5d325283cd6fc2d040a480e34750dc1a775c774e4b0e30c0788b640b937da975

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
15/10/2024, 04:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

45c6231adcfcc2e9dc52efb7026a4740_JaffaCakes118.html
Size

293KB
MD5

45c6231adcfcc2e9dc52efb7026a4740
SHA1

f9507a9f42f2b38b5ba5dc8e3fa839e568f6a571
SHA256

5d325283cd6fc2d040a480e34750dc1a775c774e4b0e30c0788b640b937da975
SHA512

5e5327a293586138f040fdee950a290d1c5ecbe144b7e84631b13883985d31a59639a380a327a0bb8b844c7b33c7325f0e0b0dde79e14c33c8ae7a0f3a9a1843
SSDEEP

6144:SmXppaJqs5YT8Pqnd4PR0saTZe1OSLj2coNnRnvD+Gh0DMW+LQ/Qnlw9CnNpuN28:/XppaJqsIu1OSLj2coNnRnvD+Gh0DMWx

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3372	msedge.exe
3372	msedge.exe
2028	msedge.exe
2028	msedge.exe
5216	identity_helper.exe
5216	identity_helper.exe
5432	msedge.exe
5432	msedge.exe
5432	msedge.exe
5432	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe
2028	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2028 wrote to memory of 1584	2028	msedge.exe	84
PID 2028 wrote to memory of 1584	2028	msedge.exe	84
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 1060	2028	msedge.exe	85
PID 2028 wrote to memory of 3372	2028	msedge.exe	86
PID 2028 wrote to memory of 3372	2028	msedge.exe	86
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87
PID 2028 wrote to memory of 4428	2028	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\45c6231adcfcc2e9dc52efb7026a4740_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe25bf46f8,0x7ffe25bf4708,0x7ffe25bf4718
  2⤵
  PID:1584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2160 /prefetch:2
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2784 /prefetch:8
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:1432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:3732
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6100 /prefetch:1
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5976 /prefetch:1
  2⤵
  PID:2452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5236 /prefetch:1
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6256 /prefetch:1
  2⤵
  PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5124 /prefetch:1
  2⤵
  PID:396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6448 /prefetch:1
  2⤵
  PID:3536
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7236 /prefetch:8
  2⤵
  PID:1232
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7236 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5216
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7080 /prefetch:1
  2⤵
  PID:5232
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6996 /prefetch:1
  2⤵
  PID:5240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,6035258446951283678,3355605183618296184,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1976 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5432

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4560

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
0a9dc42e4013fc47438e96d24beb8eff

SHA1
806ab26d7eae031a58484188a7eb1adab06457fc

SHA256
58d66151799526b3fa372552cd99b385415d9e9a119302b99aadc34dd51dd151

SHA512
868d6b421ae2501a519595d0c34ddef25b2a98b082c5203da8349035f1f6764ddf183197f1054e7e86a752c71eccbc0649e515b63c55bc18cf5f0592397e258f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
61cef8e38cd95bf003f5fdd1dc37dae1

SHA1
11f2f79ecb349344c143eea9a0fed41891a3467f

SHA256
ae671613623b4477fbd5daf1fd2d148ae2a09ddcc3804b2b6d4ffcb60b317e3e

SHA512
6fb9b333fe0e8fde19fdd0bd01a1990a4e60a87c0a02bc8297da1206e42f8690d06b030308e58c862e9e77714a585eed7cc1627590d99a10aeb77fc0dd3d864d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000015

Filesize
21KB

MD5
b71613e0375f6f211f4ab00cd6f4a404

SHA1
44d5d3cdb0557bf68883b7d945ca6b846b4b880a

SHA256
8f02639c91d1a17251999479b0a614298b12dc90870206a3a23e16d643693818

SHA512
24173076e0da8c96178272916362c380aef0156105786bff767f4555c95d148143dd16b06a8379db9c28ff00696499a0cc214cc0396683795ee8633a414bb064

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
936B

MD5
db51e786bbec11bf995dcd1a8b4bf366

SHA1
3d76bce8f6779d5005aac6a563d10f5ae4af77da

SHA256
274bd4bf1198fd740a26c4fd5748419dc24435c4ef75ba4cd48649657e27a70a

SHA512
04772dce387343dce1f836f9df970046312d7585d2fd2ca7cb1f7ff0ab05c4c7d178b4aa3afe04bb2446c9e9374d9190d555ab609d5688e1ff2fb905e9202a88

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
965b9931d528f5583ca01268c8ce8b89

SHA1
61e86d38d190ca41dff9d4995ad0e7d0b3abe2c5

SHA256
551fe275f1d1cedd6a1efb44ac27fba0bb7e33cb5410a2bcb048ae56bd719b3b

SHA512
4b7cbe0c2776506ea0505e4b4b3f23223691ce31aabda9e96395e5f88ba053dd05c5197ae57fbb346a6302b9c5915ed2c2ce8b523e21865c5a39e0cdc2d79505

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
d6b14a4372bc51ad7a98c18fced23a42

SHA1
8d00420dc234054218a8e33c730b9d3cd73f23f0

SHA256
560ac2fac6fa9d0f4f93c08582c992f93320d01289f4f866585a562c581ba7a8

SHA512
63753b5ad13b3783470f6cd8293257492e5fcbc341e0d1df88f701ef19902420d4bbc434d31145ac6fe72c91931705db8b52f9f806114af36c82cc68ad4d54cb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
b98fd859f2c97ab78f1ec73659e9944a

SHA1
493e6224441f9b6d982bf02b105e198cfd7e6e26

SHA256
cfc38fe8ddd6772615144a4ebc50b69838276a613102c2e2222e846d71a2945e

SHA512
7ee094967e3799527829faef7e2afd08013093efe9a9d1155cc79bfb21a1ee301ac835d971e574904e0b54be49d41bf339e01849d0d24eaba628c02d19b62bed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b402a27fc7a6c2697dcf79c8c69f0d68

SHA1
1a92db4001fd6fb99010b83974e5b6bc6e901bf4

SHA256
cb6ff4d6d586287fe364791d427d7662650ccdfeb70a84a5a7b0c7465a53f646

SHA512
e76e64c9340baeeef6cc95f24a8098637688d9fe350f44f76daacef59dcec282bc79a759808982cd4fbba520f9ced28e47aac63d9a284bc61787ff4e55a84af0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
2KB

MD5
144b6f64249d36f0ac3a13016da735a4

SHA1
eec31cb34b12f75bc5cd1f870df0133da4c1b1ed

SHA256
3d1d9623d958c4562c7b076ff45a73430cfff4eda4b3c75a4db70ee1b4c39b4d

SHA512
33ed8634bb8d0694692bb755dd06d4c4c07819741b97349ff21745a1673f4bcdc567f93a2e60afeb4a55ce8872a5ff74388349d37c370fc767679b97dfa9ac6e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe58365d.TMP

Filesize
702B

MD5
66e6ed8df3405ff650abb06a29fe41da

SHA1
bf5b535070d78f2cff1f4a97b872f51564317284

SHA256
c4f6d6495167b0563c85ad244a2c80797fe243be73041ac4b4a2372509732374

SHA512
00d5476058fb0cd23cf1928ac29304cf4c7a0440f9525eacff5e511472619eb005442e6153f21a573f59dc85d90c5cd8676eb7a77e18cc2cd12a383151d51aba

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
a8e10c531bee0d6b8563a3e9ac1409ea

SHA1
30c1bd6bd6cbcbb4ee5056f26f565071d32ab531

SHA256
463a88e12f9fe2ee16d1c3e817217c06ac9c387c5d9101a48972c1fb7ca41567

SHA512
c7ffdc19a8de05c2adfdd990e2f75a580773ebc1ad22ba630e7736fec61159620936e312835143934e097d0015e366bc3cca9708bea9d79d02f3da7bebf4f44d

Download Submit