21fdfa1fcf04894452d394fc25723b15106083ea118b59903cc5fb108f6e8328

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/06/2024, 15:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
923de2a4545cc1379a4c71fec81b000d_JaffaCakes118.html
Size 53KB
Sample240603-spw2psaf4w
SHA256 21fdfa1fcf04894452d394fc25723b15106083ea118b59903cc5fb108f6e8328
MD5 923de2a4545cc1379a4c71fec81b000d
SHA1 a0161766865ad359f4307c8a0d14ae800b307e69
SHA512 092f0000fa469b2be344f2f8c826da7386e632f71a9d2e3bed43dd5a623d2d23388c4e78d8b2ebc986f00de5a4bc1cabf52fb9ca1c636e6605d5780dcce622f8
SSDEEP 768:yftFSw/TMXIqmnYVw5Iw9+p5K4EW+KYbTIQU+IaknXtcpjEp:yftFSw/TcIqdVxwV4EW+KsTIQU+IQjEp
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2244	msedge.exe
2244	msedge.exe
4556	msedge.exe
4556	msedge.exe
4016	identity_helper.exe
4016	identity_helper.exe
5664	msedge.exe
5664	msedge.exe
5664	msedge.exe
5664	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe
4556	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4556 wrote to memory of 3076	4556	msedge.exe	84
PID 4556 wrote to memory of 3076	4556	msedge.exe	84
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 644	4556	msedge.exe	85
PID 4556 wrote to memory of 2244	4556	msedge.exe	86
PID 4556 wrote to memory of 2244	4556	msedge.exe	86
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87
PID 4556 wrote to memory of 4296	4556	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\923de2a4545cc1379a4c71fec81b000d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff86ae746f8,0x7ff86ae74708,0x7ff86ae74718
  2⤵
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2692 /prefetch:8
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3184 /prefetch:1
  2⤵
  PID:2488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4676 /prefetch:1
  2⤵
  PID:3188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4816 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4992 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  PID:680
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6160 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4180 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4880 /prefetch:1
  2⤵
  PID:1608
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2148,2429222912498198490,3173004148426766604,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3972 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5664

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2020

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

8e757f02-f25a-4ffd-94e1-1d16f5c61be6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\8e757f02-f25a-4ffd-94e1-1d16f5c61be6.tmp
Size 11KB
SHA256 2387b97c8ab912e62c640ba38444dfdc08c031a919ce2809b469d0e7324a305c
MD5 ccb5e42707785bb276af4efe6aad9c1b
SHA1 0f0fdba61bf0bae8892ef8390e8e01c652553c0d
SHA512 68b8bc2f54781de4a32565e31e7fa73039b1387876cba4204201569baf66d84ad7affab4d3619500018f0b5d14a6b10c741e0f2df2ffba986b1d9b27ac67a8e7
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupt2e2RUWaRuV3z2OMDCRHq9:A9iIxuERzA83h09RZxYtYTVaOMWRHqlT
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa
MD5 ce4c898f8fc7601e2fbc252fdadb5115
SHA1 01bf06badc5da353e539c7c07527d30dccc55a91
SHA512 80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1
MD5 4158365912175436289496136e7912c2
SHA1 813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59
SHA512 74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b
MD5 SHA1 SHA512

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000005
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 120B
SHA256 debb8d87ab40b61628841d9eaeaaae6b0b9a88efd1ff74d8b662558b0f933bff
MD5 e64e644744dc32435dcc2ec01410a94b
SHA1 a33d6137d42119f7b1aa8170e594739b0e231b5a
SHA512 080cc78f7f1790cc975fc77d174b4ef05f8d4638544be582f0126dc841b9d33afa77af202a215c9a0996f6a3a6bce3796f4f025591da577c96374d053a0279e6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 4d01904b3015da75b8bdcb0480cc113a2e02169e4c9a3b508f01ff58dab6201b
MD5 c0aed4dfdb959b9b5010843463cada97
SHA1 50953df3a582649b24a3b6d7e46446efe22334b0
SHA512 6bdbdab77635ea1eb26a0c6739a7c33166ebf177cbb325866d97a12b36f6d8e0285a6522447cc0c28339bee76e479cd14d4a3c78faa9c90a7392027a1992165e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 bcea126ceeac97dfeadc62e9cde98afe5bebd9fbed60f4e6f659b028ba5a3feb
MD5 f8510546aff33a56726ae483afa03ce7
SHA1 b8385ef9e40c92e3d3fc28d44c7469368ef2204b
SHA512 5bc57d85d1540c3bacf12652058eba606c4bd460239291e253841fd1609dd1e5525952b0d350cf89c10c0985ba0d0face4acd6566b2338c28688b184efbe86d6
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 96ada47f83becab7cef80c653a71aa88236c232fa65ac2f471c69b299b49db55
MD5 d91b01c2ae58c19ccf40494495d84750
SHA1 c4fb80857c1957ddf90526d29c62443664147c61
SHA512 c76485d23520c7c61e46cade1714b2ab86665d6f6572225f70bcbe2f71a88184dea9a7275f28aab54d1c2c66a5f6f1ac6ddb5065e66256c6fe3c930a47cedfff
SSDEEP 96:nEFkf0w1GegjuwpvWMoiVmdeHvSSVEFMtUWQyV+VDCziEwb:nWkn3gjuGWMXzEFOro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 f12e23eea1977dafb10b51e9b8cbe29d44ea0785d5387211b22c9792e5e34993
MD5 945eedc3cce26320f1b59daa094c8668
SHA1 cef6ccfad9543a355d0fd3db19c048a4868c047e
SHA512 d02e5f10e6b0d0ac33d19f86b5e4e2ede6843cc545458ef7d35b829fc6ac17d391e1468669713726645935d1438f7f7be99a9b00abfc685735e1d8f24d498269
SSDEEP 96:nEFkW0w1GegjuwpvWMoiVmdezKgf45DuLR92vSSVEFMtUWQyV+VDCAiEwb:nWko3gjuGWMjKgQ5DuLR92zEFOrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 567c0e8cbddcaecc5f2ab287432c0382bb5cb43e49f29504df389174ec77f299
MD5 82df49ed0af110c241fc1fa4c7a8a5ea
SHA1 c5968a1a2b81f847342d0d2117a850e5b7e2b201
SHA512 827d3b92fd64ffaa99ae10248ce6e64cb012c209fedb7a3cb9367fa433b20f5bded6fb857431eeaf6bacdcefa9a6fa0a84fce737da0f317d2af61d5d653541e2
SSDEEP 96:nEFkW0w1GeyjuwpvWMoiVmdezKgf45DuLVfd9lK2vSSVEFMtUWQyV+VD7AiEwb:nWko3yjuGWMjKgQ5DuLxd9lK2zEFOrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 ea78cca8aa693aaed5604fc38b2c45aab9470f4daa3b9001d23584cef8c4e2f3
MD5 068ed2d913a521f39dbbf4e1a2aad3ce
SHA1 d9fbc9c1692cf9579a9244c416e54ff4d5cb9209
SHA512 0a4024b14a706493188a083161452bf8e94af383de14a2a2c089cbe50d7fc43d149516ee0eafaeed51bb270fd4037bc05e369749fba00231734799b2900e0c4c
SSDEEP 96:nEFkW0w1GmyjuwpvWMoiVmdezKgf45DuLVfd9lK2vSeMVEFMtUWQyV+VD7AiEwb:nWkobyjuGWMjKgQ5DuLxd9lK29EEFOrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download