95125eba1150ee7367072f03646e34707b21808ef6f706db40c0af8996c8e3c9

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
04-05-2024 20:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1466b603d69fa805e9fca27cd8a374dc_JaffaCakes118.html
Size

51KB
MD5

1466b603d69fa805e9fca27cd8a374dc
SHA1

09ac9bfd61c9bbe1a799e4006fb1115d6edd83e0
SHA256

95125eba1150ee7367072f03646e34707b21808ef6f706db40c0af8996c8e3c9
SHA512

784ab05ba82640f0268b5fb6f23bed23b60ebc0c56362efd10968ae34146ec0c7e1d872c78d0c67d12f297f70a7214beeb37b93cbc3bf4124a2fd20bb9681880
SSDEEP

768:P9Ay/DjTjBNtx2sm42/1l0UeOs9o45IU6nuAFhDmdjcwQm8UAH4Jwe5aSp8bPSTZ:rrtx2542E1O2o4yUahxwyTH4C7jTYzak

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs

Web Service

T1102

flow	ioc
10	sites.google.com
18	sites.google.com
19	sites.google.com

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
3512	msedge.exe
3512	msedge.exe
4400	msedge.exe
4400	msedge.exe
444	identity_helper.exe
444	identity_helper.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe
3776	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 15 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe
4400	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4400 wrote to memory of 1908	4400	msedge.exe	84
PID 4400 wrote to memory of 1908	4400	msedge.exe	84
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3480	4400	msedge.exe	85
PID 4400 wrote to memory of 3512	4400	msedge.exe	86
PID 4400 wrote to memory of 3512	4400	msedge.exe	86
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87
PID 4400 wrote to memory of 3252	4400	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1466b603d69fa805e9fca27cd8a374dc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8c93a46f8,0x7ff8c93a4708,0x7ff8c93a4718
  2⤵
  PID:1908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:3480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2812 /prefetch:8
  2⤵
  PID:3252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5072 /prefetch:1
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4368 /prefetch:1
  2⤵
  PID:2072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5412 /prefetch:1
  2⤵
  PID:3440
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5472 /prefetch:1
  2⤵
  PID:3224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5660 /prefetch:1
  2⤵
  PID:5052
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4756 /prefetch:1
  2⤵
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6056 /prefetch:1
  2⤵
  PID:4340
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  PID:4964
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6796 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6684 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6692 /prefetch:1
  2⤵
  PID:2272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4132 /prefetch:1
  2⤵
  PID:5228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:5236
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2088,4759362536807490883,15803609296951840125,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4792 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3776

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3924

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4f7152bc5a1a715ef481e37d1c791959

SHA1
c8a1ed674c62ae4f45519f90a8cc5a81eff3a6d7

SHA256
704dd4f98d8ca34ec421f23ba1891b178c23c14b3301e4655efc5c02d356c2bc

SHA512
2e6b02ca35d76a655a17a5f3e9dbd8d7517c7dae24f0095c7350eb9e7bdf9e1256a7009aa8878f96c89d1ea4fe5323a41f72b8c551806dda62880d7ff231ff5c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ea98e583ad99df195d29aa066204ab56

SHA1
f89398664af0179641aa0138b337097b617cb2db

SHA256
a7abb51435909fa2d75c6f2ff5c69a93d4a0ab276ed579e7d8733b2a63ffbee6

SHA512
e109be3466e653e5d310b3e402e1626298b09205d223722a82344dd78504f3c33e1e24e8402a02f38cd2c9c50d96a303ce4846bea5a583423937ab018cd5782f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
72B

MD5
e9f3124449f7f8a7e5a3e86cbb6b097f

SHA1
b68db5c0d6ab6709688c93433bf6c517cb0ac05a

SHA256
34a2e95d8c51bab13c1be27b80673854662c5749a735f260c590af63bc6c7865

SHA512
6d265ca9d79a2dead0dc72a5ffaaecbf39e26baa00d5e1b76c6388c8d5ab7120474eee491c8ddb01455d0379d854fe3184b227716065cc91b628e86a04bb230f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
5f67711aff6f851c623d3e62e30ae347

SHA1
cad5449b93a2367dd32807b77a545ac1af2b13f2

SHA256
4755e183e0a7b97bc577df5216b18039329dc752e377a8e87c0875bc6d2912c8

SHA512
9a61cd542e7f3b325aba6364f65fa55d5aab3aa213b43804fc1ad4f3867447d91668f479f240748f53d425f728b953d936e80f00b7ea8335579ad81387b9dbd0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9dadc4daf82ef4c41b13ee951cf3f099

SHA1
338bb6024b989cccab9fe1a5db9ef8dc3551e7e5

SHA256
0daebe28066e162ab2db94e06fadd36798611a3f59edbfa25b046107f6ff1a0f

SHA512
9f559706ebef17b85869323671af294f3d3433f0c57e5c49a1efc3b75ab0a385f4d1ee8d5ed814f9acaabb7d2394f5f8125e5639a60aaccf51360f361af83d34

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f0a16853cc0a32098dc5b2125399043e

SHA1
5b27a576e4779d5d361ff82b5faecefd45f93fa9

SHA256
e81be725fdcda2689346813971a3e4123f22deab9db6e61b8f7c71516adbb800

SHA512
df673c739f9edcbe4479c8009a313f626ae4ac6844da141011fc1a38b1a0e31751f603389d0df12e230f24ca16dc647f28e969d95aa7703a45614c4d870dda56

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
e6a3a8739df42b2742f0d337e69f8c81

SHA1
c2cc380528a3cb8d8a44eed27fd2c7b1e4a355de

SHA256
1cd3868e8f49fe3d985fa98c65234099de4a93ac12fb3c3a407f35e4708e2679

SHA512
b5651a5691b260b0dfc3d93c4451ca072fa7e473811acd827d058ba645bfc8a505c5660969c54d984463c63db468d0a56b11fe2d1b2c78a408e4f8018806ab85

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\c7f49732-83df-4165-9342-69c8d3f311aa.tmp

Filesize
11KB

MD5
6acb82933ab09935874154265c25c046

SHA1
aecf2ccbcf83105a8df12410177944c332284d08

SHA256
a6f98997514bb95431c8bac1b6170324d8b555bedccb4e113b1a04875b75ed36

SHA512
8a7260761ebb3aefacb1e6416568cb25acc4612e18dc799c5313af456bf9d3193ecf56feb051d2365f768f14b8fb2067d90b43dbca2c7a886b0ddf9fba3cacd2

Download Submit