a059f3c86b3128c6efcd1747503a82eaa51cdf982a4d84d4af61d964385dbc08

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
19-09-2024 06:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

eacb80b913f83d5a557b190637588ffc_JaffaCakes118.html
Size

82KB
MD5

eacb80b913f83d5a557b190637588ffc
SHA1

94ae88fd8f405978508c5e889536c84f46aed8f2
SHA256

a059f3c86b3128c6efcd1747503a82eaa51cdf982a4d84d4af61d964385dbc08
SHA512

b8e2948934c376dd1bcdc3ad6ae4ac3f5bb292375e24a51bd369f7b52ee710be029a870a63a74ac3a3d4fa8b23e9168c5380e830c1c68cb399b485776e707a67
SSDEEP

768:IuVC+slagncgOriWNMayok6WkhoRoObNkX75JjPPPRvDaaDAEvmXJtuQL29Nq2:IuVC3lagn/x6dObijXZvDawgtuQ2

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3612	msedge.exe
3612	msedge.exe
2636	msedge.exe
2636	msedge.exe
3076	identity_helper.exe
3076	identity_helper.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe
3280	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe
2636	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2636 wrote to memory of 4612	2636	msedge.exe	82
PID 2636 wrote to memory of 4612	2636	msedge.exe	82
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 4852	2636	msedge.exe	83
PID 2636 wrote to memory of 3612	2636	msedge.exe	84
PID 2636 wrote to memory of 3612	2636	msedge.exe	84
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85
PID 2636 wrote to memory of 116	2636	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\eacb80b913f83d5a557b190637588ffc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff819de46f8,0x7ff819de4708,0x7ff819de4718
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:4852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2376 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2848 /prefetch:8
  2⤵
  PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:1940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:4384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6096 /prefetch:1
  2⤵
  PID:1128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6696 /prefetch:8
  2⤵
  PID:1208
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6696 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3036 /prefetch:1
  2⤵
  PID:1668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6552 /prefetch:1
  2⤵
  PID:3540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5324 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6516 /prefetch:1
  2⤵
  PID:3748
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,3371983691781253293,16994716852801427269,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6744 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3280

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4224

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2252

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3536

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000013

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
c150ee071064ab05b411c43805e9abd4

SHA1
f3a87223dab3535a36e664cf1db38b41841da89e

SHA256
72b47e42bfb58f43746f1bfef3dcaedd7a8c0ccf93d4452ee8b37e4f2dfc2a51

SHA512
e8b422b38908f6da800bef1e8731c54098354a414ccd2550cb8e3c5300f32dcee80e3a9a2d9b4dec5cff40da9c95e3c2913f5eb6b8efd37593f3621b44163ed0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
38f71bb6d0930e494676a8b650146bf4

SHA1
1b0fb23df04464c2b2e0795a3255b66141094de3

SHA256
fb903057fd860f21f744139ba09b62aaccc3cff079a471d0ea6920413872513c

SHA512
4ef1072d7b87293d189215a12c42f5fa8e1b6bd3697ead7c391bdb1a18b6d31b0a2e349226b7e667632096a2484527bd5d18e3e138b5e03a88e0fad97b9301db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
392d35ffc4468f4511c4881a68d965a4

SHA1
a45523943eaf16479f0ac43a9b769c286ed672bd

SHA256
bb3eabf73768e4b854865a1801632ceb5098d88a88b6ddd6ea1d8422ce3c4c60

SHA512
72161152d227db1d6d18cf383dbc8e4d4f42025ef24f780dc9ed5f40f59936c47515e196b036ad6d8927c1e894c39a31a5659fae5b60d6dc66eef7aa0c130722

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
d58294019d9bd5de2dc93f3a2584595c

SHA1
eb3ffd7b0d955a429726554c7e0aa8b83536c885

SHA256
366e1e263697f2fcbe4d25461a0d90f47bf1b7368ab4025221349952331b0477

SHA512
54737cbf352dd7d38ee6edc4bf2a3e9814f54736991d92027b731571d21114e3f6870aa6e7d3bb937ec5c756f512a7a5fcec1c55d3683f6e8748abc039b7c88d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
be8877558ba3b1fd7def344cb9daa8de

SHA1
b24d9a9e9c1580fa792dc9b14d44c379bbe41b89

SHA256
8319dcffa5d7a0cc68467a5ed7f7893cb72fb28bd0a208df72fca399ec114f1f

SHA512
a342baeb03ce80eb23228ef7505b725fce132d41f0eb4e9262d6a91acff52a3b35632fb24bc4d31a86f211204206d8bb9c7d9c0548eae777633b204229c3e44b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
07859d0e2024641c56d0a07566a97406

SHA1
19543b5b8140ea483365d03bedb55cd8f45a81f4

SHA256
df3753c23ab767ecc849999f0f5e685b8311c2f1d31a857939d8a4bb395e6332

SHA512
b238e42bbf8085aca6f212902566eec935d38bb5545061adf6e89169bffd7c46e40178fa8f6757958656d94d803e07585ae1ec8aa463f7e76b09eb07eccd733a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b9991e581ec78f9fc95dd3c74ba72fe2

SHA1
b92bac6f2250c0eaf25e0f856c1a4739a633cb6e

SHA256
9276b8674a3ef8deaf3472405a451f21b682928e9556c0b1eaa56ee97b3b618c

SHA512
4ec037d0cf71c8b2933b57e397478011f4e582657eca361a90816e7c68dd2d9057183fe61b7fc38e7f8ce7c39bfbf7decf7a752de01813abda75376672f9c5f7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
17b51121bd1a00b188d648010900493a

SHA1
ab943e07c10579db6edac392b7f09cb6fbc1a126

SHA256
689dfe052df5daccc937f3848a937bebeb88d6133e2b960243f9b82e1b3cfbc3

SHA512
a3904e27fa58bda2f36eff8431f7a6b57d1fe1814f9f081b8da956aa8dd9ec40e80f09bc8884c6d249deca98e34b7ad5aaa8b3b49c2690bdcda250d561a5e091

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
874B

MD5
d84bacc497d49eb6c36c8f1cdcc6379b

SHA1
a307b688ec078eb64569d02f2326067935c9d372

SHA256
cdd453be0b0d3464965e2eb5eb335663f2f0510be8edbf8f4f746ec7734d24e1

SHA512
e898936779e253e842e9be7e017479b9de2e4499669f3c5299290ac4bcc61877583bfbdbaa73b4a73c060ed8fa2fd21f634f57ee87d939095dafbeeed19f8658

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe584dae.TMP

Filesize
372B

MD5
f1302cfee675276696b599de03fbdbd4

SHA1
0e1490d94f233a59f5258ad0063097e9a080e614

SHA256
7305078e8cf90ce27553d5fd14b1f7f9b3dd66438154100d2ba7869555695f8a

SHA512
d5d6d3e2b40286c651b666c6dbf3aac42cd9fc26abcb305360119cd24eab0ab66b13dcfd1ac668caf1ebcd472f967beb1798d6cafa893e9340e801ca25e64923

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
115f41b69c24dc90319ca5864e5c081f

SHA1
a1491fb5c40b3d65be5e9a000e5d77f38fd27418

SHA256
ea94d8e8c2d40bb2083bf2c4d550c5f29d284016850b4a4c415b105b9643840e

SHA512
8434ac357cd8a5988c14ecbaf0cf4646e51bcee816f2c5e0aab2ee664c1421e952796bc86846c0e3dc130e3eb3cf54813367f66a1d2f833cf68335a8c27ad960

Download Submit