bc10c34eab81a34e9749fa95f864745cfa8fb6fe2ff7625a633c91775391e35f

Analysis

max time kernel
149s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
14/05/2024, 04:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3df0771c1bb56442922423c638a183c4_JaffaCakes118.html
Size

196KB
MD5

3df0771c1bb56442922423c638a183c4
SHA1

43aa30e277cbaa89e4000baecebfd5db4d77792d
SHA256

bc10c34eab81a34e9749fa95f864745cfa8fb6fe2ff7625a633c91775391e35f
SHA512

4db1b3c2a0e6e1a4abb496ea76a3403a68c692fe028e010bc7685d7383427dd6b5185fc93e3d758b6abcd152c7191f0fadd27a4972a266d1d272927b8aca87a7
SSDEEP

6144:yZP3G4k5QhL8atVv5KOvL8gBmEfNbYaaLStRKxWUu/v66sbsGon4G59t9ToPX22X:SP3G4k5QhL8atGEmWbYaaLSt8xWUu/v4

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
1652	msedge.exe
1652	msedge.exe
2844	msedge.exe
2844	msedge.exe
2908	identity_helper.exe
2908	identity_helper.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe
2368	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe
2844	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2844 wrote to memory of 1284	2844	msedge.exe	83
PID 2844 wrote to memory of 1284	2844	msedge.exe	83
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 4336	2844	msedge.exe	84
PID 2844 wrote to memory of 1652	2844	msedge.exe	85
PID 2844 wrote to memory of 1652	2844	msedge.exe	85
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86
PID 2844 wrote to memory of 4668	2844	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\3df0771c1bb56442922423c638a183c4_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffee1a946f8,0x7ffee1a94708,0x7ffee1a94718
  2⤵
  PID:1284
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2104 /prefetch:2
  2⤵
  PID:4336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2576 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2864 /prefetch:8
  2⤵
  PID:4668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:2152
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3312 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4896 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5016 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5452 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2032 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3420 /prefetch:1
  2⤵
  PID:1060
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7012 /prefetch:8
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7012 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6688 /prefetch:1
  2⤵
  PID:2124
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6676 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5872 /prefetch:1
  2⤵
  PID:3532
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6068 /prefetch:1
  2⤵
  PID:1272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2072,8442262169875442827,15374192268336575285,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6592 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2368

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3036

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2424

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

Filesize
230B

MD5
5ce4205ccaf4a35c14e9002e79572b89

SHA1
bb08f6d442fd426ed6108ec3c18f569703556217

SHA256
b910ae16caf38165c20b4dbb2c4bb989c5167d520e370ef5f5bfec62e9756a0c

SHA512
32f1937d2e07c649bd9459515a6359ebdf1f84225f88c461ea10d3c5b42ed4c7d7a886981e2352acadce497f56a02e3b62908d2a81c9fc99c05d3218eebe170d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c9c4c494f8fba32d95ba2125f00586a3

SHA1
8a600205528aef7953144f1cf6f7a5115e3611de

SHA256
a0ca609205813c307df9122c0c5b0967c5472755700f615b0033129cf7d6b35b

SHA512
9d30cea6cfc259e97b0305f8b5cd19774044fb78feedfcef2014b2947f2e6a101273bc4ad30db9cc1724e62eb441266d7df376e28ac58693f128b9cce2c7d20d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4dc6fc5e708279a3310fe55d9c44743d

SHA1
a42e8bdf9d1c25ef3e223d59f6b1d16b095f46d2

SHA256
a1c5f48659d4b3af960971b3a0f433a95fee5bfafe5680a34110c68b342377d8

SHA512
5874b2310187f242b852fa6dcded244cc860abb2be4f6f5a6a1db8322e12e1fef8f825edc0aae75adbb7284a2cd64730650d0643b1e2bb7ead9350e50e1d8c13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000017

Filesize
64KB

MD5
63e5a0b45632b3dde3694ffcaf0e3f7a

SHA1
923736d0cdc308331d5cfaa0ea159bfedc83d53f

SHA256
889109910477919b3457416e7764bcd0add19fd959848253026125c7c35c43db

SHA512
5b886c4b5122d61f0209ede748aa84445c9388cf38813316c41b3dbd2308216e88394d9a45cfc27113c0cf3bc93b9c37d808f6d3c67888244c176ee095d42259

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
9169bb631c3512d1835a5260895a4e17

SHA1
b853bc7c9ac828cee1f529afba28a2c922b7127e

SHA256
aeb669f60ebc822f73cf2493a58537c2ed164e211eb6bc9cc415172b4fb77dbe

SHA512
fdf62cc81ea0aba97e5f476b7ca2c217e7b5e504f519faeb5c9935c151aaf4ddbc578fd42a3b42b9cefe28f489d3b03b515dd0d90743763db3071d67d327f5cd

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
144B

MD5
c0a41a3dc151c9e3317a857b665aa1b4

SHA1
147e48e0485c9cc8c215c0a77805e10f17909092

SHA256
b6ff4d143217619451ff19e8356ba4469154caa6cca70ff8d2b1a72dc5851f5b

SHA512
2908be9dfee4857f01549f4f8e426062c9322814b418ed8115f51db8c9d7aa391cd6ced295691e9cd1a672b049f8445281f1d4047f8b377e0faa1f0e1775aa82

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
766d0eaf11a9a02a80ee79b15cde53bd

SHA1
d1e668b5224965cfcdf4ecc6448985ca18798cc6

SHA256
383b9b58dc12ee1f2b9be0243eaeb0cd4e1d97dd3234a93c7d87c6150ac8b052

SHA512
6edbcfb3a84a1e3397c152d0f5edbf13edd8dc1b80f0d6c757dd55b945dda2ec9010b6e6629703fa2e5c8431faacebdfa40980c6b8284a6a7540fa0ae6c97608

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
9ca8a15bfcc1bb0e96bfc5535fe09aa3

SHA1
36d045db9bfe799559bd96a0ec3d761d6be0833c

SHA256
4bd348e6f501ca48d6938e5bb20a1ef2fc909d734395e802f2d31224d994a9c2

SHA512
b1c95757cce0b619a82eb6514027a1700fb01d0ed27af23e29454052ab73f06054b8439c5a682c0afce8e8fd2770bdf49eda5cdb6c9af0a7bfd2c640fbc796f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
91726f40010f529c56308aa2170ae72a

SHA1
9c9d7f75242df7bc6b15e68b075ed5b674d7b3eb

SHA256
83537609af83071fc754b3cdb24d96318763ea3199d712545f2e2a9d1807a796

SHA512
1554648fd196943d3f3eda7c2857d4b9e03a125023b54f8317e8d448b4a9b7cdd620b22c1fde640a380ce6ace98f8588c98a4c8c0361ea32f0951493b9f24815

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
b09f2d07e30c659bd7990158ee4a9bcf

SHA1
497b515a51b3f1b996238214f103c3dca6c5f9aa

SHA256
6fa994e94eb0a066b6a4fbec3baa76caa760b73b4f9671e18d3385638a5f0011

SHA512
f7d1104bec2a16e071672e024ad7ce898ea3d68ae9d90316f04b040614aaec00b7fe030921204b0673f9e72742f2bbdb181332511e79359a56c0fe19c7a0f0fa

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
10aad6c6178629d49df54c3e48895f30

SHA1
d0420ee18084ec493fe9a371d6d51c595fec44f6

SHA256
8d739ee56dcdc54c516df8a4d0c435f9bd85ef5d1a1fc76ee63921eb9dfc281c

SHA512
1420f7005ac26f5d121e0f4419fe7a1b3f9149f28c857c842d808e46ce41632f42607d9d6ec7dc5773072b34fbcf2df0c82ece588379b3589b3e6215d12acca1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
2b7ee04b69f926c131cca6decdf61667

SHA1
725059c81973304f64f99ac7d63aca6a10895b64

SHA256
03624cb5f492566e791fbdbee42c5150a72dfcdd1fffba93f16695c69e84158e

SHA512
cd5d013822b804a7954c7660f6926d36ff61014d6c278fa8f9c5b71b2d820a564b6259413a0e5edde7599a780b854bc3ea9c409e7ba64503b61f263dbd380fb1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
84faf525da89c33708da1bcd05745909

SHA1
9efc3f70dc63c5aa7c80bfbc80e6af904755980d

SHA256
59f7afc5b64b967921427b539eadb04d8509e439db8ac9fc6db91929564f05c8

SHA512
7c703438bf543bece8dce2a35be97af47c10b23d921606d3aef494134b4f62a2ded1993a8785f39ec146d11ac01a4e111c94d193856ed5eafd9419b52866e711

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
59c971f7532300948803e7415797d72d

SHA1
74c2d9a5e1727b58d4c7e6df7f93e39cce89b8a5

SHA256
dd60e07a898b66d457f24daa7d5200498c8191db047038d2874560319002d161

SHA512
3039d603566bda7a201fc19ed183966594416c246d16aed2acc01e6472fe12081facbd342fd3fe810e2e5bede2b65475b926d1c78116bf8807bb1dae9c2ae2ec

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
873B

MD5
cc1db98ad79d99fd7ba8987dcda641a9

SHA1
537549b693674a2a7d9624a1e3adba0100cecbd2

SHA256
260f2d11fe9768e8bcd424712187c54a1cc34f9f9536eca76d1ea0eb2808e10f

SHA512
9219fd58d922248d28cecb4f2631e189d3e928cd828dd1c0145ac9cb6fde5c5c501d27004e86d6d0e77089c67c975f4be6154000fe0e4111776389596b156d13

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe582a09.TMP

Filesize
538B

MD5
11cd03be7de53e366c53907a6ba50a65

SHA1
960d6dc616e24a9752f5489a80425fddf6e9a5a0

SHA256
8afc4df23c0c4b3687fe1b07cd11d45b9190c276601e5d53b14f5204ef6bf933

SHA512
7a8024348be20f382893859c6fc334af9127d216f75862586b4b7d6da00334dc4cc9c25cd9970d524c1ebcbbe33942b17d0488cb1218b28ed8583917d6580626

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
27d793f45b8f88dab8f26418bf7d6a60

SHA1
cc2cbba9ce532c2f984ff78b2e119cf0cc246427

SHA256
b02156e8ab9bc48e2489dfa90c4e5758aa1c020d37fc8d1778ab1058cf417a31

SHA512
8209e055c5ce028e784585995b0c545bab35a26e7e111087cf5570640121ef9aac34be646a0a38f5357cf6d1e542a40e51be8b5a6bddf3cf0063d0fa3fe67942

Download Submit