cd3a2f45e513cbf43503165f837338eaefc2c8ea98602f5f46f948212ac9a155

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 07:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
9fd5f990b0573d6a3e473ba9f3d6ae8b_JaffaCakes118.html
Size 42KB
Sample240612-hty2ratdne
SHA256 cd3a2f45e513cbf43503165f837338eaefc2c8ea98602f5f46f948212ac9a155
MD5 9fd5f990b0573d6a3e473ba9f3d6ae8b
SHA1 543f0a78bccad2fad65eaf19dab22e5daeb9247b
SHA512 ff55c54d252abf27d1fdbedb1350c4603d6e1116d8cedb5c1183fa685d8344ec429d60708d83293a15b6e3e73fa82fcdc4f621e4609fbab28812a3a1a3893443
SSDEEP 768:Mlk4NfQAyOwgiA00j+wsamde+MMAQVLVZPqcaSULZ/7ECLE7KT1Z+482EgZh8hs5:8k4NfQAyOwgix0j+wsamde+MMAsJZPqN
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2528	msedge.exe
2528	msedge.exe
4908	msedge.exe
4908	msedge.exe
2464	identity_helper.exe
2464	identity_helper.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe
2012	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe
4908	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4908 wrote to memory of 4380	4908	msedge.exe	80
PID 4908 wrote to memory of 4380	4908	msedge.exe	80
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 1336	4908	msedge.exe	81
PID 4908 wrote to memory of 2528	4908	msedge.exe	82
PID 4908 wrote to memory of 2528	4908	msedge.exe	82
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83
PID 4908 wrote to memory of 2644	4908	msedge.exe	83

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\9fd5f990b0573d6a3e473ba9f3d6ae8b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdab7846f8,0x7ffdab784708,0x7ffdab784718
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:1336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2232 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2976 /prefetch:8
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:1512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3340 /prefetch:1
  2⤵
  PID:5220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4780 /prefetch:1
  2⤵
  PID:5140
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5440 /prefetch:1
  2⤵
  PID:764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5272 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5636 /prefetch:1
  2⤵
  PID:5300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:1244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7000 /prefetch:8
  2⤵
  PID:5148
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7000 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6212 /prefetch:1
  2⤵
  PID:2808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:3772
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,7219662998732548737,9950410520037678779,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5344 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2012

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c9cd202ebb55fe8dd3e5563948bab458e947d7ba33bc0f38c6b37ce5d0bd7c3e
MD5 db9081c34e133c32d02f593df88f047a
SHA1 a0da007c14fd0591091924edc44bee90456700c6
SHA512 12f9809958b024571891fae646208a76f3823ae333716a5cec303e15c38281db042b7acf95bc6523b6328ac9c8644794d39a0e03d9db196f156a6ee1fb4f2744
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 a358de2c0eba30c70a56022c44a3775aa99ffa819cd7f42f7c45ac358b5e739f
MD5 3a09f853479af373691d131247040276
SHA1 1b6f098e04da87e9cf2d3284943ec2144f36ac04
SHA512 341cf0f363621ee02525cd398ae0d462319c6a80e05fd25d9aca44234c42a3071b51991d4cf102ac9d89561a1567cbe76dfeaad786a304bec33821ca77080016
MD5 SHA1 SHA512

Submit Download

f_00000a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 661a3d3bc4063253fe0b8fdf3c0cf5335f96aa38effd1d137d4a2c7eb77f628e
MD5 76f4e6118817109b445ff85dc2b21e60
SHA1 17290ad62da6400d0c39f7942b5723caa4efc658
SHA512 12ad01eed9a8c490db96f2116a0634f69f3461b3577e9d0286bbf104974a86c4ee481a84fd6aa3895977545314c8cf21f4e14b5cc19dfdddd2f8abe6618b9ea0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 ed445f36999c68cf926c19173463d58f429b7743c64d607fab5e1c49a7dbaaa3
MD5 b23bc2f3213271d5fc22c731ace562c5
SHA1 922f47b9da91679646f494fbf66bdb75c341c432
SHA512 528f1a13c9d0da84c8ce3cc2d03db3bcfd659693eccc538bdec646c1eda2196aec716b1488c079b2b38fe0363e21b4996c9eb0f026d5955e8743b3047dc9f88c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 eb85fb5c1b52c36521786d5ea861b6160cbaabe0b84a201eb995d7873e25b6eb
MD5 0d74d9711d5faa79319f9651f786bdc7
SHA1 7d324bd4bbcffc0ba032652c97890842daa69321
SHA512 2073a727c82949b0b77b9b03bfab2b927842c099ed99a60a64e569f504daed7960335e5487899553a9f58b2de55d35c2545dcea00af902a22972c2f3607abb30
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 b4c3204adda713fc1423ecd24384702f88f1a1569349cff7104232ab8b0ba6e1
MD5 00b61db580a89f255ade8deb649277c0
SHA1 46655e2b04f87a355cbfe9f5505a25e8cd5c61ae
SHA512 e2209d73e00dcd5562127411d4b588872ce008ea338e4e59ff541aae40c0f30156b0a3696ae64092bdcd5f648205dbd3e77ce1119f1e39c43e4897f2b13d34a3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 90556446a462e42032580421cd8cc968dd966c69fe5c1304b22c8c74a78715d8
MD5 f89e70ff4384947d5fdef50d9bce1a91
SHA1 c7bf70cdc9daba1f7289f05ada69094773338cd9
SHA512 9cc0606065944b9436b4ec9e6b9d6e2fb51a5cc877e00ba686af4243ebb1d83e890a48d7252b9f11bb875a60d353729bc708168822c699295a1aea9ededae0b8
SSDEEP 192:n8ksBhAGWMP5gbiaJLn6U5+qkGMf2nWrV:n8BBhdWts
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 183e61180a50100e076517bcaf5bda8eccf222c708f5e82ee28e3ba1b79b25d6
MD5 009997b384dce40d1c2e417a76fbbb97
SHA1 8fc23ece7b4a4ef137194c29d2ccb30d5f2d2969
SHA512 83002ebf1edc69b8aa85cac53c693f7e99f8ae03e58b9da0746952db4ad309b7c99f9edb115a80e5df1bf416554a4cade5a000807a09815b3ca660f76963448a
SSDEEP 96:n8kBRw1n6/wpvWMoiVmdeHginWUWQyV+VDCziEwb:n8koB0GWMXnWro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 687e05cb6dfe9ec0ad9576ce023e981788a25124eb99eb77fb025c0a7f8f3bf9
MD5 8b5c894df06d1aa79ee741202705b6b3
SHA1 c8d437710b98d9e60b04fdc0b7dbe1f9671d4b85
SHA512 ea867a1628daa55260431d9a12ad928aca229872f5f9bb6f68bf96c0d65bf06c91edf7087d2fdfa1a93187320c2dc1a6fa7caa6dc58a975c6b4d019a85d200ec
SSDEEP 96:n8kBtw1n6/wpvWMoiVmde/5bdLn6kGMf2ginWUWQyV+VDCAiEwb:n8ksB0GWMP5bdLn6kGMf2nWrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 538B
SHA256 b85a4818b442f3533c9f7873ff1b6576515f09e5ac337c7600f585463228df47
MD5 a2f4817f303fdbc80f5eb1b114c84582
SHA1 53aaff3b4dca3ad2ecb23ae439a3804b8fd62133
SHA512 e90ea9691fc50d32bdb46b3573ae667f98e9c38d2d790808e27b1cd82438ffb1fcfa0e79d2521f883a3b513fd18429f965901bf22c991c766199c8aba2ad0238
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57be7d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57be7d.TMP
Size 203B
SHA256 4c6ecf094ca431fb7eb749ed9e3e6be242252d5f51abeadd361ea6defb975282
MD5 0beef272510f1f2bec8a0524e3dd3f36
SHA1 920d330e48f956de4c7fa16503c228192c01b955
SHA512 ec70888cfe278d7982bb96e2131584a2f5432402804e0e58a37011945f98d528465945bb1df5a79436136d29c68f2c728469d0a5caf9f61c7eb4afc244711bd7
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 b0f2f987bf0c72b9df62e6aaf1373d511fada6fb79a4857e6c73b37645ee100b
MD5 ae80acf2678ce6ca16be2c1e7d433802
SHA1 32b31f76bc4f3e4d2cddad5822c92706977b8484
SHA512 f098826a6a224bd88358aced8ce737666ac4dcc10db0774b6c72f25bf35040a668999c3786e601cf7362dbfe87b0668b806c725094267d0d624f51c41d94547e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupO3e2RUj2kN3z2OMDCRHqlN:A9iIxuERzA83h09RZxYO/yNaOMWRHqlN
MD5 SHA1 SHA512 SSDEEP

Submit Download