595b8fa048251a3e3cfd4db67cf534ef466b3d5b6771b26a6ea71569b46d8bec

Analysis

max time kernel
146s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
26/08/2024, 04:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c24f2e64c935cb3defb25e516fe84db3_JaffaCakes118.html
Size 127KB
Sample240826-fd1vasxcqm
SHA256 595b8fa048251a3e3cfd4db67cf534ef466b3d5b6771b26a6ea71569b46d8bec
MD5 c24f2e64c935cb3defb25e516fe84db3
SHA1 46c9eba0783446a6428b2399429a382ae51e4a93
SHA512 45505d75348317a780b026d01bd587622b838d48bb16acb8a3171fe95d83fa2d119761b96a309735f40dfd97c7bb6eb5e6834517ae36f2cf7c5c46cbf6b30490
SSDEEP 3072:ZklcKklcFklc7uG/bI+3mkc+klcPEijZeqh8EijZeqLhB/zftcQbOUphEfE3EbEz:ZklcKklcFklc7uG/bI+3mkc+klcPEiji
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs

Web Service

T1102

flow	ioc
41	sites.google.com
42	sites.google.com
29	sites.google.com
40	sites.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4084	msedge.exe
4084	msedge.exe
3300	msedge.exe
3300	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe
4224	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	5904	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5904	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe
3300	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3300 wrote to memory of 2680	3300	msedge.exe	84
PID 3300 wrote to memory of 2680	3300	msedge.exe	84
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 2904	3300	msedge.exe	85
PID 3300 wrote to memory of 4084	3300	msedge.exe	86
PID 3300 wrote to memory of 4084	3300	msedge.exe	86
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87
PID 3300 wrote to memory of 1200	3300	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\c24f2e64c935cb3defb25e516fe84db3_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffab4c846f8,0x7ffab4c84708,0x7ffab4c84718
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2700 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:2212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5024 /prefetch:1
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5456 /prefetch:1
  2⤵
  PID:4784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6832 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6928 /prefetch:1
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7016 /prefetch:1
  2⤵
  PID:184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7140 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:4204
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6604 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7320 /prefetch:1
  2⤵
  PID:5280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5444 /prefetch:8
  2⤵
  PID:5840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:1456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,5924066078163011811,7399732883674631609,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1756 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1452

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3388

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5776

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x90 0x50c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5904

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 8f460e8b7a67f0c65b7248961a7c71146c9e7a19772b193972b486dbf05b8e4c
MD5 ff63763eedb406987ced076e36ec9acf
SHA1 16365aa97cd1a115412f8ae436d5d4e9be5f7b5d
SHA512 ce90336169c8b2de249d4faea2519bf7c3df48ae9d77cdf471dd5dbd8e8542d47d9348080a098074aa63c255890850ee3b80ddb8eef8384919fdca3bb9371d9f
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 331fa67da5f67bbb42794c3aeab8f7819f35347460ffb352ccc914e0373a22c5
MD5 2783c40400a8912a79cfd383da731086
SHA1 001a131fe399c30973089e18358818090ca81789
SHA512 b7c7d3aa966ad39a86aae02479649d74dcbf29d9cb3a7ff8b9b2354ea60704da55f5c0df803fd0a7191170a8e72fdd5eacfa1a739d7a74e390a7b74bdced1685
MD5 SHA1 SHA512

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 23KB
SHA256 6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8
MD5 a0423f1305547bb6b8f5a4fb1a9fc2d8
SHA1 092dcf1fe57e6bb53821eb754e04188ee70602d5
SHA512 b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3
SSDEEP 384:aAW2VTWfhCNc+bzBo3WuAi3FwN/f25rCT2LduMZ6wHWPbcb1xDtun1GrR1+4JdNE:aAW22hCNc8zQk/uhLdue52E1xG1QCkPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 624B
SHA256 89e6a52a5c0148c193310c11fd78d55f17e0db26c02fcab8a4e3b448ee7a4ffb
MD5 f179ac6d2f3a1365acbe165040296cef
SHA1 a84d2f36d420c33f102f4e947b9563a171852a12
SHA512 abadb764bcc0b215f11a265168bf548b696debb64ed6c1a9b387f0f6c6130f3c661e9632c8fee745a9c1021ca13b5fdc900486b08a5c052f91661557d3484ee2
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 648B
SHA256 a4c25991527625e38b644408785cf21a338db61ff6c61bc7a6a6b7808415c813
MD5 ad237e6a2339632738b3c02a751980e9
SHA1 3d5cfe918b18ad5a0c3457cdf97691f28446afd7
SHA512 22f9f0b346342dc85eee8f5ee181c9af1c07aa147ebca6a49f2d9da2022a4cb0cead8d75698f4960003949dd80f4ab0b5f62479bda4ebb7f9f54d1757f7393ff
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 6KB
SHA256 337c98b61eb25dcffdbf6d2339543bf245c587a0710bd230e29de56e37412bc4
MD5 f1ce066806d6d10e47bef102baf734ee
SHA1 e3705a7f8d1e3dc25c04e753a4617cd6fe31a3ed
SHA512 82ec768eb9a6c2628783c224f8180d936808b2a945511c56ab690bb88fb2367cb7c61ce1f6139e288ce313ed28cf44bc1a39e6ad93a8ec6d6a70bc037d27e96e
SSDEEP 192:Jo4t48GuHcrbXDibSQsX6ZPIC6f4uz+6r+n9rqgD1TMWiZowrTiyJrj:Jo4t48GuHcrbXDiGQsX6ZgC6f4uz+6rN
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 6KB
SHA256 ee7f859a8409bc9be4d9fa5c25702b9ee40b503d1a9ec6def467974856c3d324
MD5 7daa047afaa73fd51f1b45922d3bfa2e
SHA1 7995d120e97872adefef4cc601496b2e7693575a
SHA512 29a9a21fdae3109ce55b46c19acda9d1569e6edf9957e51deecfdf83a7b3b898654ec3137dfe90c3dd784fd17abb7d16c6bd7aa8fbdf7501425e4566b05f208c
SSDEEP 192:Jo4t48GuHcrbXDibSQsX6ZPIC6f4uz+6r+n9vgNQiZowrTo1G2DSgPF:Jo4t48GuHcrbXDiGQsX6ZgC6f4uz+6rY
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e3968ffe88062229132dc12728b41ab61185cb1ea6e2b9920153855352103b75
MD5 5a86e371d72496c10c56f60d70421293
SHA1 15dc034e88a55b05dc8ef9786c78dddb8c3de612
SHA512 430e0e64bcd4d4b3955598e11d7d046ebd0ff1524637479f5c51626fe1c6a9cea63848ed8c1de05564463bea72b17683eb3b3a381c7a86e5913f720dd7acf10e
SSDEEP 96:nEk/gvyt1ZI04wpvWMoiVmde4ecwxGJk+CIuVN2a004+UWQyV+VDCAiEwb:nEk/Tjn4GWMIecwxGJk+CIuVN2VV+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 c262687b935f27d1e825b1f0c5180a4bd316393765b52b26986b79097cd1f5cb
MD5 58abd29ded1cd5f11dbc3fbfb3f899ac
SHA1 c41010360643cdbe3ce7368dd07c88d73fd7b49c
SHA512 dbbdfd1ec25e1e5c09bcb9c00203705ef8c16ec22dea01564e10b573b9ed21b6093958a43c7465d76deeb39b7e491fdca8415be850e8506e43e533a217904dfb
SSDEEP 96:nEk/Fvyt1ZI04wpvWMoiVmdeHa004+UWQyV+VDCziEwb:nEk/Mjn4GWMXVV+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 9KB
SHA256 7f1108275c79ef5f4663c745a56a115769a851cc3366b9586b79f3eed2856da0
MD5 dbd7c4d5ae65013a23f34dc99a669f8f
SHA1 5032c26652bc4793bd0765fe8f72847859cd8f1c
SHA512 927ee4484ed111cc760b0eca455d3342e50e794d5358c95fed78e1e24bdc21a8aecaff37c57cf2de0ef52252733f115776cf49be4e24821f866d1f2d49b661a2
SSDEEP 192:nEk/Tjy4GWMIecw1xOAGfqvskH6JkYw+mHCILTuVErbEuNKjd2VV+rV:nEOjcWPZHQrwUV6
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 1KB
SHA256 d82ac7333502e80865e4a8caa1703dbd562d0fe154c97f423dfcc8002752d6bb
MD5 aec17a9b716a05fcaeda9edc5bdd3933
SHA1 ea12a145b036e78876743841110187de8484f37a
SHA512 291798b6c2ab88e2fc1aa9a79eed85a2620dc53f0ff11370c5e76f7d4a5745289c9c0d59f898e77a82167fa68a21eab5f7d0120a2e539e70c9f179b8e458228a
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57f889.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f889.TMP
Size 537B
SHA256 1fcb3e1d715828c7f3317b10667bbbc5edde4d8160e3eabd1274aa41087c25b9
MD5 3b263acd14303bb646c0901a7de8ec27
SHA1 9f97b927ad85060d7b2ea84cef032a51038ed40f
SHA512 cdd59010804c5399b6fe22ea60908e4317ce07f5334b82994bc05383bb8c84363e1aec9659f8adb056b4bdbae83f4e8aa78c1d7f80686f0973d63437e813a3d2
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 fdebd1b6f76b47d154945a5817cb0a08951088b347edc57700f4f0f844f9bb68
MD5 08304b543758f5099f938aaf90cf07a4
SHA1 19a0f68a20d322af47c0fa9f03bfa6d02e394f31
SHA512 742442bfeefa899c51086167156e1b9b212a014eab12b5dfaa3eba9f50bb14b2a53bffd6ced5ab15b30a828c562d0a2f2f36fb93d08940604246b105a7c92973
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupAte2RUU9AzRw5Ytj9Zklqa:A9iIxuERzA83h09RZxYEgUkLsqFm
MD5 SHA1 SHA512 SSDEEP

Submit Download