09590285c0937c12b7580e3d8005774d387f862a2db5511793bb9d11af1be15d

Analysis

max time kernel
149s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 08:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

74d375a5befdd641b82d51df1ac77c47_JaffaCakes118.html
Size

59KB
MD5

74d375a5befdd641b82d51df1ac77c47
SHA1

2f1c22245296043a3b2ce5fbd6cefbca4611c16b
SHA256

09590285c0937c12b7580e3d8005774d387f862a2db5511793bb9d11af1be15d
SHA512

e3cce3a3a5cf216fd07171bc8b380431f707e33bdd3f0df026cba7ff8c3982e7ff3025e9e977640d72273914f0e377a0bd5e8e559c938c81169066fb1cd6f006
SSDEEP

768:PF5T0EipBT5l3VOs7pZORQ+kmtYG0kM4JmnZvmYUc/3K3:rTupBT5l3VOs7pZO++kKYGNMAm3tq

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
5092	msedge.exe
5092	msedge.exe
4676	msedge.exe
4676	msedge.exe
2872	identity_helper.exe
2872	identity_helper.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe
4392	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe
4676	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 4676 wrote to memory of 2888	4676	msedge.exe	85
PID 4676 wrote to memory of 2888	4676	msedge.exe	85
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 3568	4676	msedge.exe	86
PID 4676 wrote to memory of 5092	4676	msedge.exe	87
PID 4676 wrote to memory of 5092	4676	msedge.exe	87
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88
PID 4676 wrote to memory of 3008	4676	msedge.exe	88

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\74d375a5befdd641b82d51df1ac77c47_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4676
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffdc2ac46f8,0x7ffdc2ac4708,0x7ffdc2ac4718
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:3568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2432 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5092
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2748 /prefetch:8
  2⤵
  PID:3008
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:1376
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3240 /prefetch:1
  2⤵
  PID:336
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4668 /prefetch:1
  2⤵
  PID:4864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4656 /prefetch:1
  2⤵
  PID:3856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4792 /prefetch:1
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5172 /prefetch:1
  2⤵
  PID:1388
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6656 /prefetch:1
  2⤵
  PID:2364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6672 /prefetch:1
  2⤵
  PID:2388
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7060 /prefetch:8
  2⤵
  PID:1852
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7060 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4160 /prefetch:1
  2⤵
  PID:5168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5160 /prefetch:1
  2⤵
  PID:5176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2128,15849770038737346988,15529683214548414078,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5412 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4392

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4336

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2436

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\070E0202839D9D67350CD2613E78E416

Filesize
1KB

MD5
55540a230bdab55187a841cfe1aa1545

SHA1
363e4734f757bdeb89868efe94907774a327695e

SHA256
d73494e3446b02167573b3cde3ae1c8584ac26e15e45ac3ec0326708425d90fb

SHA512
c899cb1d31d3214fd9dc8626a55e40580d3b2224bf34310c2abd85d0f63e2dedaeae57832f048c2f500cb2cbf83683fcb14139af3f0b5251606076cdb4689c54

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\070E0202839D9D67350CD2613E78E416

Filesize
230B

MD5
46b3eee6bd708e1b40d9cbe3a04c943d

SHA1
26fec3a9e6f0a45b689a3b9911aa8277f773ad8c

SHA256
873720ae9164ea38f96ea9655062fd4057bbd148f2c5c28bc121e86ef3b12729

SHA512
dabf0bdb14d316c2dd01f32a02c8f6007ba5c1858eb40aea43df2332b45970abfaeaff7b45a26e66ab1f281fb631c9f66420dfb39e9e1a117588cbd4932bc1d8

Download Submit
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Filesize
330B

MD5
f374777e3813bd316882b21ca1243d5b

SHA1
4549ddf69ccf346fef3c6c3457594306591f666b

SHA256
9ddb6fbc8b72a30f09e9030d8684c7f1c52e7e93ff913f87572456e3ae7139a7

SHA512
0b3f6efd9e3191adf1e8ff5f5e0ef98d9d25de4fedd950f6893cadea414703e2c6061b6145b8cd713240e961a1522babd1ed98c647e77edc60e0ac0d4ef167bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
a8e767fd33edd97d306efb6905f93252

SHA1
a6f80ace2b57599f64b0ae3c7381f34e9456f9d3

SHA256
c8077a9fc79e2691ef321d556c4ce9933ca0570f2bbaa32fa32999dfd5f908bb

SHA512
07b748582fe222795bce74919aa06e9a09025c14493edb6f3b1f112d9a97ac2225fe0904cac9adf2a62c98c42f7877076e409803014f0afd395f4cc8be207241

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
439b5e04ca18c7fb02cf406e6eb24167

SHA1
e0c5bb6216903934726e3570b7d63295b9d28987

SHA256
247d0658695a1eb44924a32363906e37e9864ba742fe35362a71f3a520ad2654

SHA512
d0241e397060eebd4535197de4f1ae925aa88ae413a3a9ded6e856b356c4324dfd45dddfef9a536f04e4a258e8fe5dc1586d92d1d56b649f75ded8eddeb1f3e2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000c

Filesize
44KB

MD5
88477d32f888c2b8a3f3d98deb460b3d

SHA1
1fae9ac6c1082fc0426aebe4e683eea9b4ba898c

SHA256
1b1f0b5ef5f21d5742d84f331def7116323365c3dd4aec096a55763e310879d8

SHA512
e0c0588ff27a989cac47797e5a8044983d0b3c75c44416c5f977e0e93e9d3a9321b9283ea077e6dcad0619ac960ee45fe8570f1d5cc7d5d4117fee4f2f0c96b3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000010

Filesize
20KB

MD5
b6c8122025aff891940d1d5e1ab95fce

SHA1
a0c7ca41d0922d085c358f5dde81ae3e85a8c9c4

SHA256
9954c64c68000f615e5066bc255eced1195d1f8b7dbc715f9062ddf9f147e87e

SHA512
e62a37b55b6b8d95c24fb624105ff6ff72f118e31760d0da1e8df8e8acf627ec6327c26dfa26df8535585877604c7948d2f621ccabc39beec49787e22c302c10

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
288B

MD5
a77339ad51ba55d7f760c5015ce4d310

SHA1
87237a090c5c9e45f4d6f9ed0f2b8f351488e153

SHA256
54b8a677d12fd854d2ab3d66a69a35aaccb8208418afad7c69a15ba5f3125384

SHA512
adcd3e591b599190ecd597effa8322aa67ac78875976dbf3d7118fe74612083cf413b0a6f2c3bd493299ec436fe700bb5da9656204e760e238e09601d8adf467

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
264B

MD5
09f97177c0a84c724e1a1f70896a054b

SHA1
63b6a7670fd45c25e5b3ef83dfc65d5ebfb821c4

SHA256
0d1532319c5921c7716809c83209199e2aa9a08f8bc8fd40c8cbfbb603799f81

SHA512
ef363091a4d4fc8ea55c9c0c483d3908257f761ad9cad34a8084c5e8a6d76139dd8110848a00c86fd70c520006baaf02d5519a84d4f1998f378c0b20d249439b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
35cf3ce4fbf054b51fb5e59417ab399a

SHA1
c2155576ad8dda73a33faf739c9527013fc840d2

SHA256
8888d42933146dc138884618a38e37e369239e3825aa7a17d9e1ff5b2a710e42

SHA512
5a473e296cc6e8e220dcb719bdfd20fbb9c9f50f4440bbf8de9fc68baf4271c8bb062b297c759a5b00d3861ecee2c38551aa15f5740b2c57414e7a37f226c9a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6751c43f4adc943d9013e1d3d53e9837

SHA1
ef57ef7211dce6c175c94c762506ce440f576acc

SHA256
dcf79c1eda9371f54aff617ad6cb9e8c60df9bfbba6a1ce73e86d5527c2d0d59

SHA512
a1eda7490280d59677a26873922f84f1f5927d5a5c4034a40504db93d70581a40d08d6e738902c633e9b613083766bc7ea4b0a90c7e7864691acb1b13a452e9b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
02340ab97b2f29e2f8df6d65eee928cb

SHA1
7f641525a77287e901ed894ee4df24532a7b2a40

SHA256
cc1273e7e18ee00eae324d29ae994f8d28fe26794e69df870b15168499ab60b0

SHA512
a3f6ddddcecb56f0a7cb6366853e90e7908cf68dfe236bb992e6d20139182ba1345f6d7fb94a5337b9b972530d2e3ee825411442640788156192998644bd6603

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8183334bae298a586490a991c4f4343c

SHA1
992db8abeceb42c5e4968acb156f4200be54ec8c

SHA256
e8df212fc2643216247aff5583342b8213bfbf17579be337980c3a70f60dd247

SHA512
b059f3aa6f243691db86a4aa6d9752c3a4d29710f48dfe464a4f2ad5655c7e1c7ab875f542c283a44a429e6151fd3b6006217c061cf4a7a92099c142730679ac

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
7KB

MD5
f3675267e6c3edab60c96d353b1630a5

SHA1
35237cb4ea66e705ff7fa58f55c5661a27c00ef7

SHA256
b15e08c3417d711923c5adafb7e3dbd8abe9b0428ece3e8e6c8285af3222b7a9

SHA512
52f33998cac5c1aedd8b27ebefeb332dbb133850f08e4d7ed89a58ee92f72682dd97740c24e92fc5fea4e689f8311366b119f74364fc4978b8f881c1b2bc0652

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
fd6ad9dad7481c260be57d5582dd2843

SHA1
5d5558268d2bd97754c33cd176dd07741b1acd95

SHA256
cbca0a3f74a070d0b6585ae420ec0f5fba0a152d7ae3edff76638d32a8fe4c1f

SHA512
60a6eac3e157adec04e4799ca27dd0a1969535b96bb6c563240532ea33e21f007947d7bbff4b339a27ec7c6afdcea23c8adc463f858ce65117789d8fca781e85

Download Submit