6e8d8267093fc9ffceb647885730b5a029e91cddee3f3652ad7c7d7214c62cce

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
01/06/2024, 06:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

89972898dc984645fa9a5afb5ad72d5c_JaffaCakes118.html
Size

29KB
MD5

89972898dc984645fa9a5afb5ad72d5c
SHA1

28f25b9f92e321b81bd1ce7da7dc1427193d65a9
SHA256

6e8d8267093fc9ffceb647885730b5a029e91cddee3f3652ad7c7d7214c62cce
SHA512

ecc58209e645fcce0e2ee51680312bb6b04a3f47615c412a6b2432dfc634be81ff0da43db9ddaf625ff8cdc8a99a7365eb3cec8b10be6a87fa43e363913f05fc
SSDEEP

384:PgIYWFSuz0+/aJgCq7Z2MZAF6JfKfiOr4sp1u3BEu80QJjII5tHu:P1SBnq7Zw6JiLr7p1cBE1htHu

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5096	msedge.exe
5096	msedge.exe
2480	msedge.exe
2480	msedge.exe
428	identity_helper.exe
428	identity_helper.exe
5584	msedge.exe
5584	msedge.exe
5584	msedge.exe
5584	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe
2480	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2480 wrote to memory of 4444	2480	msedge.exe	82
PID 2480 wrote to memory of 4444	2480	msedge.exe	82
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 4324	2480	msedge.exe	83
PID 2480 wrote to memory of 5096	2480	msedge.exe	84
PID 2480 wrote to memory of 5096	2480	msedge.exe	84
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85
PID 2480 wrote to memory of 2236	2480	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\89972898dc984645fa9a5afb5ad72d5c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbf32f46f8,0x7ffbf32f4708,0x7ffbf32f4718
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2124 /prefetch:2
  2⤵
  PID:4324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5096
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2828 /prefetch:8
  2⤵
  PID:2236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:2184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4740 /prefetch:1
  2⤵
  PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4892 /prefetch:1
  2⤵
  PID:612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5164 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5556 /prefetch:1
  2⤵
  PID:5876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6492 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6652 /prefetch:1
  2⤵
  PID:2320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7284 /prefetch:8
  2⤵
  PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7284 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6912 /prefetch:1
  2⤵
  PID:5588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6844 /prefetch:1
  2⤵
  PID:5340
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2240 /prefetch:1
  2⤵
  PID:1384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5212 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2056,10725074760831575054,13489392092323642590,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5412 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5584

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:64

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4556

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\74345189-fd9d-4751-9596-8c6dd5a2d079.tmp

Filesize
10KB

MD5
dfd1d3773e6658fe63f74da0159d5953

SHA1
1e8a646b6c58493a070cf283f8ffae2699fd7a2e

SHA256
a09d47ea3148fbee97d0817251eb4eef9e4d8f24b6cc247ea1fb973a8527778e

SHA512
901fcce6f5a5213b8beaa511cecf268a305a74274cf80d2a6e7569002bcb639b252d21ca68df25e1121ed1038f131a4698894d8f2d7e3f511ca4360ce3b5ca80

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
1ac52e2503cc26baee4322f02f5b8d9c

SHA1
38e0cee911f5f2a24888a64780ffdf6fa72207c8

SHA256
f65058c6f1a745b37a64d4c97a8e8ee940210273130cec97a67f568088b5d4d4

SHA512
7670d606bc5197ecb7db3ddaecd6f74a80e6decae92b94e0e8145a7f463fa099058e89f9dfa1c45b9197c36e5e21994698186a2ec970bbdb0937fe28ca46a834

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
b2a1398f937474c51a48b347387ee36a

SHA1
922a8567f09e68a04233e84e5919043034635949

SHA256
2dc0bf08246ddd5a32288c895d676017578d792349ca437b1b36e7b2f0ade6d6

SHA512
4a660c0549f7a850e07d8d36dab33121af02a7bd7e9b2f0137930b4c8cd89b6c5630e408f882684e6935dcb0d5cb5e01a854950eeda252a4881458cafcc7ef7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000009

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
479d90757476fbcb30c6515700819a5e

SHA1
5e605e378e6f8d71b4c35013e456c1456598bf52

SHA256
c9e21ca7cd6e222375d1de63407b6b3c963c3a2607391ecaae7ee443d3313129

SHA512
d51b33fb02069de9fe3aa926217c428853f00871324c245aedf593e1acf5c1c23eb27228eb3dec875ea00b2ee959e72f1ec8f0bb4c2e5ea9135a7f5ab3e571ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
120B

MD5
c60122f26fd37e263ec42438ce12ec2b

SHA1
f0bdd909ddc146745e5978a087f5b9d801d43f23

SHA256
406269186744abe3cedb527e6bcebf54e64983d5e8559d6097078dd7a8383db9

SHA512
bb399859df978ad001beae231523c789704d74ca1d35d4934eb0713f3785034c337d79b1aa494e17f416f0e6b7f56af7d6be936f257665600fd7575444452bb7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
3b5e252adb3657ac7e3fda9078b62007

SHA1
ba1fb63a15e710479f7751344409712f32254e0e

SHA256
cfacc775345ca856a45851f366fba1694e47e3674055ee851ac1fd1eeb86feaf

SHA512
e12c69fd48f961755e6b9c8cc0ce270f18cf4c7a45abef1b0ed216e5213215516b42b1c1228c912a1889318673c731337a970aa5b23356fb8f5972edbfc88c19

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
db39d56acc0c769b0c3097edbd6ceb7c

SHA1
34752628149864010f55ada0d4345a20e85cdea8

SHA256
389d18d5d6d2d85eccb165badf9209cb41264707984b0cb8801bcff6e9b7d9d1

SHA512
5b53a754c5b40985821a28ddf02c5ad0d16d8b31f81e5766f75316021daef8578660d8584357ecda149048ab4b1fff2c3bdcb81918b0001e43478c4218c80f88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
e3e6852cd04014235892b715d31f9216

SHA1
6ded307ae76c4b72ae7172d4b83d19e09236c812

SHA256
f3187e518f9965c52afcfab5776bac282a63e6c526fa75cb02ab61c6a4793ff3

SHA512
d8820d9fcc5bfd73c3d61ae09f0f548548e94184ec9d7434d7d1d01b7fc07e469f904409e4dbc176dab54cf2e23067601a43187aa07862b4d7acc52e21f33608

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
013c254687f285a8809cbeece1c48173

SHA1
607e5cbb9fc0dc396ba2cdc25c30fc24f78f62fb

SHA256
d1352880f051548ba0f4b3cefbd80dd883d47ce3bd79eb5cb2b22fdf116dbda2

SHA512
bc7a9ba3220f870809d9a06c4f4dc5c3af55ed0ea6c932dd906202f80cf7c62843c1ef8988ada856dc275428d0109c7ee8249109cb2147fff7f2496d14c6b22a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
964f589863aa0bc70c31aebced9d4769

SHA1
cab69f8bb2cf4b8623ccfb60b5aa476b233ed5e7

SHA256
36aa5e9b8107c5cb781b849bddc9a0cbbd41beb3042e9805a3734d17e99c4217

SHA512
7a83047449c6eea598b14d496a42c1e4eb09074220ad97f46d5ffe0f04dcd2f81194dbcf9100850687f6482d6d2c1959024e26323d13bbd2e98ea149d8520b35

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c794b25a99a1aa0e50368ca896e1f252

SHA1
e5756cfe8de7196cfe440c3cba377f85c5ecc59e

SHA256
86bde6949575c5a86a7ff36d9791e901121576c9d6a9b9ede4a7d74d80586938

SHA512
c4fccf79155453c33678166a5fbd1113aabd38bb96a107fd744fb3e5ad94234991c0d18a79d757f52e630a297e66adf660c732147bed760078915d3118b0658b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
140244836f32ec74d9030cdbbac935c5

SHA1
49dea37338b21d018d69d2401eef4ffa746e409b

SHA256
b1f445b6b221c1c4da67c9ede19f7824edd4f3a8fcd933f11afe8c892279fe38

SHA512
6f985f19fb4f88e3765024dbb25e81f063d2b9dee9d6ee0c6ec804b5b81c7aaff218339e19b39cf9d0df485ea9964c95ea92d0e5f77b636d4178edc0f65bb0eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
539B

MD5
68049ca897251c6f54acebc3d2819820

SHA1
d60a90c201da162c91ed72dfe7b3681ebb83672e

SHA256
dbab56a845c6534f894e62d39e16a6db5bcba2a5b31fd5bd763d2adc9b976cba

SHA512
9782d1467d0461e183af287c364752ae90c7f3994d9017072e6333dc3d6b6aced5ed5c174a0c9c3d1dde284f16fcb80363d106dec5a31ce0b90f01d41feed3c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580932.TMP

Filesize
203B

MD5
6f7ea31e46edce012b32a5be7604bbb2

SHA1
5e984666f79aed14ed2ca53364e53048884b5c70

SHA256
fa184cd8cf43582b405a3ccf4929e1c38f93fa403534dcca7a6711555fc28491

SHA512
63f5db94eb1821a2db5676f48c22ddd7e2a688ed1b74276d07a3d960bb76c069eb8494a20bb99d0e481fd33db8b9ceb587ed2f5e68179a1b4a591e5fb962b5c7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit