6fba8a3d1b91519b6a8b97b3ef7e9542cd3b30ab20bc0e56c679a06ba3eb0ccc

Analysis

max time kernel
145s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2024, 14:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c82f58d3b540f9c79e195901328732d6_JaffaCakes118.html
Size

53KB
MD5

c82f58d3b540f9c79e195901328732d6
SHA1

aced5eb3d1550541300aeab20e5197581d4df7a0
SHA256

6fba8a3d1b91519b6a8b97b3ef7e9542cd3b30ab20bc0e56c679a06ba3eb0ccc
SHA512

08c9e7ccf283b525d6fdc21d1530f57f31d252b9591da8ec561fad00aff0ebd919fcef895634cb4ea0f2c8e9b29d7ba7e1af61fb0f5ec703c000ae91cde60eed
SSDEEP

768:dRS+jdlKiZ5dYhXWE+upjWm0mKcNrxRQnhbQM4qkkUnUa2Tb0bQpBfbHuvBA2fw/:3bI9vZRQ0HnT8pBfKvBA+PA3wtxe3

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5004	msedge.exe
5004	msedge.exe
4228	msedge.exe
4228	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
3056	msedge.exe
1800	identity_helper.exe
1800	identity_helper.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe
4228	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4228 wrote to memory of 520	4228	msedge.exe	82
PID 4228 wrote to memory of 520	4228	msedge.exe	82
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 4564	4228	msedge.exe	83
PID 4228 wrote to memory of 5004	4228	msedge.exe	84
PID 4228 wrote to memory of 5004	4228	msedge.exe	84
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85
PID 4228 wrote to memory of 544	4228	msedge.exe	85

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --single-argument C:\Users\Admin\AppData\Local\Temp\c82f58d3b540f9c79e195901328732d6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8d0cb46f8,0x7ff8d0cb4708,0x7ff8d0cb4718
  2⤵
  PID:520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2212 /prefetch:2
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2696 /prefetch:8
  2⤵
  PID:544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3216 /prefetch:1
  2⤵
  PID:1408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3192 /prefetch:1
  2⤵
  PID:4128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6132 /prefetch:1
  2⤵
  PID:4972
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5788 /prefetch:1
  2⤵
  PID:3240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5784 /prefetch:1
  2⤵
  PID:2316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4652 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6340 /prefetch:1
  2⤵
  PID:2524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5972 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3056
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:408
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6812 /prefetch:1
  2⤵
  PID:452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:2404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7020 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2180,11353858848648613340,4327758658259937460,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6820 /prefetch:1
  2⤵
  PID:3060

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2436

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\9e87de97-dcee-4e2c-b9e9-7cc9ab67423a.tmp

Filesize
10KB

MD5
3e1a121c6dc8aa9b8e2df3303460c7f1

SHA1
7ef527893455b35088e19c212e00e3856caa99f1

SHA256
5f67a74ddfc9f444dfe647dca6bcb7b2e456621e323f80c5175c9b1d19ec10cc

SHA512
8165d27ec4f23909c1a941abf3924428a30828cca2f4b9f5d99e8be4c53ba206a105b1529363499467d5b01871f94b3296d77ee1ed2438e708795cfb27a844e4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
56a4f78e21616a6e19da57228569489b

SHA1
21bfabbfc294d5f2aa1da825c5590d760483bc76

SHA256
d036661e765ee8fd18978a2b5501e8df6b220e4bca531d9860407555294c96fb

SHA512
c2c3cd1152bb486028fe75ab3ce0d0bc9d64c4ca7eb8860ddd934b2f6e0140d2c913af4fa082b88e92a6a6d20fd483a1cb9813209f371a0f56374bc97d7f863b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e443ee4336fcf13c698b8ab5f3c173d0

SHA1
9bf70b16f03820cbe3158e1f1396b07b8ac9d75a

SHA256
79e277da2074f9467e0518f0f26ca2ba74914bee82553f935a0ccf64a0119e8b

SHA512
cbf6f6aa0ea69b47f51592296da2b7be1180e7b483c61b4d17ba9ee1a2d3345cbe0987b96f4e25de1438b553db358f330aad8a26e8522601f055c3d5a8313cdd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7ea1063a-0631-46a4-a378-dbe7dbe2ab20.tmp

Filesize
2KB

MD5
23e7cf95354e88aa5802f5bea1a3222e

SHA1
bb76e8e2be4834513ec9f7b2f3f616b981197562

SHA256
c226d80e867a269a8e9a039fc318cc5dd77f40eb90e82b29c948dc64b05d7517

SHA512
76dbceeaba8988b4a466bc4c3fe37b5694ea92964ac82ab21fe23b67c7382979d2e3205e4e9cac65f2274124e31132ecda94b05395d38ab0990c8a2b27097a9e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000a

Filesize
20KB

MD5
4b3121a05808b99aa6e0cc12924f77db

SHA1
ee5805bb76c384d1e1667aea2976bd2f4f94c7cc

SHA256
e4fea32bac89d9ad34b13a25b0b4da1321920b2c6be2cabb75ff91bf6109152c

SHA512
9b83d55691b41d2a45a542d163c1b6a47208969720ec1fd15233f29ddcef2243e79895cfcb008767f91b3d1cf3a6288248e8b1ec50027eb96db04cde56cb2605

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
89802f3243d3b6d11c51f7350e97a3b8

SHA1
4e347d4d5244ce97096588508aedc68198b5cb69

SHA256
32965f14d2bd2eae2061947455e14c1ff68986a563fa44928f20b73822e59071

SHA512
002184fd65dee2b34bc322a8c5a05e45d2825759d787d936c9d40e7bf41375b3d8bc15f5f2fe3d465c38ea364fe83a8004982e4bcb23244383a5ded530dfd607

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
4ca4ca8365763908723f2696f87573f5

SHA1
12f2bff16595027aed728b86d1fee86660cb0656

SHA256
9cbf8f2763c30af3e8bda5aee732350a44ada75e440538d5e375aaf9d38d51bd

SHA512
6f856f3fe2a28cd969d76742fdb8f8fa42dc118487c1239e4c13b2acab5d9fcce8fe5e9c62e2e9a4a1ce794127a5ce4f74fb73d1c09b8de184ab06936d0362ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
c546f3561be1850537cbbc8e0646355b

SHA1
d6371a2fd72554f5d39ab5cc7f3fadfbc6cadc43

SHA256
c55c8784de50297c435a7c1e255571440fbf1e873d774a709abd8aeb4f44454d

SHA512
da23f9c65ebda9bd9045776deb9a1b993abb1a14de8a0599b8339effc8aaa28fe0b6c3c614b594f9c25bebf0866ac1e2370bdda5d92725cbe77a7ff0d8ab45dc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
719835c90e73fd3aff3e973932324314

SHA1
007e06828362363cb8261c0dd23d374efe4b389b

SHA256
f02695266cf0eb2b593ae047efedc3d16306841291ddc017254ab29704335340

SHA512
a92d50d18b26a2c62f159acb1d59ad6343202c3433cc3f2606be4dbe734e86fc1c27f3a64b6fe4a86066902873527ff58d56ddea3a26705a60de7c10dae9886c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
4b8c078fd0b2c6f4e0ec8d690c4eb7ab

SHA1
544697640088fdce62baa882820ec8780210b368

SHA256
8eb8411a722c55f7b9d7774e1bc3e65273650cd18a34184e25d6bce4917eec99

SHA512
6d9809f0610d6294c14bf3bfaf6edaf7f1202d469d672bd6f21ad3e0d00fa7d0d138a4e6478e7a15f987b0d1580a1aeda43608366d4d4e30ed4ea4a7228658db

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
523996c551b7481fc15e08cf83d46780

SHA1
a2616e0678929319f20ff525bc0e80d7679a9a84

SHA256
cd785205fb6ea518c5e7a056a762058b0b57a40d5019a2a279a35d987e5e44bd

SHA512
0673055845ab48d3fb5c6dd80eeb96ccfba103447ebc64e3b83aa57dc2aefeef2582aaaa44dbe9e177bdbe96a0bbb44960b382079318bc9ce9f36be2d8519876

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe581f4b.TMP

Filesize
203B

MD5
591df68c93dc418ef685d718178815e4

SHA1
c586d603d037c066f2182efc99d5c27ae0e00c44

SHA256
3ce42596ea8dccf0a745527c20953b5f9086728b08f8b55c92753b46065b08ad

SHA512
01dbaa68a056bd636d2bc42463a8dd949a0d104ea737fbc95c6e395612284d3aabf0f5a5b760ad3b614dbf86badad7feb3131554b345a640276d853e4c40eeb3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit