398f72f7a2a6763894dde358ba0d59de7d57da583510838c82d21aa144487bd6

Analysis

max time kernel
147s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
01/05/2024, 06:20

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0b3fc18d2b519c41d3e41cc72f8ee23e_JaffaCakes118.html
Size

106KB
MD5

0b3fc18d2b519c41d3e41cc72f8ee23e
SHA1

3861776b68efa0da649bfa7c280478c32f89bfa1
SHA256

398f72f7a2a6763894dde358ba0d59de7d57da583510838c82d21aa144487bd6
SHA512

062d8d73fadbe1f120aa983236b62c2b650496bbece87e320e41a9cf975601144ebbc30907bbb2b1c59c35a2abf73a250ed937db89fc5e56926185beb8f438a9
SSDEEP

3072:+piu604JXmdWZ498ED/Ach7gNqOjFhtWlbeX/2:+piu60QybAcWm

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4704	msedge.exe
4704	msedge.exe
3612	msedge.exe
3612	msedge.exe
3436	identity_helper.exe
3436	identity_helper.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe
700	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe
3612	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3612 wrote to memory of 3020	3612	msedge.exe	84
PID 3612 wrote to memory of 3020	3612	msedge.exe	84
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 3820	3612	msedge.exe	85
PID 3612 wrote to memory of 4704	3612	msedge.exe	86
PID 3612 wrote to memory of 4704	3612	msedge.exe	86
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87
PID 3612 wrote to memory of 4764	3612	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\0b3fc18d2b519c41d3e41cc72f8ee23e_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3612
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd13c246f8,0x7ffd13c24708,0x7ffd13c24718
  2⤵
  PID:3020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2060 /prefetch:2
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2972 /prefetch:8
  2⤵
  PID:4764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:2940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3280 /prefetch:1
  2⤵
  PID:5012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:3808
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3884 /prefetch:1
  2⤵
  PID:1416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5328 /prefetch:1
  2⤵
  PID:2372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4632 /prefetch:1
  2⤵
  PID:3792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:4480
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1892 /prefetch:8
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1892 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6348 /prefetch:1
  2⤵
  PID:2684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:2172
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4604 /prefetch:1
  2⤵
  PID:4428
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5684 /prefetch:1
  2⤵
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2016,8070459994216997178,15509173324312879266,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5632 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:700

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2044

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4108

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
8b2290ca03b4ca5fe52d82550c7e7d69

SHA1
20583a7851a906444204ce8ba4fa51153e6cd494

SHA256
f9ff4871fc5317299de907489d466e630be63d698c8f7cb77cc81faddbecc6d2

SHA512
704ec8122cc1c263dff67ddbb5c20ee0db8a438674d716bc3be5b266ee5629a219b0049d721f9eb2dd8f2d8fda0163659eaa4d3e1f0a6e9072a8ffb92bb2b25d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
919c29d42fb6034fee2f5de14d573c63

SHA1
24a2e1042347b3853344157239bde3ed699047a8

SHA256
17cd6de97a0c020cb4935739cfef4ec4e074e8d127ac4c531b6dc496580c8141

SHA512
bb7eadd087bbcec8b1b8a49b102b454333f2f9708d36b6ffc3c82fdc52e46873398d967238c3bfe9ac6caef45b017a5fe3938ebf5f3053e4ef9be7b2752b563d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6608d04f-497c-4b80-993a-1d954357d7af.tmp

Filesize
8KB

MD5
0b1c898f319142192e76c719c36a7b3b

SHA1
f5d37b1d19eabf4282a2a216dbe65e3157eceeba

SHA256
b6282029572280abbd0d2721bd8893fdb541682eb2781f6242339ef1efd8e326

SHA512
cea751095b1874b75d36f85c07047542db230000e7bc8dda069f213b4422927325dcb55f24bce13146014556444c2d1c72d1cfa6d512b4b67186f2e4be3738ee

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\68e3a952-523f-43cd-b22b-4e4ee4337746.tmp

Filesize
8KB

MD5
3f933ddf96ca4e335d9a65a369fc40d1

SHA1
271df0ef88fafeb4d8bc9beb9c66506686082d25

SHA256
7ff74494ec81495475549fe8cc4c9a113d3e8f1d26f51a4abf32c44b41f0321f

SHA512
b0ada9f8cc13ba7454caf6cb4045b6611fcbcabf91e4cc92c85b172fe5c766dedcd1d95e792ed66f46131a926c8c267ceff63e398bdb989fcfdf7e562e3a9ac1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000d

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
266fabf04af840b666d15a4b051f89e5

SHA1
14693ca810d4b9947dbc6819276a56919824b908

SHA256
098aa6f5993da4e8310e7db19790e7e6c0f84aa1921e648dbfa54f7423e2dfd3

SHA512
616d0fcd75021f62061c35019fe1387947a8f2104b5b1998915cf7c19be480e9c9535daa524269a30da0b398a6b482bad761dffaf6399dbfd251b13f56e67810

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
136c82574fce1fe931e71bb9dbb870f0

SHA1
c0375f4d60d1173b1b8f7fb94c754b20b55be40b

SHA256
06535000dd9ea0d918694d637b2616fc29ec8e16185d1eff885e48a5f7a676f1

SHA512
d546676d94b7e44cf87ad6d8442baa96ba3801c8ea16aee15b8096ad17be9bdbdb109116e2e933cccb6a2eeacabee37e695926434c4620506a80f60fc6afbf22

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
d88201e9851bc66e2d695adf4fe00948

SHA1
b0f8f93f2da8338233c2189499a7775e2bfe3b3b

SHA256
d6a9f8cf433dbfff3899296044fec4bc6913e47076c9c4db43e138905c89834e

SHA512
18a50f5b631e91465204626d46602b5bc4a3367f2eca91b844d2ea25a0c7fea06c1550a226ec649d92e859962dea6f5b069b8a851c7008b19f3b32afc43723e5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
e72180207a560446ed71c1c97cb3fa26

SHA1
c3579d4df85fa8d29eb3aa4325168b6a63647c9b

SHA256
f05aa1d20ff7beffa5a3894528ac8cf395a4407e8fdebc80ee43b70b2d2f70d6

SHA512
ce9119c04f8933caef8df65ad5cf8c5ca0a19ab0a7f24fc54ec31ba81b070ea00fca9e7cc423ab0c45df7a2379c31b3f0afcb05dcc4eb742c08f8121200df247

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
38e2e0f88d2fc60e7d072695003a470f

SHA1
0b2a49f12bda0c022ca366cbe7069295bb1c4c13

SHA256
32a50f45b3507be3b6d20893b36fa5c8db1cccb32a55241371c320b6eb07196f

SHA512
cad7d00408729720dad877c887646c2bdf0ce0f5cd263ab5db0446fbec0ee7fe13fdc2fcda9c50fc2a9852de68bea7e2c6694dd0526b9fd49a4fdab9ba791bb9

Download Submit