b6a13f160c01c3e3a5019324e47b99f58325883f32394a12c342729bf6cd7d63

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/09/2024, 22:21

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e12773c5d44e3c6f7072d592b2c6d2e8_JaffaCakes118.html
Size 110KB
Sample240914-191vdszfnc
SHA256 b6a13f160c01c3e3a5019324e47b99f58325883f32394a12c342729bf6cd7d63
MD5 e12773c5d44e3c6f7072d592b2c6d2e8
SHA1 b1bceee92bb77895e29a22965887a3cf26ee59f3
SHA512 e219a27c48fc728a8a8a1f5b86813191c4de8b948ea55c1a0976057fe2f60efaf37acd9fc483f6a88320fe31326346bcba30ed8a1c61c52c12819cf3c1353bd1
SSDEEP 1536:uCYaIKKC39YpPwFqBP+lcXlMUqNCDCudfUI5hbz8daq4VVA3vSsQh/F52:udaHtY3+GXlMPcDCudfN3bzbfh/F52
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4944	msedge.exe
4944	msedge.exe
4440	msedge.exe
4440	msedge.exe
1052	msedge.exe
1052	msedge.exe
1052	msedge.exe
1052	msedge.exe
2460	identity_helper.exe
2460	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 9 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe
4440	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4440 wrote to memory of 2264	4440	msedge.exe	83
PID 4440 wrote to memory of 2264	4440	msedge.exe	83
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4892	4440	msedge.exe	84
PID 4440 wrote to memory of 4944	4440	msedge.exe	85
PID 4440 wrote to memory of 4944	4440	msedge.exe	85
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86
PID 4440 wrote to memory of 860	4440	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e12773c5d44e3c6f7072d592b2c6d2e8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff379446f8,0x7fff37944708,0x7fff37944718
  2⤵
  PID:2264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2072 /prefetch:2
  2⤵
  PID:4892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3232 /prefetch:1
  2⤵
  PID:2920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4660 /prefetch:1
  2⤵
  PID:1972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2416 /prefetch:1
  2⤵
  PID:1932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5880 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  PID:4860
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6168 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6124 /prefetch:1
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4044 /prefetch:1
  2⤵
  PID:404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,14400643749564145952,16860407553421421510,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4832 /prefetch:1
  2⤵
  PID:2980

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2440

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff
MD5 ab8ce148cb7d44f709fb1c460d03e1b0
SHA1 44d15744015155f3e74580c93317e12d2cc0f859
SHA512 f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b
MD5 38f59a47b777f2fc52088e96ffb2baaf
SHA1 267224482588b41a96d813f6d9e9d924867062db
SHA512 4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b
MD5 SHA1 SHA512

Submit Download

953d7ba2-6f1a-4a6f-a036-fecd9e996785.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\953d7ba2-6f1a-4a6f-a036-fecd9e996785.tmp
Size 1KB
SHA256 547063fb3cec688974cf80087c33dda5a73ebf693413285cf3ab0cb35a6e02da
MD5 ffb70df0a308ae0c318c80473f8edeca
SHA1 d972a1eb3123c5366d59f70a297890b5f0364a38
SHA512 b357dde2f69917b5271d8e506b5494999a45b7e85491de1accdaba63eefbd9298c5e961b208f4a561705562761f628cb46b3e218c228b6d07ad4ee42e94b56ed
MD5 SHA1 SHA512

Submit Download

f_000008

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008
Size 24KB
SHA256 facc5d448f6e3267100a4c236f09aa98bea1cc3b19e2b2a0985501ca499c4ca2
MD5 d1c8fc93e329cfdb4cef6b1363e40db2
SHA1 2d034d8d0056a8c1596714c7129fc31c74a2565c
SHA512 07434e4af30064d5f67158d10b704afccaa31f974ccaca5e76dc9f1b05d76106b44f124c3a94af93eb1b44a5aeaa70ebc33e0f9f904d1cd4c8386b281735d008
SSDEEP 384:fmkqzlgw4CtpJByzHvyMPn0cdWgrlF1xUQNaASTJJlqC3Ix7RQLSKYfkXZzaiXMg:ftqirs1yZP0yVn1+QNliJJlqnx7epZ3
MD5 SHA1 SHA512 SSDEEP

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d
Size 23KB
SHA256 6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8
MD5 a0423f1305547bb6b8f5a4fb1a9fc2d8
SHA1 092dcf1fe57e6bb53821eb754e04188ee70602d5
SHA512 b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3
SSDEEP 384:aAW2VTWfhCNc+bzBo3WuAi3FwN/f25rCT2LduMZ6wHWPbcb1xDtun1GrR1+4JdNE:aAW22hCNc8zQk/uhLdue52E1xG1QCkPE
MD5 SHA1 SHA512 SSDEEP

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 168B
SHA256 3ab058d5c381dd3f7c249ad80bf51f740d302cec6e90edb46477d937f46c433b
MD5 02b06a1dec4f6ef7d025a63b05fb915e
SHA1 c1c69708f920804e1f0cd0a1f822a678ff1d454e
SHA512 8b7029ffc9b1c2dbd3bbc5e0d4f2acea16368ac3d97be45a13e4b1db4a58d9d497197643b6ec7ebef091f3b4c0faaf12c6afd6eb904395222c8a6b47f436e252
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 b7c0aed2f7a465110a9f3cd612028f0b0f5778f5c7404ecf4aff684415c49492
MD5 9adfc2844f2404fbc177ff7ffb263491
SHA1 bd110fd2e7b38e24c5a17cf20c9e3b904592215c
SHA512 62f9d73c30d9ef1989dbb3ca8f3e56ab4567789292de95438305348d761dfc337b3a96d9eb354f61ae6327427811a1ecea4dbf9aa1ddaf5365eaf0fc415fa2e3
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 7KB
SHA256 61d4aae40e196eb9a27349262e0bbf58632bfc7ed2e4948099b2dab2235bd11c
MD5 dfa846b4d63f2a1fc8ef029b91088ede
SHA1 c200f07c3c33ed884f9760fc734e899ac055d61f
SHA512 e04fe3f915ef7ae321017a11f70254dbdc15425df6fdeed7cf0bbb11badc471752b85a416ed0445fe30d3657c9165a24097271713ae1c6890135c50dd0d75769
SSDEEP 96:nD4k/eTx1hrwpvWMoiVmdeK4D9KnKR33X6Q4UZBEm2mcRU0mWUWQyV+VDCAiEwb:nck/G/rGWMpZ/FH9v752bfrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 5KB
SHA256 32fb0e77e7586fe8e64df9133a540c975ec0afa0f29ae4c9203fb514a2bcccd9
MD5 8fd7588cf16d9f89a76394f93867b55d
SHA1 da7c313ada3a4994ee84d1c32b4508765cd8fd37
SHA512 d6f95ca3ee047f598c7dd24abd1b4cdf0f442a3fc81e3a938e951784eb0372dd26f9cba9bb309bc8597efe551aa59498e214f67bde5565b39fbc9183316e01fd
SSDEEP 96:nD4k/0Tx1hVwpvWMoiVmdeHm9U0mWUWQyV+VDCziEwb:nck/o/VGWMXqro
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 7a7bc1d579b3c6c0038caa5164a6137f08546e2a7af2c93fca577782223aa12f
MD5 7eeb05850ceb2683edd99fad3d98c1e0
SHA1 489fcf93155ce820de3afc51bf1d7a3a14e8e52a
SHA512 83378b0eb2bf5edcc9ca60b7650cdd82a30b75d8c9ae2ddbe5bbca84e0d2a3631c40778dfcebf526e672f1f5ee28726bc19982458da5d390b87a35aa712e5f35
SSDEEP 96:nD4k/eTx1hVwpvWMoiVmdeS9d33X6QEm2m9U0mWUWQyV+VDCAiEwb:nck/G/VGWMcpH952qrV
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 539B
SHA256 ff244d0733a4d32efd72aa81c0993cd184ae5383711a08d352963db7389f0584
MD5 9ec28e06dd7d1eff435ee2acccd28907
SHA1 5c80464f86919fb35c817e537eaa741326a464c7
SHA512 0619493f425a3ae5375a990fe2203e67f8105332ac03b535a00683304adbc523b8c1f0872d20a5527f18fa18630056957666c834e12e994561e608a1af637ed6
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe594ada.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe594ada.TMP
Size 204B
SHA256 8810e394d779403bafe1b54a71c1a91bd6a9c48ccaa52ac5f80df7efe35c9c84
MD5 940d841bed2e476d2ed78f9b73554ecc
SHA1 09172dca6c463b506981a4207370ae8f85d6cac8
SHA512 0852d2dd0c72fe6418aab5018281a093f8dba6208c5a6672ab6c418f73dd583c8e80ccaa88b69550926b7eae800af080e85662950dc3b7f53c08e6833d4998ed
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 10KB
SHA256 cd378172f72a5ae5407a16246bcec18cd8cd5a0a0382c77f48709294cec8dea3
MD5 fb848562c16d79b7db21cc2ff4266e1a
SHA1 3aa12742456c7adaa870d6453c4a219a7eb58b35
SHA512 23831444205500d5445eabac055b304b3367202b2778dd0a6711c37299e9c348641f520f233d79f3f8c10c3900472ad06d33eeb96b3a5f653e442b34c954b770
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupaTe2RUqlYOpTeuLJ5cmu:A9iIxuERzA83h09RZxYCtp7JCj
MD5 SHA1 SHA512 SSDEEP

Submit Download