ce9790695af9cec944c7d18568be8ced766a3fc99044d6c60b26e693d4ae86d1

Analysis

max time kernel
147s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
10/07/2024, 09:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

342fc1b8720d634d492a5b603afd9a2a_JaffaCakes118.html
Size

152KB
MD5

342fc1b8720d634d492a5b603afd9a2a
SHA1

71e4be48fb2b8428aca4cfa85c02410193bd0f80
SHA256

ce9790695af9cec944c7d18568be8ced766a3fc99044d6c60b26e693d4ae86d1
SHA512

9b6703a77ceae2b36beafc7ab5a61ccb1b3e452309750c2fc578d3f93479305780c79409a76795d6812e3b8a8bbe4bb02e65fbfdb04df8535c9562c7e2252378
SSDEEP

3072:DFfSR3Bsza5krCO0/V/8rnOL55ShutTA9jwd9rYw38fU7ienQpfQLPya+KIstwGE:5q75krCO0/V/8rnOL55ShutTHb38fU7W

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1000	msedge.exe
1000	msedge.exe
2268	msedge.exe
2268	msedge.exe
1128	identity_helper.exe
1128	identity_helper.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe
3424	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe
2268	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2268 wrote to memory of 2636	2268	msedge.exe	82
PID 2268 wrote to memory of 2636	2268	msedge.exe	82
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 4276	2268	msedge.exe	83
PID 2268 wrote to memory of 1000	2268	msedge.exe	84
PID 2268 wrote to memory of 1000	2268	msedge.exe	84
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85
PID 2268 wrote to memory of 4780	2268	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\342fc1b8720d634d492a5b603afd9a2a_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8ccfe46f8,0x7ff8ccfe4708,0x7ff8ccfe4718
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2080 /prefetch:2
  2⤵
  PID:4276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2140 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2740 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3272 /prefetch:1
  2⤵
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3392 /prefetch:1
  2⤵
  PID:868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:3324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5084 /prefetch:1
  2⤵
  PID:2216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5268 /prefetch:1
  2⤵
  PID:3652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4812 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6552 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6172 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6224 /prefetch:1
  2⤵
  PID:4124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4764 /prefetch:1
  2⤵
  PID:832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5300 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2060,2949246152319568231,9154421902647144390,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6444 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3424

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:396

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1980

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2f842025e22e522658c640cfc7edc529

SHA1
4c2b24b02709acdd159f1b9bbeb396e52af27033

SHA256
1191573f2a7c12f0b9b8460e06dc36ca5386305eb8c883ebbbc8eb15f4d8e23e

SHA512
6e4393fd43984722229020ef662fc5981f253de31f13f30fadd6660bbc9ededcbfd163f132f6adaf42d435873322a5d0d3eea60060cf0e7f2e256262632c5d05

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
54aadd2d8ec66e446f1edb466b99ba8d

SHA1
a94f02b035dc918d8d9a46e6886413f15be5bff0

SHA256
1971045943002ef01930add9ba1a96a92ddc10d6c581ce29e33c38c2120b130e

SHA512
7e077f903463da60b5587aed4f5352060df400ebda713b602b88c15cb2f91076531ea07546a9352df772656065e0bf27bd285905a60f036a5c5951076d35e994

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3e4bd97c-6ad2-4caa-b734-31d83cd4753e.tmp

Filesize
6KB

MD5
e31d3c68e1918cec31e0c6304970e07f

SHA1
b17f641f1b4e3428af15c95d37e538999061fba9

SHA256
93bde3dd69a6307d7c070efbcb0b04af48614de24b3afe78cbc80d5bf87c90c1

SHA512
dfc425645e3f7784488511097be4829d8ed20cc9f076d4151bb7d1f6fa1a3119d379ddecd945ba1c302a90be57e92f1cae1cac2ae52a08282845e60565b7088c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
23KB

MD5
df14665f460474a948ef6f3ca958f319

SHA1
78acca6b4ca9499ba20a2341060e9e62d1365a0c

SHA256
e1351a972cfc2b3cee94b36da7a2d25d94e86166685a084a7f8fc1f3e578270e

SHA512
8a6bbf19d0a305b4617604e34491fea97b0d5d88b6bc7ed635daa1fd7c580fe5aaa799eaa298c949bf4cb69d8d415c0e823b6128476008e527c130a26cf59cc2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
ef495fc1aa71065d30da33a9daf3f662

SHA1
dd85159431afdaef6c291e3a1f9817ca2fed92bc

SHA256
124339d9f098530ed1707754f8f597bad27449130051379d8ad210577fd64170

SHA512
8d0e262c80512672f4044016a5d85493990dd691c045efb425817912764f90042f38786364629958f124bfa15918e3b7712a91b15548459b137c193c7eb25d49

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
89831e9da01c85570da4f384e8b188f9

SHA1
2aba41e0ca50e96469ba652f5c4f7eb68406678c

SHA256
b9c0ed35d0bfff6f9d8c6c57e529a8bf398867025053eb7da208aac6e96e6709

SHA512
29812166f9d6be13fd764f9f8c630a5820d541aa81acb3bc76d0a738d585f7c65f713ccf08d2872beaa748bf0d7b2e77b3de47c2dd4b935f6219513af84364bf

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
ddf8ef23db5d4eb94a17ef392ba2819a

SHA1
ac6ae2f0cb0a1b8c664a1b60f494e1968720db43

SHA256
4ba3aa4dcd7b311e57e58f0c6ec096480fe8a2352f0c5147d5d25aa2bd3c55c4

SHA512
9a9b02661991c1431237d97ba7d6c47aa1b701fb584cbed9ecbabbf6141cbcd689fbf8b95bc90c462ba669cfb61b3f53f9670bf56121e81d8be0988171a7049b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
604497d20e194ab0054bec48c5c176c2

SHA1
16ccb93e8347af71943a85deaac639269b78ccd6

SHA256
adeb73c3532d38d8edc38dffb851fd47e026e78b3a346525955e0010bc413ee2

SHA512
fff4a9a0c69a8156c3edb606e36a7fc01ab7ae9117f3b3e8602b670bbcc5243267a289b78a28203774cf4716744ebf5696a2329cd075e82781fad887394011eb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
b5abac603283607a1c64861f1954eadd

SHA1
19747cd8f8e215b5d391aba33ab3b346883df5b4

SHA256
b8c12007233ad26d9930df35ac7b32714341c2eb1548e454cff2b92cdccc127f

SHA512
8f830d59527e7b52539fe51d10b767d9aaa52241f64e7f0aee1803b642045f1895732f1df572c6da551e9b9b83cd2a24a933c2861e471a1678a1571486323dbc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
843b1830191ae65202e5220ba7a72fb3

SHA1
5a73fcc7fad3609c9139c0646262287c8744b998

SHA256
87f0daec9a77a1782f7c8fb518e205917ee5307e2ab510210489ee6ea68a1230

SHA512
38e3b84c019f39ad082be6d2bc7cab91097f9c79250278b34ba08d2313eed5d94aa5f9e045a47ed18aeff18cf1cc89f32d23e3f2907d3375547cd1d59cb6d867

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8633a8ebd4442fa9593903a898753534

SHA1
cd8ac3d4b9cc8536cec04947ba0aace89758afbb

SHA256
710f582a0a14867b2e4de4cb97c84402a023cd3611184e7347262616b9ad642f

SHA512
e317c132296020d979646aa3c377595eb6fa05c94eaef5628b58bdec2d54d19a33315328d1143298833c1e37681eef70ed2626338d016fbc9a1e628f8d3d7f6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
b4d06e566543ba79df2858a817966e33

SHA1
22bd26f0214df7676123767335ddb371f27f95bf

SHA256
ad5f48bd420cba82e4885a69f10172b1a436b77847dbb8918accc31185616db5

SHA512
22e0d58aec784b2b114184c5bdc08a647df8d049ef809b011755807f70be4eea1e1db92e9fef0ad0889df2dc48127a5ffbd66f060cead527f7d2f6579d263017

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58afd3.TMP

Filesize
370B

MD5
ad8a3abb91f522ab2fd3bb66a0220641

SHA1
ca9acf33167d91805192bd07536dda6d2f8de8c2

SHA256
acabf1dd712b23d5201db1f06a9fb6606e3e3f6a8949039264309b86b3bb64e6

SHA512
bf62a62af075644ae594fa0263293f7a50075b4c47f9d10f97accda6316442164e8b21f08cb4fdeaa510b92140757cb7e3e06fd0f2c5d643c0c05290fe34e357

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\a1ce2316-31c5-4bfc-9ba4-c97c73cb7e6a.tmp

Filesize
6KB

MD5
d9114239711b5c7d14dd513c7ad72b90

SHA1
11a61cdf28434c871c5399722efd7454817be1b1

SHA256
1b202d30e6b52765d93068c777a4f97ec2b733aee74b617b6495f8ef2aef7ab9

SHA512
aa4bcd358b19b464f44c0f64b05cff7f993f2f0791711c588ce0ff9341ba113237098ebeb03dc280c90136dd2c62d64e6a59a5f9cc758e01c62cbc22871a4a8d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f0b463a0912b2faed4ad70de584f3549

SHA1
a1ab02b3f9ba4881135f01b4a285d05a7fd845d1

SHA256
68608df63cef6fa3ae3bb972f078f8cab603c737c26de46458e3b635d11ca05c

SHA512
0910ad4fdf68dc36a9ce65389f3ac7d07340bada71f39a499ee71015d279949def9e10d66fd36529853b9bb21939e9a34f071872365b70d44f57bf666aab4479

Download Submit