91a7a99d92e01bdca3abbc9f25891e330f3c0b5310f1ad4bf14e5d7369e7a134

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
08/09/2024, 22:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d533bbb58dc3f30dae5dec4e9ae8973c_JaffaCakes118.html
Size 76KB
Sample240908-2e83ys1dmg
SHA256 91a7a99d92e01bdca3abbc9f25891e330f3c0b5310f1ad4bf14e5d7369e7a134
MD5 d533bbb58dc3f30dae5dec4e9ae8973c
SHA1 9b03d67415751054d998725ffd9b7a53e013481f
SHA512 db602842331f41241715fc709e1ee04ff62308fa5ad513c2243ef7bd72d9c3d6599b1f478532ea62b44190320d22f2923cedaaac3cdb52c3159f72f9e18b6439
SSDEEP 768:KwP3PkSoPJh3t/OmC0f13bI0Idx83CGGZp/j4IUm0/Mq8xLIE2ItDcoF:13PkSoztRBw833Gr/j4cLIE2IyoF
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1940	msedge.exe
1940	msedge.exe
2332	msedge.exe
2332	msedge.exe
5092	identity_helper.exe
5092	identity_helper.exe
5328	msedge.exe
5328	msedge.exe
5328	msedge.exe
5328	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe
2332	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2332 wrote to memory of 4232	2332	msedge.exe	83
PID 2332 wrote to memory of 4232	2332	msedge.exe	83
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 3540	2332	msedge.exe	84
PID 2332 wrote to memory of 1940	2332	msedge.exe	85
PID 2332 wrote to memory of 1940	2332	msedge.exe	85
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86
PID 2332 wrote to memory of 888	2332	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\d533bbb58dc3f30dae5dec4e9ae8973c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ebfd46f8,0x7ff8ebfd4708,0x7ff8ebfd4718
  2⤵
  PID:4232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2260 /prefetch:2
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2880 /prefetch:8
  2⤵
  PID:888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3364 /prefetch:1
  2⤵
  PID:5072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3384 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3380 /prefetch:1
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5436 /prefetch:1
  2⤵
  PID:4460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6032 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5228 /prefetch:1
  2⤵
  PID:2128
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6700 /prefetch:1
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6884 /prefetch:1
  2⤵
  PID:2052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6648 /prefetch:1
  2⤵
  PID:5248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5404 /prefetch:1
  2⤵
  PID:5256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2236,4545301821361889025,1720660050103053203,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4948 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5328

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1796

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da
MD5 9b008261dda31857d68792b46af6dd6d
SHA1 e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3
SHA512 78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222
MD5 0446fcdd21b016db1f468971fb82a488
SHA1 726b91562bb75f80981f381e3c69d7d832c87c9d
SHA512 1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31
MD5 SHA1 SHA512

Submit Download

f_000007

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000007
Size 212KB
SHA256 7a68efe41e5d8408eed6e9d91a7b7b965a3062e4e28eeffeefb8cdba6391f4d1
MD5 08ec57068db9971e917b9046f90d0e49
SHA1 28b80d73a861f88735d89e301fa98f2ae502e94b
SHA512 b154142173145122bc49ddd7f9530149100f6f3c5fd2f2e7503b13f7b160147b8b876344f6faae5e8616208c51311633df4c578802ac5d34c005bb154e9057cf
SSDEEP 3072:tG3zu3Ek6OGff9u9xmHDyzB2m2niCRYd16kwEaqKk35LaHahdU269cWQJWU7/u2Y:tuNH9BHM2niUY+kyqKk6mCT7ULuoK9
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 b249474a6422f7f969e9cd37671ece1399c091a2fc8110973a5e447565393d49
MD5 d213af95c836a8b22276ff8d28799c1d
SHA1 0b3c54c523380a04c00840d2cf630a0ad85c3c3b
SHA512 b42d06291d4328b88b4787550b4b1e828753b5414793d5d16bc65ad83b41c1f23a8c3077320f278a18611c94291d0fd20f459b11454a86b894a882c8d3ad9b7c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 192B
SHA256 088ef51d1708cc53f0c4f7b46dc85e65e17ba5ed5b5937a34f7a350a197a43aa
MD5 c927096cd1654a20b57b8b649f135f8c
SHA1 63480524c0d28a3a40850986e762b3ebb5b1b7b8
SHA512 ab8ae7a5514d5bf4354f4861c588975546b850259ba3296edfe5f39e61260070ebec9bdfd2fbc502b21a49a7c6fa5689728ea059ceab1acd57b3cd10e5c15b6e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 aedf309eea6688e5ad9d0d7d41b67da419c17cdd2c40ede88ea9e600863c80b1
MD5 749767310237bbb5c13b6e5057f86610
SHA1 0f9a1e309372fd7aea7fe7ff8d8e40b67ce3d1bd
SHA512 8de3ca03d6396ba45a080a93458e9ab322fd767254a70f9bf253e06747bdcae7bbb93cc77777bd340fef91a298af6f6e819191c3cb046de490429273c1ec5a5e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 cb2da002aa7e8f36e4ef535914e7b17d1c31a99474c1fa6c1d319fdba21bfde1
MD5 b2f35eeff14f2ce889f2c8258dd4e89a
SHA1 ddd571eca66b4209d40e65e30a4ac12305161445
SHA512 a2897da9b87c65554f1421599dc4ed3509c7400468298df7b4bff4cf316b05307202ffced5a53673b584b5badca0ffa6adc9da153b4458c747259f7775828629
SSDEEP 96:nqHkRX6r1KewgdwpvWMoiVmdeH/ddnaU3UWQyV+VDCziEwb:nqHkRKrrwWGWMX1RX3ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 b5043da73662db168c6e1c3946c69c4efa9713589a5bc873aaf6842b500509f6
MD5 98ddba4393dcea4925168df788c375f9
SHA1 b24eab79708baff354e51ad972403b7170d14cf3
SHA512 4bc6eb24f8bd3e7a1d960b595a20bc8cf73c1e509f181ea5c2a16d2ca268b2407218f94909ac420ff9a51168ced2118361edf011d9af5d63175a9927541e88d6
SSDEEP 192:nqHkRSrrwWGWMSpi0NnFgYeaDK41T021RX3rV:ncHrwnWTL
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 b57cd92ffc31d5d5190524b77df2d042a10152a96fe8f430ec6f43d46989c032
MD5 4a4bbed0f0913f32850bdeb4fbfbc408
SHA1 f148ac868630a2234db75c5ebeeed124af754261
SHA512 11b6f50374e6760d317828248f85cdca9b26af018d5d0a20c784f6262f23b566d2561ed3fedcd3cc1d11762417c9ddd8dbbbdebcc20ee21dc7f471a6acbdf3d2
SSDEEP 192:nqHkRSr4WGWMSpi0NnFgYeaDK41VLT021RX3rg:ncH4nWTM
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 5214a8052c5bba5e23de142d7d51db6b508782932c48b79531f1c4bee028bc44
MD5 d036eafc1af77a4858084ec52fe0f1fe
SHA1 ba7e1e5716a92bea7871a65918298e44c3c203de
SHA512 b4dbf3b537472a3ba3c41b14d16303b87ba0f49a69669f71f434587e5fab8573761dc0a40045365c20624d08ec273e6fcde3384a39f51b484a2719d44407d897
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexup1Jhe2RUsXd23IT2LQOl6fe:A9iIxuERzA83h09RZxY16YySs
MD5 SHA1 SHA512 SSDEEP

Submit Download