c6125b825ffe91886600033f7456ba8350e0b673dae5a8115422330688c30af0

Analysis

max time kernel
148s
max time network
139s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
07/05/2024, 01:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1f039945406f58192d4a41b06df069e1_JaffaCakes118.html
Size

151KB
MD5

1f039945406f58192d4a41b06df069e1
SHA1

49b04bb2328b804804684b7bae4ab09f48a2ac9f
SHA256

c6125b825ffe91886600033f7456ba8350e0b673dae5a8115422330688c30af0
SHA512

e7996cbd8bd57f3f28fe0b5a9e31c4a86937f5eb48059ebb91288a7497e2efb5b4a7e7ae2eb878963be3f92a80bcc8f9be25ef5b808638d3bf94b1ec53693851
SSDEEP

3072:Mv4EijZeqLVEijZeqLWWtnYos0Z5yLrhuQUR6M+PeigFjLSrgijeT9Js6eNFWgEl:u4EijZeqLVEijZeqLH8U+HY

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2876	msedge.exe
2876	msedge.exe
4888	msedge.exe
4888	msedge.exe
1760	identity_helper.exe
1760	identity_helper.exe
364	msedge.exe
364	msedge.exe
364	msedge.exe
364	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe
4888	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4888 wrote to memory of 4620	4888	msedge.exe	83
PID 4888 wrote to memory of 4620	4888	msedge.exe	83
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 4604	4888	msedge.exe	84
PID 4888 wrote to memory of 2876	4888	msedge.exe	85
PID 4888 wrote to memory of 2876	4888	msedge.exe	85
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86
PID 4888 wrote to memory of 4240	4888	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\1f039945406f58192d4a41b06df069e1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffda6f346f8,0x7ffda6f34708,0x7ffda6f34718
  2⤵
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  PID:4604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2824 /prefetch:8
  2⤵
  PID:4240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3264 /prefetch:1
  2⤵
  PID:3472
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4936 /prefetch:1
  2⤵
  PID:4244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5060 /prefetch:1
  2⤵
  PID:3436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4940 /prefetch:1
  2⤵
  PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5564 /prefetch:1
  2⤵
  PID:4624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:2976
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7156 /prefetch:8
  2⤵
  PID:4824
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7156 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1760
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6424 /prefetch:1
  2⤵
  PID:3012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6384 /prefetch:1
  2⤵
  PID:2176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6992 /prefetch:1
  2⤵
  PID:1624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6160 /prefetch:1
  2⤵
  PID:2860
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,5735938153920988490,15837379722262188458,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6376 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:364

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2860

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2500

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4480

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
dbac49e66219979194c79f1cf1cb3dd1

SHA1
4ef87804a04d51ae1fac358f92382548b27f62f2

SHA256
f24ed6c5bf4b734a9af4d64e14a80a160bea569f50849f70bf7b7277c4f48562

SHA512
bb314d61f53cf7774f6dfb6b772c72f5daf386bc3d27d2bb7a14c65848ee86e6c48e9c5696693ded31846b69b9372a530175df48494e3d61a228e49d43401ad1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a9e55f5864d6e2afd2fd84e25a3bc228

SHA1
a5efcff9e3df6252c7fe8535d505235f82aab276

SHA256
0f4df3120e4620555916be8e51c29be8d600d68ae5244efad6a0268aabc8c452

SHA512
12f45fa73a6de6dfe17acc8b52b60f2d79008da130730b74cc138c1dcd73ccc99487165e3c8c90dc247359fde272f1ec6b3cf2c5fcb04e5093936144d0558b75

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000011

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
432B

MD5
94073f1579af44be62842d062a80381f

SHA1
0d7df5064346c14c1c88d65097eafa4b71ea3a57

SHA256
380b857d84c766a3844fdd5a7e3d2eaa5c7c63ca759f1505932c3a5c4dc173ab

SHA512
8387802ec8b7c61e88309b01b105dea5a111bee2c64597b148382d41ae1daf488a5c86830b638b343a873b72b1fec4d12565655732d4fb4c3b62c714c74aaac3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
51a899a6fd7aeea4e1f7d972f9327114

SHA1
6a0832dc20ef00d2759836c55c4fec12733155ab

SHA256
24a545778534b07ceaa3423168f5f7e0fccf97fdf9366c154c97076534662cc5

SHA512
4a29106e97a6420e53de9f76d2d000183c58509ccc511b05579c659399eebe4d56be664da7bb788a95aee29c5c23b49694806427f1a5322ffc08667c607b82bc

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
5KB

MD5
2c3b063c3fa543f79146f045f9440210

SHA1
8e59c79dd71beb90c5dc21697073664041939868

SHA256
ac7b08aaca850151e831963467ea461fdc8aa8a72b431c01ed4c9e6c6818b1d3

SHA512
f8d9189df9c0f633b1edb21de78af71ef26b8fe379bfdb9a5db99cb7cf03625b0a6c16ab09b586b65e8e87347659b8c31d0e5c10bbb2247a6989c8074507d526

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
2b52d2b06a6a3c5016425a290248e27f

SHA1
e57183baef2eaa6968da9cba1ce82d2bb36d8028

SHA256
e6ff3e0b5f315258a4a76373c324d9f87e20a3a437f294e7c6ebd92a184ac1bb

SHA512
3520471e51c1aceda0f6570c4f34dd77a0e416ab83ed1a15faf696d934d5565972c8966076906b5f9c802d07e26a7d6bd1bd618f26f285fcff0f5b343203a5f6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
d6e13daf4a35b06f5c24cde6b07d7009

SHA1
84305eaf8d2242479cfa07494c4b3e5b40b5da66

SHA256
c80edf2357d1113799e598bc95702a9d67f9e110828d1c7a4523412e23ff1066

SHA512
bf62fd7c9845d1872fdd2ee90a86182e5d16e790e63c5d6cea7f1ef227884b0803c8d71cb4b627b3fc3caea01ea0ca1e1a7021501a5e1e50a2503f8fbf11a2d2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
788d97f4e7ba16e10a5978dd1134046a

SHA1
3521bcd455b89bc91ea6a233ac9085e6f0e4716a

SHA256
6605f0dc402126afeeb846f101c4868aa46310fa1bacc5818671ea77e078269b

SHA512
500ced9aee0465f45d641416f7ee1db1a9bef21733b22f552e02154ceca05a9edaaba67643ef9a040c2dd8d886078b6a14ba93fc9c24451a0451be92136a726b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
a9cf167fcab1d06e5c52eeaa99caa175

SHA1
2bf71f56b7a8b3dee49c998130d2c4464dd4483d

SHA256
75ea282909a7fa1c75949ccb04e6817bc9b043f4b9cb9e226127cbe444bceea1

SHA512
698d5b0a49ad23cb68379420612f254b97d240296c4368356e2336e7297ace8984ecc9f39b6af92c26bd573f0428b41ce53a131d6c01c031f24d5fd5d1b7b827

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
f3b11112282c6623d354608449d47054

SHA1
e33c2025013b8b096b9271b5b0c06e389ae845a1

SHA256
3d902ae271f6c6aa7ba6ee3df0c8d5cae9d93d31ddffd58e12c744fc5ea2d9d2

SHA512
3149853d05d14bd0ff108c7a0c6fcf401fadf44f1565f6ac1fe4eb25bc1c54346c079e934998bbeb84551e4791a6ec94268a032643e921032b75f489dc6cac5d

Download Submit