d56c9fe3ae3cc2f834cc23a1a22525b7bdddec187c79e28c537c7a80d3173577

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
24-10-2024 05:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7296e92c9b49dc387dda933f22cb5bfc_JaffaCakes118.html
Size

248KB
MD5

7296e92c9b49dc387dda933f22cb5bfc
SHA1

f9e2c72d34f1171621831626abaf3be609b133b1
SHA256

d56c9fe3ae3cc2f834cc23a1a22525b7bdddec187c79e28c537c7a80d3173577
SHA512

759e23d0b15841929e5c6aa568bc3043ca7b90dc5d935860028d3ba6011c49f1443112f99f881861e8556c4deb8a83497d316f397fc7a8465397128d3c108edb
SSDEEP

3072:RrGOgMjH+up8xD3Tk4HKUd6NAO1F/fxT2IOS5qNOdnUD6taa/foMATSn1xZ3hTXI:sSLp8DHkHZ6

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2944	msedge.exe
2944	msedge.exe
4004	msedge.exe
4004	msedge.exe
3840	identity_helper.exe
3840	identity_helper.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe
4704	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe
4004	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4004 wrote to memory of 5020	4004	msedge.exe	86
PID 4004 wrote to memory of 5020	4004	msedge.exe	86
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2012	4004	msedge.exe	87
PID 4004 wrote to memory of 2944	4004	msedge.exe	88
PID 4004 wrote to memory of 2944	4004	msedge.exe	88
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89
PID 4004 wrote to memory of 2844	4004	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\7296e92c9b49dc387dda933f22cb5bfc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffe1a8f46f8,0x7ffe1a8f4708,0x7ffe1a8f4718
  2⤵
  PID:5020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2196 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2944
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3288 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4900 /prefetch:1
  2⤵
  PID:1604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4868 /prefetch:1
  2⤵
  PID:2664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2532 /prefetch:1
  2⤵
  PID:6124
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7116 /prefetch:8
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7116 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6184 /prefetch:1
  2⤵
  PID:5008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6660 /prefetch:1
  2⤵
  PID:4612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3596 /prefetch:1
  2⤵
  PID:1684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5260 /prefetch:1
  2⤵
  PID:4396
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2100,4362803367301427285,9134274637875451610,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6220 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4704

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1892

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2604

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
6960857d16aadfa79d36df8ebbf0e423

SHA1
e1db43bd478274366621a8c6497e270d46c6ed4f

SHA256
f40b812ce44e391423eb66602ac0af138a1e948aa8c4116045fef671ef21cd32

SHA512
6deb2a63055a643759dd0ae125fb2f68ec04a443dbf8b066a812b42352bbcfa4517382ed0910c190c986a864559c3453c772e153ee2e9432fb2de2e1e49ca7fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f426165d1e5f7df1b7a3758c306cd4ae

SHA1
59ef728fbbb5c4197600f61daec48556fec651c1

SHA256
b68dfc21866d0abe5c75d70acc54670421fa9b26baf98af852768676a901b841

SHA512
8d437fcb85acb0705bf080141e7a021740901248985a76299ea8c43e46ad78fb88c738322cf302f6a550caa5e79d85b36827e9b329b1094521b17cf638c015b6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00001f

Filesize
42KB

MD5
101f2295c59a6c129b95bb68093aed06

SHA1
12f5843daaf99bdb874dfebaf10660c54ede2120

SHA256
9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7

SHA512
f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
bd04f5d73dc308bad8198494c22bd980

SHA1
cc11577cea812aa6646207d2fe2aa2450d60ac6b

SHA256
aaaee0eaee6cb929756cabdcde21e7f3ec5061aadf507ba8e239d86592f2d038

SHA512
28f84351ed6ab034a187b0de88afcf23412f9d42cb09885d29f78d942058d247ff7051d2580ed45ef6c7426f05c0caf58918920dec58fd448c4e1e76c017989f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
6d2538ae82575ab78db026c0e361b295

SHA1
7b3c92d6ff18cd72f3c5d4f9c1c5c457e8af0091

SHA256
71f887dc72eba6a347f0107c2c819dfb8ec29ed3c742288c805ca4d04a6f7272

SHA512
1bb659cb25d6adfab1db10e1dfa4569af01cae106f91373f4ab79e7e998d8287a41e7bc195fb242dfe10e9bfd34ff9967fde0c1274f8373c6b05afe6702eea3d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
fc4df8d13f898faddc4e837c077ab9dc

SHA1
8814e54431750d1df464fb98d2de565c0b911803

SHA256
d0571c7b5d020ef6a2107069f2f0dc361eba8c9c4770ba339dc9c075231c1a0e

SHA512
402bdc5ca29bbaa6623a363011fe931528213b49163abb3823ee89439c7fe52198e390566668d8a9fe452484fc7b9509d46629d9812afc8abf9297b378ecdb0a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
721a9c5913e4f4b4326c943f05437203

SHA1
02c52596ab96ef3b49dab7fdfe682974205ce7d8

SHA256
3e970fe91623e7a990f9dc6bef1facdc4d9c53d2a93a3389aa436ebcb430b039

SHA512
ca4db214520f1eeb5d9d616e241c33582c482cba5cdcdcc877e10ba3caaee74051748930bc4b7dfc996190f1d22d8d0b5e0034c713824fdfaa05db6abca3a190

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
fa51ca43f28ea5bffedd6c374ccfacb9

SHA1
9b458adf3092ebd7fccb156e301877c4592ef360

SHA256
6cb31d0b7c4a7479b1db6721683e73d0c00f700159da8104aff809b8eb22f251

SHA512
a37449a0227da53b661397f2a2ed8d1680e0722673e6a40ab804f6610bd7f424b33b2cdda4d4b4f19f743e74f321e1474b810a760f177c53db3e0ea1b8157c95

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
379b800db06b1366503beca3e5dbd8be

SHA1
858a313e399930aa598e2abf218e5d93c66a296f

SHA256
3e8400f2f73fb42f4d8b7190f5e5e14bdb1ba3d327680b3131f59458d80070a6

SHA512
a311f7b068bd3c0a4226030994faf05e7d89dfe4951374e8d007cfa88a334d5308a49047ab15d1335a09c63374da34901ce8ef8c1f6215e506369388aa446f18

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
4ccce02da7dfcaf9c3b74af787549873

SHA1
3bd547fe70c4df23f91d1b9df222b0f34520eb17

SHA256
93f939a87845e6772f49a4f6e0624d4866627290a779f14fffd48bd37dc025bf

SHA512
35f3cdfbeb3844f62f704e04e3e85aa156223f297de85364c7f2cf220ac1e1e7fa22346f7c5f5741d93f2d86caff7b950754d926186c9d5d542d3ee95a05dd84

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
47d046af3ce7c0d15ae3f1175305993f

SHA1
be4bdd508a0bd73d9a100d50c31b31c1b1882900

SHA256
444164a8816c395ee6c703f9ce7fd8b1297bb42dff64ccd82ad9070224ea4550

SHA512
4badf8dd7058ca14d5f5b2332bddf864666033b2878bc91cd6a4849fd4988d02e767ce1316fb0b7080b3b13405e246ba23237efd14732e5371970aad04c5268a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
075e00ad3b9c34f63654a9f6e324bb2c

SHA1
50e0c2751ed764f537a4703522d8ec03873efe82

SHA256
59ee04f0fd0a2c312e9ae25163d7f5634e3cc1c32837e11b2c82a2b89ff5f764

SHA512
e2956a7552de77087ee20cde45dbe47873592cce1918304130bb95c01244d1ac7eec742963c7f85a628e8bf12f93cc76cf46a592200ceea89fd0d4da5847789a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
56944378f4326e69838a95db1c086b4d

SHA1
8074117964aadcc6daa5d726ac2560df7a41b201

SHA256
b2c994f00e12410603b39ab2098a8d2e37342c629f5c61eef4425bcdb33afbd1

SHA512
4d6bcd03b86f4e67b6e639fa55557b28e7b016e431fd0334cfa229c6da5d26faa1bddedfdd8070ff3ededef117c7d1bbb40552616eb549ae2b15728300949005

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
1KB

MD5
ff5fb69b23611abee5b02c6b7219c75a

SHA1
aeaaf0c16684b20d11fc2f0c8e74e2d3decea341

SHA256
d45023b4b2194afa84d44997bb1ba8d6649cb18b37fc57f7ca3beef2701aa65b

SHA512
3b18340f264a9fbe71584971b2327592a372f017558c2480889f2ad2d1e703a6903858d068ea91f6b29067f116e36722d458bb827b96c0af115c4a007f7b32bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580654.TMP

Filesize
1KB

MD5
ffb6a90618d67436af12ed21c3831ffd

SHA1
fcee25ae66a529e823e14fe5338f64e8b3087db2

SHA256
f8fa038762e1bcf6f8c27b7e99603d94a44e8d6a95b69602ff1419a608ed16f4

SHA512
5a8c4c6cceced9780e305725990d189611cb1bb1ef0a3657aa93710c3937a99b57502c4edce909bbb6b9db4ab205814f53caad373c7d6609322d1a079a17a750

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
83cc9b70b01a116a1526d4b79d13656a

SHA1
0da4f567c997abc936998d8c367369ab62a026d6

SHA256
cc3e5cf77357d3fac7758180567ad7de62bcf9701dc4ec747703478b42b87ada

SHA512
beafaf81d9338429c6820e16aa32243139a93685b958447562d47f53978738c2b5dfd9fa2cc16e1eec5866af128a07b1a5ff87a906e602dd4b58de53dc37ed06

Download Submit