5c17efb399ce6620ff598905841dda95bf19ab9a5e7cf5faab2d8402e2fa32b0

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19/08/2024, 06:29

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a9f3189be104c7109ca83ab1370dad30_JaffaCakes118.html
Size 368KB
Sample240819-g86jpsscmr
SHA256 5c17efb399ce6620ff598905841dda95bf19ab9a5e7cf5faab2d8402e2fa32b0
MD5 a9f3189be104c7109ca83ab1370dad30
SHA1 232e09b726a7584f813b8c03a9347f9d860de5b6
SHA512 b4859b8329032123f59fb312d3a378f426451ce2a970186a9a4bc702f4ac985aacd5693c55d7136853dea4aa41f6d70c7978a6b995112540c56e8824cad3831a
SSDEEP 3072:neWKJzFBAXodxhKIagxdS+r+X7+P+7+D+mx++Yhutcmk2nmNdKoBwKPxUodxh0+e:netJQIage+r+r+P+7+D+GZ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1628	msedge.exe
1628	msedge.exe
1788	msedge.exe
1788	msedge.exe
3520	identity_helper.exe
3520	identity_helper.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe
2352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe
1788	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1788 wrote to memory of 336	1788	msedge.exe	84
PID 1788 wrote to memory of 336	1788	msedge.exe	84
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1912	1788	msedge.exe	85
PID 1788 wrote to memory of 1628	1788	msedge.exe	86
PID 1788 wrote to memory of 1628	1788	msedge.exe	86
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87
PID 1788 wrote to memory of 4392	1788	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a9f3189be104c7109ca83ab1370dad30_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1788
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff82f8846f8,0x7ff82f884708,0x7ff82f884718
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:1912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2216 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3236 /prefetch:1
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3260 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5028 /prefetch:1
  2⤵
  PID:4412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5184 /prefetch:1
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5288 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5792 /prefetch:1
  2⤵
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2664 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2356 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  PID:1556
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6496 /prefetch:1
  2⤵
  PID:4024
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1704 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6792 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6232 /prefetch:1
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2152,18171314353861177030,5283727956665034993,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5496 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 d2c75c7d68c474d4b8847b4ba6cfd09fe90717f46dd398c86483d825a66e977e
MD5 d7114a6cd851f9bf56cf771c37d664a2
SHA1 769c5d04fd83e583f15ab1ef659de8f883ecab8a
SHA512 33bdae2305ae98e7c0de576de5a6600bd70a425e7b891d745cba9de992036df1b3d1df9572edb0f89f320e50962d06532dae9491985b6b57fd37d5f46f7a2ff8
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 aa22ab845fa08c786bd3366ec39f733d5be80e9ac933ed115ff048ff30090808
MD5 719923124ee00fb57378e0ebcbe894f7
SHA1 cc356a7d27b8b27dc33f21bd4990f286ee13a9f9
SHA512 a207b6646500d0d504cf70ee10f57948e58dab7f214ad2e7c4af0e7ca23ce1d37c8c745873137e6c55bdcf0f527031a66d9cc54805a0eac3678be6dd497a5bbc
MD5 SHA1 SHA512

Submit Download

6e088380-e41f-47a0-891a-f863add686d4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6e088380-e41f-47a0-891a-f863add686d4.tmp
Size 3KB
SHA256 8c7c228ecf1f5125e9d6cd2cedd72ec02924954439217df4a41152c2756c84f8
MD5 897f7ba210e4d31c8befb89933a3e699
SHA1 f719a532311c7f77337ee2405e41c5ef3e7a9c90
SHA512 4542c42fa092e9aaf8dc40f38955a58c9cc7925bcf002b2d078ef3b1512370d716425386a8fb3ab77f316a817dcd4517476c5c35eb72963e95d6487183297ddf
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 45d58daa755d9d4a0e3165ed6d188dc8e84294a1b2a0c610ff31a7d1de8e8974
MD5 4a7c89a53be0647067079abe69420d18
SHA1 2e15b6ece78d22f213405528ea38e05a1611adb8
SHA512 c6887482ab150d5d04bdc48ce9f2ef2f05cf4e9359641027e9813ac9b5b5e1b5286fe82c3c113091784066f638ab8a620099f043c6c3c5c440243c5cd41ddd45
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 68add3b6c99a85e47eefd7811f10c887af77408bf84dcd8337fb91ede1aa81ec
MD5 9e7ee8242664a77b22cfbd96108b3a12
SHA1 fb2d2d2c0e9ae863ad14f63c7e04df1b8b13374d
SHA512 686aafaae74719919163bb7d8c1e43da054b5a46b11f8b7dad685005dce923010351808986ab2fe7ba6ba75c97919007d46440127ed862a20c0e6af0a095aede
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 4KB
SHA256 845bd20159f65903d8880b287ba458be770b54857d639b1d93b79eae4cfde772
MD5 6f7bb251249e1abf84dbe1cfd3f269cc
SHA1 0113ab1a1f51e0785c8daea6be37b862e8a5e18c
SHA512 ce1158fbf58a7c5a39778d5fc2ba970fca349985031074a5f9d7b28a57bf10fb9cacd4681c53e855573f98ab30ad690eb6e6cf38835c1e472414d731fd74658d
SSDEEP 96:Jg83+KleC4OX3G9RZrTnGZGMEG/F7P4kPKGLbGiEyZGaGXyGCbfy:Jg83+eeC4OX3G9RZr70zEgF7P4kPKWbm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 88d92bb498fa71bad7df21f4acc90cba9830cc0ae42640eb644159edae4ab441
MD5 76ea4ad9d7dff4bf57d8cf0ac8ee0299
SHA1 c2a7945203e5f021c60e8592c526ad75bced220e
SHA512 962039e7f08385fa574af8c5add9a1fba9101076aa2fb49ab3776c4a64d1b39868f3332dd051f18563e4593cfdbe4e2f8e5e1c32e66cf275e0189c5ed580d2a3
SSDEEP 96:nmk/oa118LSFhPwpvWMoiVmdeH/baUWQyV+VDCziEwb:nmk/DvVFhPGWMXmro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 c9b5778b71d9a3d965b4b4a2f09aaaf467fcff660487f6de055c5b41ffa42308
MD5 f6ec70a41a8c79f0ba0e5c064ba37eae
SHA1 8b0d70dd5bff74261b2c8e6bd5c9eeb731bc11c1
SHA512 eaf207ba429a52db9a4b6a2eb9f5b20d959f6582d16faa6b6a6cf899e1f7c9aa4cce469556b08ccde545bfb824431936f4029a8bc08f13a24961d803f5c655b1
SSDEEP 192:nmk/1vVFhPGWMJkjRNPMt7fMz4Vci3TtCuaYshgr2mrV:nmEvLhOWC17X
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 10KB
SHA256 46bff8960bb713657bdcb9095e9b2112ec1ee1ffb04e640157ebf32301ce8d82
MD5 dd88ad63ceb1bc009ca7998729fc87a3
SHA1 bf2665eed3c10a4c910a389af2265cc26da923ba
SHA512 db66336262aeda2ca1e2fec4b0156c844174dabd2e8549b683837ce9a9b602af1901e5281ea65dca6af402541e63b89670192a6670d1dffbce7544a655bbbe6c
SSDEEP 192:nmk/xvVFhPGWMDIkjePirRNPdQts7YfMzKZ4Vci3BTqPtCuaYsa7hW4BAgkr2Nrg:nmsvLhOW3P7g
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 ec149318d1f1ca5288e1e3e168360bbc00bb405425b45ee69c0463f99f24f7e9
MD5 ddc1faa9dded38e922a4f453de309e86
SHA1 69c88636ec93360868fa6690a08488977ac29fd7
SHA512 57c2144b7474213dd4ca783e58ae57aee95ab609eda760d56715ee9349736e836aa5d89cfdbe22db8f88d2eced6489779414047abfaa64d9a1d78d7ac42e6e51
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup9Ole2RU2/xN6ru8z8ZJtxe:A9iIxuERzA83h09RZxY9OBzz6Pz8Vxe
MD5 SHA1 SHA512 SSDEEP

Submit Download