08343d48d1b192f1a3acf502b3df666d0b4acfeb313c2229ec89082bda327a19

Analysis

max time kernel
145s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
21-05-2024 08:26

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

62a76474b076c7d9c604a9daae4a11c1_JaffaCakes118.html
Size

124KB
MD5

62a76474b076c7d9c604a9daae4a11c1
SHA1

b9e3827883da25d263f588137d3d49e248023a26
SHA256

08343d48d1b192f1a3acf502b3df666d0b4acfeb313c2229ec89082bda327a19
SHA512

42714a9e4256c35e74e2f555f26abba958bd832d498f8e68044f9c3ea0b501f8e7c36f3969228adbbfd223f33dd5e2179822ffe910064de940fdb20d7635dbaa
SSDEEP

1536:cAKWbg389eC6Nc+ap5eOqYCKtIIsvdpPh2lfMXWezALkAicUBN/:5bBGQeOUUxqPh2lkXWez+icUBN/

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4252	msedge.exe
4252	msedge.exe
2300	identity_helper.exe
2300	identity_helper.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe
4120	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 11 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe
4252	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4252 wrote to memory of 1316	4252	msedge.exe	83
PID 4252 wrote to memory of 1316	4252	msedge.exe	83
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 2996	4252	msedge.exe	84
PID 4252 wrote to memory of 4864	4252	msedge.exe	85
PID 4252 wrote to memory of 4864	4252	msedge.exe	85
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86
PID 4252 wrote to memory of 3776	4252	msedge.exe	86

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\62a76474b076c7d9c604a9daae4a11c1_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4252
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9272c46f8,0x7ff9272c4708,0x7ff9272c4718
  2⤵
  PID:1316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2116 /prefetch:2
  2⤵
  PID:2996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2336 /prefetch:8
  2⤵
  PID:3776
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3212 /prefetch:1
  2⤵
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4840 /prefetch:1
  2⤵
  PID:3408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5224 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:1636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5208 /prefetch:1
  2⤵
  PID:3496
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6164 /prefetch:1
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7128 /prefetch:8
  2⤵
  PID:3320
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7128 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2300
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6740 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6784 /prefetch:1
  2⤵
  PID:3556
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6584 /prefetch:1
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:2636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2096,13546025430142974986,17967899011719095364,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=7076 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4120

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3256

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2276

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\721098a8-4d69-42bc-9200-6fa7a2df50dc.tmp

Filesize
11KB

MD5
e5b45f09092f314d61d9ef9c91e92970

SHA1
88861d88673b1b4b8586d6d7f5f68384668e2a90

SHA256
92b834f80948ffe21f61287a9aaea725d2204afd6c68c789d6ba2250bd1f9c5c

SHA512
40fa490fe3ca6fd26d5c03c9a851309f6e2b08daa15906f33370fb3bb2b5abac98eaa66e72dc345abcc6af29cc7d4357b96158aab749fbe7994237c79a8e776b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000e

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000f

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
240B

MD5
27131bdb21b2244276c20b1beddda997

SHA1
64de6dc9f28d41cf572291d25e82ac251bf5828f

SHA256
a124503d12a10db319d25949ce31927b0beab00318927a9efd2dca4c4c6bebca

SHA512
6bd5f6949ff0b09c9be51e9904a20e744afd4a60284ce6c521be3b57e816064888a82a6f24a85d1ce0e63e9c107c3e434901334f00b1c0ef27338b4a9b2c95e6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
216B

MD5
7ccb27de547d2f2a367e282446cec535

SHA1
24ea0bca043e61e999a9b7c24ed9f7d5aada2453

SHA256
94c1c8b574ff654dfa3a12dbdf0308658d67bd5e790cec7b415037fe98fa76e1

SHA512
b8244cd582a4d487ec93aff08b68a802009a6dc4ad93a3933bb16c3b66a5bd6141b26c68095d495a62776f45f1a5ba70edac560f9ece6e9f5f3cc265ec189d01

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
373239d3f9fa079bdcc352a8b4f76b85

SHA1
a7dbbaa785fb21020a35087ea391c996d6e96824

SHA256
2ed1295b77bd644a3aae7efe98dee750e533cc0f5542b3cb48af93bec3bf8129

SHA512
4658fe591299f0483f9b0e35b38d48abf4c45dc1614a2242ff94d7f14c8578dc54d7ce26ba054eeebbd3acf13e7aeca5a0485269c231d8d2ff57a027038d1c9a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
cb494e1d2d20ccc5e64dd09bba3b3763

SHA1
2dd3140aa2af1ddd9777dd773ff55bbba33b0c3a

SHA256
37d9e18036bcf9b2ad925cabcddd2dac9b75ba464c920d3056fdb0c11e0cd2b9

SHA512
7ce17be914f3c92a4f6b84b26d8e7aca2e979fd871ea52bd986ae7530cfb2510c08edb9882315abccefd33538a04666c29435ac1723841f90c0308c039238088

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0b0f3fb1d32f098a167e17cb812c0702

SHA1
ffa113a897a5871ccd6b71a0f2a9771edd78e38a

SHA256
82fd6f1614145cd3def331e35cdb75a1e0bb576637b572fb7f0789e9849ebdb4

SHA512
09042630072d2d9d17ec7f435b9f0b76ba3bda6761f77522800c1cef07010ed2974b6d1157f5e986d6c5e98a18d7c3425fa8936bc75ecdedfaaf9c113b03fde9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
0e402ee447b470e1d8c811ce6a518e04

SHA1
c0d1443180df152fa469d38ae933b0af50a1ebd8

SHA256
c447fd5eb7bd26cd7dc0b60c0fa77da5c07b43b167dcc5a4550b99459b30a079

SHA512
4f46d3059e51b3c0094d0e3b9ffec3f7533a59da8a36b4f5a113f83f3862aab7cb44d948ece060301945a09594265602495826d501465c77b0bfbd480f84e587

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
06cc74b723fed231a95456d076650ab5

SHA1
ba4f927f1094f13db4ddfa0c2df29ab9c2398222

SHA256
2b43f8e9ac2a4fd944ce011d6a001d94244d841d19602ab95b26b1fc25a4a3f4

SHA512
644fb947204e5f809e99df6b18b8aaaa66f03df824161a833bd1663b0a77db74edc941871c9ff7523544d44a2ec1c9a171738457873396bf26c3b618c3fd2dbe

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
fd25bd299c18b26939c138a19a26b0a1

SHA1
987730eabebb819d1f082512d45c994b7bc37526

SHA256
cd22a6f082add05ccd1352c24e9c9f73aa437511e88600a09b50eb8b12934e74

SHA512
0aff3959645d15e6919481e901e6ab81f4f0d0ad5ab6034fd0b039eac1c40d1b833a9540bf46c3bb541fb3782487cd0e043a542f3fb150f95481fdb516c316da

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit