f562239b50007f47e47c2c1a308767e96799b3b1637b25bbd91da6d80dfc93eb

Analysis

max time kernel
145s
max time network
144s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
08-10-2024 17:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

22fb6ac56b59b763f1a1d1fcf3c4d047_JaffaCakes118.html
Size

113KB
MD5

22fb6ac56b59b763f1a1d1fcf3c4d047
SHA1

b98948fc45c0eb75d9147b801d56b6eef16889ee
SHA256

f562239b50007f47e47c2c1a308767e96799b3b1637b25bbd91da6d80dfc93eb
SHA512

de9129197d414b7e8ef006054b09a4675e8b2daa20aee66b938dd42af87931d8d76620d983973ff8402f3341a8a3d36947577e152c73675e4509c047810e2aac
SSDEEP

3072:lASkZVYlAMYznpBgoGj59bQ3R6/ZbSfZMNgw5dAagQMFto06n:QZVMARznpBgogA3R6/BSqNgw5dAu

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3288	msedge.exe
3288	msedge.exe
1016	msedge.exe
1016	msedge.exe
4332	identity_helper.exe
4332	identity_helper.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe
4080	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe
1016	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1016 wrote to memory of 2624	1016	msedge.exe	83
PID 1016 wrote to memory of 2624	1016	msedge.exe	83
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 1116	1016	msedge.exe	84
PID 1016 wrote to memory of 3288	1016	msedge.exe	85
PID 1016 wrote to memory of 3288	1016	msedge.exe	85
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86
PID 1016 wrote to memory of 976	1016	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\22fb6ac56b59b763f1a1d1fcf3c4d047_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7fff61d946f8,0x7fff61d94708,0x7fff61d94718
  2⤵
  PID:2624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2120 /prefetch:2
  2⤵
  PID:1116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2840 /prefetch:8
  2⤵
  PID:976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:1148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4720 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:4444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2596 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3476 /prefetch:1
  2⤵
  PID:532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6524 /prefetch:1
  2⤵
  PID:220
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4584 /prefetch:1
  2⤵
  PID:3672
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2092,8264804077614950967,16635691112596078642,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4128 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4080

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2792

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
23KB

MD5
c6ee151c95d5bd2339c67eca774449fe

SHA1
c2de7e4a87b91ddd246fee53b8274b35fc55603a

SHA256
65edc4727e2bdb04a0ad28564af17bcf3bd7029811429804d283c8f0e186ce09

SHA512
eb04604f00aba42cffeecf266cc7dbfc096708ebe615ed2141bd422585db26a12b54f9c22041c798cb01e4c3d3e5c70fff935b0c7a508fbf61f6201c3dc678b8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
841e60cb668f48f4623a35fc8ef2c624

SHA1
f2d221702730db273841d16c0bfd85426d298539

SHA256
dcfd11ae4debbb072a0ca4a0f5154ef270b75c0c2b0cdda69ddc9e4747e137a0

SHA512
11d735b78b0f9cb2c99b8a44dd33c6cf81468882bd50219b2fbf8b2c61ea612ec637cbf5c80c4264816beb54bdb882fd7090d437d675737d88bb0c3ba5d8b7cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
8716d1b3c711f7927b34aab33e0e5c0d

SHA1
c9dc10264e063ee77a8b8220d7c19ddd017aab09

SHA256
5fc3862a7d534f320e46b96cb5a923c5d92beb25381e174160a8388c1c8d04a4

SHA512
431753d247d6382f8c49c048405e8eed7ad2f3d64ead6fc4e71617504202af4f435e51e916aa5b2a7062ef2877e5ba5e7923dc20087739371f86afc63a203c88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
0b8ecb7b1b3a5674ba52bb530f8b2482

SHA1
117edabaf501c3b90013ce2cbc323cf73fe2e3e6

SHA256
b8b77540df180a5cbefb63f3a25b638529607e8cedd7f2b40498f1ea6e84b516

SHA512
c65d1924691ea824efd5a8472f2206b790178db65678dede33c50d5f353cefaa3fde707a4ba4ccd175d332a8b99c3ac3e8c076318655ff86ed927aa428fd28cc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
8c936f1eceeb1c490f052c0f52f7998e

SHA1
46a1042d3e0114b88f793a2fd20567ca4c32a750

SHA256
b6e2932c35d3a45a1275095cfab319703d1b9eac9fea933c103273911aac91ea

SHA512
7303268427018b4214edabfa7e00c2fee87fd8c77f5ce1f3932cf3ddc04458fae10562ef5cc81e355cee01ca7f778a409a5f34287a675f093002d01ea7fc4abc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
4836853b4daaee8e6d3fb3294b49b77d

SHA1
fbaa2e6488e5372adbd9d0e46de1ccd20c5010f2

SHA256
193515dc4d314545b69baa2f226d69adf3f0dbee0661e8239dc3879d0f3aa9d0

SHA512
f2971fd7334ae91a11631889745d2a405d27f11a593aa66a8c7fb9105b3635b46a9b830121f256a2a461d3d8c52c5f7f6c7e81b7cdc22dc0d1f3b0ce7ecc58dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
dc0de2a77520a5ae5d6a1a22b7a37a15

SHA1
23335238e75dceecd262baf02f2c2bf539138ac4

SHA256
60df486b45b6aebad528727f48976ac1b6fb6946d3ff7428a9d5cadf606cf028

SHA512
56ec9aa01a2f3856bf6eb6daeef5bc9621165b11b485b0a7b0db7ea9a9dc8a71f921d9f8875580e5ca32b1ac00c1877fb3d957fa6c4c99b0511975da8eb4e700

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
3e36d9ca943663c88a1a94fe54d679f0

SHA1
68ebc9071715da89db2e6ff1a57efaf11633f6d6

SHA256
0d96a28f5d8b5ba5f378247efd157a6dc35f885ebc9cf2f30297a4710aea74b9

SHA512
5fbbc2cab21bbc9a618edb80bfeff8d9f65ad1b15d0b12392ab233ac4dc982364064e7f2d8f2df4c4b734e68dd6dd68cb266be4b4ddfb1efd70e6c2a7cf473c4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
866B

MD5
dec2c5a54b5edeaec1b6ffc980ac71eb

SHA1
3da03c3320bdfe20b09e9a82c00c3a4e2b98d767

SHA256
2a2e3b047c7c00d7de019acaf381ee24044d1ebdb7669acf888722c56562ce9c

SHA512
966bc6ac5c29252a82a030d1c0d392f886c59037fc947cab2b1def20febdd2fe3b0cb446e9d23bffb3f7860a7b292fa61b3bf1520171692ae4fe75ff78e7e44e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5813a2.TMP

Filesize
534B

MD5
2379dfd6428df3005a40280b5612657d

SHA1
4b76f78b91e49e3bbaaadf2075fc3b04569f3f3e

SHA256
1ab1b65f1ab52bdb9e5c5a063026be814c1da8c273e6cb409f3037c29a1d4399

SHA512
4966e041816317119991891c7dfcd4cc1afd09e0f91d1b053d39dfc48e7b19c7383f9178ed4ca91f9d5a6265541707859fe80ae5c2f8eafcecebf56d2c8b168c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
5bc20a33f544fcb44bc48354a17cb492

SHA1
c1c941f8a0470d0f2e8585df7c4962cc92d3f8ef

SHA256
8a5bad1e032bdb4afd04eb7c6f46547995e30cb5378f35beb4f5e303ed487dfa

SHA512
9010b5483f08c911d1d6558c2346217734c5e1b78ab717d3bc28b8c9224138851005f4d37573e1db294db86f7f4986f605fbebe849364d31b8fb03a453dea01e

Download Submit