5d07bfd80d6ea14ee687cc32d4014558d915bf5d588ccfe9b9c0e7e76359b70a

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
16/06/2024, 01:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
b11802aae6b3b76b07cf1deed2962839_JaffaCakes118.html
Size 156KB
Sample240616-bspy5axdmn
SHA256 5d07bfd80d6ea14ee687cc32d4014558d915bf5d588ccfe9b9c0e7e76359b70a
MD5 b11802aae6b3b76b07cf1deed2962839
SHA1 f48890df67c2fc0a51a040c920ab5907207a5dbb
SHA512 c146c56340588b4858bfc7922ff9ca4cf827ea24849993ba87a732b8596b0b4080e832373ccc5396993b1057342ca6ba5f03093f0698a63c8a5fa71d2833cc2c
SSDEEP 3072:UxjUavvkTwWm4ZSYAX1zigbTGW2DK0/rU6nhlLPBL9C9f+jH43q7yUv5+FXAdqh9:UxjUiB6JCYDly
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1896	msedge.exe
1896	msedge.exe
3832	msedge.exe
3832	msedge.exe
1360	identity_helper.exe
1360	identity_helper.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe
2784	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe
3832	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3832 wrote to memory of 1736	3832	msedge.exe	82
PID 3832 wrote to memory of 1736	3832	msedge.exe	82
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 2152	3832	msedge.exe	83
PID 3832 wrote to memory of 1896	3832	msedge.exe	84
PID 3832 wrote to memory of 1896	3832	msedge.exe	84
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85
PID 3832 wrote to memory of 4292	3832	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\b11802aae6b3b76b07cf1deed2962839_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xfc,0x10c,0x7fff457b46f8,0x7fff457b4708,0x7fff457b4718
  2⤵
  PID:1736
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2096 /prefetch:2
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2956 /prefetch:8
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4988 /prefetch:1
  2⤵
  PID:4996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5132 /prefetch:1
  2⤵
  PID:3500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5344 /prefetch:1
  2⤵
  PID:924
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5628 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1984 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1976 /prefetch:1
  2⤵
  PID:448
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6668 /prefetch:8
  2⤵
  PID:3148
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6668 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4864 /prefetch:1
  2⤵
  PID:4476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5896 /prefetch:1
  2⤵
  PID:724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,11031484701624614109,7103893022131556750,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6992 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2784

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:8

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 c7658f407cbe799282ef202e78319e489ed4e48e23f6d056b505bc0d73e34201
MD5 dabfafd78687947a9de64dd5b776d25f
SHA1 16084c74980dbad713f9d332091985808b436dea
SHA512 dae1de5245cd9b72117c430250aa2029eb8df1b85dc414ac50152d8eba4d100bcf0320ac18446f865dc96949f8b06a5b9e7a0c84f9c1b0eada318e80f99f9d2b
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 66f8d413a30451055d4b6fa40e007197a4bb93a66a28ca4112967ec417ffab6c
MD5 c39b3aa574c0c938c80eb263bb450311
SHA1 f4d11275b63f4f906be7a55ec6ca050c62c18c88
SHA512 eeca2e21cd4d66835beb9812e26344c8695584253af397b06f378536ca797c3906a670ed239631729c96ebb93acfb16327cf58d517e83fb8923881c5fdb6d232
MD5 SHA1 SHA512

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 23KB
SHA256 9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899
MD5 e1c71f7c04be834f5587230db2ad24b3
SHA1 f3bab9cb99d9f343bf7ed3981aaa7450515d2424
SHA512 205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51
SSDEEP 384:LrvAH+TKO2Dci+FlkjrkWOKJepIhTZ47jmxKbHsc4VzhGKTdHn5Y0MlJacX9oybk:feIhQcf4fkrTpidOdjz4jGAdH6vPao3Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 192B
SHA256 c0f2ea7e0eb82f7bfbd4f20d7485428dcb1220c678490236ee4bcbbc0c72e6a6
MD5 9dcb449a4bccbb6c3c7f0e4e5948e5e3
SHA1 2552d393423fb23418a3012585e5b634e2a5e22b
SHA512 b915e124ecfe0ffee5989992734cbbcee19af7a7a8aaeb781eff3bee3ec6b186cd0fb1cabe7b7835d029911dfc2e620a8f947a662fb1998c1ed5299d76d70b1d
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 f016fabb28903734f3b26708bae05d9592601197ab2a0bc5b6d788a755ff1c2e
MD5 bee08be684fd9b1823912e8c58c2d2c9
SHA1 0a36551979af905c4bda9e43be27120de8b35bc0
SHA512 d4080ffa06f47c59fc4d3993324d766e115a78d82d9f25f89efcd7e3d7fc7d8d7e8d4e9389adb44710510a1c716945bda17f23fdce0830251b45b78a12829b31
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 7f7718a9715a481be77586446e961085f042b59e043a0e9b872abfa0154aa86c
MD5 27fce29d0fe447996d9e9786257c94a8
SHA1 b385059203487206d0f96e1d3bce922f45ef55c5
SHA512 9a2bd813b46b4c3aa01fa2ca9d1eae1b8b8a63ee8204b5c27417875705e7bd44f0589c301f22c01772447ab50ed8ca1c46dc27767f191b5d2a61d554fd5a0b43
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 479ca3e4dd6ef9981010faca35f1ed43ec362363bf76511e9273798088251bbb
MD5 56a4a8d10b19c9c26d387777e60a9c4b
SHA1 f4c413b3ff2c63bddc9565ccf8a5bc213b2a1e97
SHA512 206343f8c75621e168a974cf17535a69a1e7bd8d3f1417b41e76f95dd38e459d9524529dadfc8f8236c905f3f3b7a74f14a41282f7874dfd535fa485baef58b2
SSDEEP 96:ncfTkVoxm/DnmqsfqT13TmwpvWMoiVmdepyIOOAnhcVtxnzK05M2+KNxGv21Dd8K:nsTkf6teJTmGWMofXhAzz7+s342drV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bb518cf96df84ce5a3b6e06aedee32b8d6fea2fbb189996e2294b731f76a4040
MD5 781ca36d2ac88b8b7e8e90213074d4c5
SHA1 09b3bf527b106363098c288a1e96435e018acc68
SHA512 9e4f44554b3de025b3545b556bf70ff0c31795b7dcfe915082ac874de2d606278e7a94a6628ce883594037c7230f0e117ca8debc236be0d2b2d0e38768988ae2
SSDEEP 96:ncfTkVoxm/DQYmqsfqT13GmwpvWMoiVmdeH1Dd8uUWQyV+VDCziEwb:nsTkfIteJGmGWMXdro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 aceea41b4716b1236d2f28de102a08724bcc0bdd7ee5e4e6e23df1b5c8c753e9
MD5 536ff3b617c0b3248f490fffc1677fc5
SHA1 166862d19c65fa9e58a4a9a90446df7909cd8b0a
SHA512 350fca3cbe3e2aa0ce5be025eb0e8ce97e99c31290546b4dc44fcddd195666220e3a442240d679b5a7bf60a77093fe9dcda16de159d2c0bc7a22ae392e9de86b
SSDEEP 96:ncfTkVoxm/DnmqsfqT13TmwpvWMoiVmdepyIOOAnhcVtxnzK05M2+KNxGv21QCdy:nsTkfCteJTmGWMofXhAzz7+s342m8rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 37a915649389aa5f188fca9fc298d36c600a31a5b477fab27b7d31161b4c0720
MD5 90e8e202abd78990b5d937f3858eb1d5
SHA1 d185174818a9ef2dd51de0288096f89ee12ef66c
SHA512 3dfc0fb9b7704c3649afee0a2b7b465d823b616848cb2317c9df3fcdd296ef87f8785d7a3126d4ef32469dc23036b4c59fba6faa3a6a44bb8e1bf66094081617
SSDEEP 96:ncfTkVoxm/DnmqsfqT1bTmwpvWMoiVmdepyIOOAnhcVtxnzK05M2+KNxGv21QCdy:nsTkfCteZTmGWMofXhAzz7+s342m8rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 688158f0b32d985e902394859ed0ad967e6c0fdef8aecf31d651821c45bb7a0c
MD5 200ba5896cb1facb5def128b65ff3c12
SHA1 6fc16a074e4119c4a1de9d6137d98d7cd5699c35
SHA512 649cbfa5a4d303c8853344dc316965bef117b863bc4d72d1c15dbaccdfde50cbc60f1a63099c82fe118c3d747ab3a07bfc03c3561377d3f654d1f90b3e0ad0f2
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupo97e2RU4SAsYr3z2OMDCRp:A9iIxuERzA83h09RZxYIr8ZYraOMWRHJ
MD5 SHA1 SHA512 SSDEEP

Submit Download