e
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 529684d2c2cfb3f7c3ec1f9d17e94608b88837f2b678e273fb4b9d091c596b60
MD5 2bd67b0b71f3231a9ac608219fedd208
SHA1 78b8ca17edd2b60c09a9655f52ad6f4cf28a8a16
SHA512 78cc6d2838db5f4b0382922e2a153afcbaeaf664147c09de7dae51d5f632b55a1eb0c97cfbe49b9721526a8a2762d081993a0280bf5094cb0d1f64ab21d7a4bc
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupKpe2RUOqTb3z2OMDCRHql9:A9iIxuERzA83h09RZxYK9sbaOMWRHql9
MD5 SHA1 SHA512 SSDEEP

Submit Download