cbc64306da8da964af2a11e682aa5ffd12eca79041078cf39cec258c4cbe7f9a

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
13/06/2024, 08:33

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a4a6cfd75f72acf0ee0c59a24e6330b2_JaffaCakes118.html
Size 197KB
Sample240613-kf74ls1ekc
SHA256 cbc64306da8da964af2a11e682aa5ffd12eca79041078cf39cec258c4cbe7f9a
MD5 a4a6cfd75f72acf0ee0c59a24e6330b2
SHA1 0483fc14d8ec658795f45e90bccb482898148a1c
SHA512 47ce104e7613ad4abdfdf54c9bc454016adc00abd3b1aa7581f50ce4ab5d71b20b0e1f2f4aec6c565a2633ba19af9d7a2f397709b329f8218e8d54d12d089e24
SSDEEP 6144:Z96DOIII+3G4k5QhL8atVLTiVQ5MIsuQyf5bTM+MdBXpKgXpgx4t42O9mge/bE6y:iODt3G4k5QhL8athiwMIsuQyf5bTM+Mu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2768	msedge.exe
2768	msedge.exe
3016	msedge.exe
3016	msedge.exe
4612	identity_helper.exe
4612	identity_helper.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe
3016	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3016 wrote to memory of 4152	3016	msedge.exe	81
PID 3016 wrote to memory of 4152	3016	msedge.exe	81
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 1660	3016	msedge.exe	82
PID 3016 wrote to memory of 2768	3016	msedge.exe	83
PID 3016 wrote to memory of 2768	3016	msedge.exe	83
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84
PID 3016 wrote to memory of 2576	3016	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a4a6cfd75f72acf0ee0c59a24e6330b2_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa993e46f8,0x7ffa993e4708,0x7ffa993e4718
  2⤵
  PID:4152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:1660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:2576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3256 /prefetch:1
  2⤵
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4908 /prefetch:1
  2⤵
  PID:2132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5240 /prefetch:1
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5392 /prefetch:1
  2⤵
  PID:2004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1856 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6680 /prefetch:8
  2⤵
  PID:3448
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6680 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2308 /prefetch:1
  2⤵
  PID:4592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:3968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6008 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6128 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2176,196525075608811879,469395088478607134,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6796 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1788

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2460

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4292

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 830f394548cff6eed3608476190a7ee7d65fe651adc638c5b27ce58639a91e17
MD5 81e892ca5c5683efdf9135fe0f2adb15
SHA1 39159b30226d98a465ece1da28dc87088b20ecad
SHA512 c943f4cfe8615ac159cfac13c10b67e6c0c9093851dd3ac6dda3b82e195d3554e3c37962010a2d0ae5074828d376402624f0dda5499c9997e962e4cfd26444c0
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 8c08b0cbceb301c8f960aa674c6e7f6dbf40b4a1c2684e6fb0456ec5ff0e56b4
MD5 56067634f68231081c4bd5bdbfcc202f
SHA1 5582776da6ffc75bb0973840fc3d15598bc09eb1
SHA512 c4657393e0b9ec682570d7e251644a858d33e056ccd0f3eebffd0fde25244b3a699b8d9244bcdac00d6f74b49833629b270e099c2b557f729a9066922583f784
MD5 SHA1 SHA512

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 cc7b7b615c120f29d8063bb40eebb72ef7b5488f0f84c9e0429b4474c6b5f049
MD5 6793fb4d1bd83c0438e9a237f14754dd
SHA1 a09457beea2d72859328cd13d22a63874014eb84
SHA512 2c2221adf96b4dfd0f9068b9987d1935115fceb3b68d810bad3579f35fc37d014d1653e0bfa26dc295b1b029d7c074d7bcf3f484fbbc7d86d5d27d99cc67edf8
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 97cf0fe8c3e5f9510ce21ced1475be32da1f434117ef0efba095208fc2da79bf
MD5 e9e672465174a6a45be6ff9e8f9f04f1
SHA1 8f2a5446879a6192f2fd0b78104d651b911eb750
SHA512 9d6ffbbe2c74c8dcc75690faaf346af8f97632dbb2c51e52a3ff69c2c49084368350c2ff5a2538ae7abbe5561a9cdeaabb522a2b1c08d35aedf5724c05cb22b0
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 9521526630b51b78eb5ffe203b54f123d4d856b362cabf0e235597463f6b8e28
MD5 63c49094d09d313617308ae300b1d611
SHA1 4e5d5b5f3ae8b2b3bc052fe16ede76aa77a8e294
SHA512 928f288f4003b6340b18c3e6b2779e0c943f2daf8a3c575eeeffa8339a055034e09b67dc8cb80f1ea1b37c0fd5a586ebd6b715a0f4a48ab8234ff31be7d0498f
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 d24efcba917f4f7399885e7beef289c70dfc043e756716688509edbacdee994a
MD5 109f62db2d7cc7f12e2964ede405abfd
SHA1 8800d4a99d9f07f815ec1bcf466b6f35aac8795e
SHA512 962a5c3d0830d896875389c6e1d677de0d0ff15701242545d4433149d7f0fed933752a7961e37e3737bd88653ec7d2f1965ca80cac9ee2aaa7d42514c70f13cd
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 e878023b184adc262be4655e76b125e2973bbed76a7857ee7a4d254a4fde2d21
MD5 bd24970a2b62570fd1a37624b4d22711
SHA1 b6b8b4c26cfd0639c43ada87370bbfa42702d8bc
SHA512 a62eeba53bd1c904e291b7e8d6856d834a17c948760e6fec1daaad8d530640cbc5d52f47510298f51707603276f961f0b5cc99a3900dc0e055f21fb1e70e81a3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 bfe4284a57ebed105ff51a8272620ada61d8a3ed819bdaea15ef721732d477b2
MD5 7d657f334a7c78cd32b966c141dae13d
SHA1 2120d53d0dd295ca523a2f22a132997e377c83db
SHA512 c3a6324a04884fb2828665fa9bb030d0d97587a9371e8f94308520c0b6c79570ed3eb288ff1a4ddd736bf78ae7c16a5a3090d6bf2de3b7e8e4b81c3c218331ec
SSDEEP 96:nakVoxm/Dnmq7E1jZYwpvWMoiVmde4Tg26q5R08G8V2IqQycKUWQyV+VDCAiEwb:nakf6wEHYGWMoEz00iV2dzcKrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 d4ce1d1fd292752a1efcadeff3b8ee3e867c49562acafaf1d85f51bd61192299
MD5 cf16ba523dcef10add3840e78d36beee
SHA1 5285b7b9c01a40f109405d176cb6d39bc17ccd56
SHA512 479510a028cf9669006035cb23327bdcaf4f5b254899a8c63fec5a66567ca8a14352d7f79c5eb40409cc1dbaaf6ee9e989fba1ad43b0cc26fb0466510668e0bd
SSDEEP 96:nakVoxm/DQYmq7E1jZYwpvWMoiVmdeHIqQycKUWQyV+VDCziEwb:nakfIwEHYGWMXdzcKro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e5bc45905038ca322ffb3c70bcf3a292cba429bd422056a9c9e024558a95c571
MD5 0a1d5fd95cf384cc6e4bcec3e7b4a754
SHA1 9ac05e3ab42ce0167212aa6a03078b64290b28bd
SHA512 017fa543f4efcc2a13c2c8bdec0731d055ab8847ef336b32837cd37694fa8b86a3372b661cc5fde75a969e41dbbe3eb6150cc197a7ee8ff12c3372f872bd2ad5
SSDEEP 96:nakVoxm/DJmq7E1jZYwpvWMoiVmde7tTg26hW5R/h08G8V2IqQycKUWQyV+VD7AE:nakfYwEHYGWMLtEzhw/h0iV2dzcKrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 80b86e0da93f2d3890881d34005d92d6e502e61c0a6ceaf53bbb0d9d1a781123
MD5 2cdfbff5639bb680f3e9022c3df80d54
SHA1 72b18cf1d9a36a6f28af34c511b1bfe24ded6fd3
SHA512 f6a201b96b7e47af15a3e97ba0bd925eaf4f7f9832b2f8943e4d46a27c6ed46fb32e3cae0e0b003591ee1a1109cac8bbc80a91f4d5c3d59c96cccec7bd11024e
SSDEEP 96:nakVoxm/DJmq7E1jJYwpvWMoiVmde7tTg26hW5R/h08G8V2IqQycKUWQyV+VD7AE:nakfYwELYGWMLtEzhw/h0iV2dzcKrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 872B
SHA256 30b062dc0dbe155bd8a4d7b056f1b316413343286b3358a6f77b66fe2dce8e62
MD5 6d3e5eb6bd6009bc75d489fd301e1a21
SHA1 50b63ffcc74fec5f2175df824b00f68053d3948b
SHA512 5cf3d05d6123fd23b0988a5aad7f97d9290635e53327274c20e8dc572e044083e59aa5f94671fdaac948ab1ce4abb62e1aa0b62aee493568ce07461b4285cc6c
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 704B
SHA256 b4736434d2323040591943bf3e74da125db6832cf21e18ec6c6f21c17181390c
MD5 f6017e3afe872a60ca0f1c87eacd4e61
SHA1 19ea3ff8c94ac7b9c3c8b3fee5ff2ff3fd883c65
SHA512 b5579cafec44e51c91b0544ec56be5bbc4d6f36c2ed380b239311b70fb58129c939ca0d49121f1cf3599b7ba871f682e08561e6afe219eb9ac2615a468676539
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57cfa4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57cfa4.TMP
Size 537B
SHA256 6cd61bf64ec6490922045ed8f6496d683b14eb08f4efc6452516d2e6a2107de7
MD5 eecc5a14c6f0ce681794f1b8dd030f8c
SHA1 162d59ecae76529e9f8e7a012ff506ac2fe924ce
SHA512 6ab3874c928d89cb86641ea827a1677b07d7284d8ee98a15273c98841b2fc4015cfb3a37d82a1a742f4f03319e055406190afcc83273de534969f34f2da2c316
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 27ab0d5db0bfd51aa2d1e05ada03780535055aef280f8fc0e536948f7e10f1e1
MD5 1362cac940080e1002fbc3c864223fd5
SHA1 e2a02532786aafca058a451d7c31055dd28d1dd4
SHA512 f0bc821698f05a1debdc5ff165dce84de28754a230234cab18429bf834ea265cc24766e11059287e02752debeb2f05093e2e45af20be5e8d27916bd93958c388
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupfp0qe2RU+dvf3z2OMDCRHJ:A9iIxuERzA83h09RZxYOkZfaOMWRHql4
MD5 SHA1 SHA512 SSDEEP

Submit Download