e0f1b9e978f4e33e9d3a103c790667ac998bdc15b3378348fec4e4f8b795777c

Analysis

max time kernel
147s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
14/09/2024, 22:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e128439de4712173b8a2b4facfb9591c_JaffaCakes118.html
Size

78KB
MD5

e128439de4712173b8a2b4facfb9591c
SHA1

8abe7cbf3edc72e91c8b527da84a49a3c36f71a6
SHA256

e0f1b9e978f4e33e9d3a103c790667ac998bdc15b3378348fec4e4f8b795777c
SHA512

d4a0d92acf64d8b47ed0ad2d091aa9bc2c7adbc5b0d0b7db0b22c3b03ff8ba3cc020220fdfe51d64ce276082c45492feb3ec23dc2ae64f459a711e46e29dd267
SSDEEP

1536:2hTf8UfCsOyZ5aTO3EYhDKGfiIN6hp6e/6pth5xOYhP2s0Aag4zeUX/sQrquOrhp:u/ea3EYgKiI/mgxOuP2sVQrqTH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1360	msedge.exe
1360	msedge.exe
2360	msedge.exe
2360	msedge.exe
1320	identity_helper.exe
1320	identity_helper.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe
3908	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe
2360	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2360 wrote to memory of 380	2360	msedge.exe	83
PID 2360 wrote to memory of 380	2360	msedge.exe	83
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 2148	2360	msedge.exe	84
PID 2360 wrote to memory of 1360	2360	msedge.exe	85
PID 2360 wrote to memory of 1360	2360	msedge.exe	85
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86
PID 2360 wrote to memory of 4496	2360	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\e128439de4712173b8a2b4facfb9591c_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe8dff46f8,0x7ffe8dff4708,0x7ffe8dff4718
  2⤵
  PID:380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2152 /prefetch:2
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2844 /prefetch:8
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:1000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:2672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5080 /prefetch:1
  2⤵
  PID:4216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4152 /prefetch:1
  2⤵
  PID:1576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:4528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3676 /prefetch:1
  2⤵
  PID:1264
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6816 /prefetch:8
  2⤵
  PID:5100
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6816 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1320
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6620 /prefetch:1
  2⤵
  PID:1276
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6504 /prefetch:1
  2⤵
  PID:3908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4084 /prefetch:1
  2⤵
  PID:3452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2060 /prefetch:1
  2⤵
  PID:4920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,11374306912621314632,3392488399501268822,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6912 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3908

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4848

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4844

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ecf7ca53c80b5245e35839009d12f866

SHA1
a7af77cf31d410708ebd35a232a80bddfb0615bb

SHA256
882a513b71b26210ff251769b82b2c5d59a932f96d9ce606ca2fab6530a13687

SHA512
706722bd22ce27d854036b1b16e6a3cdb36284b66edc76238a79c2e11cee7d1307b121c898ad832eb1af73e4f08d991d64dc0bff529896ffb4ebe9b3dc381696

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dd2754d1bea40445984d65abee82b21

SHA1
4b6a5658bae9a784a370a115fbb4a12e92bd3390

SHA256
183b8e82a0deaa83d04736553671cedb738adc909f483b3c5f822a0e6be7477d

SHA512
92d44ee372ad33f892b921efa6cabc78e91025e89f05a22830763217826fa98d51d55711f85c8970ac58abf9adc6c85cc40878032cd6d2589ab226cd099f99e1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
23KB

MD5
a0423f1305547bb6b8f5a4fb1a9fc2d8

SHA1
092dcf1fe57e6bb53821eb754e04188ee70602d5

SHA256
6add651cb411ed9ce9a17883c1522920a6ee3b4eb676f5b411e72d1a5e7de6e8

SHA512
b8487c60b40d332e562cc5d4fc7c515e3b3c2c82311700b788905754c1376ce6f0da650583545a4691d51f04ec5da0c0204997214d167c85b788d4c85236c4c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
558e90aeac5b0855d92414a769502f1d

SHA1
62139ea9847dfe78ac4b830cbc8d4f8e1e867255

SHA256
1057dd4d64165fd859dfca4f9a34bb3a5a0b4852809421dd09b071fae0217d5c

SHA512
ebb874c92fcbd90c99c64525e1f99e44592638230eacfd08616f0e2f9acb8db42cc83c9b5cd4e6c082054fc21b4cadc028966464d88b09546cc4978eedc3c2e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
10ba4f15330ffc3d695bd867a78911b0

SHA1
e647ac0ce7f7beb6ea853be8cf6162b72e278797

SHA256
a954ebd153d44c7b16517d0ad5921ddcaeed7da25ec65c4a8e0000f0ef50791b

SHA512
b4784a86120e795ad9e30c02ee0d8a259250309a8525961299c46957cfedfd3d63325c6d8b197abc3bbd2786a173851e1b43a4f1de470bebb80df2bb24d2aecc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
002491525d2c685a2e1ff6a6d1442d89

SHA1
8b7cdc739f2a275b4d0d404a2b26c2fa82c00077

SHA256
4482fe27457db158ee662f26ca2dc196031ff7d1e7272e375f0807f28b891b37

SHA512
a235b55b8d77e3bb44694283de94cccded4ce3d0d98ce1e384eeb98505202f7ccd4e91f77a1b6a04a6064357364b21dc0bf9f5bb6bf9a3f33a69d7dd3d70baf1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
7ad30e84d9190b6ce186e2469af73fcd

SHA1
aba1a7786c1e2edf72bdb4ad4d11e5b91abc66ef

SHA256
5208d723572f6897b7bc4db3a9148bfe1c51d3bea2c4c50b6d376f9f96c41826

SHA512
b5aec6cc96d4462feb3642e34f869cf749d65697e30c25d4817c193a82bce5133ff4fa2ede00caa60bd26309213626833b7cad701940197ff41d8d29cbd25f63

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
a052b0189ca478c8c5d61d29ed1e5280

SHA1
3ec2501c04a5244967249246cb9863a6e5bfa1c2

SHA256
2ce602393ee3a3a84fa9ea8530905c067b60942aa5377c598fb17da682400a7d

SHA512
7dfe0b2fcf2e76123f4adae0c2e7c028a333616a518336ee30e8f7723be77909dfa859973f92dd08e290e8b3032a07ab594d164b6c5e501574e2aec5b7b7cf50

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
34050799ad006ca742f1f7bd90483a1f

SHA1
0e63fd452e46e30ca7c3b88a90e6501c2737522d

SHA256
9bdef709821f95022be3b59b20ca9a2cd368f83fc059f7ed9151c88869ba792b

SHA512
7a63462328f887bbb2cb112a59acbd383e4f6de774d3921eb596ccb54d2fcb5dedca8dd51a27d34f79748f3f93b965740497ce986a5bdfd646b9141fd45279f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
35985af8ae34a15701d68c35d901b469

SHA1
b122d2be6b3383ff63f3a565d83d3404e9024fc1

SHA256
0a801bd0a2c42fa6f732c85faea79baad04b215e50ed01c330dd70cd6c9190d0

SHA512
860510fb13127b1ade6a5efe57970acf23471beb5ec7bf89269b38ec51757cfd87a2fbe4ea9cc71befb30060b4b86bae3c9158e4e132f046083cbcac2fffdc0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
871B

MD5
c340c9c8dbba4f6056502180b133619f

SHA1
eb2c717bc8252a5578331f717456f5dcef9ab208

SHA256
1d163a1ad00ec223de1f0a8a0b4f509c24bcc8fa75728cc2883c3a6f4067a8a1

SHA512
4db0f43115eae38009c79df63b7e5392d47876d5cb33fc26a3d8ef9756178b9736aa94d911411edadb5d094d589bf6d435457318440c03fcd8505a0abd19f5d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5885f4.TMP

Filesize
703B

MD5
87b0464d70f9410ed129d9ffcb58a647

SHA1
33aa7aac6f2bd2c681fde8b8ae0de28ae3112e8f

SHA256
dcf6c49a3fa3e5d365e31739a73eae83b1c13a1268c7c9368b5189cfc1e16091

SHA512
784b5820893e8da8b8f260df5f9679d1eab7df4f963929180ccfc27f5587340cfa6141edc6362587dcdd0e72161858c486523af3b88dd84f39d19da8393292dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
595b73173ea5d53ace883e7d6e49ab91

SHA1
b2e64e5dd2858e436b5875bb601c0793eaefd6ac

SHA256
4dae50ca3aa45ea4ad88d690b34cc61175307cd4a79c706329a50959c0d55ef6

SHA512
93b85b84450817e3c4d1e0bd4005ff0c5418b6f01f191a160fafdbd628330113b6267cf6fc639288b62cdc50222f321b150085085db4ef93796ac5dc92f8a126

Download Submit