dbd23a1a8b355bca56a8953e6e4bb6892985ddb5ebea118f4828f5388fbefe10

Analysis

max time kernel
145s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21/05/2024, 01:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

61a0213b8bc74a3f783768d9c86226a6_JaffaCakes118.html
Size

307KB
MD5

61a0213b8bc74a3f783768d9c86226a6
SHA1

b55f25bffc2f12f02cd61790d7670e94119ac4ef
SHA256

dbd23a1a8b355bca56a8953e6e4bb6892985ddb5ebea118f4828f5388fbefe10
SHA512

03875cd2457b7c4b359df54bba9af982ac87f8693b9610e5b1b69b4bf30d321093c4e76bc3ae3033e3ab2b8762259c6c82e746143db16a60e3482f7e7349c93b
SSDEEP

1536:3WazXmaoi2C6R0KwXwOQIUMW4UfaCqEyPDKKrNvuVhsXeJPM9Vl2Ht6eelfZVeed:yLC3Q8rO89OdhqdPp6uZp0i5h3c50

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
904	msedge.exe
904	msedge.exe
116	msedge.exe
116	msedge.exe
3820	identity_helper.exe
3820	identity_helper.exe
1992	msedge.exe
1992	msedge.exe
1992	msedge.exe
1992	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe
116	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 116 wrote to memory of 3160	116	msedge.exe	83
PID 116 wrote to memory of 3160	116	msedge.exe	83
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 1852	116	msedge.exe	84
PID 116 wrote to memory of 904	116	msedge.exe	85
PID 116 wrote to memory of 904	116	msedge.exe	85
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86
PID 116 wrote to memory of 4184	116	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\61a0213b8bc74a3f783768d9c86226a6_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff8fe9b46f8,0x7ff8fe9b4708,0x7ff8fe9b4718
  2⤵
  PID:3160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2092 /prefetch:2
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2448 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2920 /prefetch:8
  2⤵
  PID:4184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3268 /prefetch:1
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:1228
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4920 /prefetch:1
  2⤵
  PID:4580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5052 /prefetch:1
  2⤵
  PID:3884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4268 /prefetch:1
  2⤵
  PID:1528
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4768 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  PID:5080
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5076 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6240 /prefetch:1
  2⤵
  PID:3976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:3328
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6404 /prefetch:1
  2⤵
  PID:4496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5864 /prefetch:1
  2⤵
  PID:4116
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6296 /prefetch:1
  2⤵
  PID:2916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2076,15711191379702076431,7002201232925489779,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4844 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1992

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2616

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1360

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002c

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00002e

Filesize
22KB

MD5
5e74c6d871232d6fe5d88711ece1408b

SHA1
1a5d3ac31e833df4c091f14c94a2ecd1c6294875

SHA256
bcadf445d413314a44375c63418a0f255fbac7afae40be0a80c9231751176105

SHA512
9d001eabce7ffdbf8e338725ef07f0033d0780ea474b7d33c2ad63886ff3578d818eb5c9b130d726353cd813160b49f572736dd288cece84e9bd8b784ce530d5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
456B

MD5
42fa44f46b43933707a49cb871ade840

SHA1
a265118677f5e35f280c3cee74f729066042b2ac

SHA256
33f1a0b7b582e4908678ef7c2d8706c18634f00b7e28ee7575b3a589b8492307

SHA512
1deb56d137609b1b0f477580f7f94ea49223d93038f693ca1e2cd8ff11171e7c4ec27ff459eb8e0e61d27a4ada68d240d94238f28cfa0b50757bbe6c08e4d25c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
5320ffc12bf08a6652e9decf8b090c5d

SHA1
420e5924d168d996d0c4c7218d7af7fcd1012e6c

SHA256
9dd4adb09d75522f0ffb01aad832255755a461f96a34f0d2a848672cfcddeaa9

SHA512
d28fe6404220612b726de7fb55c92f09ca80e6c3e4b8920c7c66d988b034ac811ea384db93f2fcd75a24ffaef613ab398703f3b10a22e8c22f6be7f51e4e4755

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
480B

MD5
194b8d4c63c6f16fccfd27a2f36a7e1f

SHA1
fb47557b12382818b77fbf904a55feb8a8692fa0

SHA256
4f9937d8d4818585a746a85ac91750293607c409e03fee63465cc04e860d3263

SHA512
4e35d20c84355be8bd1199e9d63a4389d38bf0f96190729d7d3c22fe5cc8a57471b90e06ecf2ac4c0d1ccf4cefb6003c5591343c2563599963674746bb746c3e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
26575bb67e39b412d9a2107ee76383c0

SHA1
5cde8772837095ba66f8e56c0cdc058084e4a181

SHA256
a00d66e6a84f466da71d636f09e40bcd7beac3575113e9f22df3ad6d41b28a09

SHA512
923c05c5ee76c04f10da7cd0f1ca382dba43e6f9d0a520bb515f638acf597bca58182d8fb5898915661a516da112e1f3a2c9fd0dbc5fbb6a6acfee5f0d167b90

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
4KB

MD5
d477b2a064f4ae1d83494ee28df5741d

SHA1
d00b5b48b1c04144c6a5a319795f25a9c72ff08e

SHA256
293770d8944c16c697d15a626edc7d1b1fc3c7d6632ba505870f7ca4c2fcd1f9

SHA512
47d3a4c53157e2377e21aef626cacfe403468132dc95ebd64baf4094216a1b94bf61e37befd92ef5048775727795c1463d631369a312a2b873b675d5a9b1cfcb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
57d017cee3e3eb46d491b6216963b6a2

SHA1
dc15618f7017b87afd8c01d95c9d5ac459469c4e

SHA256
f2791a58a1aad33a8fd6d82baa09f1ffdf2519ff2f563fb58a27187939e24851

SHA512
89bc9d3e55962fe0c8ca1f8ad32aff6e04fa71ff204f4c0e8dca788ae212d76865ea693c499fc65277bb69d85fce01d9d8a71c3013dcc8b10e235718e1c42f39

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
16b43e892246aa77c6b3d8cdf6a22b99

SHA1
599d79b8689912eef8effeded4891ac8138f94c5

SHA256
c261e65c256ac21f386d9a0dfbc1025074eeed3af9824b77ae76082ab459059c

SHA512
076cebf8ac7bf48784c9935fa6817d5639d59f81fdb53db71d4c4344a85ec38d5038db48c00dcb88158a152c0bb97c6ff6fad1cf51861a66b86bd24b02411418

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
730061e66a8954463352fb0865e34a48

SHA1
1e5d1482ae1e7bffe26497ca0d3aee9bf09933e6

SHA256
edf0ea8043d2f29766f7d58e02bef93493637ad8801f841c21e995862f351819

SHA512
81839c0fd36ebebc025424e80876ae85517fb65b5979006dbad7e62d5428023b5fb865e2c6e4a089f09f469906faf12b53f1e7f1911b557c3478b967056c41a9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
7595fc88762c0ff79746107dcdba3000

SHA1
3d7818f7ea59ddad8dbbfe192b1117e34d6a5c1f

SHA256
71663e9ba1577d1e17a9cd24da8bf68feb50ad3e92b8583ab030ff36e33d85ca

SHA512
b68fc4ca278fb54416699501a3d184fe5180fb4e0faae3f8624f7385e1216afd81cc8d4afc56609814ed60f1eaf176c1bf764218b5e6e36b9fe656f723687c41

Download Submit