45fd1d34c008d50880d6aa16a965d9e67e668cd51485a068609b648e088d98c7

Analysis

max time kernel
145s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
12-09-2024 14:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dc78019f4d6449c2f587a932799bb1e8_JaffaCakes118.html
Size

218KB
MD5

dc78019f4d6449c2f587a932799bb1e8
SHA1

9b34879b9d435a3649b4a304316ecb35be444560
SHA256

45fd1d34c008d50880d6aa16a965d9e67e668cd51485a068609b648e088d98c7
SHA512

fa331032eb4367db0b05b5afd8979f299c6e3e3cb4a39a4166be676f865823618d79fbfa87e1c7a1d6085f2033c6170363e7f954335d243749ce4cedd20d2415
SSDEEP

6144:E/r3G4k5QhL8atVGfNbYaaLStRmxWUu/v66sbsGon4G59t9olcm22wOoS/0Ib+bc:or3G4k5QhL8at+bYaaLStwxWUu/v66sz

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1488	msedge.exe
1488	msedge.exe
1516	msedge.exe
1516	msedge.exe
1524	identity_helper.exe
1524	identity_helper.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe
232	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe
1516	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1516 wrote to memory of 1028	1516	msedge.exe	83
PID 1516 wrote to memory of 1028	1516	msedge.exe	83
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 4388	1516	msedge.exe	84
PID 1516 wrote to memory of 1488	1516	msedge.exe	85
PID 1516 wrote to memory of 1488	1516	msedge.exe	85
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86
PID 1516 wrote to memory of 4456	1516	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\dc78019f4d6449c2f587a932799bb1e8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe54e446f8,0x7ffe54e44708,0x7ffe54e44718
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2224 /prefetch:2
  2⤵
  PID:4388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:4420
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:2408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1724 /prefetch:1
  2⤵
  PID:112
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2212 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1964 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5668 /prefetch:1
  2⤵
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  PID:3364
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6544 /prefetch:1
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6312 /prefetch:1
  2⤵
  PID:852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6520 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6344 /prefetch:1
  2⤵
  PID:3132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2204,6691816099905906534,8666438747026797311,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5840 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:232

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4628

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2984

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
23KB

MD5
a0423f1305547bb6b8f5a4fb1a9fc2d8

SHA1
092dcf1fe57e6bb53821eb754e04188ee70602d5

SHA256
6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8

SHA512
b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
23KB

MD5
33a83c16527e4531fbfca2631f653674

SHA1
87a63514c262ba4bffc52d2ceebb3ca14353507a

SHA256
1156bb50a264543f6a9dc8922dd2c65d444c8bb11b3b18be95d5adff840b33b4

SHA512
f1dba28d0f81aa0894436ae7b4ba76a2e635f002f666d17d31b8b21500dc2321d7862ca8dcfd22e44aab4d1f33112c076dc95191c889546a40f9c6197cccbda3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
c3783e70a24bb648b0a988e45b743c13

SHA1
911172a36134891f2f06e6e44e2fc1099933a56e

SHA256
c8e6f0b918ce2ab3ae98c02cdafdd9208679024c00d40cf944b46c22f85f76fe

SHA512
19b2da3942f5f3f575ddfbd93765ae0dbddb14571a68dd196662c24229324ec655f1f93818e020abbd57511538f457e8a9f6d3b06215bd86a07b50bf798144c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
1f564a5b3526e101e547af29790c944d

SHA1
db1d308b860db1c8a661dc0cc0dc5d29a5aecfbf

SHA256
d06ed947a5979b367373e55e372c1ff3a2c416606d69baec55c7e589c9c6c562

SHA512
449d9ff3db2f8204f993170bd829ed97f6751b1874fc6c5503ca4ed443c102c8293df2d9cc18b15582fedc259f61f166c1c73eb268184ea3db69b8b767aa779b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
0cee9e449edff1ee4faacfd128d94554

SHA1
e8159ea6db71ac503e3c153bcc2893f06a2f7c1b

SHA256
977b721e9d8ef654913148a21d9432f8bf1d5c8526106d61a4f70db5c71395d4

SHA512
0850fa033b1f7553850d730989d6b5a7fa7233b7b7f867e19ca35dce13db068f1f9f814279ff176c5892cd6d1d84c8888e1d77fcc262314e69cd02a0f32b3dd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
a773c9a66972b1c15770c8b8b7a33f35

SHA1
3831bbe9cd5af9adeab00e5ede9ab45c4a7493b4

SHA256
952ba551a32111f34b829195acf8c43d58d345b8f5742fc705c46cdf0030a091

SHA512
1918bc4d169801c00b447b730b95dd813c6b698bb1ac0e74916e67a7f08482a690a76761c92a4bb81d0df78b0973f4f862a0001aaf1613b5569948d8bdbbd49c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
8eb356b64da41bdcc70566404b4bc3da

SHA1
f2e097f9edd85fef5f9b93ccfd7686cc4bfc2ef2

SHA256
7bb48f4657d2eae2ace3b06a713fcede06a3b48f0949e2a0774e7b86e1b6904b

SHA512
6adbc804389d4cc52844c7cb600ce5bf0356979f41e67ffd52109e35fbcda4a8fbd845660ab6ae81474ab80320fcc5b3d534369bd31fa3ad767c36e5ef58b8b7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
ecf4bcd323f16bdd9c5e236f1eb54880

SHA1
bfb291bce9c25f20acbba133a789bdb3b8a06030

SHA256
a60102bd927d7a4798ee88bbd221ba6be0c50fa54774a04fa4c894170bba7917

SHA512
8c801046159c147c9d9b1329d429d18ad1f3b570f222a915d88acc87ee5cfdeabd5b01f121bc89a0c6a0f5348244c83970687db0d5c122b88794144fc1feca9f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e8908417d0f0109f17750f827e8d5a5a

SHA1
db791c21c15c8f580dc0bf38c7faa75f8d6690d7

SHA256
4275e2e5b49255b67098ccd8f46aa78e79923b30ca5ca8bdc566f5a709824eea

SHA512
04452c75da82ce6618832b8faa84c80048d864c2939e426a9981adfd150fc022742fef5b4ca26c7e38624c3820d790f9474793f60ebb39cadad038d4b393854d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
0b919d3bfbf8a612383d3326c71199e5

SHA1
51116ee8ed03a618f51dbf1a73662499fd0552a3

SHA256
888ce9a82857053f62c31091f99f7ab458fcecf449dffc9e4dfb97eefd1d21bc

SHA512
83ac05162117b29e4ac8969aff242be60053f4f21824ce21fb657b41a067b49f1d786e5bf65d52ed34c48f8aed89f016638d09ca1e7e8201ca6e56704107a6f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
745028ac7e82645c9fb018702504106a

SHA1
51dae7cb217c1575121839c2e0c743a4e3571862

SHA256
b3a3ce923a0b69082d1a6c8af0c1d84e2ef4d2458583ac8868a9933b25173ec1

SHA512
e472dcba49e649b21220497a25fb27e1905eacca28748d775913d070e48766e56fff57f926e0b6d7c19ef214020c8e534c5dbf821902be98af5e2d5bcea35481

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
de8be9ac0380dacf811151f5aaf81b33

SHA1
382ce895cc38ad738bc46942f8c6f03c154709d8

SHA256
7cb9c35a2da75f522c616045ec7b7375cae0750cdf3956d90753111f6f022cb1

SHA512
e651fe3b931d71742e2b59389fc82473381dfaf42891120d86156105a716b3ac4c9dba29c0805775b7e5d24e07b86405d260951645a12b41657967094623d9c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
705B

MD5
5f936779688587690d16bb1106025609

SHA1
7e488fb5a3e198f7688e9039a2114965a70ee2aa

SHA256
db3d61943dcb19ea1ae628b5e5b78a0018ec76b01854ac9ac9c3e2fe9417416f

SHA512
8d718103dbb234057aff68a3314bee543253a34edcd896fb51e61a652b8cec7bff97663a8a925ce9fed297c078e4efbad8dfa67d8b32fabc60008a48a07eb716

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587952.TMP

Filesize
203B

MD5
0ba381ef3b2a1fe5027f40b31a85ce33

SHA1
45683bab8e6415ab2629dabc563a07066dae838e

SHA256
6e2f6272fc07fa1a3c965b89cab344bfe745c80d636ce4ebeedfc9df86eab012

SHA512
6e93f7291e841e9169d90c8d31e26a615b52aee9b54a6b8706a8668b01c141b62ff2d81f01c997447fbc47ae9d30bb53ba5d62da3a1b3e9aff550fc510b37347

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
15b8db005bc85eae19e7291ac525c6dc

SHA1
4080030a9d3f24d9d58a83a1dc899d80776d1965

SHA256
64d20ebe40aaba0345825b40d1d973380bad0b5f29e68bb83e661fe69b405d72

SHA512
37bbb51052f7651f4874de6853b69fee9216fe3c72e63cc0f46c280f9ba6ad93ba4d968241edb35a9aabe20511cfda89b27224e478dca477667abdeaff042c32

Download Submit