a10ac0a46ec50a2eaf1a6428b6dc0946f6b3e4c35b43028d8d6c3dd2e64f1d47

Analysis

max time kernel
145s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02-10-2024 03:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

08a7d821f1fe55cb754ad7f192a794a8_JaffaCakes118.html
Size

109KB
MD5

08a7d821f1fe55cb754ad7f192a794a8
SHA1

ba0341ac6a6a295dc596a1a0f11ad5fae77b574d
SHA256

a10ac0a46ec50a2eaf1a6428b6dc0946f6b3e4c35b43028d8d6c3dd2e64f1d47
SHA512

98f715d3c40f94be6e0944be10c2a210ad697ed987e32a6d0a158f1e593e81d31c0b9af2a7cf2f5c0ef1ff1e218d072df665b8549763858a56a7f124c4e41fc3
SSDEEP

768:SiiwMLlBgOrKWNuAuoFJC6RvuqNFgMaZ3vEy+U0INFgMaZ3vEy+U096Dkbo+MgDP:eru0xl+MgO/Hy4EO9od4hpwf6ocVH1Vk

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2796	msedge.exe
2796	msedge.exe
3936	msedge.exe
3936	msedge.exe
1052	identity_helper.exe
1052	identity_helper.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe
5884	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe
3936	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3936 wrote to memory of 216	3936	msedge.exe	82
PID 3936 wrote to memory of 216	3936	msedge.exe	82
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 1008	3936	msedge.exe	83
PID 3936 wrote to memory of 2796	3936	msedge.exe	84
PID 3936 wrote to memory of 2796	3936	msedge.exe	84
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85
PID 3936 wrote to memory of 980	3936	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\08a7d821f1fe55cb754ad7f192a794a8_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff379446f8,0x7fff37944708,0x7fff37944718
  2⤵
  PID:216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2084 /prefetch:2
  2⤵
  PID:1008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2384 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2796
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2852 /prefetch:8
  2⤵
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3220 /prefetch:1
  2⤵
  PID:4472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4076 /prefetch:1
  2⤵
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4752 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:1948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4984 /prefetch:1
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5248 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5424 /prefetch:1
  2⤵
  PID:2304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5776 /prefetch:1
  2⤵
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7880 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7880 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7124 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7208 /prefetch:1
  2⤵
  PID:4724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4060 /prefetch:1
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6988 /prefetch:1
  2⤵
  PID:2596
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2068,7677878077127412780,2244118001898784263,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1724 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5884

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4816

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1300

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ab8ce148cb7d44f709fb1c460d03e1b0

SHA1
44d15744015155f3e74580c93317e12d2cc0f859

SHA256
014006a90e43ea9a1903b08b843a5aab8ad3823d22e26e5b113fad5f9fa620ff

SHA512
f685423b1eaee18a2a06030b4b2977335f62499c0041c142a92f6e6f846c2b9ce54324b6ae94efbbb303282dcda70e2b1597c748fddc251c0b3122a412c2d7c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
38f59a47b777f2fc52088e96ffb2baaf

SHA1
267224482588b41a96d813f6d9e9d924867062db

SHA256
13569c5681c71dc42ab57d34879f5a567d7b94afe0e8f6d7c6f6c1314fb0087b

SHA512
4657d13e1bb7cdd7e83f5f2562f5598cca12edf839626ae96da43e943b5550fab46a14b9018f1bec90de88cc714f637605531ccda99deb9e537908ddb826113b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\14db442a-f21e-463f-acc1-edc03baf6e4d.tmp

Filesize
4KB

MD5
7a789fa0ed93eaf360e9dca8f794dac3

SHA1
19b682ad6638e95735070a3fe7a961109c3955c4

SHA256
05febede574e750c8ace09fcc7eb7531632c67a56bb8d1f00ea051055708b22a

SHA512
98ed53549ba87960338175d5df63a2bc2678cc238a22c591cdd1d41edde0f0301f7511fce735366d4a1a86b4b65d358438b0f40a2dc4c67247ed21c7a7e18496

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\37769139-50fd-4f01-b77f-f66d61f5913d.tmp

Filesize
8KB

MD5
61e663c9a464c2345f858412198d9765

SHA1
58efb961b841395db84ca3cc59931933712ee5ea

SHA256
0cb94fa76bac1af3d2bc5c35f6ddcf6ab85f2e71c53267fe8d67beabe54b7665

SHA512
31a8c9c387f387f62ae44fed578b780b701366e81af1c5aab474fadef2f9e55d32da8becd525a7b71065c7dd7c2a6aed19cb510038e38372fc3fd24dac491618

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
336B

MD5
d3faf40d8a59a72c2b6e1634d389810e

SHA1
c02391244fa2dbd9d4a8e5999445bb1364832521

SHA256
23ab84bf0772440e12dfb8d2afbb3aceb7cbd01311ae168e6ca03141adfb3a04

SHA512
31ebd4c2ed25be3af742ca316d070b39de2fb36f903f2849ac31c5414bca6b98386772f9ba0973447883c06fc9edbef9b6ca43eecf4fdd9d9a8d9966b4f1712f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
312B

MD5
a52dd38cc156495dbc1439f5607a0266

SHA1
60a8f194fd01d25ac0e9dc3ef609009e4fcd13ed

SHA256
b9129c0cabec76e5e5b388e0eac567db267d09740ee7fb280abb704cc25aad2d

SHA512
90736b4cc3d4ae7bd5858e416337b82549bd347c97d954b63a5dc16bdfc6d40e24f5df2d8543243ad62914323528c5332524eb7b23fce143ae2d6b3a56e9feab

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
3111ef91dde43803114d605df521b0a6

SHA1
b1c2b43249648ae8e535a003e1355e146855fa75

SHA256
0c252d2e6b4eb1f4f0a3fd5b067d35c1a34015327f13e74b8ee8d02e48c27b1b

SHA512
8e6edd512cda7d1eae0e853d3f009f08545cc76d259931183eae9b3ae2cf7d015eaaa8611d4353d6d8b4b0f0081c4416aa6b2aceeb76f9d7daa1657a8ac34e4d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
21a0b982b683a85908d0b10a9b7b29e7

SHA1
7f0551397ac0e69c615899b9e80010f771d3143a

SHA256
1d31a4a5d755c91ab06a9e5a50177cebb6a0dd49958b03c326b324d840c6973d

SHA512
a5cc506e1920501172b56f41033b95650d3f06547416791974a1660b50f37abb9112faed801b69325f65844fe833ecc02cab2c475dd970417100ca236f3b3f41

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
b9e2d0a2079e3a0603e3630072fc1a58

SHA1
58a697648c3f392a50c3ed173754b0515c854ca4

SHA256
3c82fafd9ed684efbb523281de87f2f38c11c747561506c55020a81e9162eff4

SHA512
b4c0277cbb53ac7786676addd4c301e8a829870f1a7da4e5db51a955a52809281a8ab42c627c72d232c5597e86f5fc69b8895a76d10e2e7fdf8c85443d165077

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
6b8a93d05212024a69c03b1a55ea43f1

SHA1
6cc4ab944556f65c5da50a7affff4161b5f9bbe7

SHA256
19b9160db66cf42d4bb24a77268ad198b02bb3dc02943ab80e6dbee1da55e5f8

SHA512
2ad4f5558763072b631f64a2c533a490d3288a7dd2b9840a7b68b4a54d08f2c2fd792192eb8a77ebce390e5806c67a865e455394435738824d7e95e7ed8589d4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe588085.TMP

Filesize
869B

MD5
ef3b4c3747c15c8a9a9d3d041e506360

SHA1
4ebcac7466e13181ed034562a6fed7ed44ccd3d3

SHA256
58f58d7a236688087dab9772c647a02039790e7d5edce6e90234fcdea6e9cdbb

SHA512
660a8857984e65ef299c5ee1e33a9b7b249b2460dfa7ee2f372c67705bdc40b34b2c95a5223dc6198ce7fbabb775026d1ec9233da5cb47faa649750eafd95608

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
2f3eaad76dde1eb3bedaf17255668b51

SHA1
1d44b38208f44459c659c3ceb92688b865ad707f

SHA256
67e6af7630a9d3fb229728bc24b117c660b3141b3fc03166faadc8660f938b01

SHA512
c3432536ab83c94ff6aa1902b3e5f68c3dc40a39f67399e91f0ef0258923353588d2dc073c31b68b5494935f903a7be3f4c2dd76d329362cf1ea3ad20357cf03

Download Submit