aace45d6ef4762d4ff5484a149ed35a0dfc893d4475ae8aa6fbdfc51bdd79dfa

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
02/06/2024, 16:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8eb35dcb64ae5d576613da820fc79b82_JaffaCakes118.html
Size

71KB
MD5

8eb35dcb64ae5d576613da820fc79b82
SHA1

76ba21ac28c8d8282a57afb58ff09e65eda880ec
SHA256

aace45d6ef4762d4ff5484a149ed35a0dfc893d4475ae8aa6fbdfc51bdd79dfa
SHA512

a5213d36312235941e1e90d23d2cf92f39a87a8dc5dd61f24d7d3ae4a3b2529d8e36993a0ebf84c71c11726b2e29032d4be81fa4750f5da22212afb19254b0a0
SSDEEP

1536:iH0/QgK+AS5Q7i8R4ngV2Hs5fqEJn1PP/NNqNAlM5dY3Nnd4r:I0n1QPagVicqEJn1PPVNrlM5ynd4r

Score

1^/10

Malware Config

Signatures

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2792	msedge.exe
2792	msedge.exe
1692	msedge.exe
1692	msedge.exe
4380	identity_helper.exe
4380	identity_helper.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe
4288	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 12 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of FindShellTrayWindow 25 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe
1692	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1692 wrote to memory of 1976	1692	msedge.exe	84
PID 1692 wrote to memory of 1976	1692	msedge.exe	84
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 4520	1692	msedge.exe	85
PID 1692 wrote to memory of 2792	1692	msedge.exe	86
PID 1692 wrote to memory of 2792	1692	msedge.exe	86
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87
PID 1692 wrote to memory of 4468	1692	msedge.exe	87

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument C:\Users\Admin\AppData\Local\Temp\8eb35dcb64ae5d576613da820fc79b82_JaffaCakes118.html
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa5c0e46f8,0x7ffa5c0e4708,0x7ffa5c0e4718
  2⤵
  PID:1976
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2136 /prefetch:2
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2792
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2832 /prefetch:8
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3228 /prefetch:1
  2⤵
  PID:4564
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3252 /prefetch:1
  2⤵
  PID:3368
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4700 /prefetch:1
  2⤵
  PID:3880
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5292 /prefetch:1
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2284 /prefetch:1
  2⤵
  PID:3456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2948 /prefetch:1
  2⤵
  PID:4896
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6200 /prefetch:1
  2⤵
  PID:3812
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=7108 /prefetch:1
  2⤵
  PID:1548
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7376 /prefetch:8
  2⤵
  PID:1052
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=7376 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6288 /prefetch:1
  2⤵
  PID:4484
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6264 /prefetch:1
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4172 /prefetch:1
  2⤵
  PID:1240
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4928 /prefetch:1
  2⤵
  PID:4292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2112,1586837347885976963,6741192722991004487,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=5168 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4288

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4544

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1260

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
ce4c898f8fc7601e2fbc252fdadb5115

SHA1
01bf06badc5da353e539c7c07527d30dccc55a91

SHA256
bce2dfaa91f0d44e977e0f79c60e64954a7b9dc828b0e30fbaa67dbe82f750aa

SHA512
80fff4c722c8d3e69ec4f09510779b7e3518ae60725d2d36903e606a27ec1eaedbdbfac5b662bf2c19194c572ccf0125445f22a907b329ad256e6c00b9cf032c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
4158365912175436289496136e7912c2

SHA1
813d11f772b1cfe9ceac2bf37f4f741e5e8fbe59

SHA256
354de4b033ba6e4d85f94d91230cb8501f62e0a4e302cd4076c7e0ad73bedbd1

SHA512
74b4f7b24ad4ea395f3a4cd8dbfae54f112a7c87bce3d286ee5161f6b63d62dfa19bb0d96bb7ed1c6d925f5697a2580c25023d5052c6a09992e6fd9dd49ea82b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_00000b

Filesize
23KB

MD5
e1c71f7c04be834f5587230db2ad24b3

SHA1
f3bab9cb99d9f343bf7ed3981aaa7450515d2424

SHA256
9fb6c768068467b58cc773a3907f3f5ec170bfe02ca8f301f6a232a9daf5a899

SHA512
205366b4a3ca0dae58722a19ba24088dd8db483db9d14b376434024b064715ade720347ff5de87db014e32d2ef8192e71bbbdd3c885d5a8581b4aafc6e88ce51

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index

Filesize
216B

MD5
fa3858d09036c318292abb077e217991

SHA1
70df6f35edb530551658a006f9b7eb8d1b2ec1e6

SHA256
49924c05a3369ad97b86d9697e7340ce547dcf6d7eb0b1f35ed000c7e9f44244

SHA512
1a49fd83d3e86ad13c7b09dee1cbce9285ab3aabb5a721ff2d827319c41bd4208e7288e735902711d80d8624875c03b1fc1afabbeebf9b4fef008f11ba35e606

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
96B

MD5
87cc86dfb61b6fa8f03253f51d25d7dc

SHA1
1ded41718ccf561f7ab014b27bccbbcb732cf948

SHA256
9399c3287e77331d1f1bb1e8b5f102417738a8d841399b87a0a7c41c667623bf

SHA512
3617d3848718b5e6677c63ba5ee4891aa63fe60b30f4b6b3926b5d724e6cddf3f5a03fba699d9904b5742b71e2acb7fd554a528abb18cb8807193e69228645c6

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
192B

MD5
6f01c16eb682d90222b95a027ac9963f

SHA1
5d63e6f56f7397704e77db766d9ff4083422d7b1

SHA256
7fd1941f62506f287963c02df343327320e031ac542333cd0ed37cc7535681a1

SHA512
a751a5682038b963f16e51ee7fb44ead660b3a0277453414558340e427121a21b88e90081603e453f77aec7b523f4786e8412f787058d77b2f0d8e6d034658ce

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
168B

MD5
6504329d03113a22f630310012f2f7a7

SHA1
19f38436631b5af1f16577c996d539b210977e0a

SHA256
ef98d12bcbe8eec27f6d10db5e1774ba92c8b2b839851434e1f8218e7e7f3192

SHA512
3b37226f202fcee9c7a7b436f2a3a3c2f0b6307acbea372c072b1c7eab2b30d9b408a6d8b2885cd81488343f2ca96f8a40a2b9b0712a6fbbd41ef02aa6c878d0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
6cfe628f968a622db81aec715dfd2415

SHA1
2de89ab571247cb5300f4d24ff7f39347291090c

SHA256
55a88173815d0b9ec378e263d8e1336bed4591a08a9e04e0c30278bfd71186c7

SHA512
83253c44f26fd26fbdc2ccbee4208b4be05a7b5176934c97b87301c94dd92e69275ca132653d6a00f26b9fe486c170dc323adf6084c04215c813b4e3fb07d3c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
2KB

MD5
a6e732ab503314cdd90150a4fe252967

SHA1
a36db06ab8643919ab5af720f05607da01c45bbe

SHA256
6f44025b588d6369e579ec70105b6cdac0796fae426d6dc51fc7983a0ae0e5a4

SHA512
097bf7efbc57365e3eb2f028a01c6f1a5d4b175a87d7f89eb7eec7f868a5a065cd578059317ad8f224befb421d783a3590402cd5f81877aadbf7369a69d9f182

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
029847951bcfcb5387a5811e85d9c37c

SHA1
e5ec3910fe842b0718ee61404b46b3ca74c8e041

SHA256
62db822930bc2583acd9464290d6f03638f195882dc7874f34d7c47e3b3a8e1e

SHA512
e159ce8028f333398bfdab86338c78c2d9f428bde6e5af157e7ea54b7bbc8ec6ef011d0d15ba021c51686b70df5d1643f9e30e98945db6107c72d8ec9b979b6b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
c40dfd9b42e1160561790338eab24d60

SHA1
2841f9a9b6eeeba8e7270375695511960cd8d67a

SHA256
a647e8a5eb3b55c8c26d70d4f4f6b6a0b88a7dbee38f57e12a94331a91dda9e3

SHA512
9d1c4a7cf0e3d806423a0e22848865b4c49ed3eaccb176e043833df0809a4c1a1f6fd1c1a4dadf2b3111607054233c67dd83661b0061c78ceec713de0d502b65

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
996dc4d3692105325f22896ed5a78d99

SHA1
65397ec2b090ad5bf9c63b51fc839675055afa32

SHA256
5f3e138a671f4716055a7db88defd608bbcd5ef542c8d798d9642be382c515a2

SHA512
f6084bdb61bc97d71168dec8fc556df8c4c7b4bd44bf5f2e19f581379f13c27b2281a0dbb014895892a252b4c0c4db8e821b0d62630ddbbd121e7a3da48f182a

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
8KB

MD5
4b44be40f1af510a0f31dddf377b85b3

SHA1
a75eac4266c646da364ec3b8dab28a7789c0b350

SHA256
961c78acc44710ab05c387fe82f5abf880c56e35ea59229cbe4162ae41043494

SHA512
5b99294a0b8a03eedee9dbd4d460a1b8c5cc0d24407c1a6b8f76d142b5a8fcc5beaca9afb74c238a31d241dbab73442e09d66ca06d02c43117abb074e97b1e92

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT

Filesize
16B

MD5
206702161f94c5cd39fadd03f4014d98

SHA1
bd8bfc144fb5326d21bd1531523d9fb50e1b600a

SHA256
1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167

SHA512
0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
11KB

MD5
a66ced0adc07b2b4b900289caa80be46

SHA1
99be1fee6568f56d1354f65d34ec776ef4218d5e

SHA256
511b6eb20598487db352151d50ff08f7511cb682abd6f9fadb542d0d42e8d9ae

SHA512
4dad373ab38f265b611eb0b3c3030119bfcd403f2c9bcdc5bceef15cdb67307dc891325d2d646e1e4ae447cf610ad4054125135a8535e2646410d3320d38476b

Download Submit