443fc82b583aa6ccc68ed03728361e1175a262ab0ac2c56618c5a42e9346caf3

Analysis

max time kernel
149s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240730-en
resource tags

arch:x64arch:x86image:win10v2004-20240730-enlocale:en-usos:windows10-2004-x64system
submitted
01/08/2024, 23:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
821a3632287f87f91fe09aff88b5364b_JaffaCakes118.html
Size 116KB
Sample240801-26mn2awdmc
SHA256 443fc82b583aa6ccc68ed03728361e1175a262ab0ac2c56618c5a42e9346caf3
MD5 821a3632287f87f91fe09aff88b5364b
SHA1 b26661853a59c7e3bc636ed6905d4ee4dac55fa8
SHA512 b8e85dcd3467d63bff38e2ba2a393a86cd1de434e0aa9acc3a92c547f08a54e8075a84154bcf95bc6ecda23ef87e4f01d74182bd9e80a476f7812adca0401a42
SSDEEP 3072:+z40pHgVkd+NO29KlbzW6DcPKADbmsxqwfsH1pCLUfOgThF5rOvH:+z40pCu8
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4508	msedge.exe
4508	msedge.exe
1800	msedge.exe
1800	msedge.exe
1604	identity_helper.exe
1604	identity_helper.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe
804	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe
1800	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1800 wrote to memory of 2252	1800	msedge.exe	83
PID 1800 wrote to memory of 2252	1800	msedge.exe	83
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 3004	1800	msedge.exe	84
PID 1800 wrote to memory of 4508	1800	msedge.exe	85
PID 1800 wrote to memory of 4508	1800	msedge.exe	85
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86
PID 1800 wrote to memory of 1104	1800	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\821a3632287f87f91fe09aff88b5364b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbcb7a46f8,0x7ffbcb7a4708,0x7ffbcb7a4718
  2⤵
  PID:2252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:3004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:1104
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:2512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:2284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1920 /prefetch:1
  2⤵
  PID:376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3136 /prefetch:1
  2⤵
  PID:1612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5648 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5136 /prefetch:1
  2⤵
  PID:4376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5320 /prefetch:1
  2⤵
  PID:3112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:2756
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  PID:1076
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5272 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7040 /prefetch:1
  2⤵
  PID:3912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5852 /prefetch:1
  2⤵
  PID:1796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5492 /prefetch:1
  2⤵
  PID:4100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,439698568380951014,10161093288881971312,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6972 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:804

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2028

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3428

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 4b1ef876e1d4f2c9726b7b966222c336d0be026c588178ad40ab476be4d353ec
MD5 0dc31145339977b457eec605c4e1a567
SHA1 deb6ff8183afdaafd849858c821af52f93936e1c
SHA512 ef095404247530ade966bae7d6920f0ff060852e3dfb545f4bbca384f88d0e2a4622b55e4b856ab63f6e6c56196a8ad1257711b53a2fcdd89962d1252b6c4e17
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7e0833f04bdc7ed7a88940d793f110d199368d7c2ca55eabb154de84a355d7cf
MD5 31f5155eeaa8631c1c80614efb4e73cd
SHA1 aac054ba3a9bd71bb2644cc541aad11a5f119017
SHA512 94c43c4e59ae3745fee5157852c279110de2f89dd1562c47627ef960a70790db0b713155817ac7ac636e43f0218f73d35c915f9de61df019ba65c09730a21452
MD5 SHA1 SHA512

Submit Download

f_00000e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e
Size 23KB
SHA256 cdaad26282ea779773f9e585863d1d72e95b88f614b3da1cca834494dc34149e
MD5 fb1a4e8823f0d297688e8017ae5e3412
SHA1 4a861e1c3766f2792458201f7c9669ead8a9719e
SHA512 21738183bcd615c670784da1d0c1083ca28691aee710819cecc177c89ae3c0e23b378e36bbaa9f4f83d947335d17e640d7049e4e84ce72d637062a69e5fa5101
SSDEEP 384:kBY2DoOOGUNgcSX7Ko2055NUHJgTf8CREowEMOUiP1coL2zFmt/rG2AQaft+VbZU:kN37NN75LUHJgT8COxOJc42zS/dAUI8A
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 bc4900abcaadf2dcf767eca9bec0fd7575c2246d5e9ca876541af16dd219ce74
MD5 2526a8d0c9a0cea842f2f50bdef74052
SHA1 56e32b32eece4db0ee82afad2b5804476e08adad
SHA512 529dd9609b705aeb994c23acd55f2dee066645ddbf32541574d08006bcb764f24147601f27ec56c57e0e42fa37d59137a9f736859bf18ad24e73ba6204f7a89e
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 3d793d0eb9e45c690828aa691831438fece59382f6f2af241b95820576d98768
MD5 398470ffb0853b9440e58c58ac6f00dd
SHA1 8f300709470ed58b669b74b0bb955d50ea12797c
SHA512 78eaac942df289d3ab895a785c1267fc46eb40d2a61d694430b05a85723b7a6bec550c16cc1fbc6831d4c2b38251a2584e0007bc5a0f3d168026f49f2794fb97
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 0083eeaa4b0c733b1525a674689fa51998904d9846e6e1eb2ed6101c114c6136
MD5 cce9243581c99b55d438239e93db9daf
SHA1 41b679ad5619408a4e01321896cba8b092175e6a
SHA512 8377b397d2d61d2e1b434b1382e2e75a2228db2cd5834de423077632ec5103cf110dfe347c10c6b7f658950007056efa962d87e9e4207cf431544730b7c57440
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 9c8a9e2531d1b09453584aaab8f84bc79f9b602796e89108f6ac69e42c918410
MD5 92546a1c373638392acd8f8e537158d7
SHA1 6f317178a3106ac7ed90b79593745c9b38eee6b0
SHA512 4f334d2236ec40cdad8d1beda6bd2fcc4c3b5df1468285c8ae6d2c4f120a1ca6e250d69ce03de0eb5ec98b81718fdb7a036a3ef0fdf6f01132abd2fa839bb05d
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 0291bd33a29390ce878e19a37683c4ee5702a33b9858cde2d0a1294ae5705d2d
MD5 7797f5c69268ee01a8ff42a3dc717941
SHA1 cfbb0c087d164e82fcc6334baf44232f9b1d73c2
SHA512 b9c950331dcf2bf1ab77876fa55dfe48d5fbae9e65bd74978c5558d391c1eaedcded2b9d7279daed44260296352107b79d4e3453de1df2162534faae0fa13ddf
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 8bdbc2b1092373fd4f3b078b0cc07f318fc5eac2fda1e988711170b0cb91db2d
MD5 baf9148e6a4d094120fa4075d6186321
SHA1 951f8cf8797b3d59ae82979123a24d31a052ffc6
SHA512 43b692118cbbfe84155f02bffce7d8afd17e800af7090e307d39d987930745961aa857b3f4a55f9e9e8a4ffbaff540afe3435dce925cca2290c9e0d05265f9ad
SSDEEP 96:nBkkxm/GQYmqc1Gd8/tawpvWMoiVmdeHxU6GUWQyV+VDCziEwb:nBk9f30d8FaGWMXxCro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 07370ef7bc62d5caaa40a048e2fe36cce7c12d29e4fc8aca4bbf6d5fb968c979
MD5 ba6d41bf3e86299fd91b0e14c284ca9e
SHA1 ca3ab32a239d01edcacda933ac98f31fe57c641f
SHA512 a7e44555692153ccce61779b858e9a05c3d63a9b57a23b02e975cd1f82ab0e72c6334a988ebc4b03bfac1595e2bf7c66069d6d8b7f0cec34a5329fd46ecccf09
SSDEEP 96:nBkkxm/G6mqc1GQ8/tawpvWMoiVmde6OHEMk9JS36A2xU6GUWQyV+VDCAiEwb:nBk9G30Q8FaGWMKOHEMk9JS36A2xCrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 3dc401b2cf30562d0f4f5de383c65e2ca49867ffa24e88c7474af82f7b0536b2
MD5 6de6c9ab53b8a096ce9c03e039749fae
SHA1 b8c1160ce9032543863beea3708e36fa823c66fa
SHA512 826f462955595e6854cfb7468c5c1c5266f08f3e4acfeb800d8b690e85b5d6d5b4ef43eb8db0c99a9a8d13b56443aefc91e3d8bfb3dbc1f5fbfb34c927b82278
SSDEEP 96:nBkkxm/G6mqc1GQ8/tawpvWMoiVmde6OHEMk9JS36A2xU9GUWQyV+VD7AiEwb:nBk9u30Q8FaGWMKOHEMk9JS36A2xNrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e1214981f8aaf8ab29d6fda4fc12d9ed16921c7a50f1c143126252918b084d30
MD5 07993ea335719a721348608bd4f07d3a
SHA1 76ebcd0634b9901f2c178c7534569595944a2ffe
SHA512 46115de20e89174adc9eb66b60ea0e164bd0b7005be4d9d7ea0d4d6532dc4f3fb3f11bef2e2b8b760623dc5464384d58c6226be9ade7586c6ea11a239d31f60a
SSDEEP 96:nBkkxm/G6mqc1eQ8/tawpvWMoiVmde6OHEMk9JS36A2xU9GUWQyV+VD7AiEwb:nBk9u3QQ8FaGWMKOHEMk9JS36A2xNrg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bb88624c61bbe5b4bf4f3e2046ac431f6ba74ae29de0b18b79a2e8a9bfd46658
MD5 50bc3fb48c8aa6441173635f06c16e1e
SHA1 9d3b32b62e3819a9a15e0c112179ccaba42e6305
SHA512 174e4740b5e51bac6ae28209fb28fdde4f994d4d85bfe63f3bac33c7444154445702c5708af3e07f02fd557dcd964571d04191c402d98260196c8d918a62f485
SSDEEP 96:nBkkxm/G6mqc1Gd8/tawpvWMoiVmdem462xU6GUWQyV+VDCAiEwb:nBk9G30d8FaGWMW462xCrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 2d17777b6e3b4489d3f31df821c10ba5b846fcace1fe5550b014ff97fab1ea75
MD5 c648936bb9f9e4adec8d1723cff89135
SHA1 bc9779e30629c9579e4beb859590e2cd4a104bb9
SHA512 ea2e2ae643cb5df561dcd77e49b2971b06d88630f6f2bdf1ce4ef6b0d0567d70a6ff546f0cf21424b2d6e91b79660a44b17e99f9dfdc1c969e3c89eaf454296e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupee2RUVS2Yvs0KVhY3aCT:A9iIxuERzA83h09RZxYAz/Ko3aCT
MD5 SHA1 SHA512 SSDEEP

Submit Download