3b962c01556a27c86990152a451e12f2abfa7a38b097f4685d40eb1cdd95e1a9

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 22:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a2b312d0bbfd713b814efad7eed679ae_JaffaCakes118.html
Size 59KB
Sample240612-2d6lfashpe
SHA256 3b962c01556a27c86990152a451e12f2abfa7a38b097f4685d40eb1cdd95e1a9
MD5 a2b312d0bbfd713b814efad7eed679ae
SHA1 2aef94959366d1915288736846b61c9c7bacf820
SHA512 5e5930277870fd36f9a93f252a7544115e0d17c946dc3f3a768f06314faa7ae94e640f7ea838dad22171ab9e8b869866aafc2c18e520264333a11ac5a92d86db
SSDEEP 1536:QIP7OP71F8/uQGk5ZtK3jchuNl/f/I8FJwnzaic:QIaH8/rGkztK3jchuNl/3I8FJwhc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2120	msedge.exe
2120	msedge.exe
2800	msedge.exe
2800	msedge.exe
412	identity_helper.exe
412	identity_helper.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe
5704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe
2800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2800 wrote to memory of 2776	2800	msedge.exe	82
PID 2800 wrote to memory of 2776	2800	msedge.exe	82
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2308	2800	msedge.exe	83
PID 2800 wrote to memory of 2120	2800	msedge.exe	84
PID 2800 wrote to memory of 2120	2800	msedge.exe	84
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85
PID 2800 wrote to memory of 1184	2800	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a2b312d0bbfd713b814efad7eed679ae_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcfd3846f8,0x7ffcfd384708,0x7ffcfd384718
  2⤵
  PID:2776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2112 /prefetch:2
  2⤵
  PID:2308
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:1036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:3220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4692 /prefetch:1
  2⤵
  PID:2604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5644 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5824 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5948 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5376 /prefetch:1
  2⤵
  PID:2020
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  PID:3572
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6200 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6196 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:5264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,17887955331164535569,816007809156429102,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4988 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5704

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3616

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3556

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 a407145d094f5f5a66d091552dadbb0d806aeb33eecb5559918c3745db63b783
MD5 638639f645ba603b2b5494885e817287
SHA1 12d7220c84398d486daf4e081ca66d1da6717e1f
SHA512 b3ae25bf0179a3238626530f6f7dfbbc7c5b2ef9c3c23af399dd9837339b0bbd02af03b384bd2a63fdfc15660b245d5996042a840fafd7c6c20c966c85797e68
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 bf379d4d3b2fc7459d031ae6d8a619616927cd0108ebbf22119f791075da03f9
MD5 7639fc8442e25fa68922e8101aea9134
SHA1 4df888f9a43279a7d359610e44eb78607f11c9fd
SHA512 602e52612986db0c60ee4974d6f8efa54d9a3d0bddd9d3b26e3702da8f3292fbdfd3c33df63ddbd476a3790dd315f6a82eba56f054d882264ba9b18e0f97928f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 02c5b88874ab5cd44625eadf98bb22432dc9b9c8745b6e9cc427114e0b8ee413
MD5 b949549ca9669a4ff18b71e534cf52b1
SHA1 62f1c611d2205c1ad74de34720669ff59b364d8a
SHA512 c8074af5f5f58a42be9c9db9e2585256e7b14e161a000951deecf53ef73e4f401952c3d303e30d5096a8bf957bf499f3f84048f941a79ed301634ab5b653084f
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 9c6e3e2d1e2a6abc31517f320962d094ef4105c04520e2d8c0a5b00981f54b89
MD5 a4d9f2d7dbd592b75b7ac6c060af6a21
SHA1 f2f331ae2b921dc6a9e14553d00bd982c4478a56
SHA512 4f82faaf7cb5b446bc0fd811d532babaf2d780f59c26a582da6f684c87579fef12ba35ab07dee237effa056ddcc776d49fc2260442182efccbd0bb67aca05383
SSDEEP 96:nwkVRCL17+mwpvWMoiVmdeH1DP2UWQyV+VDCziEwb:nwkEp+mGWMXAro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

df8d0c40-f005-4a5b-bf21-425f484eadd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\df8d0c40-f005-4a5b-bf21-425f484eadd4.tmp
Size 7KB
SHA256 69c3117baf90b8021bb42d09c57823fb887b19b2353620009b1941501988a55f
MD5 de39e448c793733fada2e044cedb4798
SHA1 eee0b21d3dde11d9bb2354fa9011f7f04ee605e9
SHA512 21b1334abf0deb168d9cb8d5dd65cbf6590ea8bf5275cbfc858cb8500e50be6600d55a7ede9e26e7ea6151790be600ce0462e53b807e11d69485bc2bc754dab9
SSDEEP 96:nwkVxCL1HmumwpvWMoiVmde2AixptXtpCY/wzQyU21DP2UWQyV+VD7AiEwb:nwkQ5mumGWMmAixptdpCY/w8yU2Arg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 6a0890f4b3b71dc1072c15ea2a13ca30b5154c32b42e5e2e494ae77a4565b1d1
MD5 f034a50137387816027d7d06d0996da5
SHA1 eeae0fdd19be568a12085cb40d48f8d0165128de
SHA512 32eae909c7c3e84a673d8cc6cc4cd00124f4734ce75213ea680cbd1d747b14767955d402585d7a08c5840622fb249459f65f0d7accba50cdee222f6836a64525
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupN1e2RUbSRsw3z2OMDCRHqB:A9iIxuERzA83h09RZxYzpGwaOMWRHqlL
MD5 SHA1 SHA512 SSDEEP

Submit Download