98b0d66e1fb33810afa2e90444e8b20d5e1f93ac59d68a445de986070c6fb4b1

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29/09/2024, 17:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
ff0f6a123dce7c9a2497abc1cd4f8a2c_JaffaCakes118.html
Size 122KB
Sample240929-wf235sxeqd
SHA256 98b0d66e1fb33810afa2e90444e8b20d5e1f93ac59d68a445de986070c6fb4b1
MD5 ff0f6a123dce7c9a2497abc1cd4f8a2c
SHA1 5a19895af5ff060fc761e20a89e7903fb1dfacd4
SHA512 a4e1151ead332ea276500550aa95d6b7534ac8aa2da7cb82d22eba57cf9a7879dff50c51e94e67d489cf16c8a686d6770dd65c60aa2d3c428fc91eaa2dfa0142
SSDEEP 3072:oEa+DKnhVF5Uf0ResdTXPzm4oA3/PfPNS4qv9MHntFF:oEa+DqfVm4f/PfPNt
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3888	msedge.exe
3888	msedge.exe
3304	msedge.exe
3304	msedge.exe
2664	identity_helper.exe
2664	identity_helper.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe
756	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe
3304	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3304 wrote to memory of 4680	3304	msedge.exe	82
PID 3304 wrote to memory of 4680	3304	msedge.exe	82
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3872	3304	msedge.exe	83
PID 3304 wrote to memory of 3888	3304	msedge.exe	84
PID 3304 wrote to memory of 3888	3304	msedge.exe	84
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85
PID 3304 wrote to memory of 4060	3304	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\ff0f6a123dce7c9a2497abc1cd4f8a2c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0x100,0x104,0x108,0xdc,0x10c,0x7ff807f246f8,0x7ff807f24708,0x7ff807f24718
  2⤵
  PID:4680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:3872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4712 /prefetch:1
  2⤵
  PID:4672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4952 /prefetch:1
  2⤵
  PID:3100
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1336 /prefetch:1
  2⤵
  PID:1840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1772 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5364 /prefetch:1
  2⤵
  PID:844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5932 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6260 /prefetch:1
  2⤵
  PID:2084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6760 /prefetch:1
  2⤵
  PID:3964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6776 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6512 /prefetch:8
  2⤵
  PID:3664
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6512 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2268 /prefetch:1
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1808 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1776,2203319045729911051,4718069521984840447,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6632 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:756

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3188

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:320

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b36cad5c1f7bc7d07c7eaa2f3cad2959ddb5447d4d3adcb46eb6a99808e22771
MD5 53bc70ecb115bdbabe67620c416fe9b3
SHA1 af66ec51a13a59639eaf54d62ff3b4f092bb2fc1
SHA512 cad44933b94e17908c0eb8ac5feeb53d03a7720d97e7ccc8724a1ed3021a5bece09e1f9f3cec56ce0739176ebbbeb20729e650f8bca04e5060c986b75d8e4921
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 986443556d3878258b710d9d9efbf4f25f0d764c3f83dc54217f2b12a6eccd89
MD5 e765f3d75e6b0e4a7119c8b14d47d8da
SHA1 cc9f7c7826c2e1a129e7d98884926076c3714fc0
SHA512 a1872a849f27da78ebe9adb9beb260cb49ed5f4ca2d403f23379112bdfcd2482446a6708188100496e45db1517cdb43aba8bb93a75e605713c3f97cd716b1079
MD5 SHA1 SHA512

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010
Size 23KB
SHA256 60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf
MD5 2f24e0f5d2c2997a89fb4a8d943c141f
SHA1 99515bde1a5bf72105116ac902ccf3db1dd3df29
SHA512 0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d
SSDEEP 384:VSCKOXcXVC6fizIN66yBc1Ei49Zvi2fSZ886pETkDCm510VS7X+r27Z:aOX/jd6yJiOZa2aZZNAFmS7X+rEZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 a1d211c81988e9fe3a3a1cdb13243c735be325e96dfd5a76ff5f63ac2f856ef5
MD5 8528f24e7b409420f71870ad4a6bfd5c
SHA1 df105c3e163084392b06d29c8ba7432f753d0d42
SHA512 f3e49776ff5647bc74783c1b3825ab312a5752f322ba3feb6168f1b8f74cbabb33e9ba5d3594b8f55c47cce9949a8d90b3b4d516cca6712c60c612fc05a7d8a6
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 216B
SHA256 bdf6cb7e585e50e0d659be9789b6c582821e96c4b8f59fee65c8ee942d08baac
MD5 accbdec475a3415542abdf7684087603
SHA1 7e15e28044c263a3a7beb3e1e6f2b0a89e4cb84e
SHA512 8ab8ed960473e6e2432688b640bf0351c06c283757ec6f770943fcee99f1964dd26554c0b7b7bc6128d713241e1dfeabd342aa4bcfb0c06f0e0c2223a12bfd4c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 4363f2d333866f28ff567057f8d4aab533aa5985461c336aa60eef201bbd5397
MD5 1ceffb063bac506c64cc0ef99d6b3975
SHA1 44a7834180f9658b8ca7347ea2776be4d6a4156c
SHA512 ecd0657edbaca580b714e7d0564088f0b8b7279673da17eceed614f7d8e7fcb20fa8ffbd122cff942ff5cb3b8bf4482ae2f41611ef6a682e0c32b81ce82c543c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 3KB
SHA256 f3e0797e87939a845bb98092680d483405f5cb731765a6dc3b61d55e080bb442
MD5 f222b2b8f4f10f15d0c00c63d5902173
SHA1 0d0f228008ab559c2ab49af84cebf5592ede9a75
SHA512 f179cc6fa0a4a3ff3a13e85c71bdae54f29c8227c5402886f80545fd8314001405b5397d522ea7d158e113579b7cec4205a8c71bc2ca22152d7dcda0cd257988
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 a5d50e5622ca6362dabce09a3d59569662b672ff60a99bc42d84cc799044c068
MD5 5c777454d41434fc06a01864b85c7202
SHA1 5a35e91bc85c477445cc814193373740674ec7ca
SHA512 321b765177a12b387aab784b30c20aa9c4a4b55a71ab79218e87cd7aed89a1e8828688c84f06292c627689f60d98e330d72d471d33ffac1d077e47dddee1a9d9
SSDEEP 96:n52kxAC1za5QwpvWMoiVmdeKbBHHRKEuZP285KNGUWQyV+VD7AiEwb:nQkxj45QGWM6bBHHRKEuZP2Org
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 25c159c7e1d9d93828d61ee8d6b6744a21ef4061602c3a611c7121d7c3be69ab
MD5 c4118c879755817bb37930868bc47823
SHA1 7fa7af2c43e3b4f449dd4f4d57814a87f2360692
SHA512 2b97e90b75f0d3f4e23fbd381873cee8f5884bc9e287f5786fdbbb2bd27fd721b4e89ac23bbcb0eb2f80be8d640feb0fa7f118857c53811b67cb846a6f1c7331
SSDEEP 96:n52kx2C1za5QwpvWMoiVmdeH85qNGUWQyV+VDCziEwb:nQkxp45QGWMXwro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 b59a78395049e7da68320ecfba8a370de61a2de42544c46a4a284934fd1176ae
MD5 4308acb607982c23c6971e59b24739dc
SHA1 f4f8b8e2ec522f4b3d3bf2cf6cd3fc13eb6244ec
SHA512 3ad0ef1b6c70b63a3329f78c3f75018632bc1b93e8aa9f5c260e7988920ae0c13ace2d1bc36a3d278b2e6af513a7ea1ae261f9ddecab8cc0b76acb2a3595386c
SSDEEP 96:n52kxoC1za5QwpvWMoiVmdeKLRKuZq85qNGUWQyV+VDCAiEwb:nQkxL45QGWM6LRKuZqwrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 8285b118269228bd2ed0f8da0454ac9d76e9809bc663045936ab9272d73e0960
MD5 3bc5c437b6f41beb472460397f568084
SHA1 125fd7002dce4da3312e98913fbe3d85d3765d61
SHA512 d9199c0261a3ea75b304f80d0233a9c93970b8964290b780d07aa702623aa0684de5dd524a0b518a261b38225c085d68b7370d2408b409c306a4424fe196bf74
SSDEEP 96:n52kxAC1zK5QwpvWMoiVmdeKbBHHRKEuZP285KNGUWQyV+VD7AiEwb:nQkxjc5QGWM6bBHHRKEuZP2Org
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 872B
SHA256 3ef9e7f7cbfaf6c8d5dc8deaab41c4d68b1ec687b963d70882faa9550b210409
MD5 bc3efcd6d58306684528886661f382e9
SHA1 452b526166ec2724c0484c1cb809e4c3655cf19d
SHA512 503e216c0bf81ab3393b40c0f38bd1b4a080502ba27e080273f178903631addd14e3d301a0f1ebb2a76e00cd4b3d9f8fd30cc821b5ace5decd1fe4997af5a270
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe587ac9.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587ac9.TMP
Size 538B
SHA256 3e3df9d31e7609959eeb2d95cd1df772585f0d66253439896362d4f6821a6f0f
MD5 fb0d35e56b1848a4b9a1dba60f26dbe5
SHA1 998f52467c9e8a85986010f6b45eb518dc8ebe80
SHA512 064a9eb883f770c1423414e54746ed99f5bc9221e555fb06a44b458caa82475b039712ca6262972d0ca9654c2635abd2a78f9df62ff9bec8c750afe46a78c959
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 c0e4c76261dd77a49c118092f9fe158161fb115531b70af8e1f18f581f699241
MD5 0fbc4d8963a719956924b48721a469ee
SHA1 cdeca619cd7f810a2186eaa926fe12219b497aba
SHA512 24d49411b8aa7aed9c8c7b6ae9d10acf016d5695619c9c4797a34a5964be82b27054b70a0e0a8bddcd83269d3266830bb299c43dae614aa8a670e9b5969b373e
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupQRcloe2RUe7i+YIcM/bo57:A9iIxuERzA83h09RZxYQoGDVxqZxD
MD5 SHA1 SHA512 SSDEEP

Submit Download