8148f600f7901b4df1cc76d91321b76100788c2c7887387ca2b321fca3eb712f

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
28-05-2024 05:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7bd5f5ca9937481c4ea82402f64c37cc_JaffaCakes118.html
Size

62KB
MD5

7bd5f5ca9937481c4ea82402f64c37cc
SHA1

324d90301c62d697f333cbeeb0ee6e4362cd78ba
SHA256

8148f600f7901b4df1cc76d91321b76100788c2c7887387ca2b321fca3eb712f
SHA512

6f367ca123ec07fec87021975cf29cb8bd2698afcd7efd64fe6204e31968748158c36e9dce325fb233eac62d11319bc5c3709e3fa3ed9793c3b491e763e76857
SSDEEP

768:TbGvQnqojIPUeIDv7esiVxhj1qPzS84K+aQahMUg1RW+ZO5ukD/7oIj+YmPmjfyv:zesiVJq5Mu33oSUbOnVJqkHD7y0c9xMY

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
4408	msedge.exe
4408	msedge.exe
3256	msedge.exe
3256	msedge.exe
3620	identity_helper.exe
3620	identity_helper.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe
5996	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe
3256	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3256 wrote to memory of 4248	3256	msedge.exe	81
PID 3256 wrote to memory of 4248	3256	msedge.exe	81
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4020	3256	msedge.exe	82
PID 3256 wrote to memory of 4408	3256	msedge.exe	83
PID 3256 wrote to memory of 4408	3256	msedge.exe	83
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84
PID 3256 wrote to memory of 5512	3256	msedge.exe	84

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\7bd5f5ca9937481c4ea82402f64c37cc_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3256
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ff9a06c46f8,0x7ff9a06c4708,0x7ff9a06c4718
  2⤵
  PID:4248
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2144 /prefetch:2
  2⤵
  PID:4020
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4408
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2856 /prefetch:8
  2⤵
  PID:5512
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3276 /prefetch:1
  2⤵
  PID:4432
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6112 /prefetch:1
  2⤵
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:6032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5860 /prefetch:1
  2⤵
  PID:5444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5664 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  PID:3300
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7016 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6964 /prefetch:1
  2⤵
  PID:5468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6948 /prefetch:1
  2⤵
  PID:5652
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3948 /prefetch:1
  2⤵
  PID:1364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5304 /prefetch:1
  2⤵
  PID:2580
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2136,6394757811051263528,8324406840967894734,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1708 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5996

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2164

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3460

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ae54e9db2e89f2c54da8cc0bfcbd26bd

SHA1
a88af6c673609ecbc51a1a60dfbc8577830d2b5d

SHA256
5009d3c953de63cfd14a7d911156c514e179ff07d2b94382d9caac6040cb72af

SHA512
e3b70e5eb7321b9deca6f6a17424a15b9fd5c4008bd3789bd01099fd13cb2f4a2f37fe4b920fb51c50517745b576c1f94df83efd1a7e75949551163985599998

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
f53207a5ca2ef5c7e976cbb3cb26d870

SHA1
49a8cc44f53da77bb3dfb36fc7676ed54675db43

SHA256
19ab4e3c9da6d9cedda7461efdba9a2085e743513ab89f1dd0fd5a8f9486ad23

SHA512
be734c7e8afda19f445912aef0d78f9941add29baebd4a812bff27f10a1d78b52aeb11c551468c8644443c86e1a2a6b2e4aead3d7f81d39925e3c20406ac1499

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
504B

MD5
5526fba670d991d0e3cc617f176b3999

SHA1
f30cb02785010927a2adfa5614335f068c2b6778

SHA256
f263a0c3a6ed38707bcf9a2ab174e8aaba8af65d34238e031fa497b47ec854a3

SHA512
27577d9997daf9c213bbf3ab48299e5be6628d9df6f7c5242eec71120b1e6d97e00aa1eebd06849615027c011de69ee52d2296845fa0a495a38f0b8dd740907d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
1KB

MD5
9a7a9a0d0c3e08b07e4e2f2c85c5e0f9

SHA1
3dca3a841ea5798fd969b2fc6cd8ab9f45e04ced

SHA256
bb0c97112b766fc6e6918fcf702cd85b6c7847aa79c66781319aa37b54b5c041

SHA512
52a4475c5f01ca9a5f14de1e1ba90eb281ad59990d862b348a908bb6fa95d6022666372d12229218806d98eda91f0b042ce62cf31315b6f5a525d413b8dd939d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
1f6a7423149dd5b04c4c3ca2d7950221

SHA1
2ce06f0c9a8e1f26d1570b2a1c44c055e4c7c6bf

SHA256
fc57345e4b4c65bdcc1a7bb35acda9cc698fad092c5e12101b53ec998f20a713

SHA512
0494358ec80ef12d20c5bc75ebc5d276097b692a025460cc8d30fea8c6358ee66a704e89a5e768211e6a15a7bc4da4fe4389ffc3101e1d015e344996a4509778

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
9a38bcf3b5abccaf3e8cc4b8f80254dd

SHA1
edb10204e067106dc952a4b2948219eb487dfdce

SHA256
01223a7f1df876d5c269090f8107a67d81b81ea96f02bd28385199b1cc83bb43

SHA512
ba6012e31ec152cfd84c29000b5f1ead913d381fe19db98166df8970b8b0a9d2066c77032f39687936c2b71920d17426c238c9f3dedc9f0de64631465ba5b2ea

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f9c02c1802b6315c7b900ceae11347d4

SHA1
053a0d5a6af1fd0d6dc50a9a0981b4eeae2878fb

SHA256
31437b1c01c4db281837935d6c5463a96be028d3783aef611e3cf82c742259a2

SHA512
a88023661a2e235c961db794a408c03f91657d438f6dfd2553445aecb440bdfe3b9818b4e9272216ec0d7081ca514e6e3da563cb8f2e76c984598859c6db2865

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
2808d4e334bd7893ea71cc8fef434963

SHA1
cfcd7d436aa163d963e501c8955a88d0ac1b3c25

SHA256
27bd3aac6cea3679755cab87afebb2fcdfd78fc4b39566f5872a18373ec731a4

SHA512
e08fbed466e6ea348502c438944f3810a1cf758c451d50b7197f83fdd317d0210c039cf3a2166f8887c5025bfc2a1fb4863861c811f1c8f8b63061e2afde6480

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\edab03d6331b4c912c652322d1974ec0b5f7caf4\5aa90a14-63a0-463c-bc32-55d98898b9cf\index-dir\the-real-index

Filesize
4KB

MD5
5d025ed1ebcd41776b8adfec8bcfca3f

SHA1
35c52ee03bae9a3603f6d0088ecaca13e5885266

SHA256
db4f3df927834dc0f0645bef60a50d880c8ab1f19c46720341b4906ecbfe8e78

SHA512
0d6f6e420a9eb35b67646a8836faf8f6a7c0b40c76214a8feff50ec523094a39eff2f12e071bf360b74bc72e12403fa7212b625e761d75877cfc5dcedd4cba28

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\edab03d6331b4c912c652322d1974ec0b5f7caf4\5aa90a14-63a0-463c-bc32-55d98898b9cf\index-dir\the-real-index~RFe582a95.TMP

Filesize
48B

MD5
de13c1414de823c71088b9bb3e8fd941

SHA1
57eaead38784f49fb84cb48e409f8d6ee85c880d

SHA256
bb7d18d3a1d831e5d7ccea9db44aa9dba0cdf13a9878475b22053683b661d966

SHA512
1844fcf420159553a80f5bf72d13be64e93dece103f311cb75da0ac142a59dc784dc8ee9635dfbe5fd62bee2cf206b6e1411f3093234c21ae15b488eb750c988

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\edab03d6331b4c912c652322d1974ec0b5f7caf4\index.txt

Filesize
132B

MD5
bf665b9c5fd5b951893568d7c088dd4d

SHA1
643cf4b0f99e297d09d69b0ce935d0c68c2d8a7b

SHA256
855664a6d113c3aff2997190bf6be32b40579609303c3f7ab2541ed7eb1218b4

SHA512
2159e6c658394dca3229a41a378e6873f2b27bce8bfff97b6287a1500f1d7320f1140859ba5b181ce552369c726aec6b73911ceebe2f70296cd263167b2c8b76

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\edab03d6331b4c912c652322d1974ec0b5f7caf4\index.txt

Filesize
136B

MD5
b41399ebf26dac71abc2311a739a948d

SHA1
dcc76697f7df6c6ab9bcdb204b07697bbda075ee

SHA256
c1c42e7f810ebbcd1854fff821c9c1b6786fd5e271c078166b43966956da43e4

SHA512
ec187c2a5b8aeb4339d4e14b0e8b34b37a0260b4ad21b4b7c79673f4062d87dc0177ff41576697aac1f2dcd211f09f7944b563ad5e9d1784ae1ea05b1602f14b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
d9d438fc61a0dcfa15cfb293c40704a5

SHA1
dbf9c974385252d2998455f687ab81e38e9ab1c6

SHA256
0885684cbe65c79a7f24fd2ab15e059e04ecd6cb43ed985637d8016559dc67e3

SHA512
af3763607084a79fdf3aa5cdb949e1261cfaa554e6cbb1f5b4fbab33ce5823afe281e26b410db4ecc46158b397d5ea1fe7364080f4a5cf62770f7dbc27262e15

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe57ee09.TMP

Filesize
48B

MD5
6ee47ffa669e7e83f286fed726324efd

SHA1
ddb8405ad66842f3de73bfdcfd2b6fdc56d0f813

SHA256
cfb36467a8ab7ddbd0b15aa0329cae7f1b01204be8a32279eb096e9498243b03

SHA512
49c30674983ca1163d30d847eb9c149b95ab7efbc3166217a3c33c484d7446abc8156740bae763d89b5527deea45e1a6981bc56b408f3ff77f447adc8f625591

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
6752a1d65b201c13b62ea44016eb221f

SHA1
58ecf154d01a62233ed7fb494ace3c3d4ffce08b

SHA256
0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd

SHA512
9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
10KB

MD5
b89eec55aec84bcaf2346d1f47877738

SHA1
5e89c59579d8f1f69cd9016ff739ce6aea7f9b2c

SHA256
ab93f230a553b72c8e2e4c35ff7531389f6df37cbddfcc8b9f97c1cde90c370c

SHA512
c4eec2d78ea0102d32c36976ef9bea38dd214f3e6493b21f990ab2f0f860077126fb8e74fa2552e0ae7e988506b595e531073e8d6dd2702779cb62f98b0339a1

Download Submit