2761afee26de0a2cdcf703fdddf139325d09289d8e8f68558dac6c15cc48c5d7

Analysis

max time kernel
148s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2024, 19:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

103119d9cedba54d9f8279d226a4d249_JaffaCakes118.html
Size

104KB
MD5

103119d9cedba54d9f8279d226a4d249
SHA1

63c9b1558f4cead1c9b7b85466dee919ac44d7a5
SHA256

2761afee26de0a2cdcf703fdddf139325d09289d8e8f68558dac6c15cc48c5d7
SHA512

b203fe8b7fc1c0edb7e765bbb5f9d8ecd1f4034d367436b224657f4b13e1da388adccbfb56676c8db68678fec3c63cc44f96b58dbff6e71383c5ce075d070d7a
SSDEEP

3072:0z2aHtY3+GXluPWDForsvPvQ86+fHf5dD:0z2aNYuGXFHD

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3660	msedge.exe
3660	msedge.exe
1872	msedge.exe
1872	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
940	msedge.exe
3108	identity_helper.exe
3108	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe
1872	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1872 wrote to memory of 4936	1872	msedge.exe	82
PID 1872 wrote to memory of 4936	1872	msedge.exe	82
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 1504	1872	msedge.exe	83
PID 1872 wrote to memory of 3660	1872	msedge.exe	84
PID 1872 wrote to memory of 3660	1872	msedge.exe	84
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85
PID 1872 wrote to memory of 2560	1872	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\103119d9cedba54d9f8279d226a4d249_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa2f8c46f8,0x7ffa2f8c4708,0x7ffa2f8c4718
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:1504
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2484 /prefetch:8
  2⤵
  PID:2560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:3088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4708 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4856 /prefetch:1
  2⤵
  PID:2712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6060 /prefetch:1
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:940
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  PID:1236
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6472 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:2044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:4576
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4068 /prefetch:1
  2⤵
  PID:3768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2124,9996172627280832370,11700947645526036697,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:3152

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3560

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1584

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
9b008261dda31857d68792b46af6dd6d

SHA1
e82dc88e2d1da2df7cb19d79a0346b9bb90d52b3

SHA256
9ac598d4f8170f7e475d84103aead9e3c23d5f2d292741a7f56a17bde8b6f7da

SHA512
78853091403a06beeec4998e2e3a4342111895ffd485f7f7cd367741a4883f7a25864cba00a6c86f27dc0c9ce9d04f08011ecc40c8ae9383d33274739ac39f10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0446fcdd21b016db1f468971fb82a488

SHA1
726b91562bb75f80981f381e3c69d7d832c87c9d

SHA256
62c5dc18b25e758f3508582a7c58bb46b734a774d97fc0e8a20614235caa8222

SHA512
1df7c085042266959f1fe0aedc5f6d40ceba485b54159f51f0c38f17bb250b79ea941b735e1b6faf219f23fe8ab65ac4557f545519d52d5416b89ad0f9047a31

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
23KB

MD5
ba16446d3d17a4f4aa3c0880fc626139

SHA1
dc8508bb58c7fd75a075be5b1948f482691d25c0

SHA256
83c4e32b4545e45bd3e673698c9c905a7f9ce02ac5c08642e5ccdf2624c7a35a

SHA512
4f9025d959fe3dfb874baa5765d9b46d8b042b6772a4f79e5d56ba4226b872fbca5eeb60ab93c3c247445e879194cd787de7eeb4cef8654ba0452a8601e05711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
ff3a0c449091bd6d4962d61755d3e466

SHA1
07f828c7e1b1fa45a11a6b5f7f5952dec031812e

SHA256
6da8cd5f69e2970b03066c0fce6b955d5dd3c5cecfcbc42c784a3610454e1b3e

SHA512
12ac7af13154aee749190e28e943d4c41b29971fa1440aa2da2c8016fdc0a6633d98ff958fa50cf3b63ac82f6478afcf3115b256f6fcc26b8b0cf8665804cbf6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
6238f6b50e43f9a54ad73e2e780d7c8c

SHA1
db72435c2fab250fda164daa4b8e273ce76c8075

SHA256
c43040ac708218df2351b9e3eac751b13824df29d3a4da62324e178bf868339d

SHA512
1eb1fed18145284c53ae47129732a2d9a43322453d768bc6324565006a9becb67239ffe9959ff4afe66749cb067585f6d282a25f5c518e5fd76d56aaa47abb60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
2e45b5afa57faedff1a21712491c1c54

SHA1
4d3a5603fa101cb63fea3035fecb10bfd8e550fe

SHA256
7423cf453ecf8c381b736ac7c33b783038cbf5676e8a10900fe0d577e297b47d

SHA512
2c7c73339ae0411b9d5a0118eb571c2c61b61e407ad4e23136716693dfbf762f0d8831a8b47ae6796646ea44ac74908d3e50d29b78f9427f5c00d21c9018eb69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
2bd6e9b538c3506b48cdcca4b7ef5f00

SHA1
34997ae946199e4cd3f1c11a3d96e89054870ef9

SHA256
e85e0245b0e2e5d1b2e45acb66ff7881b6d276a65f2f952e6f488ca26d56576f

SHA512
1b5841212e7bfa67408f58bcaacc4f425dbf4109dd25e61e90db35f508d6afa28b82587d07ebe4fc3ffb4f5c880696a6f8c09e5a6be922e83ab763f0164ed50b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
82c99ceccbe83d6d13a10431c3507968

SHA1
de7b61c4310a65a183066b3e54015d69fda10ab9

SHA256
df9f192ffa0b8f2056a3c82b48b38870eaea9d9d5ce62fdb547ac8fe7ae3f05d

SHA512
cf656f26f77fc0f6161ab212054a9b342d4ebf0d29f479fb346d0df3135793438aa0747bec2f5b7e8f9653a3393bba139a94bdb9342d38e6b199c5d63ef8c052

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
c10b5fd0ea00a12ea342f000d11f1075

SHA1
1fd7de212f6e5c05010002b76f7f57af76b705db

SHA256
51ad60ef20e7d30946d33bc0e185b12e5a906db4b8f29a928cab604778e4f936

SHA512
7c6753d321f92094101abfa2991be15041702e7a4814996e8a93cb68ded45680d258f94e75fac777394c12551f8aecf8007a0508091e60e03879c69bfb9a005f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
86d0fd81bfcade19b6b04efacfb8c84d

SHA1
6410a6ab6e27efe3d26ce4843bb070cb15f8d333

SHA256
e1a4e761c9894f6c9910d7317c7b9302efb69bcf8b242744e8f1e00a38978be7

SHA512
2379a7d8dd7345f658910d41b262dac69e58ead7ca825f84104290869590ec534bf20fa005ef438b02c032e1b6fa4986ced4388a4d7cb95c040384c89f1cbd28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
7ca6d77382f9f8280d582320412ce91c

SHA1
3ed559b2f1eb9cb6996b69d3f77b28d83dfe2545

SHA256
b636c97a607d0c1d8e86c7d01c59dcedc35d93c2c853128cbf5f02221961ccdd

SHA512
4a4c0ba8b92fe3cde25269b9afbda0ba289625607d0fe81641efb101878056b34af81b9389dbc3d45a9bc4ff77311163e1ae0d55df1d42491eeda5ae7e15e38a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
707B

MD5
e407cd396cecf3365ff6df297805c934

SHA1
81ddb7ce26ec72b139bd2718919f2a4ebd68eceb

SHA256
4ef1f5dffc19a9ef368d3d588cb5cd2be3678367e7c6a168a9229cd935241d9d

SHA512
4618384aeabf260d2dbe1c370d929bd02d7cdf40c8603f0f6902b0326093d7ae77d2f3bdaf3666e93553137464bff39ce2b6702d0bd1a4f035ac8eaaab37ffe3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587848.TMP

Filesize
372B

MD5
097a3bd02bb59a5b756a759b4d290e0a

SHA1
d126f5056d8b88ef30f2bd6413efd6d68375d185

SHA256
7b0027a97d4f65be7f20b2a2d8de1a65a4adf3deaf9c652638e9ae678d655670

SHA512
e63ede74e745d6c7827511871829d59c84520336d9717290d45dde62cb87021c700608060250dd2a6a2d4e7461e45111196a7cbe7bbb02238f5e7d8e1f872ea7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
7d7802027625e085621857b13d62505d

SHA1
e7cb44646f4868627e14fd9efddcc238c3ceafa3

SHA256
ee733310052180e1f65f4958ccf9fddb7c4d3420a3a6ee7a96284a9fccc77a21

SHA512
391304e386fdcc7db4c2869ee4ab556c56adc60e4939c97e846532fe4d6f24856952fdd29d35d1a79ed5fdcf73c6bafb106b3f9fc9d763c08ad5b1a798b8e0f0

Download Submit