b25b5b7f11ed08ec6ec8435a9418b903de735e2398bb045137ce84a00233c1c0

Analysis

max time kernel
142s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
09/05/2024, 21:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

2bbd03e2f5d0321c173e46b924409948_JaffaCakes118.html
Size

83KB
MD5

2bbd03e2f5d0321c173e46b924409948
SHA1

e72d92a75723b74aae3697403281bf054c74f1b1
SHA256

b25b5b7f11ed08ec6ec8435a9418b903de735e2398bb045137ce84a00233c1c0
SHA512

168ad8712d32afe8d084a54d571907a6145af81644dac32c6d1e0a162596eb3042d50f00f5d7e62dd9fb1d3e0f9148a23206887a4e53dc4c9bfb14b3a06f29c5
SSDEEP

1536:cRUAnpX+1Y2MbETJ6rHfgaToXdw7KOcwBb6e/6+sEqthl7BKMtwgtgW:o+Y2MYJ6rHfgaToXdYKOomBqt37BKMtB

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4060	msedge.exe
4060	msedge.exe
1080	msedge.exe
1080	msedge.exe
4480	identity_helper.exe
4480	identity_helper.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe
1896	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe
1080	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1080 wrote to memory of 4304	1080	msedge.exe	82
PID 1080 wrote to memory of 4304	1080	msedge.exe	82
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 3972	1080	msedge.exe	83
PID 1080 wrote to memory of 4060	1080	msedge.exe	84
PID 1080 wrote to memory of 4060	1080	msedge.exe	84
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85
PID 1080 wrote to memory of 2368	1080	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\2bbd03e2f5d0321c173e46b924409948_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff97d9546f8,0x7ff97d954708,0x7ff97d954718
  2⤵
  PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:3972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2148 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2892 /prefetch:8
  2⤵
  PID:2368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3196 /prefetch:1
  2⤵
  PID:912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2976 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3920 /prefetch:1
  2⤵
  PID:3596
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:1832
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6072 /prefetch:1
  2⤵
  PID:1532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5428 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:4556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1884 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5308 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:3628
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2036,8462906871470228516,13836406147135204200,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:3412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1412

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1304

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\257f865f-cf6b-4c74-8229-e4878ae42c67.tmp

Filesize
7KB

MD5
17c3c7df1fc689210c79a12284dd1f5b

SHA1
1443d568e277d9cf8bfc03e67dfc8388c25c0f1c

SHA256
6a97448c4d011b3465aa930148bc7f0b136b27fcb27b72afd7464767fe353d3f

SHA512
e24baba107f30dd3d8a9613d9427ae6bc3e4661252ea3b1561a53d41deb882280f34e1233a8575a3c9b56c7ded10d3f3ca36621dce80296aef9e09d4a1485fed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
17983f6a195d9f4a942a31e05cc44d3d

SHA1
f378b9a54945b1ffccb2d3febd9d913e0a9b4976

SHA256
ddcbe9c2f1a4ffc4c1e6304816137515ae5460487a777a25d4de73c8fa7b3b33

SHA512
b7dc3033470b158c477b8cdaf798e0bba61bf8627cc164253dfd68c0e18ba42cba23174dc50eb5e9932d7aa5eaa3800eb9402871e08cdd2ced58bf7a015632f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
e769ddfc5da71286fa1b23bc6ae836aa

SHA1
39e642310d4ccb912fa3b5bd55d2ab2be912ac05

SHA256
3ed9317f87e887fcd23de4f56e33e28192bc3815f2aed8cbb2d4415e309b4183

SHA512
44c662b9bdda18fae7dc329cb361c38882e78a71523119b17637df696172e7d997701d9937b7cabba60d0ce745b844d93ca0d2dcca8efa973757cc02e5a49bd4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
2498dfcd17beb1db68ff94850793246e

SHA1
e09ba9931fdfcc551fc74b16ba0a28f19aa0a3c8

SHA256
6df3926adf22c53c2d5c34efc9909712b6bdc12aa23669a868b680b79b823a6b

SHA512
a7556791d127e2f099700ca05843d920c984038e2a403ea20be09f6f7d301c873306d64b4be2d7b20e8cd5fdd09c74eee0140d1dcddb8fa330ef21d848891d35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
aacb42966e611eb658fb805779a64748

SHA1
8e8db709a823a3022c10bdc8aa88e28e96dcf865

SHA256
e5482fc1d5e2586535bc4f1ddddcdd399e5dc13a41fca361cfd0fa2a71119441

SHA512
3622a2e74e7f6920eb42af1c5ddef4e0d528ca26d16024bf488106566fb3ffd579836859550f13458349dd4de81ca55b960142901e171b0a2aca872e18dc03c2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
16c28a678a0d39c1a5b154d7cb0821c4

SHA1
56daf7ca76a5fb3d55cb33fa4c40bd0a3790eb8d

SHA256
b785f107fec01acf6d4a015472804c256400991920fd2f5f98f92e234d5e2f7f

SHA512
0019fb2a5bb1be09734bf04b7280de19ab64218786a0ef904aa81b0b952cf2f56652f2d12dfb7ed175ed292f068791af0cc76730373463b812fe0691bba87eef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
210f25e29902e682274ae080d94349d0

SHA1
6826343c78671c09e4ddc11d9bdecb382c0aa801

SHA256
9d5d0ee12624792d25f65d26fb9e0c9642017c16375e0fc7cc564c1355443365

SHA512
ea8a58572d74c38b171e055c4688c2e35384225e3aa048e442779796083370952939a802b5da0d4c3b8f1ad4fa14ed31b38cd785b73414058705843df379e10d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
d1bb6d119c299c0fd8f8fd1afc570a66

SHA1
4abd7c8eafb05e18096b322cb605d29826624cc4

SHA256
5b256a4a86572877c6897ab1530ecb94127b2efc61a709ad10d5f6ae0ed73284

SHA512
2befea01cd56b1e6ba09620f0691ca93218666087c0e4bb6086c7cc9cabf24ea88fc6a795ea88e6544dde06cd694e17d52e699e26c0d9f241d68b4c9b8f32c1a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
370B

MD5
a6c7e66c8a4f967290345e79d49ffe58

SHA1
aa780e467098b932b6961707e6a942e6cc1b5d54

SHA256
cdb17f3757786e8901ce768c5c8ece6d216f49eacbee0e7a488223ad7d340873

SHA512
4bdce7a58346685629711e2ee894f5daebf4ce934458f360adf6de37bd12692e1b00ff4840899936f31d650d2fc2f0e0ac718190acb2084d3d658fa0c9b13446

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58b820.TMP

Filesize
370B

MD5
eb0bce2aa0b2d3e08ab8033020fdf918

SHA1
a4cad6524565096241b8724781be138dcd2127e2

SHA256
a48f339358acf3f31a38b39bbae1061baf7b962252ff3f85aebd6e592d025859

SHA512
c8df7507e33ae4ead02162efca0748093913857e49e0e2771f82bbff1809c288fd210465feb3ab0bf03512b8b9a71e4422dd305c24938a8117ce1a9aa3c1e69d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
22fa2e6583e4d26592088b6bc4b8e79d

SHA1
1f5912aa136184a2bc8214e975ef1c5ff5ae8343

SHA256
f73628599d778c7be498510a78a8cc62154dda155453140fbbec4e0326fc9ad9

SHA512
f27d059fd730d4479c27b2bc0be87204bb408884383bd802fd97ad582c75c7c3b941960712f64d8cba1431fcc99166376086c549603bb2790f20603b0b021f0d

Download Submit