d2a6945c610c9a46dc39070af88135785e43e5ab3c087379e92885dc0304bc24

Analysis

max time kernel
145s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19-10-2024 00:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

59ea82ae115eaddbdd37e4c22b9fdb5d_JaffaCakes118.html
Size

117KB
MD5

59ea82ae115eaddbdd37e4c22b9fdb5d
SHA1

cd52231e490f9231111d7a3377ca0a26dfa349b2
SHA256

d2a6945c610c9a46dc39070af88135785e43e5ab3c087379e92885dc0304bc24
SHA512

377caa6e1af685d15b3fa8e7e9b4024b1be627c86474c77113d5ed6eb8cd004c4dbab065c59be9484164e0b9a46e4a3f01237d5681f8fdc3212b5f4b4fec7774
SSDEEP

3072:iEa+DKnhVF5UdcUV/EktLbDL9sucIQ2ytgqv9MdkBv:iEa+DqfQDL/cIQ2y/

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1372	msedge.exe
1372	msedge.exe
3780	msedge.exe
3780	msedge.exe
1692	identity_helper.exe
1692	identity_helper.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe
2016	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe
3780	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3780 wrote to memory of 1184	3780	msedge.exe	86
PID 3780 wrote to memory of 1184	3780	msedge.exe	86
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 2288	3780	msedge.exe	87
PID 3780 wrote to memory of 1372	3780	msedge.exe	88
PID 3780 wrote to memory of 1372	3780	msedge.exe	88
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89
PID 3780 wrote to memory of 4984	3780	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\59ea82ae115eaddbdd37e4c22b9fdb5d_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa173b46f8,0x7ffa173b4708,0x7ffa173b4718
  2⤵
  PID:1184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:2288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2636 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:3120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3224 /prefetch:1
  2⤵
  PID:632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:3548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5100 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5524 /prefetch:1
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5544 /prefetch:1
  2⤵
  PID:2932
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:2568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5904 /prefetch:1
  2⤵
  PID:1448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6228 /prefetch:1
  2⤵
  PID:516
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6680 /prefetch:8
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6680 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6788 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5724 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5756 /prefetch:1
  2⤵
  PID:4064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6668 /prefetch:1
  2⤵
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2064,636867002612830404,14837452294838376175,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1860 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2016

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2800

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1352

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8749e21d9d0a17dac32d5aa2027f7a75

SHA1
a5d555f8b035c7938a4a864e89218c0402ab7cde

SHA256
915193bd331ee9ea7c750398a37fbb552b8c5a1d90edec6293688296bda6f304

SHA512
c645a41180ed01e854f197868283f9b40620dbbc813a1c122f6870db574ebc1c4917da4d320bdfd1cc67f23303a2c6d74e4f36dd9d3ffcfa92d3dfca3b7ca31a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
34d2c4f40f47672ecdf6f66fea242f4a

SHA1
4bcad62542aeb44cae38a907d8b5a8604115ada2

SHA256
b214e3affb02a2ea4469a8bbdfa8a179e7cc57cababd83b4bafae9cdbe23fa33

SHA512
50fba54ec95d694211a005d0e3e6cf5b5677efa16989cbf854207a1a67e3a139f32b757c6f2ce824a48f621440b93fde60ad1dc790fcec4b76edddd0d92a75d6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
23KB

MD5
2f24e0f5d2c2997a89fb4a8d943c141f

SHA1
99515bde1a5bf72105116ac902ccf3db1dd3df29

SHA256
60c9ecaf27ba56d7c35aa78c329aa7dfa586e6c71ed3cdd0019ba7e767b18aaf

SHA512
0f4c5508dfdcf0ef63141df8d29c76e219d2ec433d59d37d7f17e110b455f24235fd0bc4f539ad5adc368285536d73f57dc4e21e3201dfd5753e76789208989d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
a0f73cd469a479d009734370cf95b124

SHA1
d9fa734f9ce495133f689350f9f25a0072baacfd

SHA256
c4db714902c770999a0b39ad61956fb85429b9b368ddc87cd74f61a184623e30

SHA512
b8ddb356a373eba6c81d4b773e0c9515fa0a6100aef9866360ce7b5cd653e9e484e9035e8497d4a00e7022f13ee644a65bbf5b1cdccb801978f9bd97f924290d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
d9529b9a4ade5630b06cc9d35f0aa135

SHA1
f50bcd2f72932af930ba9e287f0a6fd9b1632fb2

SHA256
add850810ffc2729abcc361949f87b1e3249c5f03e9654f3ccd69e31abf648fa

SHA512
8316760af0125bdb03f18bedc56abf9ff1220a46d067cc5334a407c6548cf98f5994efb1a602a14ea052712fe679b5eff82dff9462ee3a962f19541df6a463ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
8a90bc21cabf00be391f128280323910

SHA1
b59a19b5c2d7c1494143586ad0af10fee9bf242f

SHA256
6df1749abce5bc2dc73a9de2348957468d21544c37348682e30d74415bb87cc9

SHA512
083e0be98997b7276a5f74c839b0cbf170b2d08118bd580eb67aae8f75dcc7455ed3f719bf354fc8d355c6430066b934c275d3fdf8de5d0e48a73b85b705b1fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
28577227a674ad48d200a5ac82997767

SHA1
66126bfaf02488e8dffaf8456ab4270598d133dc

SHA256
1b2bf26b17dbe8897737255937deb7e82792a7ebb9d54f88932f205bcadc078b

SHA512
cbb864ae00698f9a07277af942130ee2f0a73b952bada7882f9354646de207668681406c2ced9f4b1bffe835a30797b474beaa5e8e20402d795d5ad57215cd54

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
f34026461c5f7f7cf88a15399be5f153

SHA1
a16d6628d13972a0c51c304ab5ae402eaf0c6ec7

SHA256
32001ebfa0c0c45205fa136c3f8602c221e0dd41c8f7f7eb75a5cbbe9eab3bd5

SHA512
bce6c186845728f44ba93d343b6e34f2be2bc2e4c982f7e2b13a95604ce0d0946108086e5f9973e002f4cbf65de712ecd63e3a25a59e12e32b43878d31b055e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
8c90cc8e85362752b3c7874e08d43f2f

SHA1
54153d5c4e6022504a6f38fbcd0b2677f20e4d89

SHA256
58663fd21e6d5e910f4dda452944225dd5b73bdc63a94b292f31418d1916969f

SHA512
0d8548fcfe470967fa11d04737985942d6bfb28f585318b65c18deef09ae1ad36d6fc547499333c92655f95f199ee0e6ea09cdea0ca61e4dd514f279ab94ef08

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2027f9461891bd1433a3854016ff970b

SHA1
474ea51f70d8726315448498b80e84b41d1f516b

SHA256
6ff5ff1379029a634e1dc44e0cfa53117e0adf5fdb255acb64174873f7daf29a

SHA512
c29980dbb4f53906568f5b1ed6903f30e17b3a46d0f677890f22f7d9e339ae997c2ce27075331ad34de1d4b447af93cfada1fc2fd80cfcde25ba690843c27c48

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
08171122a1df462e2c2499dbeca614fe

SHA1
0a5a70112458f599337c2e7a2f9a3d145c2b17e4

SHA256
9e68b73d6ca72f7889aa5b8ee971dc430417fbfb4c4776f567fe84daee8961c3

SHA512
5b28369536ed7df3e328a17d000800f61a19c9a00d78cdc893d67fc4ce29792091f5e1fb4608ce75ab01db7e92f2cafefdacab4f77378bc50985cb5b7e3df41f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
872B

MD5
50669665b7519cca20766d5ab7121781

SHA1
1af55b0f7144584454aea7b8931cec3b260b1070

SHA256
dfdc88be44ffb82d6c5060de6fb33f72377ec1757226d65710fdf601cfb8bec6

SHA512
4c8145f83a86c41a5836ff1ce8717c26acda7ca4a7bfb2667b1cb4d145c256df8fdf29977a5b146bae4ed67a22ba9c24c78e21286187ded4ab03c64a2e3cd4fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe587dc6.TMP

Filesize
538B

MD5
e99c32a9f85ecd00df88598d35ea1238

SHA1
9d524c6cc66ffebcd163da243f15ebc2a4c138c2

SHA256
9343775317c8e78560f3bdd135ef8862e8658f19647f2b74574534224a01a282

SHA512
4d53e291597535cb450b30c4a451f8c5d21e3618e8f8dad3a9ef9d2f3e719b86672060b78a7d149e87a30d0a3f0311c0d544a3ad183cdfe9795cf4cdbf559518

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
aba940275cf2d161f0fe4d9de70b5fdc

SHA1
95db114cf615fbc270ebe3bba9977c1b8803faef

SHA256
8fd0fa9696b075b53efa1bf39c397f8089279fdab59f33da41f68f26099742fe

SHA512
e43363f80c690ce408e121b548bb76c4720633aca8ac92f90e189c2a540aa4f393d1353ae8010df16cc841275b4f4fdf4a5100ae048811701a763a6ef5f8aa2a

Download Submit