dbf83e6253fc0de76a2efdeab657d481119c63368a5b7ed9a556749e5382c0d6

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
20/04/2024, 15:59

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

fd2050f82e714e5bdd3951d438ffe95b_JaffaCakes118.html
Size

57KB
MD5

fd2050f82e714e5bdd3951d438ffe95b
SHA1

a1ad1429f6748ea452c53ffc27dc54fab2c8ccc9
SHA256

dbf83e6253fc0de76a2efdeab657d481119c63368a5b7ed9a556749e5382c0d6
SHA512

bf56baf6293d65548a4a8c9cbf88551dce081370acf78bf58f8885735be7b4acabbd2f9b7323244359d38af6b87edd90cda97995186752117b360c0427c69f21
SSDEEP

1536:ijEQvK8OPHdsAIo2vgyHJv0owbd6zKD6CDK2RVropywpDK2RVy:ijnOPHdsG2vgyHJutDK2RVropywpDK2m

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2460	msedge.exe
2460	msedge.exe
4960	msedge.exe
4960	msedge.exe
5392	identity_helper.exe
5392	identity_helper.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe
4448	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe
4960	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4960 wrote to memory of 4572	4960	msedge.exe	86
PID 4960 wrote to memory of 4572	4960	msedge.exe	86
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 3380	4960	msedge.exe	87
PID 4960 wrote to memory of 2460	4960	msedge.exe	88
PID 4960 wrote to memory of 2460	4960	msedge.exe	88
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89
PID 4960 wrote to memory of 4884	4960	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\fd2050f82e714e5bdd3951d438ffe95b_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff80dad46f8,0x7ff80dad4708,0x7ff80dad4718
  2⤵
  PID:4572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:3380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:4884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3300 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4956 /prefetch:1
  2⤵
  PID:2344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5076 /prefetch:1
  2⤵
  PID:2248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:2992
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6092 /prefetch:1
  2⤵
  PID:3212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5640 /prefetch:1
  2⤵
  PID:2336
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  PID:5212
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6560 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6040 /prefetch:1
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4804 /prefetch:1
  2⤵
  PID:5412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5812 /prefetch:1
  2⤵
  PID:5808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3760 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5908 /prefetch:1
  2⤵
  PID:6004
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3296 /prefetch:1
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:5556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=1992,4546487702085108751,15373516914073495624,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2728 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4448

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4644

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1908

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
e36b219dcae7d32ec82cec3245512f80

SHA1
6b2bd46e4f6628d66f7ec4b5c399b8c9115a9466

SHA256
16bc6f47bbfbd4e54c3163dafe784486b72d0b78e6ea3593122edb338448a27b

SHA512
fc539c461d87141a180cf71bb6a636c75517e5e7226e76b71fd64e834dcacc88fcaaa92a9a00999bc0afc4fb93b7304b068000f14653c05ff03dd7baef3f225c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
559ff144c30d6a7102ec298fb7c261c4

SHA1
badecb08f9a6c849ce5b30c348156b45ac9120b9

SHA256
5444032cb994b90287c0262f2fba16f38e339073fd89aa3ab2592dfebc3e6f10

SHA512
3a45661fc29e312aa643a12447bffdab83128fe5124077a870090081af6aaa4cf0bd021889ab1df5cd40f44adb055b1394b31313515c2929f714824c89fd0f04

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
1KB

MD5
25e50d5d50d56e599abd759bd4ae85f7

SHA1
6f365ecfe15260b4439c23378569e9afce5bc97a

SHA256
7e61af1564f0d1f92518391184a6c5e61426b121020800bb9dba15c44b6d4f6a

SHA512
601c412b17665defed4001528f1c9d78b51f89d0217c520146dfc4070f6fa5b78108172174cff5a632d002a0926ac23681759c5b294fcb1302aa1f95e0d32e36

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_best.aliexpress.com_0.indexeddb.leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
6KB

MD5
da77d5e9c6c77983b5de0d6cbf9317aa

SHA1
a7b4b40352ef686c4d27038ac7f7971ed1df2201

SHA256
c2f2671029f4bd67975e73dfda26f7b0b6886570ba840ce41a0cece117a18b38

SHA512
9ed77f1b989b12181e075fe4bc31e80808fb704012af0bd779a8128b558b3dc5210bbdf66e6512e2352083bbe8f7fc892a33d520102b2fb04ccbe925dd10acff

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
6619c3fe459902be992ca928121c4486

SHA1
dfa8f970155c7de185ffb7a849625e93e17024f3

SHA256
065d65ecfe66838274958d57c23b8f12e8813a8c676de762551d12701bb3acb1

SHA512
dafce6b7fd2434da940bb5189dbbcbfcf48d6aa709537c9969068bf72eed8fad08486fa74ddc545bdf7875097e3d62690a7a2200b1c124324038c7c6b0321124

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
bb5f80730bfa00f44c9ecb90ecc0c2dd

SHA1
0821a6b6547b96eb2281bb86aaf390e54a06e3dd

SHA256
87f5969d7b2021fa9d07cebb9a9840f34534e63ba3bab3dc59d24932eae88848

SHA512
c2e409c9256d9b854f1acd7d3f6b04eebcf7827199fa5d6d89ffb185bf94e526bdef7dcc1938a69a6796cbed39f1b58bd960de6d9c4c71acd8c20e437e6f966e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
a00d8adbf28e8976178741678b7a5595

SHA1
222cb0fa87872f81bd60dc59fc516dbc9103312d

SHA256
e7b2afb274232696948a74dafff2fcd53e4b36d172adbc42b26e1485c1cb98b3

SHA512
945a11a7c4e7d6c2d48a49686793494dba198e1fc346670439c8107b24a072b5b8e33937da7d9b3b8c7c2d49fddb55c197500d2e7fb1ce6abdb7f1917450b3b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
240B

MD5
1c539df4aba1c9ad82af55fdff1130c6

SHA1
580fa6f164f64280f4ed94ae1a6d29e8536fa2b7

SHA256
2603f348db10e55993b07f2d7e073e214cf2ecadee11135f1e3cfbaa9debef2f

SHA512
2906ee8cf7d2b43a7bbf32c0be0593614aff4590e940ef325842c664892712fbd1e00b3bde0dbf789e98e306ce8e5f68946da69f12868aaa0549b122a24ad1fe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57c208.TMP

Filesize
48B

MD5
a305609e1ab64efee12c5025d06146e7

SHA1
47a900ea746ae139d466d120c2cc2a03ff41d6bb

SHA256
cb73f349775659903585ec6069265ce408088f54680697bb56e06d6b40535ac4

SHA512
96c161d4c64d69a6a6a63affa21eeccc2b6dbb5efc27cc8e4fd53e65f9696f007c9c2c6dc4983f791d63b752692aa87e77f0ab9690501037deb7d01e97166066

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
8KB

MD5
d5bc8082aa51106bd9e5636ac183931b

SHA1
e76cadcf7b69fd11b6ff092ae93b14558a688951

SHA256
50e9cfdab899d1af8a3201b805e8ae145a810d104b9cba7a35017419f4995096

SHA512
8f1b8cd5ddb5bbfbf3fa4a91e55936c879e9824313c6b8a63734dac8c077c6a7110839b76d3c6202c1353988bf584e2a61d6b352401334f41ade14e222d42a69

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe578f40.TMP

Filesize
2KB

MD5
e48217165b9620c297aee4e8783a2b87

SHA1
4c447774aaaf86ec9f0a780dbb8ad23ada83ed68

SHA256
f5e245fd410ec497b80aa6680dfa26705497900eed9b314407b3d21fe1fc1f26

SHA512
f001fc2f9c9b5528aba9babdd29c5c33f634252bc162329c69e3082f2928b85ce3bcf1872b2b73caa037372db70e622bf577564c5d01848507ada1df58caf6be

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
d2225dfb5295f5d16e70ffb870a24402

SHA1
33d839a21c8833234ebfd6cf78f12c1e274ce21b

SHA256
1ae96f2764249e0f88cdb8b8c21f5188e7c29327f6a1c3ed19e9dc5ab858f406

SHA512
d5f3ab753882d48bc7335b5882ef34b6c674cf69f6b8d02ce9edc78482b91330f6dbe7a2413c587329c8d9ce2c854b7bca4e6672ec32063851c4063ea0056a34

Download Submit