cf6acf51410500e7e697abed49dfe415bbf9d96502c5f33ac8417601df2bada7

Analysis

max time kernel
144s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
07/10/2024, 21:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1e133383e1b05193b7505f3df0d8ea1a_JaffaCakes118.html
Size 389KB
Sample241007-1lanasvdlk
SHA256 cf6acf51410500e7e697abed49dfe415bbf9d96502c5f33ac8417601df2bada7
MD5 1e133383e1b05193b7505f3df0d8ea1a
SHA1 d317ebbd2b39bedd049c45e6c84379f42163fafd
SHA512 dc56d6b25c326b06bf7bdd105924b751f01ee4d2dbb026c60553d793968d9c1f36c7049caf5ad7712d05953e99109be5bd07c2a577752e9425c6fc6a1a5f7b6b
SSDEEP 3072:OsW6WCiqYxDNvG8rmgcXmNRSz7/Ler71BMn3JfBmGUfktIhH9fpTMRzxYVY7RJvW:2DAXmNRU3akIhHBW03
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
540	msedge.exe
540	msedge.exe
2060	msedge.exe
2060	msedge.exe
692	msedge.exe
692	msedge.exe
692	msedge.exe
692	msedge.exe
2988	identity_helper.exe
2988	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe
2060	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2060 wrote to memory of 5032	2060	msedge.exe	83
PID 2060 wrote to memory of 5032	2060	msedge.exe	83
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 3936	2060	msedge.exe	84
PID 2060 wrote to memory of 540	2060	msedge.exe	85
PID 2060 wrote to memory of 540	2060	msedge.exe	85
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86
PID 2060 wrote to memory of 4728	2060	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1e133383e1b05193b7505f3df0d8ea1a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0x40,0x108,0x7ff9ed2946f8,0x7ff9ed294708,0x7ff9ed294718
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2548 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2816 /prefetch:8
  2⤵
  PID:4728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3308 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5104 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4876 /prefetch:1
  2⤵
  PID:4760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5596 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:5048
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6216 /prefetch:1
  2⤵
  PID:1780
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  PID:2704
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2764 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2988
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,11842391306588893192,17063817550156942258,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1860 /prefetch:1
  2⤵
  PID:412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4520

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304
MD5 8749e21d9d0a17dac32d5aa2027f7a75
SHA1 a5d555f8b035c7938a4a864e89218c0402ab7cde
SHA512 c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33
MD5 34d2c4f40f47672ecdf6f66fea242f4a
SHA1 4bcad62542aeb44cae38a907d8b5a8604115ada2
SHA512 50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6
MD5 SHA1 SHA512

Submit Download

34d56a86-86e7-49a7-9e4a-e79118867e6a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\34d56a86-86e7-49a7-9e4a-e79118867e6a.tmp
Size 534B
SHA256 6274a1e024daa8f8ae48ba4c9a86be03463a8b54bd099ae64c481ba9c9a104f5
MD5 4c49ae3fbb1e4975888297de533b8699
SHA1 22f716ea70e1844410cad8ad07a37cf8cb241750
SHA512 efb6163f6019f1928eaac2586afd5252871ef830bed2265283c5ceb0bb4ffd22a2af9f49c45850650d94cd386c94b0084bd4da474b53e0fe2c4c1675e72e62e2
MD5 SHA1 SHA512

Submit Download

f_000018

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000018
Size 23KB
SHA256 c0396130b9807c0b45615aefc58fd118f64899622a1a15e5ee6a88ae3516704e
MD5 8b41d9e82bfaf51825f94b0bc9facf25
SHA1 9f988a1b5c14425843d77bccca491b419f115816
SHA512 9d1caa1f3fea8e19eb0b8dd6c131665d826bbe85327757f4469b3e41c3c5dc77b5f3ae8bb2360a3979b5607933f7d5f7064abd1f196f7729e4ee90b23571c011
SSDEEP 384:VUOgw6ZANCOehcIFLQp2ZYy6V0Ygln90MqOFCTvhAhFn4/i5FJjW7aGsuDCtx3hn:VUm6qNBeaIRQor7lnyFqCzf/iiH2xxko
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_000024

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000024
Size 23KB
SHA256 60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf
MD5 2f24e0f5d2c2997a89fb4a8d943c141f
SHA1 99515bde1a5bf72105116ac902ccf3db1dd3df29
SHA512 0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d
SSDEEP 384:VSCKOXcXVC6fizIN66yBc1Ei49Zvi2fSZ886pETkDCm510VS7X+r27Z:aOX/jd6yJiOZa2aZZNAFmS7X+rEZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 240B
SHA256 dc9ca3342e336f56584f014a0c32eff1fdc916137010b96b2cefb45675b57b75
MD5 556d0fecd036b27f0b3d352cf4be4250
SHA1 e93c57ab3d39682365947f104410cad7f016f0a3
SHA512 c6b154b717e888d06c8c13611c05b09f344b9d48566df3977a90a8addc9d019df93e7f74a03ebef13e918a5d7923df6b6667420fd789a3a3ee26a4c740ae8000
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 03f0eec3e684bc32a5e653911a6e6e3e4185fb290bfaf2a1f5a8a733296edb1a
MD5 d1735d615667759301d5da583fd39eb9
SHA1 a9d460eb34672b615b26cddb6bdbafd9cf31ea83
SHA512 a8357a4580e87b8e2ff4914a3eed0802af4b306cb4a83e911e3adced6e954873742020ed899dbd6bb85a441c1fc50f8028f75fb931a4f3bf8dbbc0d8b759b7ac
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 1KB
SHA256 b71a7a2225ba25dc9962098bc17539e3e6be19feb50079aed2b5fd0db718b71c
MD5 f1140bd1a2f23fc1fa364b61e7761820
SHA1 995e6983e676050b82c43082d26ae1daaa8d3ce2
SHA512 70544af3692640472decb2bd24fb9d8485406979e4e96955bee6a07cc520c4b692d97a5b96df9ff69ba0b50540e52b352a6058cccd7183bdaddba3c960edea33
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 8KB
SHA256 5e681af7152b6577133c3b346f918b1c3640fcdde3e86e5f33477348484daad9
MD5 0d83240316e3c1fc2992bb34f46355d8
SHA1 6604d23697c11e589e5e0acc25133615d0fb41c6
SHA512 d0be2a7c618e37586eb9096b6a637ea9bd5a5a431efee5b71639579229b3ea607c143c4447e6b4135c5653fde02066460ae6013d8398db4c840d964753f36189
SSDEEP 192:nZkqk1GWMZx8emlfb6MqCBR6RMEr6d/T2cWB+rV:nZ7kIWy4pZgrhB6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 0d07005de2f262f7dd7c55fefd7e05e3ceac5d88d6d0e168450999cafb79aa20
MD5 62b9555a9e3a654b1fb19041898c3b2b
SHA1 f16b4488fd54b46237d6a39617638fa270fa56d2
SHA512 58c4f6ddb50a9a38f06811e58b60eeb4d941d9f3f87af03c4ffef5f8f1983d16cc56922f20443331cfb1553e3ee361397ce18d7691dee68d5efcaa952f559679
SSDEEP 96:nZkvtB1+TwpvWMoiVmdeHhOMaB+UWQyV+VDCziEwb:nZkrkTGWMXcBB+ro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 e40540aaecc3998fdbf0e7483b13e824e12ced882eb33117c20154e78174631e
MD5 0dc67b4f381066b381a2339ee4359cda
SHA1 2220fef2f85ce5520aadfe27fb0d952d33f19c59
SHA512 c84f2da4e97b1ba25fd25b54283399fdcc15d602db35b6b768a01b7c6359fe3e163f50803471ecf12edf9e8fd2866b10c3e7659f5cadcdce21a4ca9699b11b18
SSDEEP 96:nZkMtB1+TwpvWMoiVmdepxemlfbuBd8GdqhOMaB+UWQyV+VDCAiEwb:nZkqkTGWMZxemlfbuBd/qcBB+rV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 370B
SHA256 580cc1d0af364078d7de5a6645469f12775f95331c00f853021c19db7dc8a577
MD5 9951f75937633b7264bc627947c5a323
SHA1 b75c3b9957aadceefa3faf0e8e7aab2ad6161c99
SHA512 429df836301296ec6d68ac3e6ff1fb92491658aac629ca31cacec22d407df2e8cf015554ac9438cebcc8bb1f76cbbcb2508ebdda891faebdd0e2a8f7bc424132
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 699B
SHA256 e678836cf34ba8e1f3f586b509b5e8471e68748ce797e37c6de6d804ddfea996
MD5 4bd3a96df9efe06a5f352912c63c490e
SHA1 888395742b9358b3b2fff992828051e6d13973bb
SHA512 e8e5f3a1b7b04bb5e666f1918a4fbcb4d5ad0b840abd34f2b77c99374fd9ac6d60eb963014e0d3ccc7223d5bd514cef3cb6e397f560742ae2906cfc1e96617e5
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe580700.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580700.TMP
Size 203B
SHA256 97ca1b7c7c0e4c8bc6a207615b19e4c331e0c0af06451bb8034f2caa01737cee
MD5 b105c6c4e3ace6ce5879c4992224dc03
SHA1 cae2922ff82e0f3d5b6408e2b7cc163128440b9a
SHA512 ecaaff9393559b847641f77c945845601c52ecfff90e22db69c0d15269b79bc23e5081a558548b5a916297a9fce83bf312951a12dbcaa44c806180d267fba65c
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 e07be877761a6cad0045e6322ce73ce6a2fa2c2b2fb417a94ccd45ac4ff33194
MD5 7da1cca4b698ca6306408971e074d867
SHA1 376b0d6c08c922456743913789b02f0458c6ce59
SHA512 a0fad5e2561c426a687e76fb423e043ac4371f986006f4bf5214ed61d0687eac29e9799f9ab6e19eea8c05c9f028802a064661dab44a502b321d0aeb6fccfc45
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupY8Ne2RUcIsP6+B1E0Cku:A9iIxuERzA83h09RZxYY+D1bEDku
MD5 SHA1 SHA512 SSDEEP

Submit Download