08be4962f1bed4f86a1953550e9fbd5fbdbe07f1b8d64586e88892eee78f1014

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
12/06/2024, 15:28

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a127c477d8707028bc592f060aaa70b5_JaffaCakes118.html
Size 175KB
Sample240612-swd5gateqj
SHA256 08be4962f1bed4f86a1953550e9fbd5fbdbe07f1b8d64586e88892eee78f1014
MD5 a127c477d8707028bc592f060aaa70b5
SHA1 d89a50660ea69f0eaff0ecb0ae1bc4c69e215004
SHA512 cb66b03b1d31b7ab64287e933632ba2bc1c2456e5365147ee463e4eed8abd4aa29c7831582ffb2d4ef1b16e20d0114d2c3073b18625b3462009c559385f09af5
SSDEEP 1536:SqtH8gd8Wu8pI8Cd8hd8dQgbH//WoS31GNkFCYfBCJiZL+aeTH+WK/Lf1/hpnVSV:S9CT31/FTBCJiiB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
4808	msedge.exe
4808	msedge.exe
4912	identity_helper.exe
4912	identity_helper.exe
5072	msedge.exe
5072	msedge.exe
5072	msedge.exe
5072	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe
4808	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4808 wrote to memory of 2388	4808	msedge.exe	80
PID 4808 wrote to memory of 2388	4808	msedge.exe	80
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 2708	4808	msedge.exe	82
PID 4808 wrote to memory of 904	4808	msedge.exe	83
PID 4808 wrote to memory of 904	4808	msedge.exe	83
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84
PID 4808 wrote to memory of 1156	4808	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a127c477d8707028bc592f060aaa70b5_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe808046f8,0x7ffe80804708,0x7ffe80804718
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:2708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2900 /prefetch:8
  2⤵
  PID:1156
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:5104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:2136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4624 /prefetch:1
  2⤵
  PID:4516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4620 /prefetch:1
  2⤵
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4672 /prefetch:1
  2⤵
  PID:2088
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4448
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5880 /prefetch:1
  2⤵
  PID:436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5956 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2116,15409478726396204741,16776255934644744842,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2088 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5072

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4748

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1672

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3956

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 e6bbd4933b9baa1df4bb633319174de07db176ec215e71c8568d27c5c577184d
MD5 477462b6ad8eaaf8d38f5e3a4daf17b0
SHA1 86174e670c44767c08a39cc2a53c09c318326201
SHA512 a0acc2ef7fd0fcf413572eeb94d1e38aa6a682195cc03d6eaaaa0bc9e5f4b2c0033da0b835f4617aebc52069d0a10b52fc31ed53c2fe7943a480b55b7481dd4e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 2ebd5229b9dc642afba36a27c7ac12d90196b1c50985c37e94f4c17474e15411
MD5 b704c9ca0493bd4548ac9c69dc4a4f27
SHA1 a3e5e54e630dabe55ca18a798d9f5681e0620ba7
SHA512 69c8116fb542b344a8c55e2658078bd3e0d3564b1e4c889b072dbc99d2b070dacbc4394dedbc22a4968a8cf9448e71f69ec71ded018c1bacc0e195b3b3072d32
MD5 SHA1 SHA512

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002
Size 46KB
SHA256 0f82a04bbfd4a4bf5f3d302fc32f39bbc2ed655ecb7430f32828d0e4814da511
MD5 365e6cacd993aeff945e88baceb2f327
SHA1 46b1169f2e2c61c576e72a5288233f9ff5b0ed2b
SHA512 65cf29383b299f54561f354b65cfb2e412a49d9a009dace0197962fa0d5a86eade5bc1c08789e6f4d271bcb3d97064b3cfaf540ad183baa5c462ffb8d7cf6769
SSDEEP 768:k6QvOHyj9ttAsrQ8BFgLSrUmDEnnMqGxFA4jFwJj+Qp9mGJn7e8u:kDGHDsrQo4/cFwJjfp5e8u
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000003
Size 19KB
SHA256 fdd1e82d8f9ab1928e66ce1336692404dcd4b5c4fd2182b47da9180f122cd186
MD5 2314b04aea09605a393be0bf3510b6b1
SHA1 a3dfc8678fb22be182d3a5304b71806091fe4133
SHA512 fcbd1122d660bfdb0a8d66ada9c7ad0e71113879aab0f01af34bf7ae6c82ed7e71f30e5d666ae5a1008e5e18c345670e4db15f8505d651719eb819d893649f91
SSDEEP 384:+6FIcWciW0HHw20476LkztRe6Wf8H4oxbJ/4RmM8P:Ic/I+kze6Nbjh
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000004

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000004
Size 96KB
SHA256 c7e12d09da2b6b09dbda788638c63999ee8b1c2d294476a4ab13ee20ebc941a5
MD5 8b944c3fd61c9d39d38ea7c969b54947
SHA1 67f1d9d04638f1f1e3bf3c195c0d12343182d50d
SHA512 3cb6464d87f793fdfecd00481fbdb93eaac3f2c1866e29ccfc8a5147140d707a4cadbe323f7db16fbd072bb053c4c9511ec83a7e849eaa592073073fffa74c7e
SSDEEP 1536:gVoqZiyMY0mf1AmZV2FoIV+ATPCvnodMmFAqznuhhmQ3w8BAWDA8eo8RNyyFvVmS:gVoqZpM3qL/Ob+xSuh73w8rDu5NyyF5
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 384B
SHA256 04be9432de32c872bb42c540ddab272e147d2abb548ffe4ca5ee24a99c303323
MD5 a9763ab71e71d600a9496f6c12bd6611
SHA1 296a1bea5922444677875c4fc858755ae9b1add8
SHA512 128651919c0b3685e0ff697a2502067fbd7675989b1f020f533b2e53b6c2505ccdd875055ba37861748f2610dce6d13dccedaa5b1390288886f12a045af60fca
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\wasm\index-dir\the-real-index
Size 72B
SHA256 96f54af9da61b63a7709819566302580c4a4b738468147e5b8f55b4c3bd4d4ea
MD5 4a85776bfcde22241297473374624a52
SHA1 0db1e16c2d6c9b9009e3ca37291a34ea42085287
SHA512 904eca27e4aab34f54b6a9a76b375722e615b32cf6e1b75d283083481361eb4f761f29d31b876d2a3603f0c76a10e72a0caf9a4ba4eaefd23ec7ca116f1ae7de
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 cb1c6a77e30dc63a1ed9c7eef4e0c549c9986c9337ba3c313f856ec4206e2914
MD5 71aedba12dbe5ba7bec783bf1a937654
SHA1 ae8edd5ee489b5282ece963a7a10dc4e1f354978
SHA512 947301621715ed2750722f780ee40edc2fc18aeb64fe1afc2cb9a3b7faba407c579c2cd7067c858911176a107a3b388d6b1f92b9d21b06f9c7bbf688959722a4
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 1543b0908fe2d3182e02adf02ac6ef11add6a1a3a9a99d4b43aede0149efa482
MD5 e876f2bb53aefd5a14b48ae1ae8f97a2
SHA1 5fab14113515da082cbb0f8d676dc2cf66c4757a
SHA512 7efa6fef477495741f871d2f64799b1d47a7d9d1a48ca846854a1236b402446ab863a10838205defe1c45b7be2cdd560a0f6299b0567842ce2f09368655c0300
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 83afd782fae9b5a47c294d3ddcaa447c1a738543cdd8e1b4b7c9f215460ad1cf
MD5 be7d2f109f9ff594df8d3142f80e4902
SHA1 50489eead30a65bbc7a74cf290106fc62a94ad57
SHA512 e92db945445a5bf2f5e56cd1d39128420cdd9d9fdd98a76f4378207e63a1701dfa497333575b8c0c306f702df83f57495344943320a519963c3a4ea1a290909d
SSDEEP 96:n4kVtYQ1fGwpvWMoiVmde0VQR1zEIylErgEqkgC22Wf6+UWQyV+VD7AiEwb:n4kIQJGGWMEebYIylErgEqkgC2K+rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 269265928af747e7a7f9fae87b55c964c7389e8d66c3425208bc751e3f345e80
MD5 e026e62ca486f33b1130d1f613b55128
SHA1 0a2fde931e5b36130d41cfa835632d970cccc680
SHA512 464a4b7c10125ebc48873822ab07483171395639326db9fb0dda24332d283d76d86540f61743e525b4ad209c153a7b78e01571f19e0bcc32b32c5e942c1b8c42
SSDEEP 96:n4kVRYQ1fjwpvWMoiVmdeH2Wf6+UWQyV+VDCziEwb:n4kkQJjGWMXK+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 78fe477cee52c302fa7696788f4d2db36069ab1e3d707a83ac70b5c14bf52e0a
MD5 5e4436fd29a89ae19f29fe452e1ab65e
SHA1 8878b96b2086b68b94409cd9189758106823ec12
SHA512 601fcbc779a43da67470e8f1bac4c0b83f4dd936ed73b99364df2d57163de961fc1231b674014a85a795ffcd0b46383c9c710a84fab96a359bab281e8e9404a0
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupNHf5e2RU0hh/53z2OMDCRC:A9iIxuERzA83h09RZxYhFz/5aOMWRHq9
MD5 SHA1 SHA512 SSDEEP

Submit Download