d254c0885c06a426281422bb767c588b9dd3a81f2e19f3fa0e889ba74a4f58a5

Analysis

max time kernel
148s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
31-10-2024 11:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

82c41fa1a6f7a2dc13616ef48d84b7fd_JaffaCakes118.html
Size

96KB
MD5

82c41fa1a6f7a2dc13616ef48d84b7fd
SHA1

d1f4b9a89c3c2a01217aae923eeba4119db01e1f
SHA256

d254c0885c06a426281422bb767c588b9dd3a81f2e19f3fa0e889ba74a4f58a5
SHA512

725cee6b30ddf4708e36fd770cf411e9c0d4c7ea2f333169b2340d16b6f11173cbb365c2a2f84d212a19cd3223b808046ccc25a9e44d18d65a4d6c7d9b465801
SSDEEP

1536:lRSkZVYB40AMY8HYnpBgoGnOU+G9bBC/3R6/ZbWnOSOvvEjsL03gw5dAag8SSlqR:lRSkZVYlAMYznpBgoGj59b83R6/ZbSar

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4268	msedge.exe
4268	msedge.exe
1632	msedge.exe
1632	msedge.exe
4816	identity_helper.exe
4816	identity_helper.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe
1976	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe
1632	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1632 wrote to memory of 2028	1632	msedge.exe	84
PID 1632 wrote to memory of 2028	1632	msedge.exe	84
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4552	1632	msedge.exe	85
PID 1632 wrote to memory of 4268	1632	msedge.exe	86
PID 1632 wrote to memory of 4268	1632	msedge.exe	86
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87
PID 1632 wrote to memory of 808	1632	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\82c41fa1a6f7a2dc13616ef48d84b7fd_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffc061546f8,0x7ffc06154708,0x7ffc06154718
  2⤵
  PID:2028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2076 /prefetch:2
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2768 /prefetch:8
  2⤵
  PID:808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3164 /prefetch:1
  2⤵
  PID:3616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3208 /prefetch:1
  2⤵
  PID:4084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:2904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4156 /prefetch:1
  2⤵
  PID:2644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5728 /prefetch:1
  2⤵
  PID:2548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5128 /prefetch:1
  2⤵
  PID:1348
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:4952
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6240 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4816
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3864 /prefetch:1
  2⤵
  PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2260 /prefetch:1
  2⤵
  PID:2740
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5672 /prefetch:1
  2⤵
  PID:3524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5520 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,16195214841183802116,3427431768785224544,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6048 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1976

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1500

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
328B

MD5
7179d6a099984cde7851f90593eac77f

SHA1
d789dca544d036be48a77a268896c8b016e3a8ca

SHA256
015fb642472c4659eb2a11eabaebe5e90439457af1744d34edab226f41b82ba8

SHA512
41ed16b73033ad510ceee400ce89af28bb27fc9bbba9722516a7f1a7f6c2cbd47965f250e7abfddd710f99bb4f73c50fccc2da20bc6b01228bffa439fffef29a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dc058ebc0f8181946a312f0be99ed79c

SHA1
0c6f376ed8f2d4c275336048c7c9ef9edf18bff0

SHA256
378701e87dcff90aa092702bc299859d6ae8f7e313f773bf594f81df6f40bf6a

SHA512
36e0de64a554762b28045baebf9f71930c59d608f8d05c5faf8906d62eaf83f6d856ef1d1b38110e512fbb1a85d3e2310be11a7f679c6b5b3c62313cc7af52aa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a0486d6f8406d852dd805b66ff467692

SHA1
77ba1f63142e86b21c951b808f4bc5d8ed89b571

SHA256
c0745fd195f3a51b27e4d35a626378a62935dccebefb94db404166befd68b2be

SHA512
065a62032eb799fade5fe75f390e7ab3c9442d74cb8b520d846662d144433f39b9186b3ef3db3480cd1d1d655d8f0630855ed5d6e85cf157a40c38a19375ed8a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000016

Filesize
42KB

MD5
101f2295c59a6c129b95bb68093aed06

SHA1
12f5843daaf99bdb874dfebaf10660c54ede2120

SHA256
9b59525954d9da17ff56cac0c0cda55bb6c4df6b7550fe68565fe0d24a963ac7

SHA512
f5e54b7609a1884253f1d05d9245def95b3721e1163ddabb6d32f5b31f824a218c60533eef25a6f91d8ae6fa314128ae258fdc341cf9a4f36bf378e874b5277f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
1542cfa47386240f3cb21dde385b3671

SHA1
411eeb808f994d018e51d47d235a8ddf80a9d27a

SHA256
6ccdc6f3922b51b82dd26322bf731eeb04b032e7f6735a7b81f588360ef20b3b

SHA512
358bbd0f4ecc7316d27e75ed85c249928867d7a1fc9924d9d6836e2f76885598586699677ff62084fef759a867c7fd4930358b8a45839cfaa163a13d329c462f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
360B

MD5
db5b34e69f425168a32f51a71d0f2c4b

SHA1
db11c3b3bd87d5579b05367e5e7185e4cd401c47

SHA256
9186e7f505003bd0ccd18e9f0613b1efa59de8c704e2de4edbef61fba284fa2a

SHA512
fccbb344ac51846c6dc2f2764bdc33fc40a5c6cb2a7c459870743bb12f7787cc21339a249020cc3b9dd4c7ed7fb2656a79c360215516e8c7f2c86a11de4b0742

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
384B

MD5
3288a004f7991712a006ee747e3ce825

SHA1
bfdd394effd9f07473b8d220742e4d5d45bedf0a

SHA256
d6bf8624f885b73f6da6b0d011cab4d710e07b78ffe7db380d5e9c52091fe76e

SHA512
02a045defb5eb37165d2fb6b35aa87360dfca3c778e3e6fa6a3ed98e70d202c2be63f9d78257e2d7184caf5244b3deffcf1816bbf1448c3f9e3b3dd474297f3a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6536a0d000b67c851c74445cdbd8706b

SHA1
55740777c47f2929b267b7d424cca68b6e70a17b

SHA256
52ff80834072bbe7b7dcb721f4b9e7a6ecfe7684d3fefa38988dc34a966e0a50

SHA512
59cf80652488dee3fd3b2113f09424998c1f2b833eec105e64595450aa10e7dbba636fcaafdc6ae0c241ab16da33049eea665a3b7c72d571b511ad760624523b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
40b25a96ea9c85ee20ea019b8d108115

SHA1
7a8f8e3834e87bdc39e2944ed0bd26f08f2126d2

SHA256
02fe3d6f4dffefac8304f29343f80683f0ea7192cb57f9d9faa42e5b2e7a241e

SHA512
064bff8e3e5b78404250eb7e645a25461852f3a09eacbf99de513317a32930f853136d0d1244d0dfe08996fb9920634cb26e4672c3a7e9e862d28b2cf00b0aea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
797db18319028e9dde680b0fd8b489c8

SHA1
3b352ad96efe6be46f45f65804e4e23fbdafd783

SHA256
59a633d5a76700d71dd24b6d109c721385661fc23225ac664e2d867b8bf83172

SHA512
96f43e237b88f2087c96745a6cc0ae98c4aeadc30fc3ffaad8be0124a36632ab5bbe5a4a06d7e284281dce0af776640d29098378f495daed9d69479eb09372e8

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
95385d838abb8ed159c93499982a708d

SHA1
c9cb1742580b46f07d37bef45b1b6eb7b7143618

SHA256
37c169649f65f90f16c111ca38e33ea6c5f784e50fea41775612a7004fd4b5fa

SHA512
131ab8b95bd0ae7187113d97585ca85969b2261ffa7a839a5c10c19fb6ac55e66c577189cf619a33e682ded3270b843228fefc9c2f7ed46bad2c76984e69b4b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e7a2b2ebd9a214b39c83ba76546e6cea

SHA1
e631038b49074a4a771bb6c2cd863e04750d68e4

SHA256
ab3e1e83cb0fc79ba6becbb4d03c22141c7f6955540d6cda1ae33b88e9dbffad

SHA512
5f6dd42332520999a5a86c9f464d85e7f5c235d6791563a23860b1e4a90f7bb1392a0db5efeddde31a78f9453ed01048bbe87446d093d9c631a4727edf43744e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
874B

MD5
b81c3ee43e854411ab8869eb5be77aee

SHA1
57f4f372349d99513158bb8e994a287fb8006687

SHA256
0272775277bdec95f99294095b2d76c6318b54d2e4f388125b4f1bd7569b5ecf

SHA512
c7bb654e16fa7b66f30ce09061a789388d9220ace754c6d1c4f8edd9f9c8ba4162e325bfdf51be78c42b6c8dad04f2067b5277fab892c3bc44c7ce09c1b6c710

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe580ae8.TMP

Filesize
540B

MD5
a3abee8fe7fbaf34b0c1729a45d1bb9b

SHA1
e2da19075a77383d2033bd19c195d0099efe1c26

SHA256
9928c3acdabbcdbe184f541a07030a74f15f22e4a4a11485ea47f9b51b24f6f9

SHA512
e2fd094e91ef494dce18d90e3fcc8af82529aa7937043a1e5c9316e4d9afa2b923e6261c3ce03f3d1ad301a332b618bca3f1b2c56ae91b4e653553cd0b94a220

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
3f85b46c5c175a562edb47bcf4a65340

SHA1
f6bf97d95dfb7e25b9dd5bac155141271b0862f2

SHA256
f3d69f1730b72e72e05e8205cfec4c75549ffbd415771596e7a7d94bd89cfb8b

SHA512
4a00b9d611047be8bea16f058b89554706e922d191fa15649f0d967b96a648961c38d82a9d864df3df2ef6fb66a743496fbfd32ab575621399ce14a2d1a86195

Download Submit