fb58f2f1dc99913431733f0dba43c948861319b7256d40abf27711ddcf172eb1

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 09:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a4cb47af7b4984ae66c23a6d9b0a2168_JaffaCakes118.html
Size 137KB
Sample240613-k6bhbswell
SHA256 fb58f2f1dc99913431733f0dba43c948861319b7256d40abf27711ddcf172eb1
MD5 a4cb47af7b4984ae66c23a6d9b0a2168
SHA1 03fec4f72af0790094d88615c9ec2b587a5fbfde
SHA512 780f7da30f681598acf403ade67b29c8ac21ae91f65aac62945c6f485f0a09499eb767d764165a37094e1c0b35a7be3927d3225ea481c946ef13a076df3c5f26
SSDEEP 1536:KJp49RUHlgvKaXUPawX3ehH6uAYgThPXYxXgPtAEVjlnn:Kz40pHPp+16+gThw5gPtACn
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3060	msedge.exe
3060	msedge.exe
4632	msedge.exe
4632	msedge.exe
3436	identity_helper.exe
3436	identity_helper.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe
1920	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe
4632	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4632 wrote to memory of 3084	4632	msedge.exe	81
PID 4632 wrote to memory of 3084	4632	msedge.exe	81
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 2024	4632	msedge.exe	82
PID 4632 wrote to memory of 3060	4632	msedge.exe	83
PID 4632 wrote to memory of 3060	4632	msedge.exe	83
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84
PID 4632 wrote to memory of 4440	4632	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a4cb47af7b4984ae66c23a6d9b0a2168_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8072a46f8,0x7ff8072a4708,0x7ff8072a4718
  2⤵
  PID:3084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:2024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2088 /prefetch:1
  2⤵
  PID:2232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:4696
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5140 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1888 /prefetch:1
  2⤵
  PID:916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5464 /prefetch:1
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5816 /prefetch:1
  2⤵
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6148 /prefetch:1
  2⤵
  PID:3788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5804 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7040 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6680 /prefetch:1
  2⤵
  PID:5068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7148 /prefetch:1
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4120 /prefetch:1
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,3734248248236491333,16186124300134629853,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6488 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1920

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4636

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

f_00001e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001e
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 b06bcc1a1e75ba09bd4a66afaddf048799f7079e44205fa0a44555b1164c626c
MD5 85537cf389a6cfd40bb3ed02bf7c8030
SHA1 5f3bb81c8a809fdaa9dbee7a105d75c2f0580929
SHA512 c21744b93ddc66aa92d82f32b7b7c153fe6d342de502d0c1bc648c9ba1ba83c880602f9becb3afcb7ee815d89aa942bc5aaa46e407a54c69c7d73a9b86076912
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 70b4eb29aaadffdca61c1a8d02ae3aba0eb9855ffe0de95857e99fc3fe115b3e
MD5 2573e7ce184cd7e73afa6bcac22924b7
SHA1 b0e48487db33ab48e1173bd9d0831de464b40e80
SHA512 02945666d62e47a9eafd47e2773709928e165c68b6b8673ff1610d581380aaed82ae0ee293e652e2a7b103b6863360fb472a5c8cda595adbb4232ee0076d30e8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 d9f3d82096f5949edc178d39e7673dfe15454311adcec84935a8af45aa840034
MD5 50ba58575f0e58e84746577eba0f601e
SHA1 1ed532363c373408b0b83a647e495fe3091c4d86
SHA512 f6c91a97d89aa773cf1ae61bf721578651852332c607de4172d8702a6a7343218d4b1557614526d2622218a7fdbfee139546b12213d2997602f5caef363ed05e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 cd1f9e66bf13d6979613d86ec068f18f9be44404ebb33023158e44d4e2150bf4
MD5 6d2eeeefe53e769bad11cd90451d2f15
SHA1 752feb6e572b726022f9877f685e22276e82ac64
SHA512 70c4e358a51506cc89f5aeecb880a30ea21016c5a11c686239fbe37ff961c9e59c1053dab1326ad78cbd57d9caa38c988bfddac3b3102599827465410b51a31d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 af6d6de13a3a3d9a0a8ba40778bcee1ea9b79666c2dea6816484ba09b2337fe7
MD5 3f74e8d41e4e6067a06391c779a6dbeb
SHA1 0d72fa76792684f7323ce71d7ff05d629b5cedfd
SHA512 9a94994ec4b035a9c6f29c29c9495d446eca916986d6b4e3ef2ffb3c6547c027cfe69ada129929432bd2a2d86d5eb51c4e6748c535b6ea4cada0ef690e107c43
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d3d4da2c7a7399ea9004422676455b6f80038c677453a480711e937373b20ba8
MD5 4657091265b903835fd81a69bd85d6fb
SHA1 3248c7515165db3442bb750cb794493f95222e21
SHA512 98bbfac642b016658913f35c1f689de1591a78599525ffaeef6c902f17ae658adb1f65728c3deaf6e4c2cd82291c085a275a54596316d943d483e2d7fb07fb52
SSDEEP 96:nrkloxm/DQYmqp1gemwpvWMoiVmdeH1DPUWQyV+VDCziEwb:nrkPIGqemGWMXZro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 4ccb000cd85dddd0ceba31e48ef067d330815db7b799270fff5f97ae187f5807
MD5 0e7a05ebb096a2962543a1a732142efd
SHA1 d3f584dca4bcae73de5dd939b549b793a8607fb8
SHA512 208d2568130be49be7d586663fcb852aeb2dc4140c90bec0b27bab84c172190bbcf1bbfbe6d92cf547edee1cade12e14ef7c288b656b4339b02f52132e7261d4
SSDEEP 96:nrkloxm/Dnmqp1gTmwpvWMoiVmdeEYcIs3kFbOyQN21DPUWQyV+VDCAiEwb:nrkP6GqTmGWM0YcIs3kFbOyQN2ZrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 9084e6abd425dacab9eeda3e13a067c6d863bb2260e855e9990d76d3e0ed8aad
MD5 eeac8ac457b3114ce2b2ff75a5dccee1
SHA1 6d97f0979141f754857416be034bef048579d983
SHA512 ab56db80baa6ea832c60be8ec3d84c43885bd5731ad51c6267bf774af575ed0f5deda0347e02dbff19f32f26072f90f718d7ad9b4df741e298cacda27a2b348a
SSDEEP 96:nrkloxm/Dnmqp1gemwpvWMoiVmdetDQ21DPUWQyV+VDCAiEwb:nrkP6GqemGWMdDQ2ZrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 669ad694247295112a8dd2e12796a1a6a81d775e5facaa0f671f7b8649b2f95d
MD5 f92a629cb24a755a62bfe2e076181493
SHA1 0d43f46350c8f34b1faf1c5806f7fab6f4d360df
SHA512 7b55edac0cd43a016183380edefa990929dc0bbf9f22592481485a818291e98dca77aa9b6dc1c304b414cb8c04483fb7ea1253bb3e09b2d68e899eadace97d0f
SSDEEP 96:nrkloxm/Dnmqp1UTmwpvWMoiVmdeEYcIs3kFbOyQN21cPUWQyV+VD7AiEwb:nrkP6G6TmGWM0YcIs3kFbOyQN2grg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 ccb631dbaf1e69aa5a32a721be370a8cca6d383bff83e83147368b322c2babd4
MD5 8103e0edf95ad00f7d27fd819abbfb3e
SHA1 d2764a0b0ad876d08592a0cacb3e3ee2db9edb77
SHA512 bf4ebc18bed79dd0dead92832009d285712a9f8140a19f942d7587da4dd55fdb7a5f7002f14e3b578817efbcbd012c2671e7c63b3ac07abef9c6892da7d2b36e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupqAA/e2RUHjxSRsb3z2OMDG:A9iIxuERzA83h09RZxYeH+wGbaOMWRHR
MD5 SHA1 SHA512 SSDEEP

Submit Download