174861c97cb8e77544b36c343d5463e3b63ab084a30c351dadeee7fbdd6f20f8

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29/09/2024, 01:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
fd911e77aca5384b94eaaebb05e08a04_JaffaCakes118.html
Size 48KB
Sample240929-b96cfavgpq
SHA256 174861c97cb8e77544b36c343d5463e3b63ab084a30c351dadeee7fbdd6f20f8
MD5 fd911e77aca5384b94eaaebb05e08a04
SHA1 9ce4cc260a760ebe9ce3cecaa738ddbbd1cff95c
SHA512 3332a087cb786a8a0e7a011dd907a6cc99f2e2480922d833efd538d439755c8b4a7a9ee5b450378f0d0320f7a413feef36f1caa5f4dabab09c3801603bbdb213
SSDEEP 768:rppJ3KrxzFY1mmqYmmHW4AO/RJHrS09KjvMv+Oc6jERt+29ODv:d71mmqYmmHWwU2mvvOc6jERte
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs

Web Service

T1102

flow	ioc
65	sites.google.com
50	sites.google.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
732	msedge.exe
732	msedge.exe
4976	msedge.exe
4976	msedge.exe
4708	identity_helper.exe
4708	identity_helper.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe
4976	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4976 wrote to memory of 4588	4976	msedge.exe	82
PID 4976 wrote to memory of 4588	4976	msedge.exe	82
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 3064	4976	msedge.exe	83
PID 4976 wrote to memory of 732	4976	msedge.exe	84
PID 4976 wrote to memory of 732	4976	msedge.exe	84
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85
PID 4976 wrote to memory of 1876	4976	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fd911e77aca5384b94eaaebb05e08a04_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffcb34c46f8,0x7ffcb34c4708,0x7ffcb34c4718
  2⤵
  PID:4588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2252 /prefetch:2
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2464 /prefetch:8
  2⤵
  PID:1876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3324 /prefetch:1
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4272 /prefetch:1
  2⤵
  PID:2468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:2244
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4708
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5348 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:4596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4148 /prefetch:1
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2244,3968793923162629407,1595056611913703787,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2064 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3416

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3fe72a72-b880-4722-9d72-67dd218e1d5c.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\3fe72a72-b880-4722-9d72-67dd218e1d5c.tmp
Size 10KB
SHA256 671c5ca38f83c1a779aeca53aa3a0b7d544bc32463c0a7926e48519ea8c611d6
MD5 2fc96cc299ed66ea549b8972d72273ed
SHA1 6c17d2de39cc3f187f2557df83fbbc3388effe72
SHA512 33be7e7594b85f2c66daafa970aeb26a132512fa5333d6fad6eddbe6809018523eb0dda50cb274906544814f25db8ecc12f7ceb34b4f05d7a2ebe8c42ff9c9bb
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupcsj0e2RUHc8CIcM/bo5Zxb:A9iIxuERzA83h09RZxYcsj6sLqZxb
MD5 SHA1 SHA512 SSDEEP

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 828f4eacac1c40b790fd70dbb6fa6ba03dcc681171d9b2a6579626d27837b1c4
MD5 9e3fc58a8fb86c93d19e1500b873ef6f
SHA1 c6aae5f4e26f5570db5e14bba8d5061867a33b56
SHA512 e5e245b56fa82075e060f468a3224cf2ef43f1b6d87f0351a2102d85c7c897e559be4caeaecfdc4059af29fdc674681b61229319dda95cb2ee649b2eb98d313e
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 7039ad5c2b40f4d97c8c2269f4942be13436d739b2e1f8feb7a0c9f9fdb931de
MD5 27304926d60324abe74d7a4b571c35ea
SHA1 78b8f92fcaf4a09eaa786bbe33fd1b0222ef29c1
SHA512 f5b6181d3f432238c7365f64fc8a373299e23ba8178bcc419471916ef8b23e909787c7c0617ab22e4eb90909c02bd7b84f1386fbc61e2bdb5a0eb474175da4bd
MD5 SHA1 SHA512

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 23KB
SHA256 60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf
MD5 2f24e0f5d2c2997a89fb4a8d943c141f
SHA1 99515bde1a5bf72105116ac902ccf3db1dd3df29
SHA512 0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d
SSDEEP 384:VSCKOXcXVC6fizIN66yBc1Ei49Zvi2fSZ886pETkDCm510VS7X+r27Z:aOX/jd6yJiOZa2aZZNAFmS7X+rEZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000009

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009
Size 23KB
SHA256 7fd05e325904c9c31e435d5c65b9b4ffa11a9116d1df0282d6cd7c87ef6f1dbc
MD5 c897f8479da25ec570027594f1b4db24
SHA1 81a3ff06cf35a87e697fc4733966dffc270ad06b
SHA512 b1c1c46810c3bc5c407f7d30a9d74db8242860965d958ffc5bfeed35b1204774843775ae81b8c414ea89322d00d7ab97313965e20cebba588edf13b9b8dcbc10
SSDEEP 384:tU+gw6ZANCOehcIFLQp1N7sYfDUPbBGbouF/Ufk+/mc6522rk1l+vTZp4UMIoXAE:tUW6qNBeaIRQjfDDbouF/Uf+c6kh1l+6
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 288B
SHA256 4be1d122c6ebdf793690d14f6d6d5e795f113fae1adf0164b357367ab38da7f8
MD5 5d2e721a70903e470c7a84d915434cb6
SHA1 c924f4a0f3787bf4a3d4087ef31dc32964a5d917
SHA512 8d2815caf84f04b8918db8c5783f577e6c44a6182ae781919444e9a616a0e31550a7669df06c2ea932c859ef2adb1e569915f287df8275e7011710375e1b9c81
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 264B
SHA256 40e11132f47c8ed2e4237cc72270a0defac04c42b83c7062da0ae1e29592a260
MD5 4964805ea793d9a165653f485a392ee2
SHA1 6a0f9753d7f6cf11d875de4531908dd8c46ccfd5
SHA512 9627b8344c97dc4648f9a97576265e5c6d8f88b8f1feb9c847b63bf079d77ed1d24da39e4012de2fb45c11ab897863ced46bfa70b8df8dd08dc61b734ea34ef0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 2KB
SHA256 e407f9815ae89277e17cad3f9a8d0fb7ea8dbad194092d217b84dcbb778629da
MD5 be7d9cd2f3b3b5b0f0e371d5bd0f396a
SHA1 7dbbf545db2705efd945e5c47e5a2af8bf4987b3
SHA512 64c0d0781fcb4e86f5e703e4c22b27dd92453f575a3f58ee02ddab38bebb3edfadc03ccc2b166c94cbeb61684f11dff4f7fbe0fb88506fe9754e5dfbce2984df
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 844cb91abefafb00c8e67d7ba308e639836304758d094bbeb9826071b03de44d
MD5 d2098f84e5cd90dee090ece3c563ad24
SHA1 ab73f31ce0ad25aa4977547d044c3b159128baed
SHA512 960dab4904bd81c123dc6f750f30631605365095dd6e6cf4cc72fd351d35814aaaead7b40621b41939650cc17a37d7348ba5d73715fcff6ad5c14bd63bf3a8d2
SSDEEP 192:nCkRyPzGWMUFKehP+ooV85T6Etuz24kS+rg:nChPiWRwkSP
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 03ee1b19bcf7ec5c11cd1a3802efb92634c85fa6a37388644c53efc391a5b3cd
MD5 12a56e430a59508b462566badddacc77
SHA1 181e7f611521d4aca24ff210508527ec751e847b
SHA512 4441f86d5e3190aed6c727dd3d4f2bc0db0623351cbe11ee763bc2ed20bf3fa439e6a8961b0e7d052a90ede54712ebe9327892a30d1696e9465b5724344b60be
SSDEEP 96:nelkR2u6wG1JxwpvWMoiVmdeH4piNU+UWQyV+VDCziEwb:nCkRITxGWMX4k6+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 f8f6064a6baf5e494c25ac9c1bc45fb43aa03307a1e1af369e3ab9c20f42aff8
MD5 a9c7a35b901c0af84ea9db03c6b1058a
SHA1 079fca3d2a1910f06171b880f603eabbe00261cf
SHA512 600fd7d10c951c36cecf8ef163d3cf10946563f06041fce6c5e882e3059971483f07f298a14acc9687f74957ed6efa4af6bbc3fc51b9a5c60d4d89db46fc3e27
SSDEEP 192:nCkRyTzGWMUFKehP+ooV85T6Etuz24k6+rg:nChTiWRwk6P
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 e3873abec9ee4f12b4900db1e3907300b9bef21f52479f173dfbeaf0c6aba198
MD5 95dc3d8fd676773c0473c10b9a10879e
SHA1 5cc77c3e66a0e67a0a6622a87ca940dd88771b62
SHA512 9bf486f219dc3f2154b03494bf21df2311cedbe57a29f266d029b1ed2550cb6d3a87f7531e2516759ec098a2123714a0e28ac414de9cb970a4dd4583646d4fd9
SSDEEP 192:nCkR6TzGWMUFKehP+ooV85T6Etuz24k6+rV:nCJTiWRwk66
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download