c02c2894cbfdc495f6dbf91af3ee2d10463b7a2607385a2c36cc4c3974eef333

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 11:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
918cf94b5ea243293ce6c7592626f154_JaffaCakes118.html
Size 117KB
Sample240603-m6p2tsde96
SHA256 c02c2894cbfdc495f6dbf91af3ee2d10463b7a2607385a2c36cc4c3974eef333
MD5 918cf94b5ea243293ce6c7592626f154
SHA1 4655d4c96dd0b588fbf82dd53aff3687b837db9e
SHA512 921d8f5d53fb3395acac2f6b230cd74b45c89a9db91eb101f7568161b508b4c6b0dacb9767facb5443e0cf655e49c525b65816ad21d3823c78d90463d4481447
SSDEEP 3072:EklcWklcaklc7uG/bI+3SkcXklcPEijZeqhREijZeqLGSaXgviutRHnqVX9rCX7S:EklcWklcaklc7uG/bI+3SkcXklcPEijg
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1012	msedge.exe
1012	msedge.exe
1976	msedge.exe
1976	msedge.exe
2184	identity_helper.exe
2184	identity_helper.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe
4472	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1976 wrote to memory of 4992	1976	msedge.exe	85
PID 1976 wrote to memory of 4992	1976	msedge.exe	85
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 4368	1976	msedge.exe	86
PID 1976 wrote to memory of 1012	1976	msedge.exe	87
PID 1976 wrote to memory of 1012	1976	msedge.exe	87
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88
PID 1976 wrote to memory of 4332	1976	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\918cf94b5ea243293ce6c7592626f154_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff825a646f8,0x7ff825a64708,0x7ff825a64718
  2⤵
  PID:4992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:4368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2680 /prefetch:8
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:2260
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:3932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4684 /prefetch:1
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4824 /prefetch:1
  2⤵
  PID:1724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:2584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1624 /prefetch:1
  2⤵
  PID:2984
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6844 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6844 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:3576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2508 /prefetch:1
  2⤵
  PID:1816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6336 /prefetch:1
  2⤵
  PID:1824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,15288239217478768431,12855670639668108039,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4972 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4472

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4672

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:760

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb
MD5 a8e767fd33edd97d306efb6905f93252
SHA1 a6f80ace2b57599f64b0ae3c7381f34e9456f9d3
SHA512 07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654
MD5 439b5e04ca18c7fb02cf406e6eb24167
SHA1 e0c5bb6216903934726e3570b7d63295b9d28987
SHA512 d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2
MD5 SHA1 SHA512

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 44KB
SHA256 6ae9edfc411ede03661a3d910fafddab3d6b313d1f4668dc8c5a84c5ab23a3ce
MD5 23536ccfe05b737ae639fe63ee4cc435
SHA1 6d2e9822835dc3e6117a4d2addfc8f241fbdbc82
SHA512 f416e36b2322bbebd211fd1ea69c88883f00c7b00f14474a5fcce4a408840c0d1b0304eb8941509a38157d0583485f638959eb7d5b9ae668aa88c1d3eee8dd0d
SSDEEP 768:feIhQcf4fkrTpidkiSOT+S2k9j3ulT+qZcOkgaONCHLex1RiZW+s9Ux9J6:feIhPfkgFiiPk9j+EM5XCHLex1Rp/UxC
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 6742f8a66aa2ae1e49a2da6e6bf8602270073f96b6bf72fafdb7e8c27c4b043b
MD5 3920087feba84bc6d2d8a8a36cee3636
SHA1 18f36d3ad81c33706b49cde7b9beb94c7ec173af
SHA512 02ba7df7aab5e788b7b624b47f438a09d22cb8416443243a029a35137296ff30cbc06593e5d9254fe4cf93324be7ad143b7ff93aaa44b8726a3d4de2ca624c1a
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 312B
SHA256 10db166cca49da02aab5b9e352a2ede9e3096a19a8c3666e64c57cb57bd0715a
MD5 ff881470dc36290e9eb783821f1c8a2e
SHA1 06670a0ba6b505085e177e6decb8916f058637cf
SHA512 a5ec4a2bc3c60e72ef6aa743dc6d1fc690cb194f095a39dba2aeab3f3a58c111bae66ae9fbae8dbc9b507989ce50cd15e86e97a5dd0734eca972b9dd275022b7
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 2a59a3e3bc789e6d79f6e7f4175a4502cea28abfbb142a00a98bd25b39d4118a
MD5 119587f13be51350a9822914a8c63c7c
SHA1 8a6cf3e825b61dda21a693763f7f1ecfbbc292c8
SHA512 9651fa62c97b5d9a1ae8fbac8fcb3b28b7db865b77d76b1bd2c0b7efacd260829d7b61dbe36e85c8027d0a54ecf4038e4d80935d49da52399cdb5daf2f4d6366
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 6712b7c5ebca78fe33151b399240f2c7051812b411df4ba4fe30d25ff6b50485
MD5 96727c6d2c525eaa464420799bc2defe
SHA1 3237729a75a2b2e5e7e13e5e757db52d8fd7a1d3
SHA512 bfe5cdb8bb542ed0d6d1e5e3f34ab333b6c322635f376a41551d50bf037bc82712c39b13c5b40365e60b4d17b469cf2c1d31c4c7aa5f266b6852dd5945d6876d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 1c26fb7641f1a1b38e954dd6313e58c717505ca34e2a110c9939308c72c7284c
MD5 05958364ef7c1d554a1e4dcecd2e36b8
SHA1 fa558ef224c11a1e2cfc010195739f074783439e
SHA512 d878df080f683ce2196c511320f33d56ed25c1f87db65e5973c1378d592c1f18896f45ab6a24b05cab710567242826853860dbdeecd434ae15bc630098d711d1
SSDEEP 96:nvkf01Z1wpvWMoiVmdeHBrzTUWQyV+VDCziEwb:nvkc71GWMXtro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 2867af87afc0898442d3198cf39ee07f073f75270508ccc072204a199dd38dc3
MD5 f9d1572237ed4f5ebfe4b0936aeb75ab
SHA1 ac1ee5d407374bc18e29bf59131c60e2b1116304
SHA512 360ac4d45b567b580aa8a9aeb99fd04d56cd4b76ceb64d704f133208ba96bd0a77b900710e32d83615ed6b268afa22f05a2bc8b14505fdfb78be878db7f2b339
SSDEEP 96:nvk601JswpvWMoiVmdehNUp6TzEF4vzVfh8GiYqBrLTUWQyV+VD7AiEwb:nvkfHsGWMxNUp6TYF4vzVfhoYqVrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 af48fcc843570a912872621bfc835a031257122e339f5a20258b36cb0b431251
MD5 70c91a83441f76415dca0b0e83014b45
SHA1 fdd6cb3d9da8c2e940f58bc561dd2e751cb198c5
SHA512 3f4516eecf8bae75dddedfd65f5a0b5c5e0583f83c721c63ae7a201f3d4531c15bf724719c93473d5734e55c50704809b9ecba2871d65f12a400699781426dbc
SSDEEP 96:nvk601ZswpvWMoiVmdehNUp6TzEF4vzVfh8GiYqBrzTUWQyV+VD7AiEwb:nvkf7sGWMxNUp6TYF4vzVfhoYqtrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 2c00295a1d79c2578a5f933a9f9f593f2037120bd614c7f90ad38764779d70c6
MD5 d0ed741f1da02303f1944718bc2f756b
SHA1 a5187f7835e946f6862d035baa4eeb471cee32e0
SHA512 f8ba5b7a9b6c9106cd1ed590f75e0ed1302982d1555c9c0779f1d712c3b38cb1dcc5fe33613b777d66d82d09641264f547d48499917e394e7e300d39da9452ee
SSDEEP 96:nvkW01ZswpvWMoiVmdehNUp6TzEF4vzh8GiF2BrzTUWQyV+VDCAiEwb:nvkr7sGWMxNUp6TYF4vzhoF2trV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b971378e403ebfc8daa341844b873d3521131fd855ea287338c9e38e48c7dc4a
MD5 6cb2de5f8c9316c0bcff9cee001c5be6
SHA1 ec762f95472cb5172e9f1a11ee771f328a4920bb
SHA512 e96164a83e094892114ab395dc93141c70383605a2b714f529ec38de49fda2f2088dab7e170e2f07353a219952b475887e21238883626bbbb9b03698f9824289
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupm1Hfe2RUMMj2q3z2OMDCRK:A9iIxuERzA83h09RZxYyHnGyqaOMWRHq
MD5 SHA1 SHA512 SSDEEP

Submit Download