42a4a24cbcf36d5ce1c043bf5819e9738ce54cc56d413167b20141db4cad81f4

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
17-08-2024 05:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a15468f7dc292d34b454fc0b60685a88_JaffaCakes118.html
Size

53KB
MD5

a15468f7dc292d34b454fc0b60685a88
SHA1

643760d35bac1ae3a58d197daac349d977e9315e
SHA256

42a4a24cbcf36d5ce1c043bf5819e9738ce54cc56d413167b20141db4cad81f4
SHA512

13ead54f200a892fd13dafbe2a43fa13493755c2439bc763bddaa320dc720cd4db9e204b3016ff0eea5558c332ac45100e9f5fb5e9f02aee26e17abc7afb6cb8
SSDEEP

1536:Jt/INbuPvkWZYY9tBd0sUQrr2tXY0sUQrr2tu3pqCvVFmTDT0P10elHSILtZ0sUJ:Jt/INb8vkWZYY9tBOsUQrr2tXhsUQrrS

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5112	msedge.exe
5112	msedge.exe
4564	msedge.exe
4564	msedge.exe
1236	identity_helper.exe
1236	identity_helper.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe
1352	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe
4564	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4564 wrote to memory of 4560	4564	msedge.exe	84
PID 4564 wrote to memory of 4560	4564	msedge.exe	84
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 2592	4564	msedge.exe	85
PID 4564 wrote to memory of 5112	4564	msedge.exe	86
PID 4564 wrote to memory of 5112	4564	msedge.exe	86
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87
PID 4564 wrote to memory of 5004	4564	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\a15468f7dc292d34b454fc0b60685a88_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffbc57f46f8,0x7ffbc57f4708,0x7ffbc57f4718
  2⤵
  PID:4560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2208 /prefetch:2
  2⤵
  PID:2592
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2792 /prefetch:8
  2⤵
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:2444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:3124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5512 /prefetch:1
  2⤵
  PID:4792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5496 /prefetch:1
  2⤵
  PID:3464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:2848
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6308 /prefetch:1
  2⤵
  PID:2324
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:4392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6868 /prefetch:1
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:4144
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7384 /prefetch:8
  2⤵
  PID:1888
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5876 /prefetch:1
  2⤵
  PID:4504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:2068
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6052 /prefetch:1
  2⤵
  PID:5504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6120 /prefetch:1
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2200,5908219054722330201,14280505381192164249,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6856 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1352

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5068

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4988

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e4f80e7950cbd3bb11257d2000cb885e

SHA1
10ac643904d539042d8f7aa4a312b13ec2106035

SHA256
1184ee8d32d0edecddd93403fb888fad6b3e2a710d37335c3989cc529bc08124

SHA512
2b92c9807fdcd937e514d4e7e1cc7c2d3e3aa162099b7289ceac2feea72d1a4afbadf1c09b3075d470efadf9a9edd63e07ea7e7a98d22243e45b3d53473fa4f0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
2dc1a9f2f3f8c3cfe51bb29b078166c5

SHA1
eaf3c3dad3c8dc6f18dc3e055b415da78b704402

SHA256
dcb76fa365c2d9ee213b224a91cdd806d30b1e8652d72a22f2371124fa4479fa

SHA512
682061d9cc86a6e5d99d022da776fb554350fc95efbf29cd84c1db4e2b7161b76cd1de48335bcc3a25633079fb0bd412e4f4795ed6291c65e9bc28d95330bb25

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000008

Filesize
209KB

MD5
3e552d017d45f8fd93b94cfc86f842f2

SHA1
dbeebe83854328e2575ff67259e3fb6704b17a47

SHA256
27d9c4613df7a3c04da0b79c13217aa69992b441acb7e44bf2a7578ca87d97d6

SHA512
e616436f2f15615429c7c5c37de3990c3e86c5e1da7d75a0f524fc458b75d44a5be1a3648a628d63e1cf8aa062e08b538f2f2bc9c6a0b42157beb24f82c571d9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
59e69e91c0c84cdc453304ab11279c49

SHA1
2658652089a148d9c2e386ddd26240102ae1367a

SHA256
2d2d628a3133cd6d995882e4982318c4ef3cfa598920732a0d5f89a3edcd4c63

SHA512
b8d2176413ee32080f0ad773bbbfea2e8cf946c5a562dbf0d4d1c5ec0f7c2ac26561fbe781574cfdd9c552d465eaf48fbbfe1a744fe863e3288724ae8418619e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
0cfa012e4ba8cb966d5475ef3a6cb942

SHA1
a2e500faa12aefa97fe8cdf3722b69ef08880855

SHA256
aa40080c9c488dfd1d3973c20722b23f84c561c7274b9c717b6763ebc7cf94c1

SHA512
d6ef3f601c55c4577e881b19a0cd91ac45f60e9e253d7e9b8656e868cab14ba90607964b4a6f3cf082e44a7e9059de039b02f86003949cca544fb926d34d8c6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
17870148c8e7201f76dff22ce0b78bbb

SHA1
adf8a37a22a64837d75c6405451b6c3728763355

SHA256
687e5bce8567f5031d4bd87d8fb03c80b8ab0a4941d09c86d0297754a3f15be0

SHA512
e6333f27c095876db67ff7428e5e4c47f70f52c9407f81216d212989eff7593047977843178106198835f2ad83adcbe64e3628690e9133102d6f929f19b70f7d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
94c7b9fc70bfa9ba257c669a1a45d1f2

SHA1
b637522fd7a66f61d9c25383ec7852277b96c9a2

SHA256
82a2cc77cd5917b1271d674aedd1a64da891dc8c77d726ea8ac244fa66588c64

SHA512
eb344f91227eeb10cf8fbe63988bfcf79a4320f7a2678a0a09094f6ceecda02dae8023956ac1e26b55c1c544484422a5d9c19abd7ca7feca00cfa5e5400c1fac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
858542fc35ec86d3fd7c42f39ecbe017

SHA1
482c5208e69cd050ec2ebf2c75cc64d68eb3b9ce

SHA256
fbbe281fe38f41bef91940fe92aebf8156df8101ba9a68b434ad4b1c8c0bb5a5

SHA512
ff6a44e3d399ef689d41c512d69f1445f447218ca2bb11b2ae6069e2b55aa3c01eba1180c9ece06f862f6982d0b861233a6c33b5988b6f2348c4f2d4470efe66

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
371B

MD5
faa50b63a4da906c2de9ecb8a8a31fa7

SHA1
95d0117883a5c47e8dcdcaead8762f9bf13f0939

SHA256
321f5413e8fbc130fc1cb04753e22d0b2e1c72363ff1071f7efe3e238b86cd44

SHA512
15ebf0a451d76e23b4a0f489e16f6712e617bba40347ae6f8ce9890bd57d505726a8e0f167f972eb8f319290463839ac8ede6f29bb014950d17ba1843cb149f2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57f731.TMP

Filesize
204B

MD5
da8d578832865f5dad2b1b95f6630660

SHA1
9af24585ba8cb1ab8fd70092874f934992018b5e

SHA256
0a9969821e3e60b78fd85bd9d494eceea848347c06720c477084139709e52a94

SHA512
d5f143d9fbcd2080a20ca0d4b41a08b9d993d17b297dd3dbad273f8dd8f33eff45211f22d7a59cb8576ea3ea0c86a13bf30475c79cba0dd660d31ead074adca5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
53236c660a545bd732ac2b959757f8de

SHA1
3d9159a1721e4500cf89a355b55366f031c520c5

SHA256
3377ef442bf1e95f6dff26745b6b5a424102529ac84669e6cbc94cc4a7c7a45d

SHA512
80351b73961c9a8bd2e512192e1265ba071cb126727b6dfa39c3331505f909db57137312c2b696795a183e1abe4e58d86d62a942068c9418acb59887c358ee51

Download Submit